Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2020-7595 (GCVE-0-2020-7595)
Vulnerability from cvelistv5
Published
2020-01-21 22:54
Modified
2024-08-04 09:33
Severity ?
VLAI Severity ?
EPSS score ?
Summary
xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T09:33:19.963Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "FEDORA-2020-41fe1680f6",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/545SPOI3ZPPNPX4TFRIVE4JVRTJRKULL/"
},
{
"name": "USN-4274-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/4274-1/"
},
{
"name": "FEDORA-2020-0c71c00af4",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/"
},
{
"name": "FEDORA-2020-7694e8be73",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH/"
},
{
"name": "openSUSE-SU-2020:0681",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/security-alerts/cpujul2020.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://security.netapp.com/advisory/ntap-20200702-0005/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://gitlab.gnome.org/GNOME/libxml2/commit/0e1a49c89076"
},
{
"name": "[debian-lts-announce] 20200909 [SECURITY] [DLA 2369-1] libxml2 security update",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html"
},
{
"name": "GLSA-202010-04",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/202010-04"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-08"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/security-alerts/cpujul2022.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-07-25T16:23:35",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "FEDORA-2020-41fe1680f6",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/545SPOI3ZPPNPX4TFRIVE4JVRTJRKULL/"
},
{
"name": "USN-4274-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/4274-1/"
},
{
"name": "FEDORA-2020-0c71c00af4",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/"
},
{
"name": "FEDORA-2020-7694e8be73",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH/"
},
{
"name": "openSUSE-SU-2020:0681",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/security-alerts/cpujul2020.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://security.netapp.com/advisory/ntap-20200702-0005/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://gitlab.gnome.org/GNOME/libxml2/commit/0e1a49c89076"
},
{
"name": "[debian-lts-announce] 20200909 [SECURITY] [DLA 2369-1] libxml2 security update",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html"
},
{
"name": "GLSA-202010-04",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "https://security.gentoo.org/glsa/202010-04"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-08"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/security-alerts/cpujul2022.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-7595",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "FEDORA-2020-41fe1680f6",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/545SPOI3ZPPNPX4TFRIVE4JVRTJRKULL/"
},
{
"name": "USN-4274-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4274-1/"
},
{
"name": "FEDORA-2020-0c71c00af4",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/"
},
{
"name": "FEDORA-2020-7694e8be73",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH/"
},
{
"name": "openSUSE-SU-2020:0681",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html"
},
{
"name": "https://www.oracle.com/security-alerts/cpujul2020.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpujul2020.html"
},
{
"name": "https://security.netapp.com/advisory/ntap-20200702-0005/",
"refsource": "CONFIRM",
"url": "https://security.netapp.com/advisory/ntap-20200702-0005/"
},
{
"name": "https://gitlab.gnome.org/GNOME/libxml2/commit/0e1a49c89076",
"refsource": "MISC",
"url": "https://gitlab.gnome.org/GNOME/libxml2/commit/0e1a49c89076"
},
{
"name": "[debian-lts-announce] 20200909 [SECURITY] [DLA 2369-1] libxml2 security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html"
},
{
"name": "GLSA-202010-04",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/202010-04"
},
{
"name": "https://www.oracle.com/security-alerts/cpuoct2021.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
},
{
"name": "https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf",
"refsource": "CONFIRM",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf"
},
{
"name": "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-08",
"refsource": "CONFIRM",
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-08"
},
{
"name": "https://www.oracle.com/security-alerts/cpuapr2022.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
},
{
"name": "https://www.oracle.com/security-alerts/cpujul2022.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpujul2022.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2020-7595",
"datePublished": "2020-01-21T22:54:14",
"dateReserved": "2020-01-21T00:00:00",
"dateUpdated": "2024-08-04T09:33:19.963Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2020-7595\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2020-01-21T23:15:13.867\",\"lastModified\":\"2024-11-21T05:37:26.453\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.\"},{\"lang\":\"es\",\"value\":\"La funci\u00f3n xmlStringLenDecodeEntities en el archivo parser.c en libxml2 versi\u00f3n 2.9.10, presenta un bucle infinito en una determinada situaci\u00f3n de fin del archivo.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:N/A:P\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-835\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:xmlsoft:libxml2:2.9.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F5046B03-34DE-4574-AFDB-E0B2A8022E72\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"97A4B8DF-58DA-4AB6-A1F9-331B36409BA3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80F0FA5D-8D3B-4C0E-81E2-87998286AF33\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"36D96259-24BD-44E2-96D9-78CE1D41F956\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*\",\"matchCriteriaId\":\"CB66DB75-2B16-4EBF-9B93-CE49D8086E41\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*\",\"matchCriteriaId\":\"815D70A8-47D3-459C-A32C-9FEACA0659D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A31C8344-3E02-4EB8-8BD8-4C84B7959624\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEECE5FC-CACF-4496-A3E7-164736409252\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:sinema_remote_connect_server:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.0\",\"matchCriteriaId\":\"F65F9901-F4BD-4484-9749-D5022245D686\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1FE996B1-6951-4F85-AA58-B99A379D2163\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:smi-s_provider:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4BB0FDCF-3750-44C6-AC5C-0CC2AAD14093\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:snapdrive:-:*:*:*:*:windows:*:*\",\"matchCriteriaId\":\"BEDE62C6-D571-4AF8-B85E-CBBCE4AF98B5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E94F7F59-1785-493F-91A7-5F5EA5E87E4D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:symantec_netbackup:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1F48ACED-5496-4AF1-86AF-63AA4D7C3C86\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6770B6C3-732E-4E22-BF1C-2D2FD610061C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9F9C8C20-42EB-4AB5-BD97-212DEB070C43\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7FFF7106-ED78-49BA-9EC5-B889E3685D53\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E63D8B0F-006E-4801-BF9D-1C001BBFB4F9\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"56409CEC-5A1E-4450-AA42-641E459CC2AF\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B06F4839-D16A-4A61-9BB5-55B13F41E47F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"108A2215-50FB-4074-94CF-C130FA14566D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7AFC73CE-ABB9-42D3-9A71-3F5BC5381E0E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"32F0B6C0-F930-480D-962B-3F4EFDCC13C7\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"803BC414-B250-4E3A-A478-A3881340D6B8\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0FEB3337-BFDE-462A-908B-176F92053CEC\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"736AEAE9-782B-4F71-9893-DED53367E102\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D0B4AD8A-F172-4558-AEC6-FF424BA2D912\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8497A4C9-8474-4A62-8331-3FE862ED4098\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"234DEFE0-5CE5-4B0A-96B8-5D227CB8ED31\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CDDF61B7-EC5C-467C-B710-B89F502CD04F\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:real_user_experience_insight:13.3.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B534B112-9BA4-467B-A58B-D89C0A6EFA9C\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:1.10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C2A5B24D-BDF2-423C-98EA-A40778C01A05\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:enterprise_manager_base_platform:13.4.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D26F3E23-F1A9-45E7-9E5F-0C0A24EE3783\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:enterprise_manager_base_platform:13.5.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6E8758C8-87D3-450A-878B-86CE8C9FC140\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B095CC03-7077-4A58-AB25-CC5380CDCE5A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"8.0.26\",\"matchCriteriaId\":\"EED6C8C2-F986-4CFD-A343-AD2340F850F2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:real_user_experience_insight:13.4.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CADD7026-EF85-40A5-8563-7A34C6941B1F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:real_user_experience_insight:13.5.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"58F019E8-F68D-41B5-9480-0A81616F2E7C\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://gitlab.gnome.org/GNOME/libxml2/commit/0e1a49c89076\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/545SPOI3ZPPNPX4TFRIVE4JVRTJRKULL/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://security.gentoo.org/glsa/202010-04\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20200702-0005/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://us-cert.cisa.gov/ics/advisories/icsa-21-103-08\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]},{\"url\":\"https://usn.ubuntu.com/4274-1/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuapr2022.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujul2020.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujul2022.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://www.oracle.com/security-alerts/cpuoct2021.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://gitlab.gnome.org/GNOME/libxml2/commit/0e1a49c89076\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/545SPOI3ZPPNPX4TFRIVE4JVRTJRKULL/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.gentoo.org/glsa/202010-04\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20200702-0005/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://us-cert.cisa.gov/ics/advisories/icsa-21-103-08\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]},{\"url\":\"https://usn.ubuntu.com/4274-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuapr2022.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujul2020.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujul2022.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.oracle.com/security-alerts/cpuoct2021.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]}]}}"
}
}
opensuse-su-2024:13165-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
ruby3.2-rubygem-nokogiri-1.13.9-1.7 on GA media
Notes
Title of the patch
ruby3.2-rubygem-nokogiri-1.13.9-1.7 on GA media
Description of the patch
These are all security issues fixed in the ruby3.2-rubygem-nokogiri-1.13.9-1.7 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-13165
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "ruby3.2-rubygem-nokogiri-1.13.9-1.7 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the ruby3.2-rubygem-nokogiri-1.13.9-1.7 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-13165",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_13165-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2877 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2877/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0191 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0191/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1819 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1819/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5312 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5312/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7497 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7497/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7498 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7498/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7499 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7499/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7500 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7500/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7941 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7941/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7942 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7942/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7995 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7995/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8035 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8035/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8241 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8241/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8242 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8242/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8317 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8317/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4658 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4658/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4738 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4738/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5131 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5131/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15412 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15412/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5029 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5029/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-14404 page",
"url": "https://www.suse.com/security/cve/CVE-2018-14404/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-25032 page",
"url": "https://www.suse.com/security/cve/CVE-2018-25032/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-8048 page",
"url": "https://www.suse.com/security/cve/CVE-2018-8048/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11068 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11068/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-20388 page",
"url": "https://www.suse.com/security/cve/CVE-2019-20388/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5477 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5477/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-24977 page",
"url": "https://www.suse.com/security/cve/CVE-2020-24977/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-7595 page",
"url": "https://www.suse.com/security/cve/CVE-2020-7595/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30560 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30560/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3516 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3516/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3517 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3517/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3518 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3518/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3537 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3537/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3541 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3541/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-41098 page",
"url": "https://www.suse.com/security/cve/CVE-2021-41098/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-23308 page",
"url": "https://www.suse.com/security/cve/CVE-2022-23308/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-23437 page",
"url": "https://www.suse.com/security/cve/CVE-2022-23437/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-24836 page",
"url": "https://www.suse.com/security/cve/CVE-2022-24836/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-24839 page",
"url": "https://www.suse.com/security/cve/CVE-2022-24839/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-29181 page",
"url": "https://www.suse.com/security/cve/CVE-2022-29181/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-29824 page",
"url": "https://www.suse.com/security/cve/CVE-2022-29824/"
}
],
"title": "ruby3.2-rubygem-nokogiri-1.13.9-1.7 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:13165-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"product": {
"name": "ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"product_id": "ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"product": {
"name": "ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"product_id": "ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"product": {
"name": "ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"product_id": "ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64",
"product": {
"name": "ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64",
"product_id": "ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64"
},
"product_reference": "ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le"
},
"product_reference": "ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x"
},
"product_reference": "ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
},
"product_reference": "ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2013-2877",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2877"
}
],
"notes": [
{
"category": "general",
"text": "parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a document that ends abruptly, related to the lack of certain checks for the XML_PARSER_EOF state.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2877",
"url": "https://www.suse.com/security/cve/CVE-2013-2877"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2013-2877",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 828893 for CVE-2013-2877",
"url": "https://bugzilla.suse.com/828893"
},
{
"category": "external",
"summary": "SUSE Bug 829077 for CVE-2013-2877",
"url": "https://bugzilla.suse.com/829077"
},
{
"category": "external",
"summary": "SUSE Bug 854869 for CVE-2013-2877",
"url": "https://bugzilla.suse.com/854869"
},
{
"category": "external",
"summary": "SUSE Bug 877506 for CVE-2013-2877",
"url": "https://bugzilla.suse.com/877506"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2013-2877"
},
{
"cve": "CVE-2014-0191",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0191"
}
],
"notes": [
{
"category": "general",
"text": "The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Server in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 and other products, loads external parameter entities regardless of whether entity substitution or validation is enabled, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XML document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0191",
"url": "https://www.suse.com/security/cve/CVE-2014-0191"
},
{
"category": "external",
"summary": "SUSE Bug 1014873 for CVE-2014-0191",
"url": "https://bugzilla.suse.com/1014873"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2014-0191",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 876652 for CVE-2014-0191",
"url": "https://bugzilla.suse.com/876652"
},
{
"category": "external",
"summary": "SUSE Bug 877506 for CVE-2014-0191",
"url": "https://bugzilla.suse.com/877506"
},
{
"category": "external",
"summary": "SUSE Bug 996079 for CVE-2014-0191",
"url": "https://bugzilla.suse.com/996079"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-0191"
},
{
"cve": "CVE-2015-1819",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1819"
}
],
"notes": [
{
"category": "general",
"text": "The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1819",
"url": "https://www.suse.com/security/cve/CVE-2015-1819"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-1819",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 928193 for CVE-2015-1819",
"url": "https://bugzilla.suse.com/928193"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-1819",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-1819"
},
{
"cve": "CVE-2015-5312",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5312"
}
],
"notes": [
{
"category": "general",
"text": "The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data, a different vulnerability than CVE-2014-3660.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5312",
"url": "https://www.suse.com/security/cve/CVE-2015-5312"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-5312",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 957105 for CVE-2015-5312",
"url": "https://bugzilla.suse.com/957105"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-5312",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-5312",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-5312"
},
{
"cve": "CVE-2015-7497",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7497"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7497",
"url": "https://www.suse.com/security/cve/CVE-2015-7497"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-7497",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 957106 for CVE-2015-7497",
"url": "https://bugzilla.suse.com/957106"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-7497",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-7497",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-7497"
},
{
"cve": "CVE-2015-7498",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7498"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors related to extracting errors after an encoding conversion failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7498",
"url": "https://www.suse.com/security/cve/CVE-2015-7498"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-7498",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 957107 for CVE-2015-7498",
"url": "https://bugzilla.suse.com/957107"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-7498",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-7498",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-7498"
},
{
"cve": "CVE-2015-7499",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7499"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7499",
"url": "https://www.suse.com/security/cve/CVE-2015-7499"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-7499",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 957109 for CVE-2015-7499",
"url": "https://bugzilla.suse.com/957109"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-7499",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-7499",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-7499"
},
{
"cve": "CVE-2015-7500",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7500"
}
],
"notes": [
{
"category": "general",
"text": "The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via unspecified vectors related to incorrect entities boundaries and start tags.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7500",
"url": "https://www.suse.com/security/cve/CVE-2015-7500"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-7500",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 957110 for CVE-2015-7500",
"url": "https://bugzilla.suse.com/957110"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-7500",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-7500",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-7500"
},
{
"cve": "CVE-2015-7941",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7941"
}
],
"notes": [
{
"category": "general",
"text": "libxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and libxml2 crash) via crafted XML data to the (1) xmlParseEntityDecl or (2) xmlParseConditionalSections function in parser.c, as demonstrated by non-terminated entities.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7941",
"url": "https://www.suse.com/security/cve/CVE-2015-7941"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-7941",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 951734 for CVE-2015-7941",
"url": "https://bugzilla.suse.com/951734"
},
{
"category": "external",
"summary": "SUSE Bug 951735 for CVE-2015-7941",
"url": "https://bugzilla.suse.com/951735"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-7941",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-7941"
},
{
"cve": "CVE-2015-7942",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7942"
}
],
"notes": [
{
"category": "general",
"text": "The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different vulnerability than CVE-2015-7941.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7942",
"url": "https://www.suse.com/security/cve/CVE-2015-7942"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-7942",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 951735 for CVE-2015-7942",
"url": "https://bugzilla.suse.com/951735"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-7942",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-7942"
},
{
"cve": "CVE-2015-7995",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7995"
}
],
"notes": [
{
"category": "general",
"text": "The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a \"type confusion\" issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7995",
"url": "https://www.suse.com/security/cve/CVE-2015-7995"
},
{
"category": "external",
"summary": "SUSE Bug 1123130 for CVE-2015-7995",
"url": "https://bugzilla.suse.com/1123130"
},
{
"category": "external",
"summary": "SUSE Bug 952474 for CVE-2015-7995",
"url": "https://bugzilla.suse.com/952474"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-7995"
},
{
"cve": "CVE-2015-8035",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8035"
}
],
"notes": [
{
"category": "general",
"text": "The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-dependent attackers to cause a denial of service (process hang) via crafted XML data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8035",
"url": "https://www.suse.com/security/cve/CVE-2015-8035"
},
{
"category": "external",
"summary": "SUSE Bug 1088279 for CVE-2015-8035",
"url": "https://bugzilla.suse.com/1088279"
},
{
"category": "external",
"summary": "SUSE Bug 1105166 for CVE-2015-8035",
"url": "https://bugzilla.suse.com/1105166"
},
{
"category": "external",
"summary": "SUSE Bug 954429 for CVE-2015-8035",
"url": "https://bugzilla.suse.com/954429"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-8035"
},
{
"cve": "CVE-2015-8241",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8241"
}
],
"notes": [
{
"category": "general",
"text": "The xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context-dependent attackers to cause a denial of service (heap-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8241",
"url": "https://www.suse.com/security/cve/CVE-2015-8241"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-8241",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 956018 for CVE-2015-8241",
"url": "https://bugzilla.suse.com/956018"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-8241",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-8241",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-8241"
},
{
"cve": "CVE-2015-8242",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8242"
}
],
"notes": [
{
"category": "general",
"text": "The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (stack-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8242",
"url": "https://www.suse.com/security/cve/CVE-2015-8242"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-8242",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 956021 for CVE-2015-8242",
"url": "https://bugzilla.suse.com/956021"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-8242",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-8242",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-8242"
},
{
"cve": "CVE-2015-8317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8317"
}
],
"notes": [
{
"category": "general",
"text": "The xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive information via an (1) unterminated encoding value or (2) incomplete XML declaration in XML data, which triggers an out-of-bounds heap read.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8317",
"url": "https://www.suse.com/security/cve/CVE-2015-8317"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-8317",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 956260 for CVE-2015-8317",
"url": "https://bugzilla.suse.com/956260"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-8317",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-8317",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-8317"
},
{
"cve": "CVE-2016-4658",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4658"
}
],
"notes": [
{
"category": "general",
"text": "xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and memory corruption) via a crafted XML document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4658",
"url": "https://www.suse.com/security/cve/CVE-2016-4658"
},
{
"category": "external",
"summary": "SUSE Bug 1005544 for CVE-2016-4658",
"url": "https://bugzilla.suse.com/1005544"
},
{
"category": "external",
"summary": "SUSE Bug 1014873 for CVE-2016-4658",
"url": "https://bugzilla.suse.com/1014873"
},
{
"category": "external",
"summary": "SUSE Bug 1069433 for CVE-2016-4658",
"url": "https://bugzilla.suse.com/1069433"
},
{
"category": "external",
"summary": "SUSE Bug 1078813 for CVE-2016-4658",
"url": "https://bugzilla.suse.com/1078813"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2016-4658",
"url": "https://bugzilla.suse.com/1123919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-4658"
},
{
"cve": "CVE-2016-4738",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4738"
}
],
"notes": [
{
"category": "general",
"text": "libxslt in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4738",
"url": "https://www.suse.com/security/cve/CVE-2016-4738"
},
{
"category": "external",
"summary": "SUSE Bug 1005591 for CVE-2016-4738",
"url": "https://bugzilla.suse.com/1005591"
},
{
"category": "external",
"summary": "SUSE Bug 1123130 for CVE-2016-4738",
"url": "https://bugzilla.suse.com/1123130"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-4738"
},
{
"cve": "CVE-2016-5131",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5131"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5131",
"url": "https://www.suse.com/security/cve/CVE-2016-5131"
},
{
"category": "external",
"summary": "SUSE Bug 1014873 for CVE-2016-5131",
"url": "https://bugzilla.suse.com/1014873"
},
{
"category": "external",
"summary": "SUSE Bug 1069433 for CVE-2016-5131",
"url": "https://bugzilla.suse.com/1069433"
},
{
"category": "external",
"summary": "SUSE Bug 1078813 for CVE-2016-5131",
"url": "https://bugzilla.suse.com/1078813"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2016-5131",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 989901 for CVE-2016-5131",
"url": "https://bugzilla.suse.com/989901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5131"
},
{
"cve": "CVE-2017-15412",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15412"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15412",
"url": "https://www.suse.com/security/cve/CVE-2017-15412"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15412",
"url": "https://bugzilla.suse.com/1071691"
},
{
"category": "external",
"summary": "SUSE Bug 1077993 for CVE-2017-15412",
"url": "https://bugzilla.suse.com/1077993"
},
{
"category": "external",
"summary": "SUSE Bug 1123129 for CVE-2017-15412",
"url": "https://bugzilla.suse.com/1123129"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2017-15412",
"url": "https://bugzilla.suse.com/1123919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15412"
},
{
"cve": "CVE-2017-5029",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5029"
}
],
"notes": [
{
"category": "general",
"text": "The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5029",
"url": "https://www.suse.com/security/cve/CVE-2017-5029"
},
{
"category": "external",
"summary": "SUSE Bug 1028848 for CVE-2017-5029",
"url": "https://bugzilla.suse.com/1028848"
},
{
"category": "external",
"summary": "SUSE Bug 1028875 for CVE-2017-5029",
"url": "https://bugzilla.suse.com/1028875"
},
{
"category": "external",
"summary": "SUSE Bug 1035905 for CVE-2017-5029",
"url": "https://bugzilla.suse.com/1035905"
},
{
"category": "external",
"summary": "SUSE Bug 1123130 for CVE-2017-5029",
"url": "https://bugzilla.suse.com/1123130"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2017-5029"
},
{
"cve": "CVE-2018-14404",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-14404"
}
],
"notes": [
{
"category": "general",
"text": "A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression in the XPATH_OP_AND or XPATH_OP_OR case. Applications processing untrusted XSL format inputs with the use of the libxml2 library may be vulnerable to a denial of service attack due to a crash of the application.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-14404",
"url": "https://www.suse.com/security/cve/CVE-2018-14404"
},
{
"category": "external",
"summary": "SUSE Bug 1102046 for CVE-2018-14404",
"url": "https://bugzilla.suse.com/1102046"
},
{
"category": "external",
"summary": "SUSE Bug 1148896 for CVE-2018-14404",
"url": "https://bugzilla.suse.com/1148896"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-14404"
},
{
"cve": "CVE-2018-25032",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-25032"
}
],
"notes": [
{
"category": "general",
"text": "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-25032",
"url": "https://www.suse.com/security/cve/CVE-2018-25032"
},
{
"category": "external",
"summary": "SUSE Bug 1197459 for CVE-2018-25032",
"url": "https://bugzilla.suse.com/1197459"
},
{
"category": "external",
"summary": "SUSE Bug 1197893 for CVE-2018-25032",
"url": "https://bugzilla.suse.com/1197893"
},
{
"category": "external",
"summary": "SUSE Bug 1198667 for CVE-2018-25032",
"url": "https://bugzilla.suse.com/1198667"
},
{
"category": "external",
"summary": "SUSE Bug 1199104 for CVE-2018-25032",
"url": "https://bugzilla.suse.com/1199104"
},
{
"category": "external",
"summary": "SUSE Bug 1200049 for CVE-2018-25032",
"url": "https://bugzilla.suse.com/1200049"
},
{
"category": "external",
"summary": "SUSE Bug 1201732 for CVE-2018-25032",
"url": "https://bugzilla.suse.com/1201732"
},
{
"category": "external",
"summary": "SUSE Bug 1202688 for CVE-2018-25032",
"url": "https://bugzilla.suse.com/1202688"
},
{
"category": "external",
"summary": "SUSE Bug 1224427 for CVE-2018-25032",
"url": "https://bugzilla.suse.com/1224427"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-25032"
},
{
"cve": "CVE-2018-8048",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-8048"
}
],
"notes": [
{
"category": "general",
"text": "In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-8048",
"url": "https://www.suse.com/security/cve/CVE-2018-8048"
},
{
"category": "external",
"summary": "SUSE Bug 1085967 for CVE-2018-8048",
"url": "https://bugzilla.suse.com/1085967"
},
{
"category": "external",
"summary": "SUSE Bug 1086598 for CVE-2018-8048",
"url": "https://bugzilla.suse.com/1086598"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-8048"
},
{
"cve": "CVE-2019-11068",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11068"
}
],
"notes": [
{
"category": "general",
"text": "libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11068",
"url": "https://www.suse.com/security/cve/CVE-2019-11068"
},
{
"category": "external",
"summary": "SUSE Bug 1132160 for CVE-2019-11068",
"url": "https://bugzilla.suse.com/1132160"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-11068",
"url": "https://bugzilla.suse.com/1154212"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-11068"
},
{
"cve": "CVE-2019-20388",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-20388"
}
],
"notes": [
{
"category": "general",
"text": "xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-20388",
"url": "https://www.suse.com/security/cve/CVE-2019-20388"
},
{
"category": "external",
"summary": "SUSE Bug 1161521 for CVE-2019-20388",
"url": "https://bugzilla.suse.com/1161521"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2019-20388",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-20388"
},
{
"cve": "CVE-2019-5477",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5477"
}
],
"notes": [
{
"category": "general",
"text": "A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby\u0027s `Kernel.open` method. Processes are vulnerable only if the undocumented method `Nokogiri::CSS::Tokenizer#load_file` is being called with unsafe user input as the filename. This vulnerability appears in code generated by the Rexical gem versions v1.0.6 and earlier. Rexical is used by Nokogiri to generate lexical scanner code for parsing CSS queries. The underlying vulnerability was addressed in Rexical v1.0.7 and Nokogiri upgraded to this version of Rexical in Nokogiri v1.10.4.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5477",
"url": "https://www.suse.com/security/cve/CVE-2019-5477"
},
{
"category": "external",
"summary": "SUSE Bug 1146578 for CVE-2019-5477",
"url": "https://bugzilla.suse.com/1146578"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5477"
},
{
"cve": "CVE-2020-24977",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-24977"
}
],
"notes": [
{
"category": "general",
"text": "GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-24977",
"url": "https://www.suse.com/security/cve/CVE-2020-24977"
},
{
"category": "external",
"summary": "SUSE Bug 1176179 for CVE-2020-24977",
"url": "https://bugzilla.suse.com/1176179"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2020-24977",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-24977"
},
{
"cve": "CVE-2020-7595",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-7595"
}
],
"notes": [
{
"category": "general",
"text": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-7595",
"url": "https://www.suse.com/security/cve/CVE-2020-7595"
},
{
"category": "external",
"summary": "SUSE Bug 1161517 for CVE-2020-7595",
"url": "https://bugzilla.suse.com/1161517"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2020-7595",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-7595"
},
{
"cve": "CVE-2021-30560",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30560"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30560",
"url": "https://www.suse.com/security/cve/CVE-2021-30560"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1188373"
},
{
"category": "external",
"summary": "SUSE Bug 1208574 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1208574"
},
{
"category": "external",
"summary": "SUSE Bug 1211500 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1211500"
},
{
"category": "external",
"summary": "SUSE Bug 1211501 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1211501"
},
{
"category": "external",
"summary": "SUSE Bug 1211544 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1211544"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30560"
},
{
"cve": "CVE-2021-3516",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3516"
}
],
"notes": [
{
"category": "general",
"text": "There\u0027s a flaw in libxml2\u0027s xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-after-free. The greatest impact of this flaw is to confidentiality, integrity, and availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3516",
"url": "https://www.suse.com/security/cve/CVE-2021-3516"
},
{
"category": "external",
"summary": "SUSE Bug 1185409 for CVE-2021-3516",
"url": "https://bugzilla.suse.com/1185409"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2021-3516",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3516"
},
{
"cve": "CVE-2021-3517",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3517"
}
],
"notes": [
{
"category": "general",
"text": "There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3517",
"url": "https://www.suse.com/security/cve/CVE-2021-3517"
},
{
"category": "external",
"summary": "SUSE Bug 1185410 for CVE-2021-3517",
"url": "https://bugzilla.suse.com/1185410"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2021-3517",
"url": "https://bugzilla.suse.com/1191860"
},
{
"category": "external",
"summary": "SUSE Bug 1194438 for CVE-2021-3517",
"url": "https://bugzilla.suse.com/1194438"
},
{
"category": "external",
"summary": "SUSE Bug 1196383 for CVE-2021-3517",
"url": "https://bugzilla.suse.com/1196383"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-3517"
},
{
"cve": "CVE-2021-3518",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3518"
}
],
"notes": [
{
"category": "general",
"text": "There\u0027s a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3518",
"url": "https://www.suse.com/security/cve/CVE-2021-3518"
},
{
"category": "external",
"summary": "SUSE Bug 1185408 for CVE-2021-3518",
"url": "https://bugzilla.suse.com/1185408"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2021-3518",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3518"
},
{
"cve": "CVE-2021-3537",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3537"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest threat from this vulnerability is to system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3537",
"url": "https://www.suse.com/security/cve/CVE-2021-3537"
},
{
"category": "external",
"summary": "SUSE Bug 1185698 for CVE-2021-3537",
"url": "https://bugzilla.suse.com/1185698"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-3537"
},
{
"cve": "CVE-2021-3541",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3541"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3541",
"url": "https://www.suse.com/security/cve/CVE-2021-3541"
},
{
"category": "external",
"summary": "SUSE Bug 1186015 for CVE-2021-3541",
"url": "https://bugzilla.suse.com/1186015"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3541"
},
{
"cve": "CVE-2021-41098",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-41098"
}
],
"notes": [
{
"category": "general",
"text": "Nokogiri is a Rubygem providing HTML, XML, SAX, and Reader parsers with XPath and CSS selector support. In Nokogiri v1.12.4 and earlier, on JRuby only, the SAX parser resolves external entities by default. Users of Nokogiri on JRuby who parse untrusted documents using any of these classes are affected: Nokogiri::XML::SAX::Parse, Nokogiri::HTML4::SAX::Parser or its alias Nokogiri::HTML::SAX::Parser, Nokogiri::XML::SAX::PushParser, and Nokogiri::HTML4::SAX::PushParser or its alias Nokogiri::HTML::SAX::PushParser. JRuby users should upgrade to Nokogiri v1.12.5 or later to receive a patch for this issue. There are no workarounds available for v1.12.4 or earlier. CRuby users are not affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-41098",
"url": "https://www.suse.com/security/cve/CVE-2021-41098"
},
{
"category": "external",
"summary": "SUSE Bug 1191029 for CVE-2021-41098",
"url": "https://bugzilla.suse.com/1191029"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-41098"
},
{
"cve": "CVE-2022-23308",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-23308"
}
],
"notes": [
{
"category": "general",
"text": "valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-23308",
"url": "https://www.suse.com/security/cve/CVE-2022-23308"
},
{
"category": "external",
"summary": "SUSE Bug 1196490 for CVE-2022-23308",
"url": "https://bugzilla.suse.com/1196490"
},
{
"category": "external",
"summary": "SUSE Bug 1199098 for CVE-2022-23308",
"url": "https://bugzilla.suse.com/1199098"
},
{
"category": "external",
"summary": "SUSE Bug 1202688 for CVE-2022-23308",
"url": "https://bugzilla.suse.com/1202688"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-23308"
},
{
"cve": "CVE-2022-23437",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-23437"
}
],
"notes": [
{
"category": "general",
"text": "There\u0027s a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulnerability is present within XercesJ version 2.12.1 and the previous versions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-23437",
"url": "https://www.suse.com/security/cve/CVE-2022-23437"
},
{
"category": "external",
"summary": "SUSE Bug 1195108 for CVE-2022-23437",
"url": "https://bugzilla.suse.com/1195108"
},
{
"category": "external",
"summary": "SUSE Bug 1196394 for CVE-2022-23437",
"url": "https://bugzilla.suse.com/1196394"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-23437"
},
{
"cve": "CVE-2022-24836",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-24836"
}
],
"notes": [
{
"category": "general",
"text": "Nokogiri is an open source XML and HTML library for Ruby. Nokogiri `\u003c v1.13.4` contains an inefficient regular expression that is susceptible to excessive backtracking when attempting to detect encoding in HTML documents. Users are advised to upgrade to Nokogiri `\u003e= 1.13.4`. There are no known workarounds for this issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-24836",
"url": "https://www.suse.com/security/cve/CVE-2022-24836"
},
{
"category": "external",
"summary": "SUSE Bug 1198408 for CVE-2022-24836",
"url": "https://bugzilla.suse.com/1198408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-24836"
},
{
"cve": "CVE-2022-24839",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-24839"
}
],
"notes": [
{
"category": "general",
"text": "org.cyberneko.html is an html parser written in Java. The fork of `org.cyberneko.html` used by Nokogiri (Rubygem) raises a `java.lang.OutOfMemoryError` exception when parsing ill-formed HTML markup. Users are advised to upgrade to `\u003e= 1.9.22.noko2`. Note: The upstream library `org.cyberneko.html` is no longer maintained. Nokogiri uses its own fork of this library located at https://github.com/sparklemotion/nekohtml and this CVE applies only to that fork. Other forks of nekohtml may have a similar vulnerability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-24839",
"url": "https://www.suse.com/security/cve/CVE-2022-24839"
},
{
"category": "external",
"summary": "SUSE Bug 1198404 for CVE-2022-24839",
"url": "https://bugzilla.suse.com/1198404"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-24839"
},
{
"cve": "CVE-2022-29181",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-29181"
}
],
"notes": [
{
"category": "general",
"text": "Nokogiri is an open source XML and HTML library for Ruby. Nokogiri prior to version 1.13.6 does not type-check all inputs into the XML and HTML4 SAX parsers, allowing specially crafted untrusted inputs to cause illegal memory access errors (segfault) or reads from unrelated memory. Version 1.13.6 contains a patch for this issue. As a workaround, ensure the untrusted input is a `String` by calling `#to_s` or equivalent.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-29181",
"url": "https://www.suse.com/security/cve/CVE-2022-29181"
},
{
"category": "external",
"summary": "SUSE Bug 1199782 for CVE-2022-29181",
"url": "https://bugzilla.suse.com/1199782"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-29181"
},
{
"cve": "CVE-2022-29824",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-29824"
}
],
"notes": [
{
"category": "general",
"text": "In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don\u0027t check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2\u0027s buffer functions, for example libxslt through 1.1.35, is affected as well.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-29824",
"url": "https://www.suse.com/security/cve/CVE-2022-29824"
},
{
"category": "external",
"summary": "SUSE Bug 1199132 for CVE-2022-29824",
"url": "https://bugzilla.suse.com/1199132"
},
{
"category": "external",
"summary": "SUSE Bug 1202878 for CVE-2022-29824",
"url": "https://bugzilla.suse.com/1202878"
},
{
"category": "external",
"summary": "SUSE Bug 1204121 for CVE-2022-29824",
"url": "https://bugzilla.suse.com/1204121"
},
{
"category": "external",
"summary": "SUSE Bug 1204131 for CVE-2022-29824",
"url": "https://bugzilla.suse.com/1204131"
},
{
"category": "external",
"summary": "SUSE Bug 1205069 for CVE-2022-29824",
"url": "https://bugzilla.suse.com/1205069"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.aarch64",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.ppc64le",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.s390x",
"openSUSE Tumbleweed:ruby3.2-rubygem-nokogiri-1.13.9-1.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-29824"
}
]
}
opensuse-su-2020:0681-1
Vulnerability from csaf_opensuse
Published
2020-05-22 16:17
Modified
2020-05-22 16:17
Summary
Security update for libxml2
Notes
Title of the patch
Security update for libxml2
Description of the patch
This update for libxml2 fixes the following issues:
- CVE-2019-20388: Fixed a memory leak in xmlSchemaPreRun (bsc#1161521).
- CVE-2019-19956: Fixed a memory leak (bsc#1159928).
- CVE-2020-7595: Fixed an infinite loop in an EOF situation (bsc#1161517).
This update was imported from the SUSE:SLE-15:Update update project.
Patchnames
openSUSE-2020-681
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for libxml2",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for libxml2 fixes the following issues:\n\n- CVE-2019-20388: Fixed a memory leak in xmlSchemaPreRun (bsc#1161521).\n- CVE-2019-19956: Fixed a memory leak (bsc#1159928).\n- CVE-2020-7595: Fixed an infinite loop in an EOF situation (bsc#1161517).\n\nThis update was imported from the SUSE:SLE-15:Update update project.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2020-681",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_0681-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2020:0681-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/75OUBX7RPPAARGW2FKOWVC52NVIH42S5/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2020:0681-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/75OUBX7RPPAARGW2FKOWVC52NVIH42S5/"
},
{
"category": "self",
"summary": "SUSE Bug 1159928",
"url": "https://bugzilla.suse.com/1159928"
},
{
"category": "self",
"summary": "SUSE Bug 1161517",
"url": "https://bugzilla.suse.com/1161517"
},
{
"category": "self",
"summary": "SUSE Bug 1161521",
"url": "https://bugzilla.suse.com/1161521"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-19956 page",
"url": "https://www.suse.com/security/cve/CVE-2019-19956/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-20388 page",
"url": "https://www.suse.com/security/cve/CVE-2019-20388/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-7595 page",
"url": "https://www.suse.com/security/cve/CVE-2020-7595/"
}
],
"title": "Security update for libxml2",
"tracking": {
"current_release_date": "2020-05-22T16:17:02Z",
"generator": {
"date": "2020-05-22T16:17:02Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2020:0681-1",
"initial_release_date": "2020-05-22T16:17:02Z",
"revision_history": [
{
"date": "2020-05-22T16:17:02Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libxml2-2-2.9.7-lp151.5.9.1.i586",
"product": {
"name": "libxml2-2-2.9.7-lp151.5.9.1.i586",
"product_id": "libxml2-2-2.9.7-lp151.5.9.1.i586"
}
},
{
"category": "product_version",
"name": "libxml2-devel-2.9.7-lp151.5.9.1.i586",
"product": {
"name": "libxml2-devel-2.9.7-lp151.5.9.1.i586",
"product_id": "libxml2-devel-2.9.7-lp151.5.9.1.i586"
}
},
{
"category": "product_version",
"name": "libxml2-tools-2.9.7-lp151.5.9.1.i586",
"product": {
"name": "libxml2-tools-2.9.7-lp151.5.9.1.i586",
"product_id": "libxml2-tools-2.9.7-lp151.5.9.1.i586"
}
},
{
"category": "product_version",
"name": "python2-libxml2-python-2.9.7-lp151.5.9.1.i586",
"product": {
"name": "python2-libxml2-python-2.9.7-lp151.5.9.1.i586",
"product_id": "python2-libxml2-python-2.9.7-lp151.5.9.1.i586"
}
},
{
"category": "product_version",
"name": "python3-libxml2-python-2.9.7-lp151.5.9.1.i586",
"product": {
"name": "python3-libxml2-python-2.9.7-lp151.5.9.1.i586",
"product_id": "python3-libxml2-python-2.9.7-lp151.5.9.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-doc-2.9.7-lp151.5.9.1.noarch",
"product": {
"name": "libxml2-doc-2.9.7-lp151.5.9.1.noarch",
"product_id": "libxml2-doc-2.9.7-lp151.5.9.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-2-2.9.7-lp151.5.9.1.x86_64",
"product": {
"name": "libxml2-2-2.9.7-lp151.5.9.1.x86_64",
"product_id": "libxml2-2-2.9.7-lp151.5.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "libxml2-2-32bit-2.9.7-lp151.5.9.1.x86_64",
"product": {
"name": "libxml2-2-32bit-2.9.7-lp151.5.9.1.x86_64",
"product_id": "libxml2-2-32bit-2.9.7-lp151.5.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "libxml2-devel-2.9.7-lp151.5.9.1.x86_64",
"product": {
"name": "libxml2-devel-2.9.7-lp151.5.9.1.x86_64",
"product_id": "libxml2-devel-2.9.7-lp151.5.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "libxml2-devel-32bit-2.9.7-lp151.5.9.1.x86_64",
"product": {
"name": "libxml2-devel-32bit-2.9.7-lp151.5.9.1.x86_64",
"product_id": "libxml2-devel-32bit-2.9.7-lp151.5.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "libxml2-tools-2.9.7-lp151.5.9.1.x86_64",
"product": {
"name": "libxml2-tools-2.9.7-lp151.5.9.1.x86_64",
"product_id": "libxml2-tools-2.9.7-lp151.5.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "python2-libxml2-python-2.9.7-lp151.5.9.1.x86_64",
"product": {
"name": "python2-libxml2-python-2.9.7-lp151.5.9.1.x86_64",
"product_id": "python2-libxml2-python-2.9.7-lp151.5.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "python3-libxml2-python-2.9.7-lp151.5.9.1.x86_64",
"product": {
"name": "python3-libxml2-python-2.9.7-lp151.5.9.1.x86_64",
"product_id": "python3-libxml2-python-2.9.7-lp151.5.9.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.1",
"product": {
"name": "openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-2-2.9.7-lp151.5.9.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:libxml2-2-2.9.7-lp151.5.9.1.i586"
},
"product_reference": "libxml2-2-2.9.7-lp151.5.9.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-2-2.9.7-lp151.5.9.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:libxml2-2-2.9.7-lp151.5.9.1.x86_64"
},
"product_reference": "libxml2-2-2.9.7-lp151.5.9.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-2-32bit-2.9.7-lp151.5.9.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:libxml2-2-32bit-2.9.7-lp151.5.9.1.x86_64"
},
"product_reference": "libxml2-2-32bit-2.9.7-lp151.5.9.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-2.9.7-lp151.5.9.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:libxml2-devel-2.9.7-lp151.5.9.1.i586"
},
"product_reference": "libxml2-devel-2.9.7-lp151.5.9.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-2.9.7-lp151.5.9.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:libxml2-devel-2.9.7-lp151.5.9.1.x86_64"
},
"product_reference": "libxml2-devel-2.9.7-lp151.5.9.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-32bit-2.9.7-lp151.5.9.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:libxml2-devel-32bit-2.9.7-lp151.5.9.1.x86_64"
},
"product_reference": "libxml2-devel-32bit-2.9.7-lp151.5.9.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-doc-2.9.7-lp151.5.9.1.noarch as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:libxml2-doc-2.9.7-lp151.5.9.1.noarch"
},
"product_reference": "libxml2-doc-2.9.7-lp151.5.9.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-tools-2.9.7-lp151.5.9.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:libxml2-tools-2.9.7-lp151.5.9.1.i586"
},
"product_reference": "libxml2-tools-2.9.7-lp151.5.9.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-tools-2.9.7-lp151.5.9.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:libxml2-tools-2.9.7-lp151.5.9.1.x86_64"
},
"product_reference": "libxml2-tools-2.9.7-lp151.5.9.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-libxml2-python-2.9.7-lp151.5.9.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:python2-libxml2-python-2.9.7-lp151.5.9.1.i586"
},
"product_reference": "python2-libxml2-python-2.9.7-lp151.5.9.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-libxml2-python-2.9.7-lp151.5.9.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:python2-libxml2-python-2.9.7-lp151.5.9.1.x86_64"
},
"product_reference": "python2-libxml2-python-2.9.7-lp151.5.9.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-python-2.9.7-lp151.5.9.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:python3-libxml2-python-2.9.7-lp151.5.9.1.i586"
},
"product_reference": "python3-libxml2-python-2.9.7-lp151.5.9.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-python-2.9.7-lp151.5.9.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:python3-libxml2-python-2.9.7-lp151.5.9.1.x86_64"
},
"product_reference": "python3-libxml2-python-2.9.7-lp151.5.9.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-19956",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-19956"
}
],
"notes": [
{
"category": "general",
"text": "xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc-\u003eoldNs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:libxml2-2-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:libxml2-2-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-2-32bit-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-devel-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:libxml2-devel-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-devel-32bit-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-doc-2.9.7-lp151.5.9.1.noarch",
"openSUSE Leap 15.1:libxml2-tools-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:libxml2-tools-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:python2-libxml2-python-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:python2-libxml2-python-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:python3-libxml2-python-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:python3-libxml2-python-2.9.7-lp151.5.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-19956",
"url": "https://www.suse.com/security/cve/CVE-2019-19956"
},
{
"category": "external",
"summary": "SUSE Bug 1159928 for CVE-2019-19956",
"url": "https://bugzilla.suse.com/1159928"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2019-19956",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:libxml2-2-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:libxml2-2-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-2-32bit-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-devel-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:libxml2-devel-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-devel-32bit-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-doc-2.9.7-lp151.5.9.1.noarch",
"openSUSE Leap 15.1:libxml2-tools-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:libxml2-tools-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:python2-libxml2-python-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:python2-libxml2-python-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:python3-libxml2-python-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:python3-libxml2-python-2.9.7-lp151.5.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:libxml2-2-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:libxml2-2-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-2-32bit-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-devel-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:libxml2-devel-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-devel-32bit-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-doc-2.9.7-lp151.5.9.1.noarch",
"openSUSE Leap 15.1:libxml2-tools-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:libxml2-tools-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:python2-libxml2-python-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:python2-libxml2-python-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:python3-libxml2-python-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:python3-libxml2-python-2.9.7-lp151.5.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-05-22T16:17:02Z",
"details": "moderate"
}
],
"title": "CVE-2019-19956"
},
{
"cve": "CVE-2019-20388",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-20388"
}
],
"notes": [
{
"category": "general",
"text": "xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:libxml2-2-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:libxml2-2-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-2-32bit-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-devel-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:libxml2-devel-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-devel-32bit-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-doc-2.9.7-lp151.5.9.1.noarch",
"openSUSE Leap 15.1:libxml2-tools-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:libxml2-tools-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:python2-libxml2-python-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:python2-libxml2-python-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:python3-libxml2-python-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:python3-libxml2-python-2.9.7-lp151.5.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-20388",
"url": "https://www.suse.com/security/cve/CVE-2019-20388"
},
{
"category": "external",
"summary": "SUSE Bug 1161521 for CVE-2019-20388",
"url": "https://bugzilla.suse.com/1161521"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2019-20388",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:libxml2-2-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:libxml2-2-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-2-32bit-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-devel-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:libxml2-devel-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-devel-32bit-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-doc-2.9.7-lp151.5.9.1.noarch",
"openSUSE Leap 15.1:libxml2-tools-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:libxml2-tools-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:python2-libxml2-python-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:python2-libxml2-python-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:python3-libxml2-python-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:python3-libxml2-python-2.9.7-lp151.5.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:libxml2-2-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:libxml2-2-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-2-32bit-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-devel-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:libxml2-devel-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-devel-32bit-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-doc-2.9.7-lp151.5.9.1.noarch",
"openSUSE Leap 15.1:libxml2-tools-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:libxml2-tools-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:python2-libxml2-python-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:python2-libxml2-python-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:python3-libxml2-python-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:python3-libxml2-python-2.9.7-lp151.5.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-05-22T16:17:02Z",
"details": "low"
}
],
"title": "CVE-2019-20388"
},
{
"cve": "CVE-2020-7595",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-7595"
}
],
"notes": [
{
"category": "general",
"text": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:libxml2-2-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:libxml2-2-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-2-32bit-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-devel-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:libxml2-devel-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-devel-32bit-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-doc-2.9.7-lp151.5.9.1.noarch",
"openSUSE Leap 15.1:libxml2-tools-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:libxml2-tools-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:python2-libxml2-python-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:python2-libxml2-python-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:python3-libxml2-python-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:python3-libxml2-python-2.9.7-lp151.5.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-7595",
"url": "https://www.suse.com/security/cve/CVE-2020-7595"
},
{
"category": "external",
"summary": "SUSE Bug 1161517 for CVE-2020-7595",
"url": "https://bugzilla.suse.com/1161517"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2020-7595",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:libxml2-2-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:libxml2-2-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-2-32bit-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-devel-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:libxml2-devel-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-devel-32bit-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-doc-2.9.7-lp151.5.9.1.noarch",
"openSUSE Leap 15.1:libxml2-tools-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:libxml2-tools-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:python2-libxml2-python-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:python2-libxml2-python-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:python3-libxml2-python-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:python3-libxml2-python-2.9.7-lp151.5.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:libxml2-2-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:libxml2-2-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-2-32bit-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-devel-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:libxml2-devel-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-devel-32bit-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:libxml2-doc-2.9.7-lp151.5.9.1.noarch",
"openSUSE Leap 15.1:libxml2-tools-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:libxml2-tools-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:python2-libxml2-python-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:python2-libxml2-python-2.9.7-lp151.5.9.1.x86_64",
"openSUSE Leap 15.1:python3-libxml2-python-2.9.7-lp151.5.9.1.i586",
"openSUSE Leap 15.1:python3-libxml2-python-2.9.7-lp151.5.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-05-22T16:17:02Z",
"details": "moderate"
}
],
"title": "CVE-2020-7595"
}
]
}
opensuse-su-2024:11912-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
ruby3.1-rubygem-nokogiri-1.13.3-1.1 on GA media
Notes
Title of the patch
ruby3.1-rubygem-nokogiri-1.13.3-1.1 on GA media
Description of the patch
These are all security issues fixed in the ruby3.1-rubygem-nokogiri-1.13.3-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-11912
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "ruby3.1-rubygem-nokogiri-1.13.3-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the ruby3.1-rubygem-nokogiri-1.13.3-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-11912",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_11912-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2877 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2877/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0191 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0191/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1819 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1819/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5312 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5312/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7497 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7497/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7498 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7498/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7499 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7499/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7500 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7500/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7941 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7941/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7942 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7942/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7995 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7995/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8035 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8035/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8241 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8241/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8242 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8242/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8317 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8317/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4658 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4658/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4738 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4738/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5131 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5131/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15412 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15412/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5029 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5029/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-14404 page",
"url": "https://www.suse.com/security/cve/CVE-2018-14404/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-8048 page",
"url": "https://www.suse.com/security/cve/CVE-2018-8048/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11068 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11068/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-20388 page",
"url": "https://www.suse.com/security/cve/CVE-2019-20388/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5477 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5477/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-24977 page",
"url": "https://www.suse.com/security/cve/CVE-2020-24977/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-7595 page",
"url": "https://www.suse.com/security/cve/CVE-2020-7595/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30560 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30560/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3516 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3516/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3517 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3517/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3518 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3518/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3537 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3537/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3541 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3541/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-41098 page",
"url": "https://www.suse.com/security/cve/CVE-2021-41098/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-23308 page",
"url": "https://www.suse.com/security/cve/CVE-2022-23308/"
}
],
"title": "ruby3.1-rubygem-nokogiri-1.13.3-1.1 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:11912-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"product": {
"name": "ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"product_id": "ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"product": {
"name": "ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"product_id": "ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"product": {
"name": "ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"product_id": "ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64",
"product": {
"name": "ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64",
"product_id": "ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64"
},
"product_reference": "ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le"
},
"product_reference": "ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x"
},
"product_reference": "ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
},
"product_reference": "ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2013-2877",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2877"
}
],
"notes": [
{
"category": "general",
"text": "parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a document that ends abruptly, related to the lack of certain checks for the XML_PARSER_EOF state.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2877",
"url": "https://www.suse.com/security/cve/CVE-2013-2877"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2013-2877",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 828893 for CVE-2013-2877",
"url": "https://bugzilla.suse.com/828893"
},
{
"category": "external",
"summary": "SUSE Bug 829077 for CVE-2013-2877",
"url": "https://bugzilla.suse.com/829077"
},
{
"category": "external",
"summary": "SUSE Bug 854869 for CVE-2013-2877",
"url": "https://bugzilla.suse.com/854869"
},
{
"category": "external",
"summary": "SUSE Bug 877506 for CVE-2013-2877",
"url": "https://bugzilla.suse.com/877506"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2013-2877"
},
{
"cve": "CVE-2014-0191",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0191"
}
],
"notes": [
{
"category": "general",
"text": "The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Server in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 and other products, loads external parameter entities regardless of whether entity substitution or validation is enabled, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XML document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0191",
"url": "https://www.suse.com/security/cve/CVE-2014-0191"
},
{
"category": "external",
"summary": "SUSE Bug 1014873 for CVE-2014-0191",
"url": "https://bugzilla.suse.com/1014873"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2014-0191",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 876652 for CVE-2014-0191",
"url": "https://bugzilla.suse.com/876652"
},
{
"category": "external",
"summary": "SUSE Bug 877506 for CVE-2014-0191",
"url": "https://bugzilla.suse.com/877506"
},
{
"category": "external",
"summary": "SUSE Bug 996079 for CVE-2014-0191",
"url": "https://bugzilla.suse.com/996079"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-0191"
},
{
"cve": "CVE-2015-1819",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1819"
}
],
"notes": [
{
"category": "general",
"text": "The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1819",
"url": "https://www.suse.com/security/cve/CVE-2015-1819"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-1819",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 928193 for CVE-2015-1819",
"url": "https://bugzilla.suse.com/928193"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-1819",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-1819"
},
{
"cve": "CVE-2015-5312",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5312"
}
],
"notes": [
{
"category": "general",
"text": "The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data, a different vulnerability than CVE-2014-3660.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5312",
"url": "https://www.suse.com/security/cve/CVE-2015-5312"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-5312",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 957105 for CVE-2015-5312",
"url": "https://bugzilla.suse.com/957105"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-5312",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-5312",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-5312"
},
{
"cve": "CVE-2015-7497",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7497"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7497",
"url": "https://www.suse.com/security/cve/CVE-2015-7497"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-7497",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 957106 for CVE-2015-7497",
"url": "https://bugzilla.suse.com/957106"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-7497",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-7497",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-7497"
},
{
"cve": "CVE-2015-7498",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7498"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors related to extracting errors after an encoding conversion failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7498",
"url": "https://www.suse.com/security/cve/CVE-2015-7498"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-7498",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 957107 for CVE-2015-7498",
"url": "https://bugzilla.suse.com/957107"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-7498",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-7498",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-7498"
},
{
"cve": "CVE-2015-7499",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7499"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7499",
"url": "https://www.suse.com/security/cve/CVE-2015-7499"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-7499",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 957109 for CVE-2015-7499",
"url": "https://bugzilla.suse.com/957109"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-7499",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-7499",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-7499"
},
{
"cve": "CVE-2015-7500",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7500"
}
],
"notes": [
{
"category": "general",
"text": "The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via unspecified vectors related to incorrect entities boundaries and start tags.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7500",
"url": "https://www.suse.com/security/cve/CVE-2015-7500"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-7500",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 957110 for CVE-2015-7500",
"url": "https://bugzilla.suse.com/957110"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-7500",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-7500",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-7500"
},
{
"cve": "CVE-2015-7941",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7941"
}
],
"notes": [
{
"category": "general",
"text": "libxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and libxml2 crash) via crafted XML data to the (1) xmlParseEntityDecl or (2) xmlParseConditionalSections function in parser.c, as demonstrated by non-terminated entities.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7941",
"url": "https://www.suse.com/security/cve/CVE-2015-7941"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-7941",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 951734 for CVE-2015-7941",
"url": "https://bugzilla.suse.com/951734"
},
{
"category": "external",
"summary": "SUSE Bug 951735 for CVE-2015-7941",
"url": "https://bugzilla.suse.com/951735"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-7941",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-7941"
},
{
"cve": "CVE-2015-7942",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7942"
}
],
"notes": [
{
"category": "general",
"text": "The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different vulnerability than CVE-2015-7941.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7942",
"url": "https://www.suse.com/security/cve/CVE-2015-7942"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-7942",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 951735 for CVE-2015-7942",
"url": "https://bugzilla.suse.com/951735"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-7942",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-7942"
},
{
"cve": "CVE-2015-7995",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7995"
}
],
"notes": [
{
"category": "general",
"text": "The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a \"type confusion\" issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7995",
"url": "https://www.suse.com/security/cve/CVE-2015-7995"
},
{
"category": "external",
"summary": "SUSE Bug 1123130 for CVE-2015-7995",
"url": "https://bugzilla.suse.com/1123130"
},
{
"category": "external",
"summary": "SUSE Bug 952474 for CVE-2015-7995",
"url": "https://bugzilla.suse.com/952474"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-7995"
},
{
"cve": "CVE-2015-8035",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8035"
}
],
"notes": [
{
"category": "general",
"text": "The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-dependent attackers to cause a denial of service (process hang) via crafted XML data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8035",
"url": "https://www.suse.com/security/cve/CVE-2015-8035"
},
{
"category": "external",
"summary": "SUSE Bug 1088279 for CVE-2015-8035",
"url": "https://bugzilla.suse.com/1088279"
},
{
"category": "external",
"summary": "SUSE Bug 1105166 for CVE-2015-8035",
"url": "https://bugzilla.suse.com/1105166"
},
{
"category": "external",
"summary": "SUSE Bug 954429 for CVE-2015-8035",
"url": "https://bugzilla.suse.com/954429"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-8035"
},
{
"cve": "CVE-2015-8241",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8241"
}
],
"notes": [
{
"category": "general",
"text": "The xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context-dependent attackers to cause a denial of service (heap-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8241",
"url": "https://www.suse.com/security/cve/CVE-2015-8241"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-8241",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 956018 for CVE-2015-8241",
"url": "https://bugzilla.suse.com/956018"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-8241",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-8241",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-8241"
},
{
"cve": "CVE-2015-8242",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8242"
}
],
"notes": [
{
"category": "general",
"text": "The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (stack-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8242",
"url": "https://www.suse.com/security/cve/CVE-2015-8242"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-8242",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 956021 for CVE-2015-8242",
"url": "https://bugzilla.suse.com/956021"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-8242",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-8242",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-8242"
},
{
"cve": "CVE-2015-8317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8317"
}
],
"notes": [
{
"category": "general",
"text": "The xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive information via an (1) unterminated encoding value or (2) incomplete XML declaration in XML data, which triggers an out-of-bounds heap read.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8317",
"url": "https://www.suse.com/security/cve/CVE-2015-8317"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-8317",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 956260 for CVE-2015-8317",
"url": "https://bugzilla.suse.com/956260"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-8317",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-8317",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-8317"
},
{
"cve": "CVE-2016-4658",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4658"
}
],
"notes": [
{
"category": "general",
"text": "xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and memory corruption) via a crafted XML document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4658",
"url": "https://www.suse.com/security/cve/CVE-2016-4658"
},
{
"category": "external",
"summary": "SUSE Bug 1005544 for CVE-2016-4658",
"url": "https://bugzilla.suse.com/1005544"
},
{
"category": "external",
"summary": "SUSE Bug 1014873 for CVE-2016-4658",
"url": "https://bugzilla.suse.com/1014873"
},
{
"category": "external",
"summary": "SUSE Bug 1069433 for CVE-2016-4658",
"url": "https://bugzilla.suse.com/1069433"
},
{
"category": "external",
"summary": "SUSE Bug 1078813 for CVE-2016-4658",
"url": "https://bugzilla.suse.com/1078813"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2016-4658",
"url": "https://bugzilla.suse.com/1123919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-4658"
},
{
"cve": "CVE-2016-4738",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4738"
}
],
"notes": [
{
"category": "general",
"text": "libxslt in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4738",
"url": "https://www.suse.com/security/cve/CVE-2016-4738"
},
{
"category": "external",
"summary": "SUSE Bug 1005591 for CVE-2016-4738",
"url": "https://bugzilla.suse.com/1005591"
},
{
"category": "external",
"summary": "SUSE Bug 1123130 for CVE-2016-4738",
"url": "https://bugzilla.suse.com/1123130"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-4738"
},
{
"cve": "CVE-2016-5131",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5131"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5131",
"url": "https://www.suse.com/security/cve/CVE-2016-5131"
},
{
"category": "external",
"summary": "SUSE Bug 1014873 for CVE-2016-5131",
"url": "https://bugzilla.suse.com/1014873"
},
{
"category": "external",
"summary": "SUSE Bug 1069433 for CVE-2016-5131",
"url": "https://bugzilla.suse.com/1069433"
},
{
"category": "external",
"summary": "SUSE Bug 1078813 for CVE-2016-5131",
"url": "https://bugzilla.suse.com/1078813"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2016-5131",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 989901 for CVE-2016-5131",
"url": "https://bugzilla.suse.com/989901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5131"
},
{
"cve": "CVE-2017-15412",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15412"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15412",
"url": "https://www.suse.com/security/cve/CVE-2017-15412"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15412",
"url": "https://bugzilla.suse.com/1071691"
},
{
"category": "external",
"summary": "SUSE Bug 1077993 for CVE-2017-15412",
"url": "https://bugzilla.suse.com/1077993"
},
{
"category": "external",
"summary": "SUSE Bug 1123129 for CVE-2017-15412",
"url": "https://bugzilla.suse.com/1123129"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2017-15412",
"url": "https://bugzilla.suse.com/1123919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15412"
},
{
"cve": "CVE-2017-5029",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5029"
}
],
"notes": [
{
"category": "general",
"text": "The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5029",
"url": "https://www.suse.com/security/cve/CVE-2017-5029"
},
{
"category": "external",
"summary": "SUSE Bug 1028848 for CVE-2017-5029",
"url": "https://bugzilla.suse.com/1028848"
},
{
"category": "external",
"summary": "SUSE Bug 1028875 for CVE-2017-5029",
"url": "https://bugzilla.suse.com/1028875"
},
{
"category": "external",
"summary": "SUSE Bug 1035905 for CVE-2017-5029",
"url": "https://bugzilla.suse.com/1035905"
},
{
"category": "external",
"summary": "SUSE Bug 1123130 for CVE-2017-5029",
"url": "https://bugzilla.suse.com/1123130"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2017-5029"
},
{
"cve": "CVE-2018-14404",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-14404"
}
],
"notes": [
{
"category": "general",
"text": "A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression in the XPATH_OP_AND or XPATH_OP_OR case. Applications processing untrusted XSL format inputs with the use of the libxml2 library may be vulnerable to a denial of service attack due to a crash of the application.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-14404",
"url": "https://www.suse.com/security/cve/CVE-2018-14404"
},
{
"category": "external",
"summary": "SUSE Bug 1102046 for CVE-2018-14404",
"url": "https://bugzilla.suse.com/1102046"
},
{
"category": "external",
"summary": "SUSE Bug 1148896 for CVE-2018-14404",
"url": "https://bugzilla.suse.com/1148896"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-14404"
},
{
"cve": "CVE-2018-8048",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-8048"
}
],
"notes": [
{
"category": "general",
"text": "In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-8048",
"url": "https://www.suse.com/security/cve/CVE-2018-8048"
},
{
"category": "external",
"summary": "SUSE Bug 1085967 for CVE-2018-8048",
"url": "https://bugzilla.suse.com/1085967"
},
{
"category": "external",
"summary": "SUSE Bug 1086598 for CVE-2018-8048",
"url": "https://bugzilla.suse.com/1086598"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-8048"
},
{
"cve": "CVE-2019-11068",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11068"
}
],
"notes": [
{
"category": "general",
"text": "libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11068",
"url": "https://www.suse.com/security/cve/CVE-2019-11068"
},
{
"category": "external",
"summary": "SUSE Bug 1132160 for CVE-2019-11068",
"url": "https://bugzilla.suse.com/1132160"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-11068",
"url": "https://bugzilla.suse.com/1154212"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-11068"
},
{
"cve": "CVE-2019-20388",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-20388"
}
],
"notes": [
{
"category": "general",
"text": "xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-20388",
"url": "https://www.suse.com/security/cve/CVE-2019-20388"
},
{
"category": "external",
"summary": "SUSE Bug 1161521 for CVE-2019-20388",
"url": "https://bugzilla.suse.com/1161521"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2019-20388",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-20388"
},
{
"cve": "CVE-2019-5477",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5477"
}
],
"notes": [
{
"category": "general",
"text": "A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby\u0027s `Kernel.open` method. Processes are vulnerable only if the undocumented method `Nokogiri::CSS::Tokenizer#load_file` is being called with unsafe user input as the filename. This vulnerability appears in code generated by the Rexical gem versions v1.0.6 and earlier. Rexical is used by Nokogiri to generate lexical scanner code for parsing CSS queries. The underlying vulnerability was addressed in Rexical v1.0.7 and Nokogiri upgraded to this version of Rexical in Nokogiri v1.10.4.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5477",
"url": "https://www.suse.com/security/cve/CVE-2019-5477"
},
{
"category": "external",
"summary": "SUSE Bug 1146578 for CVE-2019-5477",
"url": "https://bugzilla.suse.com/1146578"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5477"
},
{
"cve": "CVE-2020-24977",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-24977"
}
],
"notes": [
{
"category": "general",
"text": "GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-24977",
"url": "https://www.suse.com/security/cve/CVE-2020-24977"
},
{
"category": "external",
"summary": "SUSE Bug 1176179 for CVE-2020-24977",
"url": "https://bugzilla.suse.com/1176179"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2020-24977",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-24977"
},
{
"cve": "CVE-2020-7595",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-7595"
}
],
"notes": [
{
"category": "general",
"text": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-7595",
"url": "https://www.suse.com/security/cve/CVE-2020-7595"
},
{
"category": "external",
"summary": "SUSE Bug 1161517 for CVE-2020-7595",
"url": "https://bugzilla.suse.com/1161517"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2020-7595",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-7595"
},
{
"cve": "CVE-2021-30560",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30560"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30560",
"url": "https://www.suse.com/security/cve/CVE-2021-30560"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1188373"
},
{
"category": "external",
"summary": "SUSE Bug 1208574 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1208574"
},
{
"category": "external",
"summary": "SUSE Bug 1211500 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1211500"
},
{
"category": "external",
"summary": "SUSE Bug 1211501 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1211501"
},
{
"category": "external",
"summary": "SUSE Bug 1211544 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1211544"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30560"
},
{
"cve": "CVE-2021-3516",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3516"
}
],
"notes": [
{
"category": "general",
"text": "There\u0027s a flaw in libxml2\u0027s xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-after-free. The greatest impact of this flaw is to confidentiality, integrity, and availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3516",
"url": "https://www.suse.com/security/cve/CVE-2021-3516"
},
{
"category": "external",
"summary": "SUSE Bug 1185409 for CVE-2021-3516",
"url": "https://bugzilla.suse.com/1185409"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2021-3516",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3516"
},
{
"cve": "CVE-2021-3517",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3517"
}
],
"notes": [
{
"category": "general",
"text": "There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3517",
"url": "https://www.suse.com/security/cve/CVE-2021-3517"
},
{
"category": "external",
"summary": "SUSE Bug 1185410 for CVE-2021-3517",
"url": "https://bugzilla.suse.com/1185410"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2021-3517",
"url": "https://bugzilla.suse.com/1191860"
},
{
"category": "external",
"summary": "SUSE Bug 1194438 for CVE-2021-3517",
"url": "https://bugzilla.suse.com/1194438"
},
{
"category": "external",
"summary": "SUSE Bug 1196383 for CVE-2021-3517",
"url": "https://bugzilla.suse.com/1196383"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-3517"
},
{
"cve": "CVE-2021-3518",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3518"
}
],
"notes": [
{
"category": "general",
"text": "There\u0027s a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3518",
"url": "https://www.suse.com/security/cve/CVE-2021-3518"
},
{
"category": "external",
"summary": "SUSE Bug 1185408 for CVE-2021-3518",
"url": "https://bugzilla.suse.com/1185408"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2021-3518",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3518"
},
{
"cve": "CVE-2021-3537",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3537"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest threat from this vulnerability is to system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3537",
"url": "https://www.suse.com/security/cve/CVE-2021-3537"
},
{
"category": "external",
"summary": "SUSE Bug 1185698 for CVE-2021-3537",
"url": "https://bugzilla.suse.com/1185698"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-3537"
},
{
"cve": "CVE-2021-3541",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3541"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3541",
"url": "https://www.suse.com/security/cve/CVE-2021-3541"
},
{
"category": "external",
"summary": "SUSE Bug 1186015 for CVE-2021-3541",
"url": "https://bugzilla.suse.com/1186015"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3541"
},
{
"cve": "CVE-2021-41098",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-41098"
}
],
"notes": [
{
"category": "general",
"text": "Nokogiri is a Rubygem providing HTML, XML, SAX, and Reader parsers with XPath and CSS selector support. In Nokogiri v1.12.4 and earlier, on JRuby only, the SAX parser resolves external entities by default. Users of Nokogiri on JRuby who parse untrusted documents using any of these classes are affected: Nokogiri::XML::SAX::Parse, Nokogiri::HTML4::SAX::Parser or its alias Nokogiri::HTML::SAX::Parser, Nokogiri::XML::SAX::PushParser, and Nokogiri::HTML4::SAX::PushParser or its alias Nokogiri::HTML::SAX::PushParser. JRuby users should upgrade to Nokogiri v1.12.5 or later to receive a patch for this issue. There are no workarounds available for v1.12.4 or earlier. CRuby users are not affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-41098",
"url": "https://www.suse.com/security/cve/CVE-2021-41098"
},
{
"category": "external",
"summary": "SUSE Bug 1191029 for CVE-2021-41098",
"url": "https://bugzilla.suse.com/1191029"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-41098"
},
{
"cve": "CVE-2022-23308",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-23308"
}
],
"notes": [
{
"category": "general",
"text": "valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-23308",
"url": "https://www.suse.com/security/cve/CVE-2022-23308"
},
{
"category": "external",
"summary": "SUSE Bug 1196490 for CVE-2022-23308",
"url": "https://bugzilla.suse.com/1196490"
},
{
"category": "external",
"summary": "SUSE Bug 1199098 for CVE-2022-23308",
"url": "https://bugzilla.suse.com/1199098"
},
{
"category": "external",
"summary": "SUSE Bug 1202688 for CVE-2022-23308",
"url": "https://bugzilla.suse.com/1202688"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.s390x",
"openSUSE Tumbleweed:ruby3.1-rubygem-nokogiri-1.13.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-23308"
}
]
}
opensuse-su-2024:11016-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
libxml2-2-2.9.12-1.2 on GA media
Notes
Title of the patch
libxml2-2-2.9.12-1.2 on GA media
Description of the patch
These are all security issues fixed in the libxml2-2-2.9.12-1.2 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-11016
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "libxml2-2-2.9.12-1.2 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the libxml2-2-2.9.12-1.2 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-11016",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_11016-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2007-6284 page",
"url": "https://www.suse.com/security/cve/CVE-2007-6284/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4658 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4658/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-0663 page",
"url": "https://www.suse.com/security/cve/CVE-2017-0663/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5969 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5969/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-9047 page",
"url": "https://www.suse.com/security/cve/CVE-2017-9047/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-9048 page",
"url": "https://www.suse.com/security/cve/CVE-2017-9048/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-9049 page",
"url": "https://www.suse.com/security/cve/CVE-2017-9049/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-14404 page",
"url": "https://www.suse.com/security/cve/CVE-2018-14404/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-9251 page",
"url": "https://www.suse.com/security/cve/CVE-2018-9251/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-19956 page",
"url": "https://www.suse.com/security/cve/CVE-2019-19956/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-20388 page",
"url": "https://www.suse.com/security/cve/CVE-2019-20388/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-24977 page",
"url": "https://www.suse.com/security/cve/CVE-2020-24977/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-7595 page",
"url": "https://www.suse.com/security/cve/CVE-2020-7595/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3516 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3516/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3517 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3517/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3518 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3518/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3537 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3537/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3541 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3541/"
}
],
"title": "libxml2-2-2.9.12-1.2 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:11016-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libxml2-2-2.9.12-1.2.aarch64",
"product": {
"name": "libxml2-2-2.9.12-1.2.aarch64",
"product_id": "libxml2-2-2.9.12-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "libxml2-2-32bit-2.9.12-1.2.aarch64",
"product": {
"name": "libxml2-2-32bit-2.9.12-1.2.aarch64",
"product_id": "libxml2-2-32bit-2.9.12-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "libxml2-devel-2.9.12-1.2.aarch64",
"product": {
"name": "libxml2-devel-2.9.12-1.2.aarch64",
"product_id": "libxml2-devel-2.9.12-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "libxml2-devel-32bit-2.9.12-1.2.aarch64",
"product": {
"name": "libxml2-devel-32bit-2.9.12-1.2.aarch64",
"product_id": "libxml2-devel-32bit-2.9.12-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "libxml2-doc-2.9.12-1.2.aarch64",
"product": {
"name": "libxml2-doc-2.9.12-1.2.aarch64",
"product_id": "libxml2-doc-2.9.12-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "libxml2-tools-2.9.12-1.2.aarch64",
"product": {
"name": "libxml2-tools-2.9.12-1.2.aarch64",
"product_id": "libxml2-tools-2.9.12-1.2.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-2-2.9.12-1.2.ppc64le",
"product": {
"name": "libxml2-2-2.9.12-1.2.ppc64le",
"product_id": "libxml2-2-2.9.12-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "libxml2-2-32bit-2.9.12-1.2.ppc64le",
"product": {
"name": "libxml2-2-32bit-2.9.12-1.2.ppc64le",
"product_id": "libxml2-2-32bit-2.9.12-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "libxml2-devel-2.9.12-1.2.ppc64le",
"product": {
"name": "libxml2-devel-2.9.12-1.2.ppc64le",
"product_id": "libxml2-devel-2.9.12-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"product": {
"name": "libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"product_id": "libxml2-devel-32bit-2.9.12-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "libxml2-doc-2.9.12-1.2.ppc64le",
"product": {
"name": "libxml2-doc-2.9.12-1.2.ppc64le",
"product_id": "libxml2-doc-2.9.12-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "libxml2-tools-2.9.12-1.2.ppc64le",
"product": {
"name": "libxml2-tools-2.9.12-1.2.ppc64le",
"product_id": "libxml2-tools-2.9.12-1.2.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-2-2.9.12-1.2.s390x",
"product": {
"name": "libxml2-2-2.9.12-1.2.s390x",
"product_id": "libxml2-2-2.9.12-1.2.s390x"
}
},
{
"category": "product_version",
"name": "libxml2-2-32bit-2.9.12-1.2.s390x",
"product": {
"name": "libxml2-2-32bit-2.9.12-1.2.s390x",
"product_id": "libxml2-2-32bit-2.9.12-1.2.s390x"
}
},
{
"category": "product_version",
"name": "libxml2-devel-2.9.12-1.2.s390x",
"product": {
"name": "libxml2-devel-2.9.12-1.2.s390x",
"product_id": "libxml2-devel-2.9.12-1.2.s390x"
}
},
{
"category": "product_version",
"name": "libxml2-devel-32bit-2.9.12-1.2.s390x",
"product": {
"name": "libxml2-devel-32bit-2.9.12-1.2.s390x",
"product_id": "libxml2-devel-32bit-2.9.12-1.2.s390x"
}
},
{
"category": "product_version",
"name": "libxml2-doc-2.9.12-1.2.s390x",
"product": {
"name": "libxml2-doc-2.9.12-1.2.s390x",
"product_id": "libxml2-doc-2.9.12-1.2.s390x"
}
},
{
"category": "product_version",
"name": "libxml2-tools-2.9.12-1.2.s390x",
"product": {
"name": "libxml2-tools-2.9.12-1.2.s390x",
"product_id": "libxml2-tools-2.9.12-1.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-2-2.9.12-1.2.x86_64",
"product": {
"name": "libxml2-2-2.9.12-1.2.x86_64",
"product_id": "libxml2-2-2.9.12-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "libxml2-2-32bit-2.9.12-1.2.x86_64",
"product": {
"name": "libxml2-2-32bit-2.9.12-1.2.x86_64",
"product_id": "libxml2-2-32bit-2.9.12-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "libxml2-devel-2.9.12-1.2.x86_64",
"product": {
"name": "libxml2-devel-2.9.12-1.2.x86_64",
"product_id": "libxml2-devel-2.9.12-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "libxml2-devel-32bit-2.9.12-1.2.x86_64",
"product": {
"name": "libxml2-devel-32bit-2.9.12-1.2.x86_64",
"product_id": "libxml2-devel-32bit-2.9.12-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "libxml2-doc-2.9.12-1.2.x86_64",
"product": {
"name": "libxml2-doc-2.9.12-1.2.x86_64",
"product_id": "libxml2-doc-2.9.12-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "libxml2-tools-2.9.12-1.2.x86_64",
"product": {
"name": "libxml2-tools-2.9.12-1.2.x86_64",
"product_id": "libxml2-tools-2.9.12-1.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-2-2.9.12-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64"
},
"product_reference": "libxml2-2-2.9.12-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-2-2.9.12-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le"
},
"product_reference": "libxml2-2-2.9.12-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-2-2.9.12-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x"
},
"product_reference": "libxml2-2-2.9.12-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-2-2.9.12-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64"
},
"product_reference": "libxml2-2-2.9.12-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-2-32bit-2.9.12-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64"
},
"product_reference": "libxml2-2-32bit-2.9.12-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-2-32bit-2.9.12-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le"
},
"product_reference": "libxml2-2-32bit-2.9.12-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-2-32bit-2.9.12-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x"
},
"product_reference": "libxml2-2-32bit-2.9.12-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-2-32bit-2.9.12-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64"
},
"product_reference": "libxml2-2-32bit-2.9.12-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-2.9.12-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64"
},
"product_reference": "libxml2-devel-2.9.12-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-2.9.12-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le"
},
"product_reference": "libxml2-devel-2.9.12-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-2.9.12-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x"
},
"product_reference": "libxml2-devel-2.9.12-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-2.9.12-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64"
},
"product_reference": "libxml2-devel-2.9.12-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-32bit-2.9.12-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64"
},
"product_reference": "libxml2-devel-32bit-2.9.12-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-32bit-2.9.12-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le"
},
"product_reference": "libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-32bit-2.9.12-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x"
},
"product_reference": "libxml2-devel-32bit-2.9.12-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-32bit-2.9.12-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64"
},
"product_reference": "libxml2-devel-32bit-2.9.12-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-doc-2.9.12-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64"
},
"product_reference": "libxml2-doc-2.9.12-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-doc-2.9.12-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le"
},
"product_reference": "libxml2-doc-2.9.12-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-doc-2.9.12-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x"
},
"product_reference": "libxml2-doc-2.9.12-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-doc-2.9.12-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64"
},
"product_reference": "libxml2-doc-2.9.12-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-tools-2.9.12-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64"
},
"product_reference": "libxml2-tools-2.9.12-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-tools-2.9.12-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le"
},
"product_reference": "libxml2-tools-2.9.12-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-tools-2.9.12-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x"
},
"product_reference": "libxml2-tools-2.9.12-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-tools-2.9.12-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
},
"product_reference": "libxml2-tools-2.9.12-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2007-6284",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2007-6284"
}
],
"notes": [
{
"category": "general",
"text": "The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service (infinite loop) via XML containing invalid UTF-8 sequences.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2007-6284",
"url": "https://www.suse.com/security/cve/CVE-2007-6284"
},
{
"category": "external",
"summary": "SUSE Bug 349151 for CVE-2007-6284",
"url": "https://bugzilla.suse.com/349151"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2007-6284"
},
{
"cve": "CVE-2016-4658",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4658"
}
],
"notes": [
{
"category": "general",
"text": "xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and memory corruption) via a crafted XML document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4658",
"url": "https://www.suse.com/security/cve/CVE-2016-4658"
},
{
"category": "external",
"summary": "SUSE Bug 1005544 for CVE-2016-4658",
"url": "https://bugzilla.suse.com/1005544"
},
{
"category": "external",
"summary": "SUSE Bug 1014873 for CVE-2016-4658",
"url": "https://bugzilla.suse.com/1014873"
},
{
"category": "external",
"summary": "SUSE Bug 1069433 for CVE-2016-4658",
"url": "https://bugzilla.suse.com/1069433"
},
{
"category": "external",
"summary": "SUSE Bug 1078813 for CVE-2016-4658",
"url": "https://bugzilla.suse.com/1078813"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2016-4658",
"url": "https://bugzilla.suse.com/1123919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-4658"
},
{
"cve": "CVE-2017-0663",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-0663"
}
],
"notes": [
{
"category": "general",
"text": "A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37104170.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-0663",
"url": "https://www.suse.com/security/cve/CVE-2017-0663"
},
{
"category": "external",
"summary": "SUSE Bug 1044337 for CVE-2017-0663",
"url": "https://bugzilla.suse.com/1044337"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2017-0663",
"url": "https://bugzilla.suse.com/1123919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-0663"
},
{
"cve": "CVE-2017-5969",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5969"
}
],
"notes": [
{
"category": "general",
"text": "** DISPUTED ** libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted XML document. NOTE: The maintainer states \"I would disagree of a CVE with the Recover parsing option which should only be used for manual recovery at least for XML parser.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5969",
"url": "https://www.suse.com/security/cve/CVE-2017-5969"
},
{
"category": "external",
"summary": "SUSE Bug 1024989 for CVE-2017-5969",
"url": "https://bugzilla.suse.com/1024989"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2017-5969",
"url": "https://bugzilla.suse.com/1123919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5969"
},
{
"cve": "CVE-2017-9047",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-9047"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer \u0027buf\u0027 of size \u0027size\u0027. The variable len is assigned strlen(buf). If the content-\u003etype is XML_ELEMENT_CONTENT_ELEMENT, then (i) the content-\u003eprefix is appended to buf (if it actually fits) whereupon (ii) content-\u003ename is written to the buffer. However, the check for whether the content-\u003ename actually fits also uses \u0027len\u0027 rather than the updated buffer length strlen(buf). This allows us to write about \"size\" many bytes beyond the allocated memory. This vulnerability causes programs that use libxml2, such as PHP, to crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-9047",
"url": "https://www.suse.com/security/cve/CVE-2017-9047"
},
{
"category": "external",
"summary": "SUSE Bug 1039063 for CVE-2017-9047",
"url": "https://bugzilla.suse.com/1039063"
},
{
"category": "external",
"summary": "SUSE Bug 1039066 for CVE-2017-9047",
"url": "https://bugzilla.suse.com/1039066"
},
{
"category": "external",
"summary": "SUSE Bug 1039657 for CVE-2017-9047",
"url": "https://bugzilla.suse.com/1039657"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2017-9047",
"url": "https://bugzilla.suse.com/1123919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-9047"
},
{
"cve": "CVE-2017-9048",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-9048"
}
],
"notes": [
{
"category": "general",
"text": "libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer \u0027buf\u0027 of size \u0027size\u0027. At the end of the routine, the function may strcat two more characters without checking whether the current strlen(buf) + 2 \u003c size. This vulnerability causes programs that use libxml2, such as PHP, to crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-9048",
"url": "https://www.suse.com/security/cve/CVE-2017-9048"
},
{
"category": "external",
"summary": "SUSE Bug 1039064 for CVE-2017-9048",
"url": "https://bugzilla.suse.com/1039064"
},
{
"category": "external",
"summary": "SUSE Bug 1039066 for CVE-2017-9048",
"url": "https://bugzilla.suse.com/1039066"
},
{
"category": "external",
"summary": "SUSE Bug 1039658 for CVE-2017-9048",
"url": "https://bugzilla.suse.com/1039658"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-9048"
},
{
"cve": "CVE-2017-9049",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-9049"
}
],
"notes": [
{
"category": "general",
"text": "libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for libxml2 Bug 759398.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-9049",
"url": "https://www.suse.com/security/cve/CVE-2017-9049"
},
{
"category": "external",
"summary": "SUSE Bug 1039063 for CVE-2017-9049",
"url": "https://bugzilla.suse.com/1039063"
},
{
"category": "external",
"summary": "SUSE Bug 1039064 for CVE-2017-9049",
"url": "https://bugzilla.suse.com/1039064"
},
{
"category": "external",
"summary": "SUSE Bug 1039066 for CVE-2017-9049",
"url": "https://bugzilla.suse.com/1039066"
},
{
"category": "external",
"summary": "SUSE Bug 1039659 for CVE-2017-9049",
"url": "https://bugzilla.suse.com/1039659"
},
{
"category": "external",
"summary": "SUSE Bug 1039661 for CVE-2017-9049",
"url": "https://bugzilla.suse.com/1039661"
},
{
"category": "external",
"summary": "SUSE Bug 1069690 for CVE-2017-9049",
"url": "https://bugzilla.suse.com/1069690"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2017-9049",
"url": "https://bugzilla.suse.com/1123919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-9049"
},
{
"cve": "CVE-2018-14404",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-14404"
}
],
"notes": [
{
"category": "general",
"text": "A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression in the XPATH_OP_AND or XPATH_OP_OR case. Applications processing untrusted XSL format inputs with the use of the libxml2 library may be vulnerable to a denial of service attack due to a crash of the application.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-14404",
"url": "https://www.suse.com/security/cve/CVE-2018-14404"
},
{
"category": "external",
"summary": "SUSE Bug 1102046 for CVE-2018-14404",
"url": "https://bugzilla.suse.com/1102046"
},
{
"category": "external",
"summary": "SUSE Bug 1148896 for CVE-2018-14404",
"url": "https://bugzilla.suse.com/1148896"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-14404"
},
{
"cve": "CVE-2018-9251",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-9251"
}
],
"notes": [
{
"category": "general",
"text": "The xz_decomp function in xzlib.c in libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint, a different vulnerability than CVE-2015-8035.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-9251",
"url": "https://www.suse.com/security/cve/CVE-2018-9251"
},
{
"category": "external",
"summary": "SUSE Bug 1088279 for CVE-2018-9251",
"url": "https://bugzilla.suse.com/1088279"
},
{
"category": "external",
"summary": "SUSE Bug 1088601 for CVE-2018-9251",
"url": "https://bugzilla.suse.com/1088601"
},
{
"category": "external",
"summary": "SUSE Bug 1105166 for CVE-2018-9251",
"url": "https://bugzilla.suse.com/1105166"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-9251"
},
{
"cve": "CVE-2019-19956",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-19956"
}
],
"notes": [
{
"category": "general",
"text": "xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc-\u003eoldNs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-19956",
"url": "https://www.suse.com/security/cve/CVE-2019-19956"
},
{
"category": "external",
"summary": "SUSE Bug 1159928 for CVE-2019-19956",
"url": "https://bugzilla.suse.com/1159928"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2019-19956",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-19956"
},
{
"cve": "CVE-2019-20388",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-20388"
}
],
"notes": [
{
"category": "general",
"text": "xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-20388",
"url": "https://www.suse.com/security/cve/CVE-2019-20388"
},
{
"category": "external",
"summary": "SUSE Bug 1161521 for CVE-2019-20388",
"url": "https://bugzilla.suse.com/1161521"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2019-20388",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-20388"
},
{
"cve": "CVE-2020-24977",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-24977"
}
],
"notes": [
{
"category": "general",
"text": "GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-24977",
"url": "https://www.suse.com/security/cve/CVE-2020-24977"
},
{
"category": "external",
"summary": "SUSE Bug 1176179 for CVE-2020-24977",
"url": "https://bugzilla.suse.com/1176179"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2020-24977",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-24977"
},
{
"cve": "CVE-2020-7595",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-7595"
}
],
"notes": [
{
"category": "general",
"text": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-7595",
"url": "https://www.suse.com/security/cve/CVE-2020-7595"
},
{
"category": "external",
"summary": "SUSE Bug 1161517 for CVE-2020-7595",
"url": "https://bugzilla.suse.com/1161517"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2020-7595",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-7595"
},
{
"cve": "CVE-2021-3516",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3516"
}
],
"notes": [
{
"category": "general",
"text": "There\u0027s a flaw in libxml2\u0027s xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-after-free. The greatest impact of this flaw is to confidentiality, integrity, and availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3516",
"url": "https://www.suse.com/security/cve/CVE-2021-3516"
},
{
"category": "external",
"summary": "SUSE Bug 1185409 for CVE-2021-3516",
"url": "https://bugzilla.suse.com/1185409"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2021-3516",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3516"
},
{
"cve": "CVE-2021-3517",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3517"
}
],
"notes": [
{
"category": "general",
"text": "There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3517",
"url": "https://www.suse.com/security/cve/CVE-2021-3517"
},
{
"category": "external",
"summary": "SUSE Bug 1185410 for CVE-2021-3517",
"url": "https://bugzilla.suse.com/1185410"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2021-3517",
"url": "https://bugzilla.suse.com/1191860"
},
{
"category": "external",
"summary": "SUSE Bug 1194438 for CVE-2021-3517",
"url": "https://bugzilla.suse.com/1194438"
},
{
"category": "external",
"summary": "SUSE Bug 1196383 for CVE-2021-3517",
"url": "https://bugzilla.suse.com/1196383"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-3517"
},
{
"cve": "CVE-2021-3518",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3518"
}
],
"notes": [
{
"category": "general",
"text": "There\u0027s a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3518",
"url": "https://www.suse.com/security/cve/CVE-2021-3518"
},
{
"category": "external",
"summary": "SUSE Bug 1185408 for CVE-2021-3518",
"url": "https://bugzilla.suse.com/1185408"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2021-3518",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3518"
},
{
"cve": "CVE-2021-3537",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3537"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest threat from this vulnerability is to system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3537",
"url": "https://www.suse.com/security/cve/CVE-2021-3537"
},
{
"category": "external",
"summary": "SUSE Bug 1185698 for CVE-2021-3537",
"url": "https://bugzilla.suse.com/1185698"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-3537"
},
{
"cve": "CVE-2021-3541",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3541"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3541",
"url": "https://www.suse.com/security/cve/CVE-2021-3541"
},
{
"category": "external",
"summary": "SUSE Bug 1186015 for CVE-2021-3541",
"url": "https://bugzilla.suse.com/1186015"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-2-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-devel-32bit-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-doc-2.9.12-1.2.x86_64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.aarch64",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.ppc64le",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.s390x",
"openSUSE Tumbleweed:libxml2-tools-2.9.12-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3541"
}
]
}
opensuse-su-2024:11340-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
ruby2.7-rubygem-nokogiri-1.12.3-1.2 on GA media
Notes
Title of the patch
ruby2.7-rubygem-nokogiri-1.12.3-1.2 on GA media
Description of the patch
These are all security issues fixed in the ruby2.7-rubygem-nokogiri-1.12.3-1.2 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-11340
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "ruby2.7-rubygem-nokogiri-1.12.3-1.2 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the ruby2.7-rubygem-nokogiri-1.12.3-1.2 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-11340",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_11340-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2877 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2877/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0191 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0191/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1819 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1819/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5312 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5312/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7497 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7497/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7498 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7498/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7499 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7499/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7500 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7500/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7941 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7941/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7942 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7942/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7995 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7995/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8035 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8035/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8241 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8241/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8242 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8242/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8317 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8317/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4658 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4658/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4738 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4738/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5131 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5131/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15412 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15412/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5029 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5029/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-14404 page",
"url": "https://www.suse.com/security/cve/CVE-2018-14404/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-8048 page",
"url": "https://www.suse.com/security/cve/CVE-2018-8048/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11068 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11068/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-20388 page",
"url": "https://www.suse.com/security/cve/CVE-2019-20388/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5477 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5477/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-24977 page",
"url": "https://www.suse.com/security/cve/CVE-2020-24977/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-7595 page",
"url": "https://www.suse.com/security/cve/CVE-2020-7595/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3516 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3516/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3517 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3517/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3518 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3518/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3537 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3537/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3541 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3541/"
}
],
"title": "ruby2.7-rubygem-nokogiri-1.12.3-1.2 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:11340-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"product": {
"name": "ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"product_id": "ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"product": {
"name": "ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"product_id": "ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"product": {
"name": "ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"product_id": "ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"product": {
"name": "ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"product_id": "ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"product": {
"name": "ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"product_id": "ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x"
}
},
{
"category": "product_version",
"name": "ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"product": {
"name": "ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"product_id": "ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"product": {
"name": "ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"product_id": "ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64",
"product": {
"name": "ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64",
"product_id": "ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64"
},
"product_reference": "ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le"
},
"product_reference": "ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x"
},
"product_reference": "ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64"
},
"product_reference": "ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64"
},
"product_reference": "ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le"
},
"product_reference": "ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x"
},
"product_reference": "ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
},
"product_reference": "ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2013-2877",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2877"
}
],
"notes": [
{
"category": "general",
"text": "parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a document that ends abruptly, related to the lack of certain checks for the XML_PARSER_EOF state.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2877",
"url": "https://www.suse.com/security/cve/CVE-2013-2877"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2013-2877",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 828893 for CVE-2013-2877",
"url": "https://bugzilla.suse.com/828893"
},
{
"category": "external",
"summary": "SUSE Bug 829077 for CVE-2013-2877",
"url": "https://bugzilla.suse.com/829077"
},
{
"category": "external",
"summary": "SUSE Bug 854869 for CVE-2013-2877",
"url": "https://bugzilla.suse.com/854869"
},
{
"category": "external",
"summary": "SUSE Bug 877506 for CVE-2013-2877",
"url": "https://bugzilla.suse.com/877506"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2013-2877"
},
{
"cve": "CVE-2014-0191",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0191"
}
],
"notes": [
{
"category": "general",
"text": "The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Server in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 and other products, loads external parameter entities regardless of whether entity substitution or validation is enabled, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XML document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0191",
"url": "https://www.suse.com/security/cve/CVE-2014-0191"
},
{
"category": "external",
"summary": "SUSE Bug 1014873 for CVE-2014-0191",
"url": "https://bugzilla.suse.com/1014873"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2014-0191",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 876652 for CVE-2014-0191",
"url": "https://bugzilla.suse.com/876652"
},
{
"category": "external",
"summary": "SUSE Bug 877506 for CVE-2014-0191",
"url": "https://bugzilla.suse.com/877506"
},
{
"category": "external",
"summary": "SUSE Bug 996079 for CVE-2014-0191",
"url": "https://bugzilla.suse.com/996079"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-0191"
},
{
"cve": "CVE-2015-1819",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1819"
}
],
"notes": [
{
"category": "general",
"text": "The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1819",
"url": "https://www.suse.com/security/cve/CVE-2015-1819"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-1819",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 928193 for CVE-2015-1819",
"url": "https://bugzilla.suse.com/928193"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-1819",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-1819"
},
{
"cve": "CVE-2015-5312",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5312"
}
],
"notes": [
{
"category": "general",
"text": "The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data, a different vulnerability than CVE-2014-3660.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5312",
"url": "https://www.suse.com/security/cve/CVE-2015-5312"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-5312",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 957105 for CVE-2015-5312",
"url": "https://bugzilla.suse.com/957105"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-5312",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-5312",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-5312"
},
{
"cve": "CVE-2015-7497",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7497"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7497",
"url": "https://www.suse.com/security/cve/CVE-2015-7497"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-7497",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 957106 for CVE-2015-7497",
"url": "https://bugzilla.suse.com/957106"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-7497",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-7497",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-7497"
},
{
"cve": "CVE-2015-7498",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7498"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors related to extracting errors after an encoding conversion failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7498",
"url": "https://www.suse.com/security/cve/CVE-2015-7498"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-7498",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 957107 for CVE-2015-7498",
"url": "https://bugzilla.suse.com/957107"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-7498",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-7498",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-7498"
},
{
"cve": "CVE-2015-7499",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7499"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7499",
"url": "https://www.suse.com/security/cve/CVE-2015-7499"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-7499",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 957109 for CVE-2015-7499",
"url": "https://bugzilla.suse.com/957109"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-7499",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-7499",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-7499"
},
{
"cve": "CVE-2015-7500",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7500"
}
],
"notes": [
{
"category": "general",
"text": "The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via unspecified vectors related to incorrect entities boundaries and start tags.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7500",
"url": "https://www.suse.com/security/cve/CVE-2015-7500"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-7500",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 957110 for CVE-2015-7500",
"url": "https://bugzilla.suse.com/957110"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-7500",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-7500",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-7500"
},
{
"cve": "CVE-2015-7941",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7941"
}
],
"notes": [
{
"category": "general",
"text": "libxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and libxml2 crash) via crafted XML data to the (1) xmlParseEntityDecl or (2) xmlParseConditionalSections function in parser.c, as demonstrated by non-terminated entities.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7941",
"url": "https://www.suse.com/security/cve/CVE-2015-7941"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-7941",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 951734 for CVE-2015-7941",
"url": "https://bugzilla.suse.com/951734"
},
{
"category": "external",
"summary": "SUSE Bug 951735 for CVE-2015-7941",
"url": "https://bugzilla.suse.com/951735"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-7941",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-7941"
},
{
"cve": "CVE-2015-7942",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7942"
}
],
"notes": [
{
"category": "general",
"text": "The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different vulnerability than CVE-2015-7941.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7942",
"url": "https://www.suse.com/security/cve/CVE-2015-7942"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-7942",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 951735 for CVE-2015-7942",
"url": "https://bugzilla.suse.com/951735"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-7942",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-7942"
},
{
"cve": "CVE-2015-7995",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7995"
}
],
"notes": [
{
"category": "general",
"text": "The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a \"type confusion\" issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7995",
"url": "https://www.suse.com/security/cve/CVE-2015-7995"
},
{
"category": "external",
"summary": "SUSE Bug 1123130 for CVE-2015-7995",
"url": "https://bugzilla.suse.com/1123130"
},
{
"category": "external",
"summary": "SUSE Bug 952474 for CVE-2015-7995",
"url": "https://bugzilla.suse.com/952474"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-7995"
},
{
"cve": "CVE-2015-8035",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8035"
}
],
"notes": [
{
"category": "general",
"text": "The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-dependent attackers to cause a denial of service (process hang) via crafted XML data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8035",
"url": "https://www.suse.com/security/cve/CVE-2015-8035"
},
{
"category": "external",
"summary": "SUSE Bug 1088279 for CVE-2015-8035",
"url": "https://bugzilla.suse.com/1088279"
},
{
"category": "external",
"summary": "SUSE Bug 1105166 for CVE-2015-8035",
"url": "https://bugzilla.suse.com/1105166"
},
{
"category": "external",
"summary": "SUSE Bug 954429 for CVE-2015-8035",
"url": "https://bugzilla.suse.com/954429"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-8035"
},
{
"cve": "CVE-2015-8241",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8241"
}
],
"notes": [
{
"category": "general",
"text": "The xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context-dependent attackers to cause a denial of service (heap-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8241",
"url": "https://www.suse.com/security/cve/CVE-2015-8241"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-8241",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 956018 for CVE-2015-8241",
"url": "https://bugzilla.suse.com/956018"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-8241",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-8241",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-8241"
},
{
"cve": "CVE-2015-8242",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8242"
}
],
"notes": [
{
"category": "general",
"text": "The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (stack-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8242",
"url": "https://www.suse.com/security/cve/CVE-2015-8242"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-8242",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 956021 for CVE-2015-8242",
"url": "https://bugzilla.suse.com/956021"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-8242",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-8242",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-8242"
},
{
"cve": "CVE-2015-8317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8317"
}
],
"notes": [
{
"category": "general",
"text": "The xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive information via an (1) unterminated encoding value or (2) incomplete XML declaration in XML data, which triggers an out-of-bounds heap read.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8317",
"url": "https://www.suse.com/security/cve/CVE-2015-8317"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-8317",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 956260 for CVE-2015-8317",
"url": "https://bugzilla.suse.com/956260"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-8317",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-8317",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-8317"
},
{
"cve": "CVE-2016-4658",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4658"
}
],
"notes": [
{
"category": "general",
"text": "xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and memory corruption) via a crafted XML document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4658",
"url": "https://www.suse.com/security/cve/CVE-2016-4658"
},
{
"category": "external",
"summary": "SUSE Bug 1005544 for CVE-2016-4658",
"url": "https://bugzilla.suse.com/1005544"
},
{
"category": "external",
"summary": "SUSE Bug 1014873 for CVE-2016-4658",
"url": "https://bugzilla.suse.com/1014873"
},
{
"category": "external",
"summary": "SUSE Bug 1069433 for CVE-2016-4658",
"url": "https://bugzilla.suse.com/1069433"
},
{
"category": "external",
"summary": "SUSE Bug 1078813 for CVE-2016-4658",
"url": "https://bugzilla.suse.com/1078813"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2016-4658",
"url": "https://bugzilla.suse.com/1123919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-4658"
},
{
"cve": "CVE-2016-4738",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4738"
}
],
"notes": [
{
"category": "general",
"text": "libxslt in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4738",
"url": "https://www.suse.com/security/cve/CVE-2016-4738"
},
{
"category": "external",
"summary": "SUSE Bug 1005591 for CVE-2016-4738",
"url": "https://bugzilla.suse.com/1005591"
},
{
"category": "external",
"summary": "SUSE Bug 1123130 for CVE-2016-4738",
"url": "https://bugzilla.suse.com/1123130"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-4738"
},
{
"cve": "CVE-2016-5131",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5131"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5131",
"url": "https://www.suse.com/security/cve/CVE-2016-5131"
},
{
"category": "external",
"summary": "SUSE Bug 1014873 for CVE-2016-5131",
"url": "https://bugzilla.suse.com/1014873"
},
{
"category": "external",
"summary": "SUSE Bug 1069433 for CVE-2016-5131",
"url": "https://bugzilla.suse.com/1069433"
},
{
"category": "external",
"summary": "SUSE Bug 1078813 for CVE-2016-5131",
"url": "https://bugzilla.suse.com/1078813"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2016-5131",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 989901 for CVE-2016-5131",
"url": "https://bugzilla.suse.com/989901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5131"
},
{
"cve": "CVE-2017-15412",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15412"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15412",
"url": "https://www.suse.com/security/cve/CVE-2017-15412"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15412",
"url": "https://bugzilla.suse.com/1071691"
},
{
"category": "external",
"summary": "SUSE Bug 1077993 for CVE-2017-15412",
"url": "https://bugzilla.suse.com/1077993"
},
{
"category": "external",
"summary": "SUSE Bug 1123129 for CVE-2017-15412",
"url": "https://bugzilla.suse.com/1123129"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2017-15412",
"url": "https://bugzilla.suse.com/1123919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15412"
},
{
"cve": "CVE-2017-5029",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5029"
}
],
"notes": [
{
"category": "general",
"text": "The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5029",
"url": "https://www.suse.com/security/cve/CVE-2017-5029"
},
{
"category": "external",
"summary": "SUSE Bug 1028848 for CVE-2017-5029",
"url": "https://bugzilla.suse.com/1028848"
},
{
"category": "external",
"summary": "SUSE Bug 1028875 for CVE-2017-5029",
"url": "https://bugzilla.suse.com/1028875"
},
{
"category": "external",
"summary": "SUSE Bug 1035905 for CVE-2017-5029",
"url": "https://bugzilla.suse.com/1035905"
},
{
"category": "external",
"summary": "SUSE Bug 1123130 for CVE-2017-5029",
"url": "https://bugzilla.suse.com/1123130"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2017-5029"
},
{
"cve": "CVE-2018-14404",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-14404"
}
],
"notes": [
{
"category": "general",
"text": "A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression in the XPATH_OP_AND or XPATH_OP_OR case. Applications processing untrusted XSL format inputs with the use of the libxml2 library may be vulnerable to a denial of service attack due to a crash of the application.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-14404",
"url": "https://www.suse.com/security/cve/CVE-2018-14404"
},
{
"category": "external",
"summary": "SUSE Bug 1102046 for CVE-2018-14404",
"url": "https://bugzilla.suse.com/1102046"
},
{
"category": "external",
"summary": "SUSE Bug 1148896 for CVE-2018-14404",
"url": "https://bugzilla.suse.com/1148896"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-14404"
},
{
"cve": "CVE-2018-8048",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-8048"
}
],
"notes": [
{
"category": "general",
"text": "In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-8048",
"url": "https://www.suse.com/security/cve/CVE-2018-8048"
},
{
"category": "external",
"summary": "SUSE Bug 1085967 for CVE-2018-8048",
"url": "https://bugzilla.suse.com/1085967"
},
{
"category": "external",
"summary": "SUSE Bug 1086598 for CVE-2018-8048",
"url": "https://bugzilla.suse.com/1086598"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-8048"
},
{
"cve": "CVE-2019-11068",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11068"
}
],
"notes": [
{
"category": "general",
"text": "libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11068",
"url": "https://www.suse.com/security/cve/CVE-2019-11068"
},
{
"category": "external",
"summary": "SUSE Bug 1132160 for CVE-2019-11068",
"url": "https://bugzilla.suse.com/1132160"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-11068",
"url": "https://bugzilla.suse.com/1154212"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-11068"
},
{
"cve": "CVE-2019-20388",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-20388"
}
],
"notes": [
{
"category": "general",
"text": "xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-20388",
"url": "https://www.suse.com/security/cve/CVE-2019-20388"
},
{
"category": "external",
"summary": "SUSE Bug 1161521 for CVE-2019-20388",
"url": "https://bugzilla.suse.com/1161521"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2019-20388",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-20388"
},
{
"cve": "CVE-2019-5477",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5477"
}
],
"notes": [
{
"category": "general",
"text": "A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby\u0027s `Kernel.open` method. Processes are vulnerable only if the undocumented method `Nokogiri::CSS::Tokenizer#load_file` is being called with unsafe user input as the filename. This vulnerability appears in code generated by the Rexical gem versions v1.0.6 and earlier. Rexical is used by Nokogiri to generate lexical scanner code for parsing CSS queries. The underlying vulnerability was addressed in Rexical v1.0.7 and Nokogiri upgraded to this version of Rexical in Nokogiri v1.10.4.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5477",
"url": "https://www.suse.com/security/cve/CVE-2019-5477"
},
{
"category": "external",
"summary": "SUSE Bug 1146578 for CVE-2019-5477",
"url": "https://bugzilla.suse.com/1146578"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5477"
},
{
"cve": "CVE-2020-24977",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-24977"
}
],
"notes": [
{
"category": "general",
"text": "GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-24977",
"url": "https://www.suse.com/security/cve/CVE-2020-24977"
},
{
"category": "external",
"summary": "SUSE Bug 1176179 for CVE-2020-24977",
"url": "https://bugzilla.suse.com/1176179"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2020-24977",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-24977"
},
{
"cve": "CVE-2020-7595",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-7595"
}
],
"notes": [
{
"category": "general",
"text": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-7595",
"url": "https://www.suse.com/security/cve/CVE-2020-7595"
},
{
"category": "external",
"summary": "SUSE Bug 1161517 for CVE-2020-7595",
"url": "https://bugzilla.suse.com/1161517"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2020-7595",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-7595"
},
{
"cve": "CVE-2021-3516",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3516"
}
],
"notes": [
{
"category": "general",
"text": "There\u0027s a flaw in libxml2\u0027s xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-after-free. The greatest impact of this flaw is to confidentiality, integrity, and availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3516",
"url": "https://www.suse.com/security/cve/CVE-2021-3516"
},
{
"category": "external",
"summary": "SUSE Bug 1185409 for CVE-2021-3516",
"url": "https://bugzilla.suse.com/1185409"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2021-3516",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3516"
},
{
"cve": "CVE-2021-3517",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3517"
}
],
"notes": [
{
"category": "general",
"text": "There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3517",
"url": "https://www.suse.com/security/cve/CVE-2021-3517"
},
{
"category": "external",
"summary": "SUSE Bug 1185410 for CVE-2021-3517",
"url": "https://bugzilla.suse.com/1185410"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2021-3517",
"url": "https://bugzilla.suse.com/1191860"
},
{
"category": "external",
"summary": "SUSE Bug 1194438 for CVE-2021-3517",
"url": "https://bugzilla.suse.com/1194438"
},
{
"category": "external",
"summary": "SUSE Bug 1196383 for CVE-2021-3517",
"url": "https://bugzilla.suse.com/1196383"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-3517"
},
{
"cve": "CVE-2021-3518",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3518"
}
],
"notes": [
{
"category": "general",
"text": "There\u0027s a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3518",
"url": "https://www.suse.com/security/cve/CVE-2021-3518"
},
{
"category": "external",
"summary": "SUSE Bug 1185408 for CVE-2021-3518",
"url": "https://bugzilla.suse.com/1185408"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2021-3518",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3518"
},
{
"cve": "CVE-2021-3537",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3537"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest threat from this vulnerability is to system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3537",
"url": "https://www.suse.com/security/cve/CVE-2021-3537"
},
{
"category": "external",
"summary": "SUSE Bug 1185698 for CVE-2021-3537",
"url": "https://bugzilla.suse.com/1185698"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-3537"
},
{
"cve": "CVE-2021-3541",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3541"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3541",
"url": "https://www.suse.com/security/cve/CVE-2021-3541"
},
{
"category": "external",
"summary": "SUSE Bug 1186015 for CVE-2021-3541",
"url": "https://bugzilla.suse.com/1186015"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby2.7-rubygem-nokogiri-1.12.3-1.2.x86_64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.aarch64",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.ppc64le",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.s390x",
"openSUSE Tumbleweed:ruby3.0-rubygem-nokogiri-1.12.3-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3541"
}
]
}
opensuse-su-2025:14697-1
Vulnerability from csaf_opensuse
Published
2025-01-25 00:00
Modified
2025-01-25 00:00
Summary
ruby3.4-rubygem-nokogiri-1.18.2-1.1 on GA media
Notes
Title of the patch
ruby3.4-rubygem-nokogiri-1.18.2-1.1 on GA media
Description of the patch
These are all security issues fixed in the ruby3.4-rubygem-nokogiri-1.18.2-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2025-14697
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "ruby3.4-rubygem-nokogiri-1.18.2-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the ruby3.4-rubygem-nokogiri-1.18.2-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2025-14697",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_14697-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2025:14697-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/U5YNW74OL2W7SH2XTAVN5TODNFIVFL3Y/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2025:14697-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/U5YNW74OL2W7SH2XTAVN5TODNFIVFL3Y/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2877 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2877/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0191 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0191/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1819 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1819/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5312 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5312/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7497 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7497/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7498 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7498/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7499 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7499/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7500 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7500/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7941 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7941/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7942 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7942/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7995 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7995/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8035 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8035/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8241 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8241/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8242 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8242/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8317 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8317/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4658 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4658/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4738 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4738/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5131 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5131/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15412 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15412/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5029 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5029/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-14404 page",
"url": "https://www.suse.com/security/cve/CVE-2018-14404/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-25032 page",
"url": "https://www.suse.com/security/cve/CVE-2018-25032/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-8048 page",
"url": "https://www.suse.com/security/cve/CVE-2018-8048/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11068 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11068/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-20388 page",
"url": "https://www.suse.com/security/cve/CVE-2019-20388/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5477 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5477/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-24977 page",
"url": "https://www.suse.com/security/cve/CVE-2020-24977/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-7595 page",
"url": "https://www.suse.com/security/cve/CVE-2020-7595/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30560 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30560/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3516 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3516/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3517 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3517/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3518 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3518/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3537 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3537/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3541 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3541/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-41098 page",
"url": "https://www.suse.com/security/cve/CVE-2021-41098/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-23308 page",
"url": "https://www.suse.com/security/cve/CVE-2022-23308/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-23437 page",
"url": "https://www.suse.com/security/cve/CVE-2022-23437/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-23476 page",
"url": "https://www.suse.com/security/cve/CVE-2022-23476/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-24836 page",
"url": "https://www.suse.com/security/cve/CVE-2022-24836/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-24839 page",
"url": "https://www.suse.com/security/cve/CVE-2022-24839/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-29181 page",
"url": "https://www.suse.com/security/cve/CVE-2022-29181/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-29824 page",
"url": "https://www.suse.com/security/cve/CVE-2022-29824/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-34169 page",
"url": "https://www.suse.com/security/cve/CVE-2022-34169/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-29469 page",
"url": "https://www.suse.com/security/cve/CVE-2023-29469/"
}
],
"title": "ruby3.4-rubygem-nokogiri-1.18.2-1.1 on GA media",
"tracking": {
"current_release_date": "2025-01-25T00:00:00Z",
"generator": {
"date": "2025-01-25T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2025:14697-1",
"initial_release_date": "2025-01-25T00:00:00Z",
"revision_history": [
{
"date": "2025-01-25T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"product": {
"name": "ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"product_id": "ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"product": {
"name": "ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"product_id": "ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"product": {
"name": "ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"product_id": "ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64",
"product": {
"name": "ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64",
"product_id": "ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64"
},
"product_reference": "ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le"
},
"product_reference": "ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x"
},
"product_reference": "ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
},
"product_reference": "ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2013-2877",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2877"
}
],
"notes": [
{
"category": "general",
"text": "parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a document that ends abruptly, related to the lack of certain checks for the XML_PARSER_EOF state.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2877",
"url": "https://www.suse.com/security/cve/CVE-2013-2877"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2013-2877",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 828893 for CVE-2013-2877",
"url": "https://bugzilla.suse.com/828893"
},
{
"category": "external",
"summary": "SUSE Bug 829077 for CVE-2013-2877",
"url": "https://bugzilla.suse.com/829077"
},
{
"category": "external",
"summary": "SUSE Bug 854869 for CVE-2013-2877",
"url": "https://bugzilla.suse.com/854869"
},
{
"category": "external",
"summary": "SUSE Bug 877506 for CVE-2013-2877",
"url": "https://bugzilla.suse.com/877506"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2013-2877"
},
{
"cve": "CVE-2014-0191",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0191"
}
],
"notes": [
{
"category": "general",
"text": "The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Server in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 and other products, loads external parameter entities regardless of whether entity substitution or validation is enabled, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XML document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0191",
"url": "https://www.suse.com/security/cve/CVE-2014-0191"
},
{
"category": "external",
"summary": "SUSE Bug 1014873 for CVE-2014-0191",
"url": "https://bugzilla.suse.com/1014873"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2014-0191",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 876652 for CVE-2014-0191",
"url": "https://bugzilla.suse.com/876652"
},
{
"category": "external",
"summary": "SUSE Bug 877506 for CVE-2014-0191",
"url": "https://bugzilla.suse.com/877506"
},
{
"category": "external",
"summary": "SUSE Bug 996079 for CVE-2014-0191",
"url": "https://bugzilla.suse.com/996079"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-0191"
},
{
"cve": "CVE-2015-1819",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1819"
}
],
"notes": [
{
"category": "general",
"text": "The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1819",
"url": "https://www.suse.com/security/cve/CVE-2015-1819"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-1819",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 928193 for CVE-2015-1819",
"url": "https://bugzilla.suse.com/928193"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-1819",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-1819"
},
{
"cve": "CVE-2015-5312",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5312"
}
],
"notes": [
{
"category": "general",
"text": "The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data, a different vulnerability than CVE-2014-3660.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5312",
"url": "https://www.suse.com/security/cve/CVE-2015-5312"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-5312",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 957105 for CVE-2015-5312",
"url": "https://bugzilla.suse.com/957105"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-5312",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-5312",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-5312"
},
{
"cve": "CVE-2015-7497",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7497"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7497",
"url": "https://www.suse.com/security/cve/CVE-2015-7497"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-7497",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 957106 for CVE-2015-7497",
"url": "https://bugzilla.suse.com/957106"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-7497",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-7497",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-7497"
},
{
"cve": "CVE-2015-7498",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7498"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors related to extracting errors after an encoding conversion failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7498",
"url": "https://www.suse.com/security/cve/CVE-2015-7498"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-7498",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 957107 for CVE-2015-7498",
"url": "https://bugzilla.suse.com/957107"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-7498",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-7498",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-7498"
},
{
"cve": "CVE-2015-7499",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7499"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7499",
"url": "https://www.suse.com/security/cve/CVE-2015-7499"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-7499",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 957109 for CVE-2015-7499",
"url": "https://bugzilla.suse.com/957109"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-7499",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-7499",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-7499"
},
{
"cve": "CVE-2015-7500",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7500"
}
],
"notes": [
{
"category": "general",
"text": "The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via unspecified vectors related to incorrect entities boundaries and start tags.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7500",
"url": "https://www.suse.com/security/cve/CVE-2015-7500"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-7500",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 957110 for CVE-2015-7500",
"url": "https://bugzilla.suse.com/957110"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-7500",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-7500",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-7500"
},
{
"cve": "CVE-2015-7941",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7941"
}
],
"notes": [
{
"category": "general",
"text": "libxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and libxml2 crash) via crafted XML data to the (1) xmlParseEntityDecl or (2) xmlParseConditionalSections function in parser.c, as demonstrated by non-terminated entities.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7941",
"url": "https://www.suse.com/security/cve/CVE-2015-7941"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-7941",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 951734 for CVE-2015-7941",
"url": "https://bugzilla.suse.com/951734"
},
{
"category": "external",
"summary": "SUSE Bug 951735 for CVE-2015-7941",
"url": "https://bugzilla.suse.com/951735"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-7941",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-7941"
},
{
"cve": "CVE-2015-7942",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7942"
}
],
"notes": [
{
"category": "general",
"text": "The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different vulnerability than CVE-2015-7941.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7942",
"url": "https://www.suse.com/security/cve/CVE-2015-7942"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-7942",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 951735 for CVE-2015-7942",
"url": "https://bugzilla.suse.com/951735"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-7942",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-7942"
},
{
"cve": "CVE-2015-7995",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7995"
}
],
"notes": [
{
"category": "general",
"text": "The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a \"type confusion\" issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7995",
"url": "https://www.suse.com/security/cve/CVE-2015-7995"
},
{
"category": "external",
"summary": "SUSE Bug 1123130 for CVE-2015-7995",
"url": "https://bugzilla.suse.com/1123130"
},
{
"category": "external",
"summary": "SUSE Bug 952474 for CVE-2015-7995",
"url": "https://bugzilla.suse.com/952474"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-7995"
},
{
"cve": "CVE-2015-8035",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8035"
}
],
"notes": [
{
"category": "general",
"text": "The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-dependent attackers to cause a denial of service (process hang) via crafted XML data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8035",
"url": "https://www.suse.com/security/cve/CVE-2015-8035"
},
{
"category": "external",
"summary": "SUSE Bug 1088279 for CVE-2015-8035",
"url": "https://bugzilla.suse.com/1088279"
},
{
"category": "external",
"summary": "SUSE Bug 1105166 for CVE-2015-8035",
"url": "https://bugzilla.suse.com/1105166"
},
{
"category": "external",
"summary": "SUSE Bug 954429 for CVE-2015-8035",
"url": "https://bugzilla.suse.com/954429"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-8035"
},
{
"cve": "CVE-2015-8241",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8241"
}
],
"notes": [
{
"category": "general",
"text": "The xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context-dependent attackers to cause a denial of service (heap-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8241",
"url": "https://www.suse.com/security/cve/CVE-2015-8241"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-8241",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 956018 for CVE-2015-8241",
"url": "https://bugzilla.suse.com/956018"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-8241",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-8241",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-8241"
},
{
"cve": "CVE-2015-8242",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8242"
}
],
"notes": [
{
"category": "general",
"text": "The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (stack-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8242",
"url": "https://www.suse.com/security/cve/CVE-2015-8242"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-8242",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 956021 for CVE-2015-8242",
"url": "https://bugzilla.suse.com/956021"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-8242",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-8242",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-8242"
},
{
"cve": "CVE-2015-8317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8317"
}
],
"notes": [
{
"category": "general",
"text": "The xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive information via an (1) unterminated encoding value or (2) incomplete XML declaration in XML data, which triggers an out-of-bounds heap read.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8317",
"url": "https://www.suse.com/security/cve/CVE-2015-8317"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-8317",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 956260 for CVE-2015-8317",
"url": "https://bugzilla.suse.com/956260"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-8317",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-8317",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-8317"
},
{
"cve": "CVE-2016-4658",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4658"
}
],
"notes": [
{
"category": "general",
"text": "xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and memory corruption) via a crafted XML document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4658",
"url": "https://www.suse.com/security/cve/CVE-2016-4658"
},
{
"category": "external",
"summary": "SUSE Bug 1005544 for CVE-2016-4658",
"url": "https://bugzilla.suse.com/1005544"
},
{
"category": "external",
"summary": "SUSE Bug 1014873 for CVE-2016-4658",
"url": "https://bugzilla.suse.com/1014873"
},
{
"category": "external",
"summary": "SUSE Bug 1069433 for CVE-2016-4658",
"url": "https://bugzilla.suse.com/1069433"
},
{
"category": "external",
"summary": "SUSE Bug 1078813 for CVE-2016-4658",
"url": "https://bugzilla.suse.com/1078813"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2016-4658",
"url": "https://bugzilla.suse.com/1123919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-4658"
},
{
"cve": "CVE-2016-4738",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4738"
}
],
"notes": [
{
"category": "general",
"text": "libxslt in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4738",
"url": "https://www.suse.com/security/cve/CVE-2016-4738"
},
{
"category": "external",
"summary": "SUSE Bug 1005591 for CVE-2016-4738",
"url": "https://bugzilla.suse.com/1005591"
},
{
"category": "external",
"summary": "SUSE Bug 1123130 for CVE-2016-4738",
"url": "https://bugzilla.suse.com/1123130"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-4738"
},
{
"cve": "CVE-2016-5131",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5131"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5131",
"url": "https://www.suse.com/security/cve/CVE-2016-5131"
},
{
"category": "external",
"summary": "SUSE Bug 1014873 for CVE-2016-5131",
"url": "https://bugzilla.suse.com/1014873"
},
{
"category": "external",
"summary": "SUSE Bug 1069433 for CVE-2016-5131",
"url": "https://bugzilla.suse.com/1069433"
},
{
"category": "external",
"summary": "SUSE Bug 1078813 for CVE-2016-5131",
"url": "https://bugzilla.suse.com/1078813"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2016-5131",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 989901 for CVE-2016-5131",
"url": "https://bugzilla.suse.com/989901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5131"
},
{
"cve": "CVE-2017-15412",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15412"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15412",
"url": "https://www.suse.com/security/cve/CVE-2017-15412"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15412",
"url": "https://bugzilla.suse.com/1071691"
},
{
"category": "external",
"summary": "SUSE Bug 1077993 for CVE-2017-15412",
"url": "https://bugzilla.suse.com/1077993"
},
{
"category": "external",
"summary": "SUSE Bug 1123129 for CVE-2017-15412",
"url": "https://bugzilla.suse.com/1123129"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2017-15412",
"url": "https://bugzilla.suse.com/1123919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15412"
},
{
"cve": "CVE-2017-5029",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5029"
}
],
"notes": [
{
"category": "general",
"text": "The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5029",
"url": "https://www.suse.com/security/cve/CVE-2017-5029"
},
{
"category": "external",
"summary": "SUSE Bug 1028848 for CVE-2017-5029",
"url": "https://bugzilla.suse.com/1028848"
},
{
"category": "external",
"summary": "SUSE Bug 1028875 for CVE-2017-5029",
"url": "https://bugzilla.suse.com/1028875"
},
{
"category": "external",
"summary": "SUSE Bug 1035905 for CVE-2017-5029",
"url": "https://bugzilla.suse.com/1035905"
},
{
"category": "external",
"summary": "SUSE Bug 1123130 for CVE-2017-5029",
"url": "https://bugzilla.suse.com/1123130"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2017-5029"
},
{
"cve": "CVE-2018-14404",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-14404"
}
],
"notes": [
{
"category": "general",
"text": "A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression in the XPATH_OP_AND or XPATH_OP_OR case. Applications processing untrusted XSL format inputs with the use of the libxml2 library may be vulnerable to a denial of service attack due to a crash of the application.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-14404",
"url": "https://www.suse.com/security/cve/CVE-2018-14404"
},
{
"category": "external",
"summary": "SUSE Bug 1102046 for CVE-2018-14404",
"url": "https://bugzilla.suse.com/1102046"
},
{
"category": "external",
"summary": "SUSE Bug 1148896 for CVE-2018-14404",
"url": "https://bugzilla.suse.com/1148896"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-14404"
},
{
"cve": "CVE-2018-25032",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-25032"
}
],
"notes": [
{
"category": "general",
"text": "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-25032",
"url": "https://www.suse.com/security/cve/CVE-2018-25032"
},
{
"category": "external",
"summary": "SUSE Bug 1197459 for CVE-2018-25032",
"url": "https://bugzilla.suse.com/1197459"
},
{
"category": "external",
"summary": "SUSE Bug 1197893 for CVE-2018-25032",
"url": "https://bugzilla.suse.com/1197893"
},
{
"category": "external",
"summary": "SUSE Bug 1198667 for CVE-2018-25032",
"url": "https://bugzilla.suse.com/1198667"
},
{
"category": "external",
"summary": "SUSE Bug 1199104 for CVE-2018-25032",
"url": "https://bugzilla.suse.com/1199104"
},
{
"category": "external",
"summary": "SUSE Bug 1200049 for CVE-2018-25032",
"url": "https://bugzilla.suse.com/1200049"
},
{
"category": "external",
"summary": "SUSE Bug 1201732 for CVE-2018-25032",
"url": "https://bugzilla.suse.com/1201732"
},
{
"category": "external",
"summary": "SUSE Bug 1202688 for CVE-2018-25032",
"url": "https://bugzilla.suse.com/1202688"
},
{
"category": "external",
"summary": "SUSE Bug 1224427 for CVE-2018-25032",
"url": "https://bugzilla.suse.com/1224427"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-25032"
},
{
"cve": "CVE-2018-8048",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-8048"
}
],
"notes": [
{
"category": "general",
"text": "In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-8048",
"url": "https://www.suse.com/security/cve/CVE-2018-8048"
},
{
"category": "external",
"summary": "SUSE Bug 1085967 for CVE-2018-8048",
"url": "https://bugzilla.suse.com/1085967"
},
{
"category": "external",
"summary": "SUSE Bug 1086598 for CVE-2018-8048",
"url": "https://bugzilla.suse.com/1086598"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-8048"
},
{
"cve": "CVE-2019-11068",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11068"
}
],
"notes": [
{
"category": "general",
"text": "libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11068",
"url": "https://www.suse.com/security/cve/CVE-2019-11068"
},
{
"category": "external",
"summary": "SUSE Bug 1132160 for CVE-2019-11068",
"url": "https://bugzilla.suse.com/1132160"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-11068",
"url": "https://bugzilla.suse.com/1154212"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-11068"
},
{
"cve": "CVE-2019-20388",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-20388"
}
],
"notes": [
{
"category": "general",
"text": "xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-20388",
"url": "https://www.suse.com/security/cve/CVE-2019-20388"
},
{
"category": "external",
"summary": "SUSE Bug 1161521 for CVE-2019-20388",
"url": "https://bugzilla.suse.com/1161521"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2019-20388",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-20388"
},
{
"cve": "CVE-2019-5477",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5477"
}
],
"notes": [
{
"category": "general",
"text": "A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby\u0027s `Kernel.open` method. Processes are vulnerable only if the undocumented method `Nokogiri::CSS::Tokenizer#load_file` is being called with unsafe user input as the filename. This vulnerability appears in code generated by the Rexical gem versions v1.0.6 and earlier. Rexical is used by Nokogiri to generate lexical scanner code for parsing CSS queries. The underlying vulnerability was addressed in Rexical v1.0.7 and Nokogiri upgraded to this version of Rexical in Nokogiri v1.10.4.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5477",
"url": "https://www.suse.com/security/cve/CVE-2019-5477"
},
{
"category": "external",
"summary": "SUSE Bug 1146578 for CVE-2019-5477",
"url": "https://bugzilla.suse.com/1146578"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5477"
},
{
"cve": "CVE-2020-24977",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-24977"
}
],
"notes": [
{
"category": "general",
"text": "GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-24977",
"url": "https://www.suse.com/security/cve/CVE-2020-24977"
},
{
"category": "external",
"summary": "SUSE Bug 1176179 for CVE-2020-24977",
"url": "https://bugzilla.suse.com/1176179"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2020-24977",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-24977"
},
{
"cve": "CVE-2020-7595",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-7595"
}
],
"notes": [
{
"category": "general",
"text": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-7595",
"url": "https://www.suse.com/security/cve/CVE-2020-7595"
},
{
"category": "external",
"summary": "SUSE Bug 1161517 for CVE-2020-7595",
"url": "https://bugzilla.suse.com/1161517"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2020-7595",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-7595"
},
{
"cve": "CVE-2021-30560",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30560"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30560",
"url": "https://www.suse.com/security/cve/CVE-2021-30560"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1188373"
},
{
"category": "external",
"summary": "SUSE Bug 1208574 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1208574"
},
{
"category": "external",
"summary": "SUSE Bug 1211500 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1211500"
},
{
"category": "external",
"summary": "SUSE Bug 1211501 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1211501"
},
{
"category": "external",
"summary": "SUSE Bug 1211544 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1211544"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30560"
},
{
"cve": "CVE-2021-3516",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3516"
}
],
"notes": [
{
"category": "general",
"text": "There\u0027s a flaw in libxml2\u0027s xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-after-free. The greatest impact of this flaw is to confidentiality, integrity, and availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3516",
"url": "https://www.suse.com/security/cve/CVE-2021-3516"
},
{
"category": "external",
"summary": "SUSE Bug 1185409 for CVE-2021-3516",
"url": "https://bugzilla.suse.com/1185409"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2021-3516",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3516"
},
{
"cve": "CVE-2021-3517",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3517"
}
],
"notes": [
{
"category": "general",
"text": "There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3517",
"url": "https://www.suse.com/security/cve/CVE-2021-3517"
},
{
"category": "external",
"summary": "SUSE Bug 1185410 for CVE-2021-3517",
"url": "https://bugzilla.suse.com/1185410"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2021-3517",
"url": "https://bugzilla.suse.com/1191860"
},
{
"category": "external",
"summary": "SUSE Bug 1194438 for CVE-2021-3517",
"url": "https://bugzilla.suse.com/1194438"
},
{
"category": "external",
"summary": "SUSE Bug 1196383 for CVE-2021-3517",
"url": "https://bugzilla.suse.com/1196383"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-3517"
},
{
"cve": "CVE-2021-3518",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3518"
}
],
"notes": [
{
"category": "general",
"text": "There\u0027s a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3518",
"url": "https://www.suse.com/security/cve/CVE-2021-3518"
},
{
"category": "external",
"summary": "SUSE Bug 1185408 for CVE-2021-3518",
"url": "https://bugzilla.suse.com/1185408"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2021-3518",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3518"
},
{
"cve": "CVE-2021-3537",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3537"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest threat from this vulnerability is to system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3537",
"url": "https://www.suse.com/security/cve/CVE-2021-3537"
},
{
"category": "external",
"summary": "SUSE Bug 1185698 for CVE-2021-3537",
"url": "https://bugzilla.suse.com/1185698"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-3537"
},
{
"cve": "CVE-2021-3541",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3541"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3541",
"url": "https://www.suse.com/security/cve/CVE-2021-3541"
},
{
"category": "external",
"summary": "SUSE Bug 1186015 for CVE-2021-3541",
"url": "https://bugzilla.suse.com/1186015"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3541"
},
{
"cve": "CVE-2021-41098",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-41098"
}
],
"notes": [
{
"category": "general",
"text": "Nokogiri is a Rubygem providing HTML, XML, SAX, and Reader parsers with XPath and CSS selector support. In Nokogiri v1.12.4 and earlier, on JRuby only, the SAX parser resolves external entities by default. Users of Nokogiri on JRuby who parse untrusted documents using any of these classes are affected: Nokogiri::XML::SAX::Parse, Nokogiri::HTML4::SAX::Parser or its alias Nokogiri::HTML::SAX::Parser, Nokogiri::XML::SAX::PushParser, and Nokogiri::HTML4::SAX::PushParser or its alias Nokogiri::HTML::SAX::PushParser. JRuby users should upgrade to Nokogiri v1.12.5 or later to receive a patch for this issue. There are no workarounds available for v1.12.4 or earlier. CRuby users are not affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-41098",
"url": "https://www.suse.com/security/cve/CVE-2021-41098"
},
{
"category": "external",
"summary": "SUSE Bug 1191029 for CVE-2021-41098",
"url": "https://bugzilla.suse.com/1191029"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-41098"
},
{
"cve": "CVE-2022-23308",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-23308"
}
],
"notes": [
{
"category": "general",
"text": "valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-23308",
"url": "https://www.suse.com/security/cve/CVE-2022-23308"
},
{
"category": "external",
"summary": "SUSE Bug 1196490 for CVE-2022-23308",
"url": "https://bugzilla.suse.com/1196490"
},
{
"category": "external",
"summary": "SUSE Bug 1199098 for CVE-2022-23308",
"url": "https://bugzilla.suse.com/1199098"
},
{
"category": "external",
"summary": "SUSE Bug 1202688 for CVE-2022-23308",
"url": "https://bugzilla.suse.com/1202688"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-23308"
},
{
"cve": "CVE-2022-23437",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-23437"
}
],
"notes": [
{
"category": "general",
"text": "There\u0027s a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulnerability is present within XercesJ version 2.12.1 and the previous versions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-23437",
"url": "https://www.suse.com/security/cve/CVE-2022-23437"
},
{
"category": "external",
"summary": "SUSE Bug 1195108 for CVE-2022-23437",
"url": "https://bugzilla.suse.com/1195108"
},
{
"category": "external",
"summary": "SUSE Bug 1196394 for CVE-2022-23437",
"url": "https://bugzilla.suse.com/1196394"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-23437"
},
{
"cve": "CVE-2022-23476",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-23476"
}
],
"notes": [
{
"category": "general",
"text": "Nokogiri is an open source XML and HTML library for the Ruby programming language. Nokogiri `1.13.8` and `1.13.9` fail to check the return value from `xmlTextReaderExpand` in the method `Nokogiri::XML::Reader#attribute_hash`. This can lead to a null pointer exception when invalid markup is being parsed. For applications using `XML::Reader` to parse untrusted inputs, this may potentially be a vector for a denial of service attack. Users are advised to upgrade to Nokogiri `\u003e= 1.13.10`. Users may be able to search their code for calls to either `XML::Reader#attributes` or `XML::Reader#attribute_hash` to determine if they are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-23476",
"url": "https://www.suse.com/security/cve/CVE-2022-23476"
},
{
"category": "external",
"summary": "SUSE Bug 1206227 for CVE-2022-23476",
"url": "https://bugzilla.suse.com/1206227"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-23476"
},
{
"cve": "CVE-2022-24836",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-24836"
}
],
"notes": [
{
"category": "general",
"text": "Nokogiri is an open source XML and HTML library for Ruby. Nokogiri `\u003c v1.13.4` contains an inefficient regular expression that is susceptible to excessive backtracking when attempting to detect encoding in HTML documents. Users are advised to upgrade to Nokogiri `\u003e= 1.13.4`. There are no known workarounds for this issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-24836",
"url": "https://www.suse.com/security/cve/CVE-2022-24836"
},
{
"category": "external",
"summary": "SUSE Bug 1198408 for CVE-2022-24836",
"url": "https://bugzilla.suse.com/1198408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-24836"
},
{
"cve": "CVE-2022-24839",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-24839"
}
],
"notes": [
{
"category": "general",
"text": "org.cyberneko.html is an html parser written in Java. The fork of `org.cyberneko.html` used by Nokogiri (Rubygem) raises a `java.lang.OutOfMemoryError` exception when parsing ill-formed HTML markup. Users are advised to upgrade to `\u003e= 1.9.22.noko2`. Note: The upstream library `org.cyberneko.html` is no longer maintained. Nokogiri uses its own fork of this library located at https://github.com/sparklemotion/nekohtml and this CVE applies only to that fork. Other forks of nekohtml may have a similar vulnerability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-24839",
"url": "https://www.suse.com/security/cve/CVE-2022-24839"
},
{
"category": "external",
"summary": "SUSE Bug 1198404 for CVE-2022-24839",
"url": "https://bugzilla.suse.com/1198404"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-24839"
},
{
"cve": "CVE-2022-29181",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-29181"
}
],
"notes": [
{
"category": "general",
"text": "Nokogiri is an open source XML and HTML library for Ruby. Nokogiri prior to version 1.13.6 does not type-check all inputs into the XML and HTML4 SAX parsers, allowing specially crafted untrusted inputs to cause illegal memory access errors (segfault) or reads from unrelated memory. Version 1.13.6 contains a patch for this issue. As a workaround, ensure the untrusted input is a `String` by calling `#to_s` or equivalent.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-29181",
"url": "https://www.suse.com/security/cve/CVE-2022-29181"
},
{
"category": "external",
"summary": "SUSE Bug 1199782 for CVE-2022-29181",
"url": "https://bugzilla.suse.com/1199782"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-29181"
},
{
"cve": "CVE-2022-29824",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-29824"
}
],
"notes": [
{
"category": "general",
"text": "In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don\u0027t check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2\u0027s buffer functions, for example libxslt through 1.1.35, is affected as well.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-29824",
"url": "https://www.suse.com/security/cve/CVE-2022-29824"
},
{
"category": "external",
"summary": "SUSE Bug 1199132 for CVE-2022-29824",
"url": "https://bugzilla.suse.com/1199132"
},
{
"category": "external",
"summary": "SUSE Bug 1202878 for CVE-2022-29824",
"url": "https://bugzilla.suse.com/1202878"
},
{
"category": "external",
"summary": "SUSE Bug 1204121 for CVE-2022-29824",
"url": "https://bugzilla.suse.com/1204121"
},
{
"category": "external",
"summary": "SUSE Bug 1204131 for CVE-2022-29824",
"url": "https://bugzilla.suse.com/1204131"
},
{
"category": "external",
"summary": "SUSE Bug 1205069 for CVE-2022-29824",
"url": "https://bugzilla.suse.com/1205069"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-29824"
},
{
"cve": "CVE-2022-34169",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-34169"
}
],
"notes": [
{
"category": "general",
"text": "The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 or later. Note: Java runtimes (such as OpenJDK) include repackaged copies of Xalan.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-34169",
"url": "https://www.suse.com/security/cve/CVE-2022-34169"
},
{
"category": "external",
"summary": "SUSE Bug 1201684 for CVE-2022-34169",
"url": "https://bugzilla.suse.com/1201684"
},
{
"category": "external",
"summary": "SUSE Bug 1202427 for CVE-2022-34169",
"url": "https://bugzilla.suse.com/1202427"
},
{
"category": "external",
"summary": "SUSE Bug 1207688 for CVE-2022-34169",
"url": "https://bugzilla.suse.com/1207688"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-34169"
},
{
"cve": "CVE-2023-29469",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-29469"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the \u0027\\0\u0027 value).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-29469",
"url": "https://www.suse.com/security/cve/CVE-2023-29469"
},
{
"category": "external",
"summary": "SUSE Bug 1210412 for CVE-2023-29469",
"url": "https://bugzilla.suse.com/1210412"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-nokogiri-1.18.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-29469"
}
]
}
opensuse-su-2024:14174-1
Vulnerability from csaf_opensuse
Published
2024-07-12 00:00
Modified
2024-07-12 00:00
Summary
ruby3.3-rubygem-nokogiri-1.15.5-1.5 on GA media
Notes
Title of the patch
ruby3.3-rubygem-nokogiri-1.15.5-1.5 on GA media
Description of the patch
These are all security issues fixed in the ruby3.3-rubygem-nokogiri-1.15.5-1.5 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-14174
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "ruby3.3-rubygem-nokogiri-1.15.5-1.5 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the ruby3.3-rubygem-nokogiri-1.15.5-1.5 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-14174",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_14174-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2877 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2877/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0191 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0191/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1819 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1819/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5312 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5312/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7497 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7497/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7498 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7498/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7499 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7499/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7500 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7500/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7941 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7941/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7942 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7942/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7995 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7995/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8035 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8035/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8241 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8241/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8242 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8242/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8317 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8317/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4658 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4658/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4738 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4738/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5131 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5131/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15412 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15412/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5029 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5029/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-14404 page",
"url": "https://www.suse.com/security/cve/CVE-2018-14404/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-25032 page",
"url": "https://www.suse.com/security/cve/CVE-2018-25032/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-8048 page",
"url": "https://www.suse.com/security/cve/CVE-2018-8048/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11068 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11068/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-20388 page",
"url": "https://www.suse.com/security/cve/CVE-2019-20388/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5477 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5477/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-24977 page",
"url": "https://www.suse.com/security/cve/CVE-2020-24977/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-7595 page",
"url": "https://www.suse.com/security/cve/CVE-2020-7595/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30560 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30560/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3516 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3516/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3517 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3517/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3518 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3518/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3537 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3537/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3541 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3541/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-41098 page",
"url": "https://www.suse.com/security/cve/CVE-2021-41098/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-23308 page",
"url": "https://www.suse.com/security/cve/CVE-2022-23308/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-23437 page",
"url": "https://www.suse.com/security/cve/CVE-2022-23437/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-23476 page",
"url": "https://www.suse.com/security/cve/CVE-2022-23476/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-24836 page",
"url": "https://www.suse.com/security/cve/CVE-2022-24836/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-24839 page",
"url": "https://www.suse.com/security/cve/CVE-2022-24839/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-29181 page",
"url": "https://www.suse.com/security/cve/CVE-2022-29181/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-29824 page",
"url": "https://www.suse.com/security/cve/CVE-2022-29824/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-34169 page",
"url": "https://www.suse.com/security/cve/CVE-2022-34169/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-29469 page",
"url": "https://www.suse.com/security/cve/CVE-2023-29469/"
}
],
"title": "ruby3.3-rubygem-nokogiri-1.15.5-1.5 on GA media",
"tracking": {
"current_release_date": "2024-07-12T00:00:00Z",
"generator": {
"date": "2024-07-12T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:14174-1",
"initial_release_date": "2024-07-12T00:00:00Z",
"revision_history": [
{
"date": "2024-07-12T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"product": {
"name": "ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"product_id": "ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"product": {
"name": "ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"product_id": "ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"product": {
"name": "ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"product_id": "ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64",
"product": {
"name": "ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64",
"product_id": "ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64"
},
"product_reference": "ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le"
},
"product_reference": "ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x"
},
"product_reference": "ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
},
"product_reference": "ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2013-2877",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2877"
}
],
"notes": [
{
"category": "general",
"text": "parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a document that ends abruptly, related to the lack of certain checks for the XML_PARSER_EOF state.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2877",
"url": "https://www.suse.com/security/cve/CVE-2013-2877"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2013-2877",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 828893 for CVE-2013-2877",
"url": "https://bugzilla.suse.com/828893"
},
{
"category": "external",
"summary": "SUSE Bug 829077 for CVE-2013-2877",
"url": "https://bugzilla.suse.com/829077"
},
{
"category": "external",
"summary": "SUSE Bug 854869 for CVE-2013-2877",
"url": "https://bugzilla.suse.com/854869"
},
{
"category": "external",
"summary": "SUSE Bug 877506 for CVE-2013-2877",
"url": "https://bugzilla.suse.com/877506"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2013-2877"
},
{
"cve": "CVE-2014-0191",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0191"
}
],
"notes": [
{
"category": "general",
"text": "The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Server in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 and other products, loads external parameter entities regardless of whether entity substitution or validation is enabled, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XML document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0191",
"url": "https://www.suse.com/security/cve/CVE-2014-0191"
},
{
"category": "external",
"summary": "SUSE Bug 1014873 for CVE-2014-0191",
"url": "https://bugzilla.suse.com/1014873"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2014-0191",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 876652 for CVE-2014-0191",
"url": "https://bugzilla.suse.com/876652"
},
{
"category": "external",
"summary": "SUSE Bug 877506 for CVE-2014-0191",
"url": "https://bugzilla.suse.com/877506"
},
{
"category": "external",
"summary": "SUSE Bug 996079 for CVE-2014-0191",
"url": "https://bugzilla.suse.com/996079"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-0191"
},
{
"cve": "CVE-2015-1819",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1819"
}
],
"notes": [
{
"category": "general",
"text": "The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1819",
"url": "https://www.suse.com/security/cve/CVE-2015-1819"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-1819",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 928193 for CVE-2015-1819",
"url": "https://bugzilla.suse.com/928193"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-1819",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-1819"
},
{
"cve": "CVE-2015-5312",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5312"
}
],
"notes": [
{
"category": "general",
"text": "The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data, a different vulnerability than CVE-2014-3660.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5312",
"url": "https://www.suse.com/security/cve/CVE-2015-5312"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-5312",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 957105 for CVE-2015-5312",
"url": "https://bugzilla.suse.com/957105"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-5312",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-5312",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-5312"
},
{
"cve": "CVE-2015-7497",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7497"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7497",
"url": "https://www.suse.com/security/cve/CVE-2015-7497"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-7497",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 957106 for CVE-2015-7497",
"url": "https://bugzilla.suse.com/957106"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-7497",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-7497",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-7497"
},
{
"cve": "CVE-2015-7498",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7498"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors related to extracting errors after an encoding conversion failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7498",
"url": "https://www.suse.com/security/cve/CVE-2015-7498"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-7498",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 957107 for CVE-2015-7498",
"url": "https://bugzilla.suse.com/957107"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-7498",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-7498",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-7498"
},
{
"cve": "CVE-2015-7499",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7499"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7499",
"url": "https://www.suse.com/security/cve/CVE-2015-7499"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-7499",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 957109 for CVE-2015-7499",
"url": "https://bugzilla.suse.com/957109"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-7499",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-7499",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-7499"
},
{
"cve": "CVE-2015-7500",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7500"
}
],
"notes": [
{
"category": "general",
"text": "The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via unspecified vectors related to incorrect entities boundaries and start tags.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7500",
"url": "https://www.suse.com/security/cve/CVE-2015-7500"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-7500",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 957110 for CVE-2015-7500",
"url": "https://bugzilla.suse.com/957110"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-7500",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-7500",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-7500"
},
{
"cve": "CVE-2015-7941",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7941"
}
],
"notes": [
{
"category": "general",
"text": "libxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and libxml2 crash) via crafted XML data to the (1) xmlParseEntityDecl or (2) xmlParseConditionalSections function in parser.c, as demonstrated by non-terminated entities.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7941",
"url": "https://www.suse.com/security/cve/CVE-2015-7941"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-7941",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 951734 for CVE-2015-7941",
"url": "https://bugzilla.suse.com/951734"
},
{
"category": "external",
"summary": "SUSE Bug 951735 for CVE-2015-7941",
"url": "https://bugzilla.suse.com/951735"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-7941",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-7941"
},
{
"cve": "CVE-2015-7942",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7942"
}
],
"notes": [
{
"category": "general",
"text": "The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different vulnerability than CVE-2015-7941.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7942",
"url": "https://www.suse.com/security/cve/CVE-2015-7942"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-7942",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 951735 for CVE-2015-7942",
"url": "https://bugzilla.suse.com/951735"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-7942",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-7942"
},
{
"cve": "CVE-2015-7995",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7995"
}
],
"notes": [
{
"category": "general",
"text": "The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a \"type confusion\" issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7995",
"url": "https://www.suse.com/security/cve/CVE-2015-7995"
},
{
"category": "external",
"summary": "SUSE Bug 1123130 for CVE-2015-7995",
"url": "https://bugzilla.suse.com/1123130"
},
{
"category": "external",
"summary": "SUSE Bug 952474 for CVE-2015-7995",
"url": "https://bugzilla.suse.com/952474"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-7995"
},
{
"cve": "CVE-2015-8035",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8035"
}
],
"notes": [
{
"category": "general",
"text": "The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-dependent attackers to cause a denial of service (process hang) via crafted XML data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8035",
"url": "https://www.suse.com/security/cve/CVE-2015-8035"
},
{
"category": "external",
"summary": "SUSE Bug 1088279 for CVE-2015-8035",
"url": "https://bugzilla.suse.com/1088279"
},
{
"category": "external",
"summary": "SUSE Bug 1105166 for CVE-2015-8035",
"url": "https://bugzilla.suse.com/1105166"
},
{
"category": "external",
"summary": "SUSE Bug 954429 for CVE-2015-8035",
"url": "https://bugzilla.suse.com/954429"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-8035"
},
{
"cve": "CVE-2015-8241",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8241"
}
],
"notes": [
{
"category": "general",
"text": "The xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context-dependent attackers to cause a denial of service (heap-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8241",
"url": "https://www.suse.com/security/cve/CVE-2015-8241"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-8241",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 956018 for CVE-2015-8241",
"url": "https://bugzilla.suse.com/956018"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-8241",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-8241",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-8241"
},
{
"cve": "CVE-2015-8242",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8242"
}
],
"notes": [
{
"category": "general",
"text": "The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (stack-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8242",
"url": "https://www.suse.com/security/cve/CVE-2015-8242"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-8242",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 956021 for CVE-2015-8242",
"url": "https://bugzilla.suse.com/956021"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-8242",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-8242",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-8242"
},
{
"cve": "CVE-2015-8317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8317"
}
],
"notes": [
{
"category": "general",
"text": "The xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive information via an (1) unterminated encoding value or (2) incomplete XML declaration in XML data, which triggers an out-of-bounds heap read.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8317",
"url": "https://www.suse.com/security/cve/CVE-2015-8317"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2015-8317",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 956260 for CVE-2015-8317",
"url": "https://bugzilla.suse.com/956260"
},
{
"category": "external",
"summary": "SUSE Bug 959469 for CVE-2015-8317",
"url": "https://bugzilla.suse.com/959469"
},
{
"category": "external",
"summary": "SUSE Bug 969769 for CVE-2015-8317",
"url": "https://bugzilla.suse.com/969769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-8317"
},
{
"cve": "CVE-2016-4658",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4658"
}
],
"notes": [
{
"category": "general",
"text": "xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and memory corruption) via a crafted XML document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4658",
"url": "https://www.suse.com/security/cve/CVE-2016-4658"
},
{
"category": "external",
"summary": "SUSE Bug 1005544 for CVE-2016-4658",
"url": "https://bugzilla.suse.com/1005544"
},
{
"category": "external",
"summary": "SUSE Bug 1014873 for CVE-2016-4658",
"url": "https://bugzilla.suse.com/1014873"
},
{
"category": "external",
"summary": "SUSE Bug 1069433 for CVE-2016-4658",
"url": "https://bugzilla.suse.com/1069433"
},
{
"category": "external",
"summary": "SUSE Bug 1078813 for CVE-2016-4658",
"url": "https://bugzilla.suse.com/1078813"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2016-4658",
"url": "https://bugzilla.suse.com/1123919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-4658"
},
{
"cve": "CVE-2016-4738",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4738"
}
],
"notes": [
{
"category": "general",
"text": "libxslt in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4738",
"url": "https://www.suse.com/security/cve/CVE-2016-4738"
},
{
"category": "external",
"summary": "SUSE Bug 1005591 for CVE-2016-4738",
"url": "https://bugzilla.suse.com/1005591"
},
{
"category": "external",
"summary": "SUSE Bug 1123130 for CVE-2016-4738",
"url": "https://bugzilla.suse.com/1123130"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-4738"
},
{
"cve": "CVE-2016-5131",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5131"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5131",
"url": "https://www.suse.com/security/cve/CVE-2016-5131"
},
{
"category": "external",
"summary": "SUSE Bug 1014873 for CVE-2016-5131",
"url": "https://bugzilla.suse.com/1014873"
},
{
"category": "external",
"summary": "SUSE Bug 1069433 for CVE-2016-5131",
"url": "https://bugzilla.suse.com/1069433"
},
{
"category": "external",
"summary": "SUSE Bug 1078813 for CVE-2016-5131",
"url": "https://bugzilla.suse.com/1078813"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2016-5131",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 989901 for CVE-2016-5131",
"url": "https://bugzilla.suse.com/989901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5131"
},
{
"cve": "CVE-2017-15412",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15412"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15412",
"url": "https://www.suse.com/security/cve/CVE-2017-15412"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15412",
"url": "https://bugzilla.suse.com/1071691"
},
{
"category": "external",
"summary": "SUSE Bug 1077993 for CVE-2017-15412",
"url": "https://bugzilla.suse.com/1077993"
},
{
"category": "external",
"summary": "SUSE Bug 1123129 for CVE-2017-15412",
"url": "https://bugzilla.suse.com/1123129"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2017-15412",
"url": "https://bugzilla.suse.com/1123919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15412"
},
{
"cve": "CVE-2017-5029",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5029"
}
],
"notes": [
{
"category": "general",
"text": "The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5029",
"url": "https://www.suse.com/security/cve/CVE-2017-5029"
},
{
"category": "external",
"summary": "SUSE Bug 1028848 for CVE-2017-5029",
"url": "https://bugzilla.suse.com/1028848"
},
{
"category": "external",
"summary": "SUSE Bug 1028875 for CVE-2017-5029",
"url": "https://bugzilla.suse.com/1028875"
},
{
"category": "external",
"summary": "SUSE Bug 1035905 for CVE-2017-5029",
"url": "https://bugzilla.suse.com/1035905"
},
{
"category": "external",
"summary": "SUSE Bug 1123130 for CVE-2017-5029",
"url": "https://bugzilla.suse.com/1123130"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2017-5029"
},
{
"cve": "CVE-2018-14404",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-14404"
}
],
"notes": [
{
"category": "general",
"text": "A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression in the XPATH_OP_AND or XPATH_OP_OR case. Applications processing untrusted XSL format inputs with the use of the libxml2 library may be vulnerable to a denial of service attack due to a crash of the application.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-14404",
"url": "https://www.suse.com/security/cve/CVE-2018-14404"
},
{
"category": "external",
"summary": "SUSE Bug 1102046 for CVE-2018-14404",
"url": "https://bugzilla.suse.com/1102046"
},
{
"category": "external",
"summary": "SUSE Bug 1148896 for CVE-2018-14404",
"url": "https://bugzilla.suse.com/1148896"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-14404"
},
{
"cve": "CVE-2018-25032",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-25032"
}
],
"notes": [
{
"category": "general",
"text": "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-25032",
"url": "https://www.suse.com/security/cve/CVE-2018-25032"
},
{
"category": "external",
"summary": "SUSE Bug 1197459 for CVE-2018-25032",
"url": "https://bugzilla.suse.com/1197459"
},
{
"category": "external",
"summary": "SUSE Bug 1197893 for CVE-2018-25032",
"url": "https://bugzilla.suse.com/1197893"
},
{
"category": "external",
"summary": "SUSE Bug 1198667 for CVE-2018-25032",
"url": "https://bugzilla.suse.com/1198667"
},
{
"category": "external",
"summary": "SUSE Bug 1199104 for CVE-2018-25032",
"url": "https://bugzilla.suse.com/1199104"
},
{
"category": "external",
"summary": "SUSE Bug 1200049 for CVE-2018-25032",
"url": "https://bugzilla.suse.com/1200049"
},
{
"category": "external",
"summary": "SUSE Bug 1201732 for CVE-2018-25032",
"url": "https://bugzilla.suse.com/1201732"
},
{
"category": "external",
"summary": "SUSE Bug 1202688 for CVE-2018-25032",
"url": "https://bugzilla.suse.com/1202688"
},
{
"category": "external",
"summary": "SUSE Bug 1224427 for CVE-2018-25032",
"url": "https://bugzilla.suse.com/1224427"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-25032"
},
{
"cve": "CVE-2018-8048",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-8048"
}
],
"notes": [
{
"category": "general",
"text": "In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-8048",
"url": "https://www.suse.com/security/cve/CVE-2018-8048"
},
{
"category": "external",
"summary": "SUSE Bug 1085967 for CVE-2018-8048",
"url": "https://bugzilla.suse.com/1085967"
},
{
"category": "external",
"summary": "SUSE Bug 1086598 for CVE-2018-8048",
"url": "https://bugzilla.suse.com/1086598"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-8048"
},
{
"cve": "CVE-2019-11068",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11068"
}
],
"notes": [
{
"category": "general",
"text": "libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11068",
"url": "https://www.suse.com/security/cve/CVE-2019-11068"
},
{
"category": "external",
"summary": "SUSE Bug 1132160 for CVE-2019-11068",
"url": "https://bugzilla.suse.com/1132160"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-11068",
"url": "https://bugzilla.suse.com/1154212"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-11068"
},
{
"cve": "CVE-2019-20388",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-20388"
}
],
"notes": [
{
"category": "general",
"text": "xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-20388",
"url": "https://www.suse.com/security/cve/CVE-2019-20388"
},
{
"category": "external",
"summary": "SUSE Bug 1161521 for CVE-2019-20388",
"url": "https://bugzilla.suse.com/1161521"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2019-20388",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-20388"
},
{
"cve": "CVE-2019-5477",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5477"
}
],
"notes": [
{
"category": "general",
"text": "A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby\u0027s `Kernel.open` method. Processes are vulnerable only if the undocumented method `Nokogiri::CSS::Tokenizer#load_file` is being called with unsafe user input as the filename. This vulnerability appears in code generated by the Rexical gem versions v1.0.6 and earlier. Rexical is used by Nokogiri to generate lexical scanner code for parsing CSS queries. The underlying vulnerability was addressed in Rexical v1.0.7 and Nokogiri upgraded to this version of Rexical in Nokogiri v1.10.4.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5477",
"url": "https://www.suse.com/security/cve/CVE-2019-5477"
},
{
"category": "external",
"summary": "SUSE Bug 1146578 for CVE-2019-5477",
"url": "https://bugzilla.suse.com/1146578"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5477"
},
{
"cve": "CVE-2020-24977",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-24977"
}
],
"notes": [
{
"category": "general",
"text": "GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-24977",
"url": "https://www.suse.com/security/cve/CVE-2020-24977"
},
{
"category": "external",
"summary": "SUSE Bug 1176179 for CVE-2020-24977",
"url": "https://bugzilla.suse.com/1176179"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2020-24977",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-24977"
},
{
"cve": "CVE-2020-7595",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-7595"
}
],
"notes": [
{
"category": "general",
"text": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-7595",
"url": "https://www.suse.com/security/cve/CVE-2020-7595"
},
{
"category": "external",
"summary": "SUSE Bug 1161517 for CVE-2020-7595",
"url": "https://bugzilla.suse.com/1161517"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2020-7595",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-7595"
},
{
"cve": "CVE-2021-30560",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30560"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30560",
"url": "https://www.suse.com/security/cve/CVE-2021-30560"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1188373"
},
{
"category": "external",
"summary": "SUSE Bug 1208574 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1208574"
},
{
"category": "external",
"summary": "SUSE Bug 1211500 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1211500"
},
{
"category": "external",
"summary": "SUSE Bug 1211501 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1211501"
},
{
"category": "external",
"summary": "SUSE Bug 1211544 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1211544"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30560"
},
{
"cve": "CVE-2021-3516",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3516"
}
],
"notes": [
{
"category": "general",
"text": "There\u0027s a flaw in libxml2\u0027s xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-after-free. The greatest impact of this flaw is to confidentiality, integrity, and availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3516",
"url": "https://www.suse.com/security/cve/CVE-2021-3516"
},
{
"category": "external",
"summary": "SUSE Bug 1185409 for CVE-2021-3516",
"url": "https://bugzilla.suse.com/1185409"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2021-3516",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3516"
},
{
"cve": "CVE-2021-3517",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3517"
}
],
"notes": [
{
"category": "general",
"text": "There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3517",
"url": "https://www.suse.com/security/cve/CVE-2021-3517"
},
{
"category": "external",
"summary": "SUSE Bug 1185410 for CVE-2021-3517",
"url": "https://bugzilla.suse.com/1185410"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2021-3517",
"url": "https://bugzilla.suse.com/1191860"
},
{
"category": "external",
"summary": "SUSE Bug 1194438 for CVE-2021-3517",
"url": "https://bugzilla.suse.com/1194438"
},
{
"category": "external",
"summary": "SUSE Bug 1196383 for CVE-2021-3517",
"url": "https://bugzilla.suse.com/1196383"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-3517"
},
{
"cve": "CVE-2021-3518",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3518"
}
],
"notes": [
{
"category": "general",
"text": "There\u0027s a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3518",
"url": "https://www.suse.com/security/cve/CVE-2021-3518"
},
{
"category": "external",
"summary": "SUSE Bug 1185408 for CVE-2021-3518",
"url": "https://bugzilla.suse.com/1185408"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2021-3518",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3518"
},
{
"cve": "CVE-2021-3537",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3537"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest threat from this vulnerability is to system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3537",
"url": "https://www.suse.com/security/cve/CVE-2021-3537"
},
{
"category": "external",
"summary": "SUSE Bug 1185698 for CVE-2021-3537",
"url": "https://bugzilla.suse.com/1185698"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-3537"
},
{
"cve": "CVE-2021-3541",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3541"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3541",
"url": "https://www.suse.com/security/cve/CVE-2021-3541"
},
{
"category": "external",
"summary": "SUSE Bug 1186015 for CVE-2021-3541",
"url": "https://bugzilla.suse.com/1186015"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3541"
},
{
"cve": "CVE-2021-41098",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-41098"
}
],
"notes": [
{
"category": "general",
"text": "Nokogiri is a Rubygem providing HTML, XML, SAX, and Reader parsers with XPath and CSS selector support. In Nokogiri v1.12.4 and earlier, on JRuby only, the SAX parser resolves external entities by default. Users of Nokogiri on JRuby who parse untrusted documents using any of these classes are affected: Nokogiri::XML::SAX::Parse, Nokogiri::HTML4::SAX::Parser or its alias Nokogiri::HTML::SAX::Parser, Nokogiri::XML::SAX::PushParser, and Nokogiri::HTML4::SAX::PushParser or its alias Nokogiri::HTML::SAX::PushParser. JRuby users should upgrade to Nokogiri v1.12.5 or later to receive a patch for this issue. There are no workarounds available for v1.12.4 or earlier. CRuby users are not affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-41098",
"url": "https://www.suse.com/security/cve/CVE-2021-41098"
},
{
"category": "external",
"summary": "SUSE Bug 1191029 for CVE-2021-41098",
"url": "https://bugzilla.suse.com/1191029"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-41098"
},
{
"cve": "CVE-2022-23308",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-23308"
}
],
"notes": [
{
"category": "general",
"text": "valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-23308",
"url": "https://www.suse.com/security/cve/CVE-2022-23308"
},
{
"category": "external",
"summary": "SUSE Bug 1196490 for CVE-2022-23308",
"url": "https://bugzilla.suse.com/1196490"
},
{
"category": "external",
"summary": "SUSE Bug 1199098 for CVE-2022-23308",
"url": "https://bugzilla.suse.com/1199098"
},
{
"category": "external",
"summary": "SUSE Bug 1202688 for CVE-2022-23308",
"url": "https://bugzilla.suse.com/1202688"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-23308"
},
{
"cve": "CVE-2022-23437",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-23437"
}
],
"notes": [
{
"category": "general",
"text": "There\u0027s a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulnerability is present within XercesJ version 2.12.1 and the previous versions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-23437",
"url": "https://www.suse.com/security/cve/CVE-2022-23437"
},
{
"category": "external",
"summary": "SUSE Bug 1195108 for CVE-2022-23437",
"url": "https://bugzilla.suse.com/1195108"
},
{
"category": "external",
"summary": "SUSE Bug 1196394 for CVE-2022-23437",
"url": "https://bugzilla.suse.com/1196394"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-23437"
},
{
"cve": "CVE-2022-23476",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-23476"
}
],
"notes": [
{
"category": "general",
"text": "Nokogiri is an open source XML and HTML library for the Ruby programming language. Nokogiri `1.13.8` and `1.13.9` fail to check the return value from `xmlTextReaderExpand` in the method `Nokogiri::XML::Reader#attribute_hash`. This can lead to a null pointer exception when invalid markup is being parsed. For applications using `XML::Reader` to parse untrusted inputs, this may potentially be a vector for a denial of service attack. Users are advised to upgrade to Nokogiri `\u003e= 1.13.10`. Users may be able to search their code for calls to either `XML::Reader#attributes` or `XML::Reader#attribute_hash` to determine if they are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-23476",
"url": "https://www.suse.com/security/cve/CVE-2022-23476"
},
{
"category": "external",
"summary": "SUSE Bug 1206227 for CVE-2022-23476",
"url": "https://bugzilla.suse.com/1206227"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-23476"
},
{
"cve": "CVE-2022-24836",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-24836"
}
],
"notes": [
{
"category": "general",
"text": "Nokogiri is an open source XML and HTML library for Ruby. Nokogiri `\u003c v1.13.4` contains an inefficient regular expression that is susceptible to excessive backtracking when attempting to detect encoding in HTML documents. Users are advised to upgrade to Nokogiri `\u003e= 1.13.4`. There are no known workarounds for this issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-24836",
"url": "https://www.suse.com/security/cve/CVE-2022-24836"
},
{
"category": "external",
"summary": "SUSE Bug 1198408 for CVE-2022-24836",
"url": "https://bugzilla.suse.com/1198408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-24836"
},
{
"cve": "CVE-2022-24839",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-24839"
}
],
"notes": [
{
"category": "general",
"text": "org.cyberneko.html is an html parser written in Java. The fork of `org.cyberneko.html` used by Nokogiri (Rubygem) raises a `java.lang.OutOfMemoryError` exception when parsing ill-formed HTML markup. Users are advised to upgrade to `\u003e= 1.9.22.noko2`. Note: The upstream library `org.cyberneko.html` is no longer maintained. Nokogiri uses its own fork of this library located at https://github.com/sparklemotion/nekohtml and this CVE applies only to that fork. Other forks of nekohtml may have a similar vulnerability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-24839",
"url": "https://www.suse.com/security/cve/CVE-2022-24839"
},
{
"category": "external",
"summary": "SUSE Bug 1198404 for CVE-2022-24839",
"url": "https://bugzilla.suse.com/1198404"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-24839"
},
{
"cve": "CVE-2022-29181",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-29181"
}
],
"notes": [
{
"category": "general",
"text": "Nokogiri is an open source XML and HTML library for Ruby. Nokogiri prior to version 1.13.6 does not type-check all inputs into the XML and HTML4 SAX parsers, allowing specially crafted untrusted inputs to cause illegal memory access errors (segfault) or reads from unrelated memory. Version 1.13.6 contains a patch for this issue. As a workaround, ensure the untrusted input is a `String` by calling `#to_s` or equivalent.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-29181",
"url": "https://www.suse.com/security/cve/CVE-2022-29181"
},
{
"category": "external",
"summary": "SUSE Bug 1199782 for CVE-2022-29181",
"url": "https://bugzilla.suse.com/1199782"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-29181"
},
{
"cve": "CVE-2022-29824",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-29824"
}
],
"notes": [
{
"category": "general",
"text": "In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don\u0027t check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2\u0027s buffer functions, for example libxslt through 1.1.35, is affected as well.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-29824",
"url": "https://www.suse.com/security/cve/CVE-2022-29824"
},
{
"category": "external",
"summary": "SUSE Bug 1199132 for CVE-2022-29824",
"url": "https://bugzilla.suse.com/1199132"
},
{
"category": "external",
"summary": "SUSE Bug 1202878 for CVE-2022-29824",
"url": "https://bugzilla.suse.com/1202878"
},
{
"category": "external",
"summary": "SUSE Bug 1204121 for CVE-2022-29824",
"url": "https://bugzilla.suse.com/1204121"
},
{
"category": "external",
"summary": "SUSE Bug 1204131 for CVE-2022-29824",
"url": "https://bugzilla.suse.com/1204131"
},
{
"category": "external",
"summary": "SUSE Bug 1205069 for CVE-2022-29824",
"url": "https://bugzilla.suse.com/1205069"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-29824"
},
{
"cve": "CVE-2022-34169",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-34169"
}
],
"notes": [
{
"category": "general",
"text": "The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 or later. Note: Java runtimes (such as OpenJDK) include repackaged copies of Xalan.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-34169",
"url": "https://www.suse.com/security/cve/CVE-2022-34169"
},
{
"category": "external",
"summary": "SUSE Bug 1201684 for CVE-2022-34169",
"url": "https://bugzilla.suse.com/1201684"
},
{
"category": "external",
"summary": "SUSE Bug 1202427 for CVE-2022-34169",
"url": "https://bugzilla.suse.com/1202427"
},
{
"category": "external",
"summary": "SUSE Bug 1207688 for CVE-2022-34169",
"url": "https://bugzilla.suse.com/1207688"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-34169"
},
{
"cve": "CVE-2023-29469",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-29469"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the \u0027\\0\u0027 value).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-29469",
"url": "https://www.suse.com/security/cve/CVE-2023-29469"
},
{
"category": "external",
"summary": "SUSE Bug 1210412 for CVE-2023-29469",
"url": "https://bugzilla.suse.com/1210412"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-nokogiri-1.15.5-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-29469"
}
]
}
gsd-2020-7595
Vulnerability from gsd
Modified
2020-02-12 00:00
Details
Nokogiri has backported the patch for CVE-2020-7595 into its vendored version
of libxml2, and released this as v1.10.8
CVE-2020-7595 has not yet been addressed in an upstream libxml2 release, and
so Nokogiri versions <= v1.10.7 are vulnerable.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2020-7595",
"description": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.",
"id": "GSD-2020-7595",
"references": [
"https://www.suse.com/security/cve/CVE-2020-7595.html",
"https://access.redhat.com/errata/RHSA-2020:4479",
"https://access.redhat.com/errata/RHSA-2020:3996",
"https://access.redhat.com/errata/RHSA-2020:2646",
"https://access.redhat.com/errata/RHSA-2020:2644",
"https://ubuntu.com/security/CVE-2020-7595",
"https://advisories.mageia.org/CVE-2020-7595.html",
"https://security.archlinux.org/CVE-2020-7595",
"https://alas.aws.amazon.com/cve/html/CVE-2020-7595.html",
"https://linux.oracle.com/cve/CVE-2020-7595.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"affected": [
{
"package": {
"ecosystem": "RubyGems",
"name": "nokogiri",
"purl": "pkg:gem/nokogiri"
}
}
],
"aliases": [
"CVE-2020-7595",
"GHSA-7553-jr98-vx47"
],
"details": "\nNokogiri has backported the patch for CVE-2020-7595 into its vendored version\nof libxml2, and released this as v1.10.8\n\nCVE-2020-7595 has not yet been addressed in an upstream libxml2 release, and\nso Nokogiri versions \u003c= v1.10.7 are vulnerable.",
"id": "GSD-2020-7595",
"modified": "2020-02-12T00:00:00.000Z",
"published": "2020-02-12T00:00:00.000Z",
"references": [
{
"type": "WEB",
"url": "https://github.com/sparklemotion/nokogiri/issues/1992"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": 5.0,
"type": "CVSS_V2"
},
{
"score": 7.5,
"type": "CVSS_V3"
}
],
"summary": "libxml2 2.9.10 has an infinite loop in a certain end-of-file situation"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-7595",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "FEDORA-2020-41fe1680f6",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/545SPOI3ZPPNPX4TFRIVE4JVRTJRKULL/"
},
{
"name": "USN-4274-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4274-1/"
},
{
"name": "FEDORA-2020-0c71c00af4",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/"
},
{
"name": "FEDORA-2020-7694e8be73",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH/"
},
{
"name": "openSUSE-SU-2020:0681",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html"
},
{
"name": "https://www.oracle.com/security-alerts/cpujul2020.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpujul2020.html"
},
{
"name": "https://security.netapp.com/advisory/ntap-20200702-0005/",
"refsource": "CONFIRM",
"url": "https://security.netapp.com/advisory/ntap-20200702-0005/"
},
{
"name": "https://gitlab.gnome.org/GNOME/libxml2/commit/0e1a49c89076",
"refsource": "MISC",
"url": "https://gitlab.gnome.org/GNOME/libxml2/commit/0e1a49c89076"
},
{
"name": "[debian-lts-announce] 20200909 [SECURITY] [DLA 2369-1] libxml2 security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html"
},
{
"name": "GLSA-202010-04",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/202010-04"
},
{
"name": "https://www.oracle.com/security-alerts/cpuoct2021.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
},
{
"name": "https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf",
"refsource": "CONFIRM",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf"
},
{
"name": "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-08",
"refsource": "CONFIRM",
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-08"
},
{
"name": "https://www.oracle.com/security-alerts/cpuapr2022.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
},
{
"name": "https://www.oracle.com/security-alerts/cpujul2022.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpujul2022.html"
}
]
}
},
"github.com/rubysec/ruby-advisory-db": {
"cve": "2020-7595",
"cvss_v2": 5.0,
"cvss_v3": 7.5,
"date": "2020-02-12",
"description": "\nNokogiri has backported the patch for CVE-2020-7595 into its vendored version\nof libxml2, and released this as v1.10.8\n\nCVE-2020-7595 has not yet been addressed in an upstream libxml2 release, and\nso Nokogiri versions \u003c= v1.10.7 are vulnerable.",
"gem": "nokogiri",
"ghsa": "7553-jr98-vx47",
"patched_versions": [
"\u003e= 1.10.8"
],
"title": "libxml2 2.9.10 has an infinite loop in a certain end-of-file situation",
"url": "https://github.com/sparklemotion/nokogiri/issues/1992"
},
"gitlab.com": {
"advisories": [
{
"affected_range": "=2.9.10",
"affected_versions": "Version 2.9.10",
"cvss_v2": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"cwe_ids": [
"CWE-1035",
"CWE-835",
"CWE-937"
],
"date": "2021-12-08",
"description": "`xmlStringLenDecodeEntities` in `parser.c` in libxml2 has an infinite loop in a certain end-of-file situation.",
"fixed_versions": [
"2.9.12"
],
"identifier": "CVE-2020-7595",
"identifiers": [
"CVE-2020-7595"
],
"not_impacted": "All versions before 2.9.10, all versions after 2.9.10",
"package_slug": "conan/libxml2",
"pubdate": "2020-01-21",
"solution": "Upgrade to version 2.9.12 or above.",
"title": "Loop with Unreachable Exit Condition (Infinite Loop)",
"urls": [
"https://nvd.nist.gov/vuln/detail/CVE-2020-7595"
],
"uuid": "bdeefa5e-b62a-416b-903a-8bdad25d7d89"
},
{
"affected_range": "\u003c1.10.8",
"affected_versions": "All versions before 1.10.8",
"cvss_v2": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"cwe_ids": [
"CWE-1035",
"CWE-835",
"CWE-937"
],
"date": "2021-12-08",
"description": "`xmlStringLenDecodeEntities` in `parser.c` in libxml2 has an infinite loop in a certain end-of-file situation.",
"fixed_versions": [
"1.10.8"
],
"identifier": "CVE-2020-7595",
"identifiers": [
"CVE-2020-7595"
],
"not_impacted": "All versions starting from 1.10.8",
"package_slug": "gem/nokogiri",
"pubdate": "2020-01-21",
"solution": "Upgrade to version 1.10.8 or above.",
"title": "Loop with Unreachable Exit Condition (Infinite Loop)",
"urls": [
"https://nvd.nist.gov/vuln/detail/CVE-2020-7595"
],
"uuid": "a50aefc9-9e11-4696-bf0c-e4d0dc418f0b"
},
{
"affected_range": "(,)",
"affected_versions": "All versions",
"cvss_v2": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"cwe_ids": [
"CWE-1035",
"CWE-835",
"CWE-937"
],
"date": "2021-12-08",
"description": "xmlStringLenDecodeEntities in parser.c in libxml2 has an infinite loop in a certain end-of-file situation.",
"fixed_versions": [],
"identifier": "CVE-2020-7595",
"identifiers": [
"CVE-2020-7595"
],
"not_impacted": "",
"package_slug": "nuget/libxml2",
"pubdate": "2020-01-21",
"solution": "Unfortunately, there is no solution available yet.",
"title": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)",
"urls": [
"https://nvd.nist.gov/vuln/detail/CVE-2020-7595",
"https://gitlab.gnome.org/GNOME/libxml2/commit/0e1a49c89076",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/545SPOI3ZPPNPX4TFRIVE4JVRTJRKULL/",
"https://usn.ubuntu.com/4274-1/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH/",
"http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html",
"https://security.netapp.com/advisory/ntap-20200702-0005/",
"https://www.oracle.com/security-alerts/cpujul2020.html",
"https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html",
"https://security.gentoo.org/glsa/202010-04",
"https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf",
"https://us-cert.cisa.gov/ics/advisories/icsa-21-103-08",
"https://www.oracle.com/security-alerts/cpuoct2021.html"
],
"uuid": "eb6d522e-c635-443c-8d33-a241a285b79e"
}
]
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:xmlsoft:libxml2:2.9.10:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:siemens:sinema_remote_connect_server:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:smi-s_provider:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:snapdrive:-:*:*:*:*:windows:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:symantec_netbackup:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:oracle:real_user_experience_insight:13.3.1.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:enterprise_manager_base_platform:13.4.0.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:enterprise_manager_base_platform:13.5.0.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "8.0.26",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:real_user_experience_insight:13.4.1.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:real_user_experience_insight:13.5.1.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:1.10.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-7595"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-835"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://gitlab.gnome.org/GNOME/libxml2/commit/0e1a49c89076",
"refsource": "MISC",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://gitlab.gnome.org/GNOME/libxml2/commit/0e1a49c89076"
},
{
"name": "FEDORA-2020-41fe1680f6",
"refsource": "FEDORA",
"tags": [
"Third Party Advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/545SPOI3ZPPNPX4TFRIVE4JVRTJRKULL/"
},
{
"name": "USN-4274-1",
"refsource": "UBUNTU",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/4274-1/"
},
{
"name": "FEDORA-2020-0c71c00af4",
"refsource": "FEDORA",
"tags": [
"Third Party Advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/"
},
{
"name": "FEDORA-2020-7694e8be73",
"refsource": "FEDORA",
"tags": [
"Third Party Advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH/"
},
{
"name": "openSUSE-SU-2020:0681",
"refsource": "SUSE",
"tags": [
"Broken Link"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html"
},
{
"name": "https://security.netapp.com/advisory/ntap-20200702-0005/",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "https://security.netapp.com/advisory/ntap-20200702-0005/"
},
{
"name": "https://www.oracle.com/security-alerts/cpujul2020.html",
"refsource": "MISC",
"tags": [
"Third Party Advisory"
],
"url": "https://www.oracle.com/security-alerts/cpujul2020.html"
},
{
"name": "[debian-lts-announce] 20200909 [SECURITY] [DLA 2369-1] libxml2 security update",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html"
},
{
"name": "GLSA-202010-04",
"refsource": "GENTOO",
"tags": [
"Third Party Advisory"
],
"url": "https://security.gentoo.org/glsa/202010-04"
},
{
"name": "https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf"
},
{
"name": "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-08",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-08"
},
{
"name": "https://www.oracle.com/security-alerts/cpuoct2021.html",
"refsource": "MISC",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
},
{
"name": "https://www.oracle.com/security-alerts/cpuapr2022.html",
"refsource": "MISC",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
},
{
"name": "N/A",
"refsource": "N/A",
"tags": [],
"url": "https://www.oracle.com/security-alerts/cpujul2022.html"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
},
"lastModifiedDate": "2022-07-25T18:15Z",
"publishedDate": "2020-01-21T23:15Z"
}
}
}
ghsa-7553-jr98-vx47
Vulnerability from github
Published
2020-02-24 19:12
Modified
2022-04-22 17:29
Severity ?
VLAI Severity ?
Summary
libxml as used in Nokogiri has an infinite loop in a certain end-of-file situation
Details
xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation. The Nokogiri RubyGem has patched its vendored copy of libxml2 in order to prevent this issue from affecting nokogiri.
{
"affected": [
{
"package": {
"ecosystem": "RubyGems",
"name": "nokogiri"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.10.8"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2020-7595"
],
"database_specific": {
"cwe_ids": [
"CWE-835"
],
"github_reviewed": true,
"github_reviewed_at": "2020-02-18T18:58:16Z",
"nvd_published_at": "2020-01-21T23:15:00Z",
"severity": "HIGH"
},
"details": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.\nThe Nokogiri RubyGem has patched its vendored copy of libxml2 in order to prevent this issue from affecting nokogiri.",
"id": "GHSA-7553-jr98-vx47",
"modified": "2022-04-22T17:29:45Z",
"published": "2020-02-24T19:12:36Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595"
},
{
"type": "WEB",
"url": "https://github.com/sparklemotion/nokogiri/issues/1992"
},
{
"type": "WEB",
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
},
{
"type": "WEB",
"url": "https://www.oracle.com/security-alerts/cpujul2022.html"
},
{
"type": "WEB",
"url": "https://www.oracle.com/security-alerts/cpujul2020.html"
},
{
"type": "WEB",
"url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
},
{
"type": "WEB",
"url": "https://usn.ubuntu.com/4274-1"
},
{
"type": "WEB",
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-08"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20200702-0005"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/202010-04"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/545SPOI3ZPPNPX4TFRIVE4JVRTJRKULL"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html"
},
{
"type": "WEB",
"url": "https://gitlab.gnome.org/GNOME/libxml2/commit/0e1a49c89076"
},
{
"type": "PACKAGE",
"url": "https://github.com/sparklemotion/nokogiri"
},
{
"type": "WEB",
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2020-7595.yml"
},
{
"type": "WEB",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
],
"summary": "libxml as used in Nokogiri has an infinite loop in a certain end-of-file situation"
}
RHSA-2021:0949
Vulnerability from csaf_redhat
Published
2021-03-22 10:10
Modified
2025-02-28 01:28
Summary
Red Hat Security Advisory: Red Hat OpenShift Do openshift/odo-init-image 1.1.3 security update
Notes
Topic
Updated openshift/odo-init-image container image is now available for Red Hat Openshift Do 1.0.
Details
Red Hat OpenShift Do (odo) is a simple CLI tool for developers to create,
build, and deploy applications on OpenShift. The odo tool is completely
client-based and requires no server within the OpenShift cluster for
deployment. It detects changes to local code and deploys it to the cluster
automatically, giving instant feedback to validate changes in real-time. It
supports multiple programming languages and frameworks.
Red Hat OpenShift Do openshift/odo-init-image 1.1.3 is a container image
that is used as part of the InitContainer setup that provisions odo
components.
The advisory addresses the following issues:
* Re-release of odo-init-image 1.1.3 for security updates
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Low"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated openshift/odo-init-image container image is now available for Red Hat Openshift Do 1.0.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Do (odo) is a simple CLI tool for developers to create,\nbuild, and deploy applications on OpenShift. The odo tool is completely\nclient-based and requires no server within the OpenShift cluster for\ndeployment. It detects changes to local code and deploys it to the cluster\nautomatically, giving instant feedback to validate changes in real-time. It\nsupports multiple programming languages and frameworks.\n\nRed Hat OpenShift Do openshift/odo-init-image 1.1.3 is a container image\nthat is used as part of the InitContainer setup that provisions odo\ncomponents.\n\nThe advisory addresses the following issues:\n\n* Re-release of odo-init-image 1.1.3 for security updates",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2021:0949",
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#low",
"url": "https://access.redhat.com/security/updates/classification/#low"
},
{
"category": "external",
"summary": "https://docs.openshift.com/container-platform/4.4/cli_reference/openshift_developer_cli/installing-odo.html",
"url": "https://docs.openshift.com/container-platform/4.4/cli_reference/openshift_developer_cli/installing-odo.html"
},
{
"category": "external",
"summary": "1832983",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1832983"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0949.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Do openshift/odo-init-image 1.1.3 security update",
"tracking": {
"current_release_date": "2025-02-28T01:28:29+00:00",
"generator": {
"date": "2025-02-28T01:28:29+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.3.1"
}
},
"id": "RHSA-2021:0949",
"initial_release_date": "2021-03-22T10:10:55+00:00",
"revision_history": [
{
"date": "2021-03-22T10:10:55+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2021-03-22T10:10:55+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-02-28T01:28:29+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "OpenShift Do 1",
"product": {
"name": "OpenShift Do 1",
"product_id": "7Server-RHODO-1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_do:1.0::el7"
}
}
}
],
"category": "product_family",
"name": "OpenShift Do"
},
{
"branches": [
{
"category": "product_version",
"name": "openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64",
"product": {
"name": "openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64",
"product_id": "openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96?arch=amd64\u0026repository_url=registry.redhat.io/openshiftdo/odo-init-image-rhel7\u0026tag=1.1.3-2"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64 as a component of OpenShift Do 1",
"product_id": "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
},
"product_reference": "openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64",
"relates_to_product_reference": "7Server-RHODO-1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-20843",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-06-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1723723"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the \"setElementTypePrefix()\" function incorrectly extracted XML namespace prefixes. By tricking an application into processing a specially crafted XML file, an attacker could cause unusually high consumption of memory resources and possibly lead to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "expat: large number of colons in input makes parser consume high amount of resources, leading to DoS",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "When processing a specially crafted XML file, expat may use more memory than ultimately necessary, which can also lead to increased CPU usage and longer processing times. Depending on available system resources and configuration, this may also lead to the application triggering the Out-Of-Memory-Killer, causing the application to be terminated.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-20843"
},
{
"category": "external",
"summary": "RHBZ#1723723",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1723723"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-20843",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-20843"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-20843",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-20843"
},
{
"category": "external",
"summary": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931031",
"url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931031"
}
],
"release_date": "2019-06-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "expat: large number of colons in input makes parser consume high amount of resources, leading to DoS"
},
{
"cve": "CVE-2019-5094",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2019-11-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1768555"
}
],
"notes": [
{
"category": "description",
"text": "An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "e2fsprogs: Crafted ext4 partition leads to out-of-bounds write",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5094"
},
{
"category": "external",
"summary": "RHBZ#1768555",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1768555"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5094",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5094"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5094",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5094"
},
{
"category": "external",
"summary": "https://talosintelligence.com/vulnerability_reports/TALOS-2019-0887",
"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2019-0887"
}
],
"release_date": "2019-08-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "e2fsprogs: Crafted ext4 partition leads to out-of-bounds write"
},
{
"cve": "CVE-2019-5188",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2020-01-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1790048"
}
],
"notes": [
{
"category": "description",
"text": "A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "e2fsprogs: Out-of-bounds write in e2fsck/rehash.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5188"
},
{
"category": "external",
"summary": "RHBZ#1790048",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1790048"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5188",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5188"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5188",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5188"
}
],
"release_date": "2020-01-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "e2fsprogs: Out-of-bounds write in e2fsck/rehash.c"
},
{
"acknowledgments": [
{
"names": [
"the Curl project"
]
},
{
"names": [
"Thomas Vegas"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-5482",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2019-09-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1749652"
}
],
"notes": [
{
"category": "description",
"text": "Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: heap buffer overflow in function tftp_receive_packet()",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5482"
},
{
"category": "external",
"summary": "RHBZ#1749652",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1749652"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5482",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5482"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5482",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5482"
},
{
"category": "external",
"summary": "https://curl.haxx.se/docs/CVE-2019-5482.html",
"url": "https://curl.haxx.se/docs/CVE-2019-5482.html"
}
],
"release_date": "2019-09-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
},
{
"category": "workaround",
"details": "Do not use TFTP with curl with smaller than the default BLKSIZE.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: heap buffer overflow in function tftp_receive_packet()"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Henry Corrigan-Gibbs"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11719",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2019-07-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1728436"
}
],
"notes": [
{
"category": "description",
"text": "When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger an out-of-bounds read in the Network Security Services (NSS) library. This could lead to information disclosure. This vulnerability affects Firefox ESR \u003c 60.8, Firefox \u003c 68, and Thunderbird \u003c 60.8.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: Out-of-bounds read when importing curve25519 private key",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Firefox on Red Hat Enterprise Linux is built against the system nss library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11719"
},
{
"category": "external",
"summary": "RHBZ#1728436",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1728436"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11719",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11719"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11719",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11719"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-22/#CVE-2019-11719",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-22/#CVE-2019-11719"
}
],
"release_date": "2019-07-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: Out-of-bounds read when importing curve25519 private key"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Hubert Kario"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11727",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"discovery_date": "2019-07-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1730988"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerability affects Firefox \u003c 68.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: PKCS#1 v1.5 signatures can be used for TLS 1.3",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11727"
},
{
"category": "external",
"summary": "RHBZ#1730988",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730988"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11727",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11727"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11727",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11727"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-21/#CVE-2019-11727",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-21/#CVE-2019-11727"
}
],
"release_date": "2019-07-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.4,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "nss: PKCS#1 v1.5 signatures can be used for TLS 1.3"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
}
],
"cve": "CVE-2019-11756",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-11-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1774835"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free flaw was found in Mozilla Network Security Services (NSS) related to PK11 session handling. An attacker could use this flaw to execute arbitrary code with the permissions of the user running the application compiled with NSS.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: Use-after-free in sftk_FreeSession due to improper refcounting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw was fixed in upstream nss-3.47. Exploitation of this flaw is difficult and even impossible in most cases.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11756"
},
{
"category": "external",
"summary": "RHBZ#1774835",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1774835"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11756",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11756"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11756",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11756"
},
{
"category": "external",
"summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.47_release_notes",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.47_release_notes"
}
],
"release_date": "2019-12-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: Use-after-free in sftk_FreeSession due to improper refcounting"
},
{
"cve": "CVE-2019-12450",
"cwe": {
"id": "CWE-552",
"name": "Files or Directories Accessible to External Parties"
},
"discovery_date": "2019-06-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1719141"
}
],
"notes": [
{
"category": "description",
"text": "file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissions are used.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the versions of glib2 as shipped with Red Hat Enterprise Linux 6, 7 and 8 . Red Hat Product Security has rated this issue as having a security impact of Moderate.\n\nRed Hat Enterprise Linux 6 is now in Maintenance Support 2 Phase of the support and maintenance life cycle. This has been rated as having a security impact of Important, and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-12450"
},
{
"category": "external",
"summary": "RHBZ#1719141",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1719141"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-12450",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-12450"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-12450",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-12450"
}
],
"release_date": "2019-05-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress"
},
{
"acknowledgments": [
{
"names": [
"the D-Bus project"
]
},
{
"names": [
"Joe Vennix"
],
"organization": "Apple Information Security",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-12749",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"discovery_date": "2019-06-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1719344"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in dbus. The implementation of DBUS_COOKIE_SHA1 is susceptible to a symbolic link attack. A malicious client with write access to its own home directory could manipulate a ~/.dbus-keyrings symlink to cause the DBusServer to read and write in unintended locations resulting in an authentication bypass. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is mitigated by the fact that by default, the well-known system dbus-daemon (since 2003) and the well-known session dbus-daemon (in stable releases since dbus 1.10.0 in 2015) only accept the EXTERNAL authentication mechanism, and as a result will reject DBUS_COOKIE_SHA1 at an early stage, before manipulating cookies. \n\nRed Hat Enterprise Linux 6 is affected by this flaw, which can be leveraged to achieve privilege escalation via upstart. This issue has been rated as having important impact for Red Hat Enterprise Linux 6.\n\nRed Hat Enterprise Linux 7 and 8, both ship dbus \u003e= 1.10 and therefore are affected by this flaw only when system or session dbus-daemons are used under non-standard configurations or by third party users of DBusServer. Red Hat Enterprise Linux 7 and 8 does not ship any affected DBusServer cosumer. However third party applications may be affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-12749"
},
{
"category": "external",
"summary": "RHBZ#1719344",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1719344"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-12749",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-12749"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-12749",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-12749"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2019/06/11/2",
"url": "https://www.openwall.com/lists/oss-security/2019/06/11/2"
}
],
"release_date": "2019-06-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass"
},
{
"acknowledgments": [
{
"names": [
"Simon McVittie"
],
"organization": "Collabora Ltd."
}
],
"cve": "CVE-2019-14822",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"discovery_date": "2019-06-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1717958"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was discovered in ibus that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to a misconfiguration in the DBus server setup. A local attacker may use this flaw to intercept all keystrokes of a victim user who is using the graphical interface, change the input method engine, or modify other input related configurations of the victim user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ibus: missing authorization allows local attacker to access the input bus of another user",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Gnome uses the ibus input framework only when the user explicitly configures it or when some input method sources are in use, like Korean from the ibus-hangul package or Chinese input methods from the ibus-libpinyin. Input methods like en-US are not handled by ibus, thus if the victim user just use them the attacker will not be able to intercept the key strokes of that user.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-14822"
},
{
"category": "external",
"summary": "RHBZ#1717958",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1717958"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-14822",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-14822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14822"
}
],
"release_date": "2019-09-13T07:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "ibus: missing authorization allows local attacker to access the input bus of another user"
},
{
"acknowledgments": [
{
"names": [
"Thomas Habets"
]
}
],
"cve": "CVE-2019-14866",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2019-10-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1765511"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered cpio does not properly validate input files when generating TAR archives. When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may contain files with permissions the attacker did not have or in paths he did not have access to. Extracting those archives from a high-privilege user without carefully reviewing them may lead to the compromise of the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cpio: improper input validation when writing tar header fields leads to unexpected tar generation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-14866"
},
{
"category": "external",
"summary": "RHBZ#1765511",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1765511"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-14866",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-14866"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14866",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14866"
}
],
"release_date": "2019-08-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
},
{
"category": "workaround",
"details": "TAR archives should be inspected before being extracted and the extraction should be performed with the `tar` command or `--no-absolute-filenames` option if done with `cpio`. Moreover, it should be performed by a low-privilege user whenever possible, to prevent extraction of files that could compromise the system.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cpio: improper input validation when writing tar header fields leads to unexpected tar generation"
},
{
"cve": "CVE-2019-15903",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2019-09-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1752592"
}
],
"notes": [
{
"category": "description",
"text": "In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "expat: heap-based buffer over-read via crafted XML input",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-15903"
},
{
"category": "external",
"summary": "RHBZ#1752592",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752592"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-15903",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-15903"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-15903",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-15903"
}
],
"release_date": "2019-09-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "expat: heap-based buffer over-read via crafted XML input"
},
{
"cve": "CVE-2019-16935",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2019-09-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1763229"
}
],
"notes": [
{
"category": "description",
"text": "A reflected cross-site scripting (XSS) vulnerability was found in Python XML-RPC server. The `server_title` field is not sufficiently sanitized allowing malicious JavaScript to be injected. Successful exploitation would allow a remote attacker to execute JavaScript code within the context of the affected user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: XSS vulnerability in the documentation XML-RPC server in server_title field",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw does not affect the versions of python27-python as shipped with Red Hat Software Collections 3 as they already include the fix.\nThis flaw does not affect the versions of python36:3.6/python36 as shipped with Red Hat Enterprise Linux 8 as they are \"symlinks\" to the main python3 component, which provides the actual interpreter of the Python programming language.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-16935"
},
{
"category": "external",
"summary": "RHBZ#1763229",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1763229"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-16935",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-16935"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-16935",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-16935"
}
],
"release_date": "2019-09-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "python: XSS vulnerability in the documentation XML-RPC server in server_title field"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla Project"
]
}
],
"cve": "CVE-2019-17006",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2019-11-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1775916"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was discovered in nss where input text length was not checked when using certain cryptographic primitives. This could lead to a heap-buffer overflow resulting in a crash and data leak. The highest threat is to confidentiality and integrity of data as well as system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: Check length of inputs for cryptographic primitives",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-17006"
},
{
"category": "external",
"summary": "RHBZ#1775916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1775916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-17006",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-17006"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-17006",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17006"
},
{
"category": "external",
"summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46_release_notes",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46_release_notes"
}
],
"release_date": "2019-12-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: Check length of inputs for cryptographic primitives"
},
{
"cve": "CVE-2019-17023",
"discovery_date": "2020-01-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1791225"
}
],
"notes": [
{
"category": "description",
"text": "A protocol downgrade flaw was found in Network Security Services (NSS). After a HelloRetryRequest has been sent, the client may negotiate a lower protocol than TLS 1.3, resulting in an invalid state transition in the TLS State Machine. If the client gets into this state, incoming Application Data records will be ignored.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw causes the client to hang when there is a downgrade attempt. Therefore no actual protocol downgrade occurs.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-17023"
},
{
"category": "external",
"summary": "RHBZ#1791225",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1791225"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-17023",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-17023"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-17023",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17023"
},
{
"category": "external",
"summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes"
}
],
"release_date": "2020-01-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state"
},
{
"cve": "CVE-2019-17498",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-10-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1766898"
}
],
"notes": [
{
"category": "description",
"text": "In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libssh2: integer overflow in SSH_MSG_DISCONNECT logic in packet.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw needs a malicious MITM SSH server. When an application compiled with libssh2 connects to such a MITM SSH server, the server can trigger an integer overflow leading to an OOB read in the SSH_MSG_DISCONNECT logic. This can cause the application compiled with libssh2 to crash. This is strictly a client side crash and the SSH server may not be affected.\n\nAlso note that when a user connects to a malicious MITM server there is already a risk of disclosing password/keys irrespective of the flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-17498"
},
{
"category": "external",
"summary": "RHBZ#1766898",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1766898"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-17498",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-17498"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-17498",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17498"
},
{
"category": "external",
"summary": "https://blog.semmle.com/libssh2-integer-overflow-CVE-2019-17498/",
"url": "https://blog.semmle.com/libssh2-integer-overflow-CVE-2019-17498/"
}
],
"release_date": "2019-10-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libssh2: integer overflow in SSH_MSG_DISCONNECT logic in packet.c"
},
{
"cve": "CVE-2019-19126",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2019-11-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1774681"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was discovered in glibc where the LD_PREFER_MAP_32BIT_EXEC environment variable is not ignored when running binaries with the setuid flag on x86_64 architectures. This allows an attacker to force system to utilize only half of the memory (making the system think the software is 32-bit only), thus lowering the amount of memory being used with address space layout randomization (ASLR). The highest threat is confidentiality although the complexity of attack is high. The affected application must already have other vulnerabilities for this flaw to be usable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-19126"
},
{
"category": "external",
"summary": "RHBZ#1774681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1774681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-19126",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19126"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19126",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19126"
}
],
"release_date": "2019-11-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 2.9,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries"
},
{
"cve": "CVE-2019-19956",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2020-01-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1788856"
}
],
"notes": [
{
"category": "description",
"text": "xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc-\u003eoldNs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-19956"
},
{
"category": "external",
"summary": "RHBZ#1788856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788856"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-19956",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956"
}
],
"release_date": "2020-01-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c"
},
{
"cve": "CVE-2019-20386",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2020-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1793979"
}
],
"notes": [
{
"category": "description",
"text": "A memory leak was discovered in the systemd-login when a power-switch event is received. A physical attacker may trigger one of these events and leak bytes due to a missing free.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "systemd: memory leak in button_open() in login/logind-button.c when udev events are received",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The version of systemd delivered in OpenShift Container Platform 4.1 and included in CoreOS images has been superseded by the version delivered in Red Hat Enterprise Linux 8. CoreOS updates for systemd in will be consumed from Red Hat Enterprise Linux 8 channels.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-20386"
},
{
"category": "external",
"summary": "RHBZ#1793979",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793979"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-20386",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20386"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20386",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20386"
}
],
"release_date": "2020-01-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "PHYSICAL",
"availabilityImpact": "LOW",
"baseScore": 2.4,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "systemd: memory leak in button_open() in login/logind-button.c when udev events are received"
},
{
"cve": "CVE-2019-20388",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"discovery_date": "2020-02-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1799734"
}
],
"notes": [
{
"category": "description",
"text": "A memory leak was found in the xmlSchemaValidateStream function of libxml2. Applications that use this library may be vulnerable to memory not being freed leading to a denial of service. System availability is the highest threat from this vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-20388"
},
{
"category": "external",
"summary": "RHBZ#1799734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799734"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-20388",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20388"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388"
}
],
"release_date": "2020-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c"
},
{
"cve": "CVE-2019-20907",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2020-07-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1856481"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in python. In Lib/tarfile.py an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: infinite loop in the tarfile module via crafted TAR archive",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A service is vulnerable if it uses python\u0027s tarfile module to open untrusted tar files. If an attacker is able to submit a crafted tar file to a service which uses the tarfile module to open it, an infinite loop will be executed, potentially causing a denial of service. The tarfile module is included with python.\n\nVersions of `python36:3.6/python36` as shipped with Red Hat Enterprise Linux 8 are marked as \u0027Not affected\u0027 as they just provide \"symlinks\" to the main `python3` component, which provides the actual interpreter of the Python programming language.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-20907"
},
{
"category": "external",
"summary": "RHBZ#1856481",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1856481"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-20907",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20907"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20907",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20907"
}
],
"release_date": "2019-12-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
},
{
"category": "workaround",
"details": "This flaw can be mitigated by not opening untrusted files with tarfile.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "python: infinite loop in the tarfile module via crafted TAR archive"
},
{
"cve": "CVE-2019-25013",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2021-01-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1912960"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in glibc. When processing input in the EUC-KR encoding, an invalid input sequence could cause glibc to read beyond the end of a buffer, resulting in a segmentation fault. The highest threat from this vulnerability is to system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has been rated as having moderate impact for glibc packages shipped with Red Hat Enterprise Linux because, the maximum impact of this vulnerability is a crash, and it relies on processing untrusted input in an uncommon encoding (EUC-KR). When this encoding is not used, the vulnerability can not be triggered.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-25013"
},
{
"category": "external",
"summary": "RHBZ#1912960",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1912960"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-25013",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-25013"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-25013",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-25013"
}
],
"release_date": "2019-09-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding"
},
{
"acknowledgments": [
{
"names": [
"the OpenSSL project"
]
},
{
"names": [
"David Benjamin"
],
"organization": "Google",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2020-1971",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2020-12-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1903409"
}
],
"notes": [
{
"category": "description",
"text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: EDIPARTYNAME NULL pointer de-reference",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-1971"
},
{
"category": "external",
"summary": "RHBZ#1903409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-1971"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20201208.txt",
"url": "https://www.openssl.org/news/secadv/20201208.txt"
}
],
"release_date": "2020-12-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
},
{
"category": "workaround",
"details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openssl: EDIPARTYNAME NULL pointer de-reference"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla Project"
]
},
{
"names": [
"Cesar Pereida",
"Nicola Tuveri",
"Yuval Yarom",
"Billy Bob Brumley"
],
"organization": "Network and Information Security Group (NISEC",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2020-6829",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"discovery_date": "2020-04-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1826187"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in nss. Using the EM side-channel, it is possible to extract the position of zero and non-zero wNAF digits while nss-certutil tool performs scalar multiplication during the ECDSA signature generation, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures, this information can be used to steal the private key. The highest threat from this vulnerability is to data confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: Side channel attack on ECDSA signature generation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a side channel attack which can used to exact pirate keys when ECDSA signatures are being generated. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-6829"
},
{
"category": "external",
"summary": "RHBZ#1826187",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1826187"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-6829",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-6829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6829"
},
{
"category": "external",
"summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes"
}
],
"release_date": "2020-06-02T12:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: Side channel attack on ECDSA signature generation"
},
{
"cve": "CVE-2020-7595",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2020-02-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1799786"
}
],
"notes": [
{
"category": "description",
"text": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-7595"
},
{
"category": "external",
"summary": "RHBZ#1799786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799786"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-7595",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-7595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595"
}
],
"release_date": "2020-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations"
},
{
"cve": "CVE-2020-8177",
"discovery_date": "2020-06-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1847915"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in curl. Overwriting local files is possible when using a certain combination of command line options. Requesting content from a malicious server could lead to overwriting local files with compromised files leading to unknown effects. The highest threat from this vulnerability is to file integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: Incorrect argument check can allow remote servers to overwrite local files",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue only affects the \u0027curl\u0027 command line utility. Additionally, this is only an issue when using the \u0027-J\u0027 (with the \u0027-O\u0027 option) and \u0027-i\u0027 command line options combined.\n\nIn most cases, there is nothing to gain for a local attacker here: the curl command line utility is likely running with the same privileges as the user, and thus the user can already overwrite all the files curl could overwrite. However, a local user will have to call curl with the \u0027-J\u0027 and \u0027-i\u0027 command line options while requesting content from a malicious server, which then opens up an opportunity for the malicious server to overwrite local files.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8177"
},
{
"category": "external",
"summary": "RHBZ#1847915",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1847915"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8177",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8177"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8177",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8177"
},
{
"category": "external",
"summary": "https://curl.haxx.se/docs/CVE-2020-8177.html",
"url": "https://curl.haxx.se/docs/CVE-2020-8177.html"
}
],
"release_date": "2020-06-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
},
{
"category": "workaround",
"details": "The vulnerability is only possible when using the \u0027-J\u0027 and \u0027-i\u0027 switches in conjunction with the curl command. Executing curl without these switches mitigates the flaw.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:L",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: Incorrect argument check can allow remote servers to overwrite local files"
},
{
"cve": "CVE-2020-10029",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"discovery_date": "2020-03-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1810670"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in glibc in versions prior to 2.32. Pseudo-zero values are not validated causing a stack corruption due to a stack-based overflow. The highest threat from this vulnerability is to system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The glibc version shipped with Red Hat Enterprise Linux 8 is compiled using gcc\u0027s stack-protector option which mitigates the possibility of code execution led by the stack corruption.\n\nThe glibc version shipped with Red Hat Enterprise Linux 7 is more difficult to exploit using this flaw, specifically for remote code execution. Because exploitation of the flaw depends on the usage of pseudo-zero values, an attacker can only overwrite the stack with 0s. Due to this, a valid address value for code execution is difficult to get and is likely to only result in a crash.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-10029"
},
{
"category": "external",
"summary": "RHBZ#1810670",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1810670"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-10029",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-10029"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-10029",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10029"
}
],
"release_date": "2020-02-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions"
},
{
"cve": "CVE-2020-12243",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2020-04-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1833535"
}
],
"notes": [
{
"category": "description",
"text": "In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openldap: denial of service via nested boolean expressions in LDAP search filters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does not affect Red Hat Enterprise Linux 8 because we don\u0027t ship openldap-servers subpackage with the Red Hat Enterprise Linux 8 (it is only present in the buildroot).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-12243"
},
{
"category": "external",
"summary": "RHBZ#1833535",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1833535"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-12243",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-12243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12243"
}
],
"release_date": "2020-04-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openldap: denial of service via nested boolean expressions in LDAP search filters"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla Project"
]
},
{
"names": [
"Cesar Pereida Garcia and the Network and Information Security Group"
],
"organization": "NISEC",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2020-12400",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"discovery_date": "2020-07-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1853983"
}
],
"notes": [
{
"category": "description",
"text": "A side-channel flaw was found in NSS, in the way P-384 and P-521 curves are used in the generation of EDSA signatures, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures, this information can be used to steal the private key. The highest threat from this vulnerability is to data confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a side-channel attack that can be used to exact pirate keys when ECDSA signatures are being generated. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-12400"
},
{
"category": "external",
"summary": "RHBZ#1853983",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1853983"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-12400",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-12400"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12400",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12400"
},
{
"category": "external",
"summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes"
}
],
"release_date": "2020-07-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla Project"
]
},
{
"names": [
"Cesar Pereida Garcia and the Network and Information Security Group"
],
"organization": "NISEC",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2020-12401",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"discovery_date": "2020-06-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1851294"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in nss. Using the EM side-channel, it is possible to extract the position of zero and non-zero wNAF digits while nss-certutil tool performs scalar multiplication during the ECDSA signature generation, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures, this information can be used to steal the private key. The highest threat from this vulnerability is to data confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: ECDSA timing attack mitigation bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a side channel attack which can used to exact pirate keys when ECDSA signatures are being generated. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-12401"
},
{
"category": "external",
"summary": "RHBZ#1851294",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1851294"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-12401",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-12401"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12401",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12401"
},
{
"category": "external",
"summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes"
}
],
"release_date": "2020-06-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
},
{
"category": "workaround",
"details": "This is a side channel attack which can used to exact pirate keys when ECDSA signatures are being generated. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: ECDSA timing attack mitigation bypass"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla Project"
]
},
{
"names": [
"Billy Bob Brumley",
"Cesar Pereida",
"Nicola Tuveri",
"Yuval Yarom"
],
"organization": "Network and Information Security Group (NISEC",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2020-12402",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"discovery_date": "2020-04-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1826231"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in NSS, where it is vulnerable to RSA key generation cache timing side-channel attacks. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. The highest threat to this flaw is to confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: Side channel vulnerabilities during RSA key generation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A timing attack was found in the way NSS generated RSA keys. A man-in-the-middle attacker could use this attack during RSA key generation to recover the private key. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-12402"
},
{
"category": "external",
"summary": "RHBZ#1826231",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1826231"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-12402",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-12402"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12402",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12402"
},
{
"category": "external",
"summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.53.1_release_notes",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.53.1_release_notes"
}
],
"release_date": "2020-06-02T12:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: Side channel vulnerabilities during RSA key generation"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla Project"
]
}
],
"cve": "CVE-2020-12403",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2020-08-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1868931"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which was not functioning correctly) and strictly enforcing tag length. The highest threat from this vulnerability is to confidentiality and system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-12403"
},
{
"category": "external",
"summary": "RHBZ#1868931",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1868931"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-12403",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-12403"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12403",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12403"
},
{
"category": "external",
"summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes"
}
],
"release_date": "2020-07-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read"
},
{
"cve": "CVE-2020-29573",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"discovery_date": "2020-12-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1905213"
}
],
"notes": [
{
"category": "description",
"text": "A stack buffer overflow flaw was found in glibc in the way the printf family of functions processed an 80-bit long double with a non-canonical bit pattern. This flaw allows an attacker who can control the arguments of these functions with the non-standard long double pattern to trigger an overflow and cause an application crash. The highest threat from this vulnerability is to system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is essentially a crash which can only be triggered by a non-standard argument passed as a long double input to a member of printf family of functions. The application has to be written in this way to allow this issue to be triggered. The maximum impact is an application crash.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-29573"
},
{
"category": "external",
"summary": "RHBZ#1905213",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1905213"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-29573",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-29573"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-29573",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-29573"
},
{
"category": "external",
"summary": "https://sourceware.org/pipermail/libc-alpha/2020-September/117779.html",
"url": "https://sourceware.org/pipermail/libc-alpha/2020-September/117779.html"
}
],
"release_date": "2020-09-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern"
}
]
}
rhsa-2020_2646
Vulnerability from csaf_redhat
Published
2020-06-22 13:08
Modified
2024-11-22 14:57
Summary
Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP3 security update
Notes
Topic
Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 3 zip release for RHEL 6, RHEL 7 and Microsoft Windows is available.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products, and is packaged under Red Hat JBoss Core Services to allow for faster distribution of updates, and for a more consistent update experience.
This release adds the new Apache HTTP Server 2.4.37 Service Pack 3 packages that are part of the JBoss Core Services offering.
This release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 2 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.
Security fix(es):
* httpd: mod_http2: read-after-free on a string compare (CVE-2019-0196)
* httpd: mod_http2: possible crash on late upgrade (CVE-2019-0197)
* httpd: mod_proxy_ftp use of uninitialized value (CVE-2020-1934)
* nghttp2: overly large SETTINGS frames can lead to DoS (CVE-2020-11080)
* libxml2: There's a memory leak in xmlParseBalancedChunkMemoryRecover in parser.c that could result in a crash (CVE-2019-19956)
* libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c (CVE-2019-20388)
* libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations (CVE-2020-7595)
* expat: large number of colons in input makes parser consume high amount of resources, leading to DoS (CVE-2018-20843)
* expat: heap-based buffer over-read via crafted XML input (CVE-2019-15903)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 3 zip release for RHEL 6, RHEL 7 and Microsoft Windows is available.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products, and is packaged under Red Hat JBoss Core Services to allow for faster distribution of updates, and for a more consistent update experience.\n\nThis release adds the new Apache HTTP Server 2.4.37 Service Pack 3 packages that are part of the JBoss Core Services offering.\n\nThis release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 2 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.\n\nSecurity fix(es):\n\n* httpd: mod_http2: read-after-free on a string compare (CVE-2019-0196)\n* httpd: mod_http2: possible crash on late upgrade (CVE-2019-0197)\n* httpd: mod_proxy_ftp use of uninitialized value (CVE-2020-1934)\n* nghttp2: overly large SETTINGS frames can lead to DoS (CVE-2020-11080)\n* libxml2: There\u0027s a memory leak in xmlParseBalancedChunkMemoryRecover in parser.c that could result in a crash (CVE-2019-19956)\n* libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c (CVE-2019-20388)\n* libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations (CVE-2020-7595)\n* expat: large number of colons in input makes parser consume high amount of resources, leading to DoS (CVE-2018-20843)\n* expat: heap-based buffer over-read via crafted XML input (CVE-2019-15903)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2020:2646",
"url": "https://access.redhat.com/errata/RHSA-2020:2646"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=core.service.apachehttp\u0026downloadType=securityPatches\u0026version=2.4.37",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=core.service.apachehttp\u0026downloadType=securityPatches\u0026version=2.4.37"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.37/",
"url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.37/"
},
{
"category": "external",
"summary": "1695030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695030"
},
{
"category": "external",
"summary": "1695042",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695042"
},
{
"category": "external",
"summary": "1723723",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1723723"
},
{
"category": "external",
"summary": "1752592",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752592"
},
{
"category": "external",
"summary": "1788856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788856"
},
{
"category": "external",
"summary": "1799734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799734"
},
{
"category": "external",
"summary": "1799786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799786"
},
{
"category": "external",
"summary": "1820772",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1820772"
},
{
"category": "external",
"summary": "1844929",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1844929"
},
{
"category": "external",
"summary": "JBCS-941",
"url": "https://issues.redhat.com/browse/JBCS-941"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2646.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP3 security update",
"tracking": {
"current_release_date": "2024-11-22T14:57:28+00:00",
"generator": {
"date": "2024-11-22T14:57:28+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2020:2646",
"initial_release_date": "2020-06-22T13:08:26+00:00",
"revision_history": [
{
"date": "2020-06-22T13:08:26+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2020-06-22T13:08:26+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T14:57:28+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Core Services 1",
"product": {
"name": "Red Hat JBoss Core Services 1",
"product_id": "Red Hat JBoss Core Services 1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_core_services:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Core Services"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-20843",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-06-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1723723"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the \"setElementTypePrefix()\" function incorrectly extracted XML namespace prefixes. By tricking an application into processing a specially crafted XML file, an attacker could cause unusually high consumption of memory resources and possibly lead to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "expat: large number of colons in input makes parser consume high amount of resources, leading to DoS",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "When processing a specially crafted XML file, expat may use more memory than ultimately necessary, which can also lead to increased CPU usage and longer processing times. Depending on available system resources and configuration, this may also lead to the application triggering the Out-Of-Memory-Killer, causing the application to be terminated.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-20843"
},
{
"category": "external",
"summary": "RHBZ#1723723",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1723723"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-20843",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-20843"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-20843",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-20843"
},
{
"category": "external",
"summary": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931031",
"url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931031"
}
],
"release_date": "2019-06-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T13:08:26+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"Red Hat JBoss Core Services 1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2646"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "expat: large number of colons in input makes parser consume high amount of resources, leading to DoS"
},
{
"cve": "CVE-2019-0196",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-04-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1695030"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparison when determining the method of a request and thus process the request incorrectly.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: mod_http2: read-after-free on a string compare",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-0196"
},
{
"category": "external",
"summary": "RHBZ#1695030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695030"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-0196",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0196"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0196",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0196"
},
{
"category": "external",
"summary": "http://www.apache.org/dist/httpd/CHANGES_2.4",
"url": "http://www.apache.org/dist/httpd/CHANGES_2.4"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2019-04-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T13:08:26+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"Red Hat JBoss Core Services 1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2646"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"Red Hat JBoss Core Services 1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "httpd: mod_http2: read-after-free on a string compare"
},
{
"cve": "CVE-2019-0197",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2019-04-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1695042"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. Server that never enabled the h2 protocol or that only enabled it for https: and did not set \"H2Upgrade on\" are unaffected by this issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: mod_http2: possible crash on late upgrade",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-0197"
},
{
"category": "external",
"summary": "RHBZ#1695042",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695042"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-0197",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0197"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0197",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0197"
},
{
"category": "external",
"summary": "http://www.apache.org/dist/httpd/CHANGES_2.4",
"url": "http://www.apache.org/dist/httpd/CHANGES_2.4"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2019-02-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T13:08:26+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"Red Hat JBoss Core Services 1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2646"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L",
"version": "3.0"
},
"products": [
"Red Hat JBoss Core Services 1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "httpd: mod_http2: possible crash on late upgrade"
},
{
"cve": "CVE-2019-15903",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2019-09-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1752592"
}
],
"notes": [
{
"category": "description",
"text": "In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "expat: heap-based buffer over-read via crafted XML input",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-15903"
},
{
"category": "external",
"summary": "RHBZ#1752592",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752592"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-15903",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-15903"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-15903",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-15903"
}
],
"release_date": "2019-09-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T13:08:26+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"Red Hat JBoss Core Services 1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2646"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat JBoss Core Services 1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"Red Hat JBoss Core Services 1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "expat: heap-based buffer over-read via crafted XML input"
},
{
"cve": "CVE-2019-19956",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2020-01-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1788856"
}
],
"notes": [
{
"category": "description",
"text": "xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc-\u003eoldNs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-19956"
},
{
"category": "external",
"summary": "RHBZ#1788856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788856"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-19956",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956"
}
],
"release_date": "2020-01-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T13:08:26+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"Red Hat JBoss Core Services 1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2646"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c"
},
{
"cve": "CVE-2019-20388",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"discovery_date": "2020-02-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1799734"
}
],
"notes": [
{
"category": "description",
"text": "A memory leak was found in the xmlSchemaValidateStream function of libxml2. Applications that use this library may be vulnerable to memory not being freed leading to a denial of service. System availability is the highest threat from this vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-20388"
},
{
"category": "external",
"summary": "RHBZ#1799734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799734"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-20388",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20388"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388"
}
],
"release_date": "2020-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T13:08:26+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"Red Hat JBoss Core Services 1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2646"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c"
},
{
"cve": "CVE-2020-1934",
"cwe": {
"id": "CWE-456",
"name": "Missing Initialization of a Variable"
},
"discovery_date": "2020-04-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1820772"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache\u0027s HTTP server (httpd) .The mod_proxy_ftp module may use uninitialized memory with proxying to a malicious FTP server. The highest threat from this vulnerability is to data confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: mod_proxy_ftp use of uninitialized value",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is caused by use of an uninitialized memory variable. Practically this has no impact, but in some corner cases it is possible that the contents of this variable could be read by a remote process, causing loss of confidentiality as a result of this. There is no evidence of code execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-1934"
},
{
"category": "external",
"summary": "RHBZ#1820772",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1820772"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-1934",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-1934"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1934",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1934"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2020-04-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T13:08:26+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"Red Hat JBoss Core Services 1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2646"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "httpd: mod_proxy_ftp use of uninitialized value"
},
{
"cve": "CVE-2020-7595",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2020-02-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1799786"
}
],
"notes": [
{
"category": "description",
"text": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-7595"
},
{
"category": "external",
"summary": "RHBZ#1799786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799786"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-7595",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-7595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595"
}
],
"release_date": "2020-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T13:08:26+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"Red Hat JBoss Core Services 1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2646"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations"
},
{
"acknowledgments": [
{
"names": [
"the Envoy security team"
]
}
],
"cve": "CVE-2020-11080",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2020-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1844929"
}
],
"notes": [
{
"category": "description",
"text": "A resource consumption vulnerability was found in nghttp2. This flaw allows an attacker to repeatedly construct an overly large HTTP/2 SETTINGS frame with a length of 14,400 bytes that causes excessive CPU usage, leading to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nghttp2: overly large SETTINGS frames can lead to DoS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-11080"
},
{
"category": "external",
"summary": "RHBZ#1844929",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1844929"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-11080",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-11080"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-11080",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-11080"
},
{
"category": "external",
"summary": "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-q5wr-xfw9-q7xr",
"url": "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-q5wr-xfw9-q7xr"
}
],
"release_date": "2020-06-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T13:08:26+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"Red Hat JBoss Core Services 1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2646"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nghttp2: overly large SETTINGS frames can lead to DoS"
}
]
}
RHSA-2020:2644
Vulnerability from csaf_redhat
Published
2020-06-22 12:28
Modified
2025-03-19 15:13
Summary
Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP3 security update
Notes
Topic
Updated packages that provide Red Hat JBoss Core Services Pack Apache Server 2.4.37 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
This release adds the new Apache HTTP Server 2.4.37 Service Pack 3 packages that are part of the JBoss Core Services offering.
This release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 2 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.
Security fix(es):
* httpd: mod_http2: read-after-free on a string compare (CVE-2019-0196)
* httpd: mod_http2: possible crash on late upgrade (CVE-2019-0197)
* httpd: mod_proxy_ftp use of uninitialized value (CVE-2020-1934)
* nghttp2: overly large SETTINGS frames can lead to DoS (CVE-2020-11080)
* libxml2: There's a memory leak in xmlParseBalancedChunkMemoryRecover in parser.c that could result in a crash (CVE-2019-19956)
* libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c (CVE-2019-20388)
* libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations (CVE-2020-7595)
* expat: large number of colons in input makes parser consume high amount of resources, leading to DoS (CVE-2018-20843)
* expat: heap-based buffer over-read via crafted XML input (CVE-2019-15903)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated packages that provide Red Hat JBoss Core Services Pack Apache Server 2.4.37 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "This release adds the new Apache HTTP Server 2.4.37 Service Pack 3 packages that are part of the JBoss Core Services offering.\n\nThis release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 2 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.\n\nSecurity fix(es):\n\n* httpd: mod_http2: read-after-free on a string compare (CVE-2019-0196)\n* httpd: mod_http2: possible crash on late upgrade (CVE-2019-0197)\n* httpd: mod_proxy_ftp use of uninitialized value (CVE-2020-1934)\n* nghttp2: overly large SETTINGS frames can lead to DoS (CVE-2020-11080)\n* libxml2: There\u0027s a memory leak in xmlParseBalancedChunkMemoryRecover in parser.c that could result in a crash (CVE-2019-19956)\n* libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c (CVE-2019-20388)\n* libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations (CVE-2020-7595)\n* expat: large number of colons in input makes parser consume high amount of resources, leading to DoS (CVE-2018-20843)\n* expat: heap-based buffer over-read via crafted XML input (CVE-2019-15903)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2020:2644",
"url": "https://access.redhat.com/errata/RHSA-2020:2644"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1695030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695030"
},
{
"category": "external",
"summary": "1695042",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695042"
},
{
"category": "external",
"summary": "1723723",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1723723"
},
{
"category": "external",
"summary": "1752592",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752592"
},
{
"category": "external",
"summary": "1788856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788856"
},
{
"category": "external",
"summary": "1799734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799734"
},
{
"category": "external",
"summary": "1799786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799786"
},
{
"category": "external",
"summary": "1820772",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1820772"
},
{
"category": "external",
"summary": "1844929",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1844929"
},
{
"category": "external",
"summary": "JBCS-941",
"url": "https://issues.redhat.com/browse/JBCS-941"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2644.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP3 security update",
"tracking": {
"current_release_date": "2025-03-19T15:13:12+00:00",
"generator": {
"date": "2025-03-19T15:13:12+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.4.1"
}
},
"id": "RHSA-2020:2644",
"initial_release_date": "2020-06-22T12:28:02+00:00",
"revision_history": [
{
"date": "2020-06-22T12:28:02+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2020-06-22T12:28:02+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-03-19T15:13:12+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Core Services on RHEL 6 Server",
"product": {
"name": "Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_core_services:1::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat JBoss Core Services on RHEL 7 Server",
"product": {
"name": "Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_core_services:1::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Core Services"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"product_id": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-25.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"product_id": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.39.2-25.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.39.2-25.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"product_id": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-36.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"product_id": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl@7.64.1-36.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"product_id": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl-devel@7.64.1-36.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"product_id": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl-debuginfo@7.64.1-36.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"product_id": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-57.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"product_id": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.37-57.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"product_id": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.37-57.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"product_id": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.37-57.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.37-57.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.37-57.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.37-57.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.37-57.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.37-57.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-3.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2-debuginfo@1.15.7-3.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.48-4.redhat_1.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-manual@1.2.48-4.redhat_1.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo@1.2.48-4.redhat_1.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.0.8-24.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md-debuginfo@2.0.8-24.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-51.GA.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.2-51.GA.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.14-4.Final_redhat_2.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-debuginfo@1.3.14-4.Final_redhat_2.jbcs.el6?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-25.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.39.2-25.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.39.2-25.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-36.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl@7.64.1-36.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl-devel@7.64.1-36.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl-debuginfo@7.64.1-36.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-57.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.37-57.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.37-57.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.37-57.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.37-57.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.37-57.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.37-57.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.37-57.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.37-57.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-3.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2-debuginfo@1.15.7-3.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.48-4.redhat_1.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-manual@1.2.48-4.redhat_1.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo@1.2.48-4.redhat_1.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.0.8-24.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md-debuginfo@2.0.8-24.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-51.GA.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.2-51.GA.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.14-4.Final_redhat_2.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-debuginfo@1.3.14-4.Final_redhat_2.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-25.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.39.2-25.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.39.2-25.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-36.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl@7.64.1-36.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl-devel@7.64.1-36.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl-debuginfo@7.64.1-36.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-57.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.37-57.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.37-57.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.37-57.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.37-57.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.37-57.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.37-57.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.37-57.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.37-57.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-pkcs11@0.4.10-7.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-pkcs11-debuginfo@0.4.10-7.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-3.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2-debuginfo@1.15.7-3.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.48-4.redhat_1.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-manual@1.2.48-4.redhat_1.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo@1.2.48-4.redhat_1.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.0.8-24.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md-debuginfo@2.0.8-24.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-51.GA.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.2-51.GA.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.14-4.Final_redhat_2.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-debuginfo@1.3.14-4.Final_redhat_2.jbcs.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"product_id": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-25.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"product_id": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-36.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"product_id": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-57.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"product_id": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-3.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"product_id": "jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.48-4.redhat_1.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"product_id": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.0.8-24.jbcs.el6?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"product_id": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-51.GA.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.14-4.Final_redhat_2.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"product_id": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-25.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"product_id": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-36.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"product_id": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-57.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"product_id": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-pkcs11@0.4.10-7.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-3.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.48-4.redhat_1.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.0.8-24.jbcs.el7?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-51.GA.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.14-4.Final_redhat_2.jbcs.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"product": {
"name": "jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"product_id": "jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.37-57.jbcs.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"product": {
"name": "jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"product_id": "jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.37-57.jbcs.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch"
},
"product_reference": "jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch"
},
"product_reference": "jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-20843",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-06-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1723723"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the \"setElementTypePrefix()\" function incorrectly extracted XML namespace prefixes. By tricking an application into processing a specially crafted XML file, an attacker could cause unusually high consumption of memory resources and possibly lead to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "expat: large number of colons in input makes parser consume high amount of resources, leading to DoS",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "When processing a specially crafted XML file, expat may use more memory than ultimately necessary, which can also lead to increased CPU usage and longer processing times. Depending on available system resources and configuration, this may also lead to the application triggering the Out-Of-Memory-Killer, causing the application to be terminated.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-20843"
},
{
"category": "external",
"summary": "RHBZ#1723723",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1723723"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-20843",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-20843"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-20843",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-20843"
},
{
"category": "external",
"summary": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931031",
"url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931031"
}
],
"release_date": "2019-06-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T12:28:02+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2644"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "expat: large number of colons in input makes parser consume high amount of resources, leading to DoS"
},
{
"cve": "CVE-2019-0196",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-04-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1695030"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparison when determining the method of a request and thus process the request incorrectly.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: mod_http2: read-after-free on a string compare",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-0196"
},
{
"category": "external",
"summary": "RHBZ#1695030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695030"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-0196",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0196"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0196",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0196"
},
{
"category": "external",
"summary": "http://www.apache.org/dist/httpd/CHANGES_2.4",
"url": "http://www.apache.org/dist/httpd/CHANGES_2.4"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2019-04-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T12:28:02+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2644"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "httpd: mod_http2: read-after-free on a string compare"
},
{
"cve": "CVE-2019-0197",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2019-04-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1695042"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. Server that never enabled the h2 protocol or that only enabled it for https: and did not set \"H2Upgrade on\" are unaffected by this issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: mod_http2: possible crash on late upgrade",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-0197"
},
{
"category": "external",
"summary": "RHBZ#1695042",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695042"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-0197",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0197"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0197",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0197"
},
{
"category": "external",
"summary": "http://www.apache.org/dist/httpd/CHANGES_2.4",
"url": "http://www.apache.org/dist/httpd/CHANGES_2.4"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2019-02-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T12:28:02+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2644"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L",
"version": "3.0"
},
"products": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "httpd: mod_http2: possible crash on late upgrade"
},
{
"cve": "CVE-2019-15903",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2019-09-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1752592"
}
],
"notes": [
{
"category": "description",
"text": "In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "expat: heap-based buffer over-read via crafted XML input",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-15903"
},
{
"category": "external",
"summary": "RHBZ#1752592",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752592"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-15903",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-15903"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-15903",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-15903"
}
],
"release_date": "2019-09-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T12:28:02+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2644"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "expat: heap-based buffer over-read via crafted XML input"
},
{
"cve": "CVE-2019-19956",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2020-01-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1788856"
}
],
"notes": [
{
"category": "description",
"text": "xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc-\u003eoldNs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-19956"
},
{
"category": "external",
"summary": "RHBZ#1788856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788856"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-19956",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956"
}
],
"release_date": "2020-01-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T12:28:02+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2644"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c"
},
{
"cve": "CVE-2019-20388",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"discovery_date": "2020-02-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1799734"
}
],
"notes": [
{
"category": "description",
"text": "A memory leak was found in the xmlSchemaValidateStream function of libxml2. Applications that use this library may be vulnerable to memory not being freed leading to a denial of service. System availability is the highest threat from this vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-20388"
},
{
"category": "external",
"summary": "RHBZ#1799734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799734"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-20388",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20388"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388"
}
],
"release_date": "2020-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T12:28:02+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2644"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c"
},
{
"cve": "CVE-2020-1934",
"cwe": {
"id": "CWE-456",
"name": "Missing Initialization of a Variable"
},
"discovery_date": "2020-04-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1820772"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache\u0027s HTTP server (httpd) .The mod_proxy_ftp module may use uninitialized memory with proxying to a malicious FTP server. The highest threat from this vulnerability is to data confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: mod_proxy_ftp use of uninitialized value",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is caused by use of an uninitialized memory variable. Practically this has no impact, but in some corner cases it is possible that the contents of this variable could be read by a remote process, causing loss of confidentiality as a result of this. There is no evidence of code execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-1934"
},
{
"category": "external",
"summary": "RHBZ#1820772",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1820772"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-1934",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-1934"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1934",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1934"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2020-04-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T12:28:02+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2644"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "httpd: mod_proxy_ftp use of uninitialized value"
},
{
"cve": "CVE-2020-7595",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2020-02-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1799786"
}
],
"notes": [
{
"category": "description",
"text": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-7595"
},
{
"category": "external",
"summary": "RHBZ#1799786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799786"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-7595",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-7595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595"
}
],
"release_date": "2020-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T12:28:02+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2644"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations"
},
{
"acknowledgments": [
{
"names": [
"the Envoy security team"
]
}
],
"cve": "CVE-2020-11080",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2020-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1844929"
}
],
"notes": [
{
"category": "description",
"text": "A resource consumption vulnerability was found in nghttp2. This flaw allows an attacker to repeatedly construct an overly large HTTP/2 SETTINGS frame with a length of 14,400 bytes that causes excessive CPU usage, leading to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nghttp2: overly large SETTINGS frames can lead to DoS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-11080"
},
{
"category": "external",
"summary": "RHBZ#1844929",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1844929"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-11080",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-11080"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-11080",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-11080"
},
{
"category": "external",
"summary": "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-q5wr-xfw9-q7xr",
"url": "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-q5wr-xfw9-q7xr"
}
],
"release_date": "2020-06-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T12:28:02+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2644"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nghttp2: overly large SETTINGS frames can lead to DoS"
}
]
}
rhsa-2020_4479
Vulnerability from csaf_redhat
Published
2020-11-04 02:12
Modified
2024-11-22 14:57
Summary
Red Hat Security Advisory: libxml2 security update
Notes
Topic
An update for libxml2 is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The libxml2 library is a development toolbox providing the implementation of various XML standards.
Security Fix(es):
* libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c (CVE-2019-19956)
* libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c (CVE-2019-20388)
* libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations (CVE-2020-7595)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes linked from the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for libxml2 is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The libxml2 library is a development toolbox providing the implementation of various XML standards.\n\nSecurity Fix(es):\n\n* libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c (CVE-2019-19956)\n\n* libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c (CVE-2019-20388)\n\n* libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations (CVE-2020-7595)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes linked from the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2020:4479",
"url": "https://access.redhat.com/errata/RHSA-2020:4479"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/",
"url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/"
},
{
"category": "external",
"summary": "1788856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788856"
},
{
"category": "external",
"summary": "1799734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799734"
},
{
"category": "external",
"summary": "1799786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799786"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4479.json"
}
],
"title": "Red Hat Security Advisory: libxml2 security update",
"tracking": {
"current_release_date": "2024-11-22T14:57:44+00:00",
"generator": {
"date": "2024-11-22T14:57:44+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2020:4479",
"initial_release_date": "2020-11-04T02:12:23+00:00",
"revision_history": [
{
"date": "2020-11-04T02:12:23+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2020-11-04T02:12:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T14:57:44+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:8::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.7-8.el8.i686",
"product": {
"name": "libxml2-0:2.9.7-8.el8.i686",
"product_id": "libxml2-0:2.9.7-8.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.7-8.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libxml2-debugsource-0:2.9.7-8.el8.i686",
"product": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.i686",
"product_id": "libxml2-debugsource-0:2.9.7-8.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debugsource@2.9.7-8.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.7-8.el8.i686",
"product": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.i686",
"product_id": "libxml2-debuginfo-0:2.9.7-8.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.7-8.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"product": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"product_id": "python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libxml2-debuginfo@2.9.7-8.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.7-8.el8.i686",
"product": {
"name": "libxml2-devel-0:2.9.7-8.el8.i686",
"product_id": "libxml2-devel-0:2.9.7-8.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.7-8.el8?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.7-8.el8.x86_64",
"product": {
"name": "libxml2-0:2.9.7-8.el8.x86_64",
"product_id": "libxml2-0:2.9.7-8.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.7-8.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3-libxml2-0:2.9.7-8.el8.x86_64",
"product": {
"name": "python3-libxml2-0:2.9.7-8.el8.x86_64",
"product_id": "python3-libxml2-0:2.9.7-8.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libxml2@2.9.7-8.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"product": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"product_id": "libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debugsource@2.9.7-8.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"product": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"product_id": "libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.7-8.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"product": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"product_id": "python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libxml2-debuginfo@2.9.7-8.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.7-8.el8.x86_64",
"product": {
"name": "libxml2-devel-0:2.9.7-8.el8.x86_64",
"product_id": "libxml2-devel-0:2.9.7-8.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.7-8.el8?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.7-8.el8.ppc64le",
"product": {
"name": "libxml2-0:2.9.7-8.el8.ppc64le",
"product_id": "libxml2-0:2.9.7-8.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.7-8.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3-libxml2-0:2.9.7-8.el8.ppc64le",
"product": {
"name": "python3-libxml2-0:2.9.7-8.el8.ppc64le",
"product_id": "python3-libxml2-0:2.9.7-8.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libxml2@2.9.7-8.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"product": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"product_id": "libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debugsource@2.9.7-8.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"product": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"product_id": "libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.7-8.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"product": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"product_id": "python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libxml2-debuginfo@2.9.7-8.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.7-8.el8.ppc64le",
"product": {
"name": "libxml2-devel-0:2.9.7-8.el8.ppc64le",
"product_id": "libxml2-devel-0:2.9.7-8.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.7-8.el8?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.7-8.el8.s390x",
"product": {
"name": "libxml2-0:2.9.7-8.el8.s390x",
"product_id": "libxml2-0:2.9.7-8.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.7-8.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3-libxml2-0:2.9.7-8.el8.s390x",
"product": {
"name": "python3-libxml2-0:2.9.7-8.el8.s390x",
"product_id": "python3-libxml2-0:2.9.7-8.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libxml2@2.9.7-8.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libxml2-debugsource-0:2.9.7-8.el8.s390x",
"product": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.s390x",
"product_id": "libxml2-debugsource-0:2.9.7-8.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debugsource@2.9.7-8.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"product": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"product_id": "libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.7-8.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"product": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"product_id": "python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libxml2-debuginfo@2.9.7-8.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.7-8.el8.s390x",
"product": {
"name": "libxml2-devel-0:2.9.7-8.el8.s390x",
"product_id": "libxml2-devel-0:2.9.7-8.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.7-8.el8?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.7-8.el8.aarch64",
"product": {
"name": "libxml2-0:2.9.7-8.el8.aarch64",
"product_id": "libxml2-0:2.9.7-8.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.7-8.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3-libxml2-0:2.9.7-8.el8.aarch64",
"product": {
"name": "python3-libxml2-0:2.9.7-8.el8.aarch64",
"product_id": "python3-libxml2-0:2.9.7-8.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libxml2@2.9.7-8.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"product": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"product_id": "libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debugsource@2.9.7-8.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"product": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"product_id": "libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.7-8.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"product": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"product_id": "python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libxml2-debuginfo@2.9.7-8.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.7-8.el8.aarch64",
"product": {
"name": "libxml2-devel-0:2.9.7-8.el8.aarch64",
"product_id": "libxml2-devel-0:2.9.7-8.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.7-8.el8?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.7-8.el8.src",
"product": {
"name": "libxml2-0:2.9.7-8.el8.src",
"product_id": "libxml2-0:2.9.7-8.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.7-8.el8?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64"
},
"product_reference": "libxml2-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686"
},
"product_reference": "libxml2-0:2.9.7-8.el8.i686",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "libxml2-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x"
},
"product_reference": "libxml2-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src"
},
"product_reference": "libxml2-0:2.9.7-8.el8.src",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64"
},
"product_reference": "libxml2-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64"
},
"product_reference": "libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686"
},
"product_reference": "libxml2-debuginfo-0:2.9.7-8.el8.i686",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x"
},
"product_reference": "libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
},
"product_reference": "libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64"
},
"product_reference": "libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686"
},
"product_reference": "libxml2-debugsource-0:2.9.7-8.el8.i686",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x"
},
"product_reference": "libxml2-debugsource-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64"
},
"product_reference": "libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64"
},
"product_reference": "libxml2-devel-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686"
},
"product_reference": "libxml2-devel-0:2.9.7-8.el8.i686",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "libxml2-devel-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x"
},
"product_reference": "libxml2-devel-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64"
},
"product_reference": "libxml2-devel-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64"
},
"product_reference": "python3-libxml2-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "python3-libxml2-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x"
},
"product_reference": "python3-libxml2-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64"
},
"product_reference": "python3-libxml2-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64"
},
"product_reference": "python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686"
},
"product_reference": "python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x"
},
"product_reference": "python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
},
"product_reference": "python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64"
},
"product_reference": "libxml2-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686"
},
"product_reference": "libxml2-0:2.9.7-8.el8.i686",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "libxml2-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x"
},
"product_reference": "libxml2-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src"
},
"product_reference": "libxml2-0:2.9.7-8.el8.src",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64"
},
"product_reference": "libxml2-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64"
},
"product_reference": "libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686"
},
"product_reference": "libxml2-debuginfo-0:2.9.7-8.el8.i686",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x"
},
"product_reference": "libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
},
"product_reference": "libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64"
},
"product_reference": "libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686"
},
"product_reference": "libxml2-debugsource-0:2.9.7-8.el8.i686",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x"
},
"product_reference": "libxml2-debugsource-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64"
},
"product_reference": "libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64"
},
"product_reference": "libxml2-devel-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686"
},
"product_reference": "libxml2-devel-0:2.9.7-8.el8.i686",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "libxml2-devel-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x"
},
"product_reference": "libxml2-devel-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64"
},
"product_reference": "libxml2-devel-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64"
},
"product_reference": "python3-libxml2-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "python3-libxml2-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x"
},
"product_reference": "python3-libxml2-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64"
},
"product_reference": "python3-libxml2-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64"
},
"product_reference": "python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686"
},
"product_reference": "python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x"
},
"product_reference": "python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
},
"product_reference": "python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-19956",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2020-01-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1788856"
}
],
"notes": [
{
"category": "description",
"text": "xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc-\u003eoldNs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-19956"
},
{
"category": "external",
"summary": "RHBZ#1788856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788856"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-19956",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956"
}
],
"release_date": "2020-01-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-11-04T02:12:23+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe desktop must be restarted (log out, then log back in) for this update to take effect.",
"product_ids": [
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:4479"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c"
},
{
"cve": "CVE-2019-20388",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"discovery_date": "2020-02-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1799734"
}
],
"notes": [
{
"category": "description",
"text": "A memory leak was found in the xmlSchemaValidateStream function of libxml2. Applications that use this library may be vulnerable to memory not being freed leading to a denial of service. System availability is the highest threat from this vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-20388"
},
{
"category": "external",
"summary": "RHBZ#1799734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799734"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-20388",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20388"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388"
}
],
"release_date": "2020-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-11-04T02:12:23+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe desktop must be restarted (log out, then log back in) for this update to take effect.",
"product_ids": [
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:4479"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c"
},
{
"cve": "CVE-2020-7595",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2020-02-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1799786"
}
],
"notes": [
{
"category": "description",
"text": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-7595"
},
{
"category": "external",
"summary": "RHBZ#1799786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799786"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-7595",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-7595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595"
}
],
"release_date": "2020-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-11-04T02:12:23+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe desktop must be restarted (log out, then log back in) for this update to take effect.",
"product_ids": [
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:4479"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations"
}
]
}
RHSA-2020:4479
Vulnerability from csaf_redhat
Published
2020-11-04 02:12
Modified
2025-01-09 05:57
Summary
Red Hat Security Advisory: libxml2 security update
Notes
Topic
An update for libxml2 is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The libxml2 library is a development toolbox providing the implementation of various XML standards.
Security Fix(es):
* libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c (CVE-2019-19956)
* libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c (CVE-2019-20388)
* libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations (CVE-2020-7595)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes linked from the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for libxml2 is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The libxml2 library is a development toolbox providing the implementation of various XML standards.\n\nSecurity Fix(es):\n\n* libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c (CVE-2019-19956)\n\n* libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c (CVE-2019-20388)\n\n* libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations (CVE-2020-7595)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes linked from the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2020:4479",
"url": "https://access.redhat.com/errata/RHSA-2020:4479"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/",
"url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/"
},
{
"category": "external",
"summary": "1788856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788856"
},
{
"category": "external",
"summary": "1799734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799734"
},
{
"category": "external",
"summary": "1799786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799786"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4479.json"
}
],
"title": "Red Hat Security Advisory: libxml2 security update",
"tracking": {
"current_release_date": "2025-01-09T05:57:53+00:00",
"generator": {
"date": "2025-01-09T05:57:53+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.5"
}
},
"id": "RHSA-2020:4479",
"initial_release_date": "2020-11-04T02:12:23+00:00",
"revision_history": [
{
"date": "2020-11-04T02:12:23+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2020-11-04T02:12:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-01-09T05:57:53+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:8::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.7-8.el8.i686",
"product": {
"name": "libxml2-0:2.9.7-8.el8.i686",
"product_id": "libxml2-0:2.9.7-8.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.7-8.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libxml2-debugsource-0:2.9.7-8.el8.i686",
"product": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.i686",
"product_id": "libxml2-debugsource-0:2.9.7-8.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debugsource@2.9.7-8.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.7-8.el8.i686",
"product": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.i686",
"product_id": "libxml2-debuginfo-0:2.9.7-8.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.7-8.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"product": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"product_id": "python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libxml2-debuginfo@2.9.7-8.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.7-8.el8.i686",
"product": {
"name": "libxml2-devel-0:2.9.7-8.el8.i686",
"product_id": "libxml2-devel-0:2.9.7-8.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.7-8.el8?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.7-8.el8.x86_64",
"product": {
"name": "libxml2-0:2.9.7-8.el8.x86_64",
"product_id": "libxml2-0:2.9.7-8.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.7-8.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3-libxml2-0:2.9.7-8.el8.x86_64",
"product": {
"name": "python3-libxml2-0:2.9.7-8.el8.x86_64",
"product_id": "python3-libxml2-0:2.9.7-8.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libxml2@2.9.7-8.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"product": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"product_id": "libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debugsource@2.9.7-8.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"product": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"product_id": "libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.7-8.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"product": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"product_id": "python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libxml2-debuginfo@2.9.7-8.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.7-8.el8.x86_64",
"product": {
"name": "libxml2-devel-0:2.9.7-8.el8.x86_64",
"product_id": "libxml2-devel-0:2.9.7-8.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.7-8.el8?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.7-8.el8.ppc64le",
"product": {
"name": "libxml2-0:2.9.7-8.el8.ppc64le",
"product_id": "libxml2-0:2.9.7-8.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.7-8.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3-libxml2-0:2.9.7-8.el8.ppc64le",
"product": {
"name": "python3-libxml2-0:2.9.7-8.el8.ppc64le",
"product_id": "python3-libxml2-0:2.9.7-8.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libxml2@2.9.7-8.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"product": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"product_id": "libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debugsource@2.9.7-8.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"product": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"product_id": "libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.7-8.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"product": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"product_id": "python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libxml2-debuginfo@2.9.7-8.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.7-8.el8.ppc64le",
"product": {
"name": "libxml2-devel-0:2.9.7-8.el8.ppc64le",
"product_id": "libxml2-devel-0:2.9.7-8.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.7-8.el8?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.7-8.el8.s390x",
"product": {
"name": "libxml2-0:2.9.7-8.el8.s390x",
"product_id": "libxml2-0:2.9.7-8.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.7-8.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3-libxml2-0:2.9.7-8.el8.s390x",
"product": {
"name": "python3-libxml2-0:2.9.7-8.el8.s390x",
"product_id": "python3-libxml2-0:2.9.7-8.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libxml2@2.9.7-8.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libxml2-debugsource-0:2.9.7-8.el8.s390x",
"product": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.s390x",
"product_id": "libxml2-debugsource-0:2.9.7-8.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debugsource@2.9.7-8.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"product": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"product_id": "libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.7-8.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"product": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"product_id": "python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libxml2-debuginfo@2.9.7-8.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.7-8.el8.s390x",
"product": {
"name": "libxml2-devel-0:2.9.7-8.el8.s390x",
"product_id": "libxml2-devel-0:2.9.7-8.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.7-8.el8?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.7-8.el8.aarch64",
"product": {
"name": "libxml2-0:2.9.7-8.el8.aarch64",
"product_id": "libxml2-0:2.9.7-8.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.7-8.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3-libxml2-0:2.9.7-8.el8.aarch64",
"product": {
"name": "python3-libxml2-0:2.9.7-8.el8.aarch64",
"product_id": "python3-libxml2-0:2.9.7-8.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libxml2@2.9.7-8.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"product": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"product_id": "libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debugsource@2.9.7-8.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"product": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"product_id": "libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.7-8.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"product": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"product_id": "python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libxml2-debuginfo@2.9.7-8.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.7-8.el8.aarch64",
"product": {
"name": "libxml2-devel-0:2.9.7-8.el8.aarch64",
"product_id": "libxml2-devel-0:2.9.7-8.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.7-8.el8?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.7-8.el8.src",
"product": {
"name": "libxml2-0:2.9.7-8.el8.src",
"product_id": "libxml2-0:2.9.7-8.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.7-8.el8?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64"
},
"product_reference": "libxml2-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686"
},
"product_reference": "libxml2-0:2.9.7-8.el8.i686",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "libxml2-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x"
},
"product_reference": "libxml2-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src"
},
"product_reference": "libxml2-0:2.9.7-8.el8.src",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64"
},
"product_reference": "libxml2-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64"
},
"product_reference": "libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686"
},
"product_reference": "libxml2-debuginfo-0:2.9.7-8.el8.i686",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x"
},
"product_reference": "libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
},
"product_reference": "libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64"
},
"product_reference": "libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686"
},
"product_reference": "libxml2-debugsource-0:2.9.7-8.el8.i686",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x"
},
"product_reference": "libxml2-debugsource-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64"
},
"product_reference": "libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64"
},
"product_reference": "libxml2-devel-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686"
},
"product_reference": "libxml2-devel-0:2.9.7-8.el8.i686",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "libxml2-devel-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x"
},
"product_reference": "libxml2-devel-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64"
},
"product_reference": "libxml2-devel-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64"
},
"product_reference": "python3-libxml2-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "python3-libxml2-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x"
},
"product_reference": "python3-libxml2-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64"
},
"product_reference": "python3-libxml2-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64"
},
"product_reference": "python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686"
},
"product_reference": "python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x"
},
"product_reference": "python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
},
"product_reference": "python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64"
},
"product_reference": "libxml2-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686"
},
"product_reference": "libxml2-0:2.9.7-8.el8.i686",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "libxml2-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x"
},
"product_reference": "libxml2-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src"
},
"product_reference": "libxml2-0:2.9.7-8.el8.src",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64"
},
"product_reference": "libxml2-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64"
},
"product_reference": "libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686"
},
"product_reference": "libxml2-debuginfo-0:2.9.7-8.el8.i686",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x"
},
"product_reference": "libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
},
"product_reference": "libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64"
},
"product_reference": "libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686"
},
"product_reference": "libxml2-debugsource-0:2.9.7-8.el8.i686",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x"
},
"product_reference": "libxml2-debugsource-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64"
},
"product_reference": "libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64"
},
"product_reference": "libxml2-devel-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686"
},
"product_reference": "libxml2-devel-0:2.9.7-8.el8.i686",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "libxml2-devel-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x"
},
"product_reference": "libxml2-devel-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64"
},
"product_reference": "libxml2-devel-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64"
},
"product_reference": "python3-libxml2-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "python3-libxml2-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x"
},
"product_reference": "python3-libxml2-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64"
},
"product_reference": "python3-libxml2-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64"
},
"product_reference": "python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686"
},
"product_reference": "python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x"
},
"product_reference": "python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
},
"product_reference": "python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-19956",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2020-01-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1788856"
}
],
"notes": [
{
"category": "description",
"text": "xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc-\u003eoldNs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-19956"
},
{
"category": "external",
"summary": "RHBZ#1788856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788856"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-19956",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956"
}
],
"release_date": "2020-01-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-11-04T02:12:23+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe desktop must be restarted (log out, then log back in) for this update to take effect.",
"product_ids": [
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:4479"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c"
},
{
"cve": "CVE-2019-20388",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"discovery_date": "2020-02-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1799734"
}
],
"notes": [
{
"category": "description",
"text": "A memory leak was found in the xmlSchemaValidateStream function of libxml2. Applications that use this library may be vulnerable to memory not being freed leading to a denial of service. System availability is the highest threat from this vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-20388"
},
{
"category": "external",
"summary": "RHBZ#1799734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799734"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-20388",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20388"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388"
}
],
"release_date": "2020-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-11-04T02:12:23+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe desktop must be restarted (log out, then log back in) for this update to take effect.",
"product_ids": [
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:4479"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c"
},
{
"cve": "CVE-2020-7595",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2020-02-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1799786"
}
],
"notes": [
{
"category": "description",
"text": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-7595"
},
{
"category": "external",
"summary": "RHBZ#1799786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799786"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-7595",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-7595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595"
}
],
"release_date": "2020-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-11-04T02:12:23+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe desktop must be restarted (log out, then log back in) for this update to take effect.",
"product_ids": [
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:4479"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations"
}
]
}
rhsa-2020_3996
Vulnerability from csaf_redhat
Published
2020-09-29 19:48
Modified
2024-11-22 14:57
Summary
Red Hat Security Advisory: libxml2 security and bug fix update
Notes
Topic
An update for libxml2 is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The libxml2 library is a development toolbox providing the implementation of various XML standards.
Security Fix(es):
* libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c (CVE-2019-19956)
* libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c (CVE-2019-20388)
* libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations (CVE-2020-7595)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.9 Release Notes linked from the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for libxml2 is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The libxml2 library is a development toolbox providing the implementation of various XML standards.\n\nSecurity Fix(es):\n\n* libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c (CVE-2019-19956)\n\n* libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c (CVE-2019-20388)\n\n* libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations (CVE-2020-7595)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.9 Release Notes linked from the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2020:3996",
"url": "https://access.redhat.com/errata/RHSA-2020:3996"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index"
},
{
"category": "external",
"summary": "1788856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788856"
},
{
"category": "external",
"summary": "1799734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799734"
},
{
"category": "external",
"summary": "1799786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799786"
},
{
"category": "external",
"summary": "1812145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1812145"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3996.json"
}
],
"title": "Red Hat Security Advisory: libxml2 security and bug fix update",
"tracking": {
"current_release_date": "2024-11-22T14:57:36+00:00",
"generator": {
"date": "2024-11-22T14:57:36+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2020:3996",
"initial_release_date": "2020-09-29T19:48:02+00:00",
"revision_history": [
{
"date": "2020-09-29T19:48:02+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2020-09-29T19:48:02+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T14:57:36+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.1-6.el7.5.i686",
"product": {
"name": "libxml2-0:2.9.1-6.el7.5.i686",
"product_id": "libxml2-0:2.9.1-6.el7.5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.1-6.el7.5?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"product": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"product_id": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.1-6.el7.5?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.1-6.el7.5.i686",
"product": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.i686",
"product_id": "libxml2-devel-0:2.9.1-6.el7.5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.1-6.el7.5?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libxml2-static-0:2.9.1-6.el7.5.i686",
"product": {
"name": "libxml2-static-0:2.9.1-6.el7.5.i686",
"product_id": "libxml2-static-0:2.9.1-6.el7.5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-static@2.9.1-6.el7.5?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.1-6.el7.5.x86_64",
"product": {
"name": "libxml2-0:2.9.1-6.el7.5.x86_64",
"product_id": "libxml2-0:2.9.1-6.el7.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.1-6.el7.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libxml2-python-0:2.9.1-6.el7.5.x86_64",
"product": {
"name": "libxml2-python-0:2.9.1-6.el7.5.x86_64",
"product_id": "libxml2-python-0:2.9.1-6.el7.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-python@2.9.1-6.el7.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"product": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"product_id": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.1-6.el7.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"product": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"product_id": "libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.1-6.el7.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libxml2-static-0:2.9.1-6.el7.5.x86_64",
"product": {
"name": "libxml2-static-0:2.9.1-6.el7.5.x86_64",
"product_id": "libxml2-static-0:2.9.1-6.el7.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-static@2.9.1-6.el7.5?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.1-6.el7.5.src",
"product": {
"name": "libxml2-0:2.9.1-6.el7.5.src",
"product_id": "libxml2-0:2.9.1-6.el7.5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.1-6.el7.5?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.1-6.el7.5.s390x",
"product": {
"name": "libxml2-0:2.9.1-6.el7.5.s390x",
"product_id": "libxml2-0:2.9.1-6.el7.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.1-6.el7.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390x",
"product": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390x",
"product_id": "libxml2-devel-0:2.9.1-6.el7.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.1-6.el7.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libxml2-python-0:2.9.1-6.el7.5.s390x",
"product": {
"name": "libxml2-python-0:2.9.1-6.el7.5.s390x",
"product_id": "libxml2-python-0:2.9.1-6.el7.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-python@2.9.1-6.el7.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"product": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"product_id": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.1-6.el7.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libxml2-static-0:2.9.1-6.el7.5.s390x",
"product": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390x",
"product_id": "libxml2-static-0:2.9.1-6.el7.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-static@2.9.1-6.el7.5?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.1-6.el7.5.s390",
"product": {
"name": "libxml2-0:2.9.1-6.el7.5.s390",
"product_id": "libxml2-0:2.9.1-6.el7.5.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.1-6.el7.5?arch=s390"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390",
"product": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390",
"product_id": "libxml2-devel-0:2.9.1-6.el7.5.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.1-6.el7.5?arch=s390"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"product": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"product_id": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.1-6.el7.5?arch=s390"
}
}
},
{
"category": "product_version",
"name": "libxml2-static-0:2.9.1-6.el7.5.s390",
"product": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390",
"product_id": "libxml2-static-0:2.9.1-6.el7.5.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-static@2.9.1-6.el7.5?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.1-6.el7.5.ppc64",
"product": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64",
"product_id": "libxml2-0:2.9.1-6.el7.5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.1-6.el7.5?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"product": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"product_id": "libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.1-6.el7.5?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64",
"product": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64",
"product_id": "libxml2-python-0:2.9.1-6.el7.5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-python@2.9.1-6.el7.5?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"product": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"product_id": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.1-6.el7.5?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64",
"product": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64",
"product_id": "libxml2-static-0:2.9.1-6.el7.5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-static@2.9.1-6.el7.5?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.1-6.el7.5.ppc",
"product": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc",
"product_id": "libxml2-0:2.9.1-6.el7.5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.1-6.el7.5?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc",
"product": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc",
"product_id": "libxml2-devel-0:2.9.1-6.el7.5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.1-6.el7.5?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"product": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"product_id": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.1-6.el7.5?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc",
"product": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc",
"product_id": "libxml2-static-0:2.9.1-6.el7.5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-static@2.9.1-6.el7.5?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.1-6.el7.5.ppc64le",
"product": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64le",
"product_id": "libxml2-0:2.9.1-6.el7.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.1-6.el7.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"product": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"product_id": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.1-6.el7.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"product": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"product_id": "libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-python@2.9.1-6.el7.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"product": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"product_id": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.1-6.el7.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"product": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"product_id": "libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-static@2.9.1-6.el7.5?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.src as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-0:2.9.1-6.el7.5.src"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.src",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.src"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.src",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.src"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.src",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.src"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.src",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.src as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-0:2.9.1-6.el7.5.src"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.src",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.src"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.src",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.src"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.src",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.src"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.src",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.9"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-19956",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2020-01-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1788856"
}
],
"notes": [
{
"category": "description",
"text": "xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc-\u003eoldNs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-19956"
},
{
"category": "external",
"summary": "RHBZ#1788856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788856"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-19956",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956"
}
],
"release_date": "2020-01-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-09-29T19:48:02+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe desktop must be restarted (log out, then log back in) for this update to take effect.",
"product_ids": [
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:3996"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c"
},
{
"cve": "CVE-2019-20388",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"discovery_date": "2020-02-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1799734"
}
],
"notes": [
{
"category": "description",
"text": "A memory leak was found in the xmlSchemaValidateStream function of libxml2. Applications that use this library may be vulnerable to memory not being freed leading to a denial of service. System availability is the highest threat from this vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-20388"
},
{
"category": "external",
"summary": "RHBZ#1799734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799734"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-20388",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20388"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388"
}
],
"release_date": "2020-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-09-29T19:48:02+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe desktop must be restarted (log out, then log back in) for this update to take effect.",
"product_ids": [
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:3996"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c"
},
{
"cve": "CVE-2020-7595",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2020-02-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1799786"
}
],
"notes": [
{
"category": "description",
"text": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-7595"
},
{
"category": "external",
"summary": "RHBZ#1799786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799786"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-7595",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-7595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595"
}
],
"release_date": "2020-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-09-29T19:48:02+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe desktop must be restarted (log out, then log back in) for this update to take effect.",
"product_ids": [
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:3996"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations"
}
]
}
rhsa-2020:3996
Vulnerability from csaf_redhat
Published
2020-09-29 19:48
Modified
2025-01-09 05:57
Summary
Red Hat Security Advisory: libxml2 security and bug fix update
Notes
Topic
An update for libxml2 is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The libxml2 library is a development toolbox providing the implementation of various XML standards.
Security Fix(es):
* libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c (CVE-2019-19956)
* libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c (CVE-2019-20388)
* libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations (CVE-2020-7595)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.9 Release Notes linked from the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for libxml2 is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The libxml2 library is a development toolbox providing the implementation of various XML standards.\n\nSecurity Fix(es):\n\n* libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c (CVE-2019-19956)\n\n* libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c (CVE-2019-20388)\n\n* libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations (CVE-2020-7595)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.9 Release Notes linked from the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2020:3996",
"url": "https://access.redhat.com/errata/RHSA-2020:3996"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index"
},
{
"category": "external",
"summary": "1788856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788856"
},
{
"category": "external",
"summary": "1799734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799734"
},
{
"category": "external",
"summary": "1799786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799786"
},
{
"category": "external",
"summary": "1812145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1812145"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3996.json"
}
],
"title": "Red Hat Security Advisory: libxml2 security and bug fix update",
"tracking": {
"current_release_date": "2025-01-09T05:57:46+00:00",
"generator": {
"date": "2025-01-09T05:57:46+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.5"
}
},
"id": "RHSA-2020:3996",
"initial_release_date": "2020-09-29T19:48:02+00:00",
"revision_history": [
{
"date": "2020-09-29T19:48:02+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2020-09-29T19:48:02+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-01-09T05:57:46+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.1-6.el7.5.i686",
"product": {
"name": "libxml2-0:2.9.1-6.el7.5.i686",
"product_id": "libxml2-0:2.9.1-6.el7.5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.1-6.el7.5?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"product": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"product_id": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.1-6.el7.5?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.1-6.el7.5.i686",
"product": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.i686",
"product_id": "libxml2-devel-0:2.9.1-6.el7.5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.1-6.el7.5?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libxml2-static-0:2.9.1-6.el7.5.i686",
"product": {
"name": "libxml2-static-0:2.9.1-6.el7.5.i686",
"product_id": "libxml2-static-0:2.9.1-6.el7.5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-static@2.9.1-6.el7.5?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.1-6.el7.5.x86_64",
"product": {
"name": "libxml2-0:2.9.1-6.el7.5.x86_64",
"product_id": "libxml2-0:2.9.1-6.el7.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.1-6.el7.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libxml2-python-0:2.9.1-6.el7.5.x86_64",
"product": {
"name": "libxml2-python-0:2.9.1-6.el7.5.x86_64",
"product_id": "libxml2-python-0:2.9.1-6.el7.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-python@2.9.1-6.el7.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"product": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"product_id": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.1-6.el7.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"product": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"product_id": "libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.1-6.el7.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libxml2-static-0:2.9.1-6.el7.5.x86_64",
"product": {
"name": "libxml2-static-0:2.9.1-6.el7.5.x86_64",
"product_id": "libxml2-static-0:2.9.1-6.el7.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-static@2.9.1-6.el7.5?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.1-6.el7.5.src",
"product": {
"name": "libxml2-0:2.9.1-6.el7.5.src",
"product_id": "libxml2-0:2.9.1-6.el7.5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.1-6.el7.5?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.1-6.el7.5.s390x",
"product": {
"name": "libxml2-0:2.9.1-6.el7.5.s390x",
"product_id": "libxml2-0:2.9.1-6.el7.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.1-6.el7.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390x",
"product": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390x",
"product_id": "libxml2-devel-0:2.9.1-6.el7.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.1-6.el7.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libxml2-python-0:2.9.1-6.el7.5.s390x",
"product": {
"name": "libxml2-python-0:2.9.1-6.el7.5.s390x",
"product_id": "libxml2-python-0:2.9.1-6.el7.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-python@2.9.1-6.el7.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"product": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"product_id": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.1-6.el7.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libxml2-static-0:2.9.1-6.el7.5.s390x",
"product": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390x",
"product_id": "libxml2-static-0:2.9.1-6.el7.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-static@2.9.1-6.el7.5?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.1-6.el7.5.s390",
"product": {
"name": "libxml2-0:2.9.1-6.el7.5.s390",
"product_id": "libxml2-0:2.9.1-6.el7.5.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.1-6.el7.5?arch=s390"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390",
"product": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390",
"product_id": "libxml2-devel-0:2.9.1-6.el7.5.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.1-6.el7.5?arch=s390"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"product": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"product_id": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.1-6.el7.5?arch=s390"
}
}
},
{
"category": "product_version",
"name": "libxml2-static-0:2.9.1-6.el7.5.s390",
"product": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390",
"product_id": "libxml2-static-0:2.9.1-6.el7.5.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-static@2.9.1-6.el7.5?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.1-6.el7.5.ppc64",
"product": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64",
"product_id": "libxml2-0:2.9.1-6.el7.5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.1-6.el7.5?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"product": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"product_id": "libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.1-6.el7.5?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64",
"product": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64",
"product_id": "libxml2-python-0:2.9.1-6.el7.5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-python@2.9.1-6.el7.5?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"product": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"product_id": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.1-6.el7.5?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64",
"product": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64",
"product_id": "libxml2-static-0:2.9.1-6.el7.5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-static@2.9.1-6.el7.5?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.1-6.el7.5.ppc",
"product": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc",
"product_id": "libxml2-0:2.9.1-6.el7.5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.1-6.el7.5?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc",
"product": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc",
"product_id": "libxml2-devel-0:2.9.1-6.el7.5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.1-6.el7.5?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"product": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"product_id": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.1-6.el7.5?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc",
"product": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc",
"product_id": "libxml2-static-0:2.9.1-6.el7.5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-static@2.9.1-6.el7.5?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.1-6.el7.5.ppc64le",
"product": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64le",
"product_id": "libxml2-0:2.9.1-6.el7.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.1-6.el7.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"product": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"product_id": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.1-6.el7.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"product": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"product_id": "libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-python@2.9.1-6.el7.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"product": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"product_id": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.1-6.el7.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"product": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"product_id": "libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-static@2.9.1-6.el7.5?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.src as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-0:2.9.1-6.el7.5.src"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.src",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.src"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.src",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.src"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.src",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.src"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.src",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.src as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-0:2.9.1-6.el7.5.src"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.src",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.src"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.src",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.src"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.src",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.src"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.src",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.9"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-19956",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2020-01-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1788856"
}
],
"notes": [
{
"category": "description",
"text": "xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc-\u003eoldNs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-19956"
},
{
"category": "external",
"summary": "RHBZ#1788856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788856"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-19956",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956"
}
],
"release_date": "2020-01-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-09-29T19:48:02+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe desktop must be restarted (log out, then log back in) for this update to take effect.",
"product_ids": [
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:3996"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c"
},
{
"cve": "CVE-2019-20388",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"discovery_date": "2020-02-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1799734"
}
],
"notes": [
{
"category": "description",
"text": "A memory leak was found in the xmlSchemaValidateStream function of libxml2. Applications that use this library may be vulnerable to memory not being freed leading to a denial of service. System availability is the highest threat from this vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-20388"
},
{
"category": "external",
"summary": "RHBZ#1799734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799734"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-20388",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20388"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388"
}
],
"release_date": "2020-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-09-29T19:48:02+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe desktop must be restarted (log out, then log back in) for this update to take effect.",
"product_ids": [
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:3996"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c"
},
{
"cve": "CVE-2020-7595",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2020-02-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1799786"
}
],
"notes": [
{
"category": "description",
"text": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-7595"
},
{
"category": "external",
"summary": "RHBZ#1799786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799786"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-7595",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-7595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595"
}
],
"release_date": "2020-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-09-29T19:48:02+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe desktop must be restarted (log out, then log back in) for this update to take effect.",
"product_ids": [
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:3996"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations"
}
]
}
rhsa-2020:4479
Vulnerability from csaf_redhat
Published
2020-11-04 02:12
Modified
2025-01-09 05:57
Summary
Red Hat Security Advisory: libxml2 security update
Notes
Topic
An update for libxml2 is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The libxml2 library is a development toolbox providing the implementation of various XML standards.
Security Fix(es):
* libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c (CVE-2019-19956)
* libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c (CVE-2019-20388)
* libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations (CVE-2020-7595)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes linked from the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for libxml2 is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The libxml2 library is a development toolbox providing the implementation of various XML standards.\n\nSecurity Fix(es):\n\n* libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c (CVE-2019-19956)\n\n* libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c (CVE-2019-20388)\n\n* libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations (CVE-2020-7595)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes linked from the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2020:4479",
"url": "https://access.redhat.com/errata/RHSA-2020:4479"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/",
"url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/"
},
{
"category": "external",
"summary": "1788856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788856"
},
{
"category": "external",
"summary": "1799734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799734"
},
{
"category": "external",
"summary": "1799786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799786"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4479.json"
}
],
"title": "Red Hat Security Advisory: libxml2 security update",
"tracking": {
"current_release_date": "2025-01-09T05:57:53+00:00",
"generator": {
"date": "2025-01-09T05:57:53+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.5"
}
},
"id": "RHSA-2020:4479",
"initial_release_date": "2020-11-04T02:12:23+00:00",
"revision_history": [
{
"date": "2020-11-04T02:12:23+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2020-11-04T02:12:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-01-09T05:57:53+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:8::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.7-8.el8.i686",
"product": {
"name": "libxml2-0:2.9.7-8.el8.i686",
"product_id": "libxml2-0:2.9.7-8.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.7-8.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libxml2-debugsource-0:2.9.7-8.el8.i686",
"product": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.i686",
"product_id": "libxml2-debugsource-0:2.9.7-8.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debugsource@2.9.7-8.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.7-8.el8.i686",
"product": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.i686",
"product_id": "libxml2-debuginfo-0:2.9.7-8.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.7-8.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"product": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"product_id": "python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libxml2-debuginfo@2.9.7-8.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.7-8.el8.i686",
"product": {
"name": "libxml2-devel-0:2.9.7-8.el8.i686",
"product_id": "libxml2-devel-0:2.9.7-8.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.7-8.el8?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.7-8.el8.x86_64",
"product": {
"name": "libxml2-0:2.9.7-8.el8.x86_64",
"product_id": "libxml2-0:2.9.7-8.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.7-8.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3-libxml2-0:2.9.7-8.el8.x86_64",
"product": {
"name": "python3-libxml2-0:2.9.7-8.el8.x86_64",
"product_id": "python3-libxml2-0:2.9.7-8.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libxml2@2.9.7-8.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"product": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"product_id": "libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debugsource@2.9.7-8.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"product": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"product_id": "libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.7-8.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"product": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"product_id": "python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libxml2-debuginfo@2.9.7-8.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.7-8.el8.x86_64",
"product": {
"name": "libxml2-devel-0:2.9.7-8.el8.x86_64",
"product_id": "libxml2-devel-0:2.9.7-8.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.7-8.el8?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.7-8.el8.ppc64le",
"product": {
"name": "libxml2-0:2.9.7-8.el8.ppc64le",
"product_id": "libxml2-0:2.9.7-8.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.7-8.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3-libxml2-0:2.9.7-8.el8.ppc64le",
"product": {
"name": "python3-libxml2-0:2.9.7-8.el8.ppc64le",
"product_id": "python3-libxml2-0:2.9.7-8.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libxml2@2.9.7-8.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"product": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"product_id": "libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debugsource@2.9.7-8.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"product": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"product_id": "libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.7-8.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"product": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"product_id": "python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libxml2-debuginfo@2.9.7-8.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.7-8.el8.ppc64le",
"product": {
"name": "libxml2-devel-0:2.9.7-8.el8.ppc64le",
"product_id": "libxml2-devel-0:2.9.7-8.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.7-8.el8?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.7-8.el8.s390x",
"product": {
"name": "libxml2-0:2.9.7-8.el8.s390x",
"product_id": "libxml2-0:2.9.7-8.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.7-8.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3-libxml2-0:2.9.7-8.el8.s390x",
"product": {
"name": "python3-libxml2-0:2.9.7-8.el8.s390x",
"product_id": "python3-libxml2-0:2.9.7-8.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libxml2@2.9.7-8.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libxml2-debugsource-0:2.9.7-8.el8.s390x",
"product": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.s390x",
"product_id": "libxml2-debugsource-0:2.9.7-8.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debugsource@2.9.7-8.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"product": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"product_id": "libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.7-8.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"product": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"product_id": "python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libxml2-debuginfo@2.9.7-8.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.7-8.el8.s390x",
"product": {
"name": "libxml2-devel-0:2.9.7-8.el8.s390x",
"product_id": "libxml2-devel-0:2.9.7-8.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.7-8.el8?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.7-8.el8.aarch64",
"product": {
"name": "libxml2-0:2.9.7-8.el8.aarch64",
"product_id": "libxml2-0:2.9.7-8.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.7-8.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3-libxml2-0:2.9.7-8.el8.aarch64",
"product": {
"name": "python3-libxml2-0:2.9.7-8.el8.aarch64",
"product_id": "python3-libxml2-0:2.9.7-8.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libxml2@2.9.7-8.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"product": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"product_id": "libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debugsource@2.9.7-8.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"product": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"product_id": "libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.7-8.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"product": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"product_id": "python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libxml2-debuginfo@2.9.7-8.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.7-8.el8.aarch64",
"product": {
"name": "libxml2-devel-0:2.9.7-8.el8.aarch64",
"product_id": "libxml2-devel-0:2.9.7-8.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.7-8.el8?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.7-8.el8.src",
"product": {
"name": "libxml2-0:2.9.7-8.el8.src",
"product_id": "libxml2-0:2.9.7-8.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.7-8.el8?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64"
},
"product_reference": "libxml2-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686"
},
"product_reference": "libxml2-0:2.9.7-8.el8.i686",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "libxml2-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x"
},
"product_reference": "libxml2-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src"
},
"product_reference": "libxml2-0:2.9.7-8.el8.src",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64"
},
"product_reference": "libxml2-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64"
},
"product_reference": "libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686"
},
"product_reference": "libxml2-debuginfo-0:2.9.7-8.el8.i686",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x"
},
"product_reference": "libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
},
"product_reference": "libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64"
},
"product_reference": "libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686"
},
"product_reference": "libxml2-debugsource-0:2.9.7-8.el8.i686",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x"
},
"product_reference": "libxml2-debugsource-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64"
},
"product_reference": "libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64"
},
"product_reference": "libxml2-devel-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686"
},
"product_reference": "libxml2-devel-0:2.9.7-8.el8.i686",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "libxml2-devel-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x"
},
"product_reference": "libxml2-devel-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64"
},
"product_reference": "libxml2-devel-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64"
},
"product_reference": "python3-libxml2-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "python3-libxml2-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x"
},
"product_reference": "python3-libxml2-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64"
},
"product_reference": "python3-libxml2-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64"
},
"product_reference": "python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686"
},
"product_reference": "python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x"
},
"product_reference": "python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
},
"product_reference": "python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64"
},
"product_reference": "libxml2-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686"
},
"product_reference": "libxml2-0:2.9.7-8.el8.i686",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "libxml2-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x"
},
"product_reference": "libxml2-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src"
},
"product_reference": "libxml2-0:2.9.7-8.el8.src",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64"
},
"product_reference": "libxml2-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64"
},
"product_reference": "libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686"
},
"product_reference": "libxml2-debuginfo-0:2.9.7-8.el8.i686",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x"
},
"product_reference": "libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
},
"product_reference": "libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64"
},
"product_reference": "libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686"
},
"product_reference": "libxml2-debugsource-0:2.9.7-8.el8.i686",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x"
},
"product_reference": "libxml2-debugsource-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debugsource-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64"
},
"product_reference": "libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64"
},
"product_reference": "libxml2-devel-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686"
},
"product_reference": "libxml2-devel-0:2.9.7-8.el8.i686",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "libxml2-devel-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x"
},
"product_reference": "libxml2-devel-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64"
},
"product_reference": "libxml2-devel-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64"
},
"product_reference": "python3-libxml2-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "python3-libxml2-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x"
},
"product_reference": "python3-libxml2-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64"
},
"product_reference": "python3-libxml2-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64"
},
"product_reference": "python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686"
},
"product_reference": "python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le"
},
"product_reference": "python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x"
},
"product_reference": "python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
},
"product_reference": "python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.3.0.GA"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-19956",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2020-01-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1788856"
}
],
"notes": [
{
"category": "description",
"text": "xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc-\u003eoldNs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-19956"
},
{
"category": "external",
"summary": "RHBZ#1788856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788856"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-19956",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956"
}
],
"release_date": "2020-01-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-11-04T02:12:23+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe desktop must be restarted (log out, then log back in) for this update to take effect.",
"product_ids": [
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:4479"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c"
},
{
"cve": "CVE-2019-20388",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"discovery_date": "2020-02-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1799734"
}
],
"notes": [
{
"category": "description",
"text": "A memory leak was found in the xmlSchemaValidateStream function of libxml2. Applications that use this library may be vulnerable to memory not being freed leading to a denial of service. System availability is the highest threat from this vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-20388"
},
{
"category": "external",
"summary": "RHBZ#1799734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799734"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-20388",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20388"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388"
}
],
"release_date": "2020-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-11-04T02:12:23+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe desktop must be restarted (log out, then log back in) for this update to take effect.",
"product_ids": [
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:4479"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c"
},
{
"cve": "CVE-2020-7595",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2020-02-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1799786"
}
],
"notes": [
{
"category": "description",
"text": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-7595"
},
{
"category": "external",
"summary": "RHBZ#1799786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799786"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-7595",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-7595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595"
}
],
"release_date": "2020-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-11-04T02:12:23+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe desktop must be restarted (log out, then log back in) for this update to take effect.",
"product_ids": [
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:4479"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"AppStream-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"AppStream-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.src",
"BaseOS-8.3.0.GA:libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debuginfo-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-debugsource-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:libxml2-devel-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-0:2.9.7-8.el8.x86_64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.aarch64",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.i686",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.ppc64le",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.s390x",
"BaseOS-8.3.0.GA:python3-libxml2-debuginfo-0:2.9.7-8.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations"
}
]
}
RHSA-2020:2646
Vulnerability from csaf_redhat
Published
2020-06-22 13:08
Modified
2025-03-19 15:13
Summary
Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP3 security update
Notes
Topic
Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 3 zip release for RHEL 6, RHEL 7 and Microsoft Windows is available.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products, and is packaged under Red Hat JBoss Core Services to allow for faster distribution of updates, and for a more consistent update experience.
This release adds the new Apache HTTP Server 2.4.37 Service Pack 3 packages that are part of the JBoss Core Services offering.
This release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 2 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.
Security fix(es):
* httpd: mod_http2: read-after-free on a string compare (CVE-2019-0196)
* httpd: mod_http2: possible crash on late upgrade (CVE-2019-0197)
* httpd: mod_proxy_ftp use of uninitialized value (CVE-2020-1934)
* nghttp2: overly large SETTINGS frames can lead to DoS (CVE-2020-11080)
* libxml2: There's a memory leak in xmlParseBalancedChunkMemoryRecover in parser.c that could result in a crash (CVE-2019-19956)
* libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c (CVE-2019-20388)
* libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations (CVE-2020-7595)
* expat: large number of colons in input makes parser consume high amount of resources, leading to DoS (CVE-2018-20843)
* expat: heap-based buffer over-read via crafted XML input (CVE-2019-15903)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 3 zip release for RHEL 6, RHEL 7 and Microsoft Windows is available.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products, and is packaged under Red Hat JBoss Core Services to allow for faster distribution of updates, and for a more consistent update experience.\n\nThis release adds the new Apache HTTP Server 2.4.37 Service Pack 3 packages that are part of the JBoss Core Services offering.\n\nThis release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 2 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.\n\nSecurity fix(es):\n\n* httpd: mod_http2: read-after-free on a string compare (CVE-2019-0196)\n* httpd: mod_http2: possible crash on late upgrade (CVE-2019-0197)\n* httpd: mod_proxy_ftp use of uninitialized value (CVE-2020-1934)\n* nghttp2: overly large SETTINGS frames can lead to DoS (CVE-2020-11080)\n* libxml2: There\u0027s a memory leak in xmlParseBalancedChunkMemoryRecover in parser.c that could result in a crash (CVE-2019-19956)\n* libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c (CVE-2019-20388)\n* libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations (CVE-2020-7595)\n* expat: large number of colons in input makes parser consume high amount of resources, leading to DoS (CVE-2018-20843)\n* expat: heap-based buffer over-read via crafted XML input (CVE-2019-15903)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2020:2646",
"url": "https://access.redhat.com/errata/RHSA-2020:2646"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=core.service.apachehttp\u0026downloadType=securityPatches\u0026version=2.4.37",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=core.service.apachehttp\u0026downloadType=securityPatches\u0026version=2.4.37"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.37/",
"url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.37/"
},
{
"category": "external",
"summary": "1695030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695030"
},
{
"category": "external",
"summary": "1695042",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695042"
},
{
"category": "external",
"summary": "1723723",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1723723"
},
{
"category": "external",
"summary": "1752592",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752592"
},
{
"category": "external",
"summary": "1788856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788856"
},
{
"category": "external",
"summary": "1799734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799734"
},
{
"category": "external",
"summary": "1799786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799786"
},
{
"category": "external",
"summary": "1820772",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1820772"
},
{
"category": "external",
"summary": "1844929",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1844929"
},
{
"category": "external",
"summary": "JBCS-941",
"url": "https://issues.redhat.com/browse/JBCS-941"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2646.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP3 security update",
"tracking": {
"current_release_date": "2025-03-19T15:13:12+00:00",
"generator": {
"date": "2025-03-19T15:13:12+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.4.1"
}
},
"id": "RHSA-2020:2646",
"initial_release_date": "2020-06-22T13:08:26+00:00",
"revision_history": [
{
"date": "2020-06-22T13:08:26+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2020-06-22T13:08:26+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-03-19T15:13:12+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Text-Only JBCS",
"product": {
"name": "Text-Only JBCS",
"product_id": "Text-Only JBCS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_core_services:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Core Services"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-20843",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-06-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1723723"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the \"setElementTypePrefix()\" function incorrectly extracted XML namespace prefixes. By tricking an application into processing a specially crafted XML file, an attacker could cause unusually high consumption of memory resources and possibly lead to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "expat: large number of colons in input makes parser consume high amount of resources, leading to DoS",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "When processing a specially crafted XML file, expat may use more memory than ultimately necessary, which can also lead to increased CPU usage and longer processing times. Depending on available system resources and configuration, this may also lead to the application triggering the Out-Of-Memory-Killer, causing the application to be terminated.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only JBCS"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-20843"
},
{
"category": "external",
"summary": "RHBZ#1723723",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1723723"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-20843",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-20843"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-20843",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-20843"
},
{
"category": "external",
"summary": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931031",
"url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931031"
}
],
"release_date": "2019-06-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T13:08:26+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"Text-Only JBCS"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2646"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Text-Only JBCS"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "expat: large number of colons in input makes parser consume high amount of resources, leading to DoS"
},
{
"cve": "CVE-2019-0196",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-04-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1695030"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparison when determining the method of a request and thus process the request incorrectly.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: mod_http2: read-after-free on a string compare",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only JBCS"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-0196"
},
{
"category": "external",
"summary": "RHBZ#1695030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695030"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-0196",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0196"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0196",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0196"
},
{
"category": "external",
"summary": "http://www.apache.org/dist/httpd/CHANGES_2.4",
"url": "http://www.apache.org/dist/httpd/CHANGES_2.4"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2019-04-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T13:08:26+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"Text-Only JBCS"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2646"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"Text-Only JBCS"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "httpd: mod_http2: read-after-free on a string compare"
},
{
"cve": "CVE-2019-0197",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2019-04-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1695042"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. Server that never enabled the h2 protocol or that only enabled it for https: and did not set \"H2Upgrade on\" are unaffected by this issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: mod_http2: possible crash on late upgrade",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only JBCS"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-0197"
},
{
"category": "external",
"summary": "RHBZ#1695042",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695042"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-0197",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0197"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0197",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0197"
},
{
"category": "external",
"summary": "http://www.apache.org/dist/httpd/CHANGES_2.4",
"url": "http://www.apache.org/dist/httpd/CHANGES_2.4"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2019-02-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T13:08:26+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"Text-Only JBCS"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2646"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L",
"version": "3.0"
},
"products": [
"Text-Only JBCS"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "httpd: mod_http2: possible crash on late upgrade"
},
{
"cve": "CVE-2019-15903",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2019-09-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1752592"
}
],
"notes": [
{
"category": "description",
"text": "In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "expat: heap-based buffer over-read via crafted XML input",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only JBCS"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-15903"
},
{
"category": "external",
"summary": "RHBZ#1752592",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752592"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-15903",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-15903"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-15903",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-15903"
}
],
"release_date": "2019-09-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T13:08:26+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"Text-Only JBCS"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2646"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Text-Only JBCS"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"Text-Only JBCS"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "expat: heap-based buffer over-read via crafted XML input"
},
{
"cve": "CVE-2019-19956",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2020-01-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1788856"
}
],
"notes": [
{
"category": "description",
"text": "xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc-\u003eoldNs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only JBCS"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-19956"
},
{
"category": "external",
"summary": "RHBZ#1788856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788856"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-19956",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956"
}
],
"release_date": "2020-01-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T13:08:26+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"Text-Only JBCS"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2646"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Text-Only JBCS"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c"
},
{
"cve": "CVE-2019-20388",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"discovery_date": "2020-02-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1799734"
}
],
"notes": [
{
"category": "description",
"text": "A memory leak was found in the xmlSchemaValidateStream function of libxml2. Applications that use this library may be vulnerable to memory not being freed leading to a denial of service. System availability is the highest threat from this vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only JBCS"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-20388"
},
{
"category": "external",
"summary": "RHBZ#1799734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799734"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-20388",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20388"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388"
}
],
"release_date": "2020-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T13:08:26+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"Text-Only JBCS"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2646"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Text-Only JBCS"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c"
},
{
"cve": "CVE-2020-1934",
"cwe": {
"id": "CWE-456",
"name": "Missing Initialization of a Variable"
},
"discovery_date": "2020-04-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1820772"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache\u0027s HTTP server (httpd) .The mod_proxy_ftp module may use uninitialized memory with proxying to a malicious FTP server. The highest threat from this vulnerability is to data confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: mod_proxy_ftp use of uninitialized value",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is caused by use of an uninitialized memory variable. Practically this has no impact, but in some corner cases it is possible that the contents of this variable could be read by a remote process, causing loss of confidentiality as a result of this. There is no evidence of code execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only JBCS"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-1934"
},
{
"category": "external",
"summary": "RHBZ#1820772",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1820772"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-1934",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-1934"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1934",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1934"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2020-04-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T13:08:26+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"Text-Only JBCS"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2646"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"Text-Only JBCS"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "httpd: mod_proxy_ftp use of uninitialized value"
},
{
"cve": "CVE-2020-7595",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2020-02-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1799786"
}
],
"notes": [
{
"category": "description",
"text": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only JBCS"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-7595"
},
{
"category": "external",
"summary": "RHBZ#1799786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799786"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-7595",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-7595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595"
}
],
"release_date": "2020-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T13:08:26+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"Text-Only JBCS"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2646"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Text-Only JBCS"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations"
},
{
"acknowledgments": [
{
"names": [
"the Envoy security team"
]
}
],
"cve": "CVE-2020-11080",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2020-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1844929"
}
],
"notes": [
{
"category": "description",
"text": "A resource consumption vulnerability was found in nghttp2. This flaw allows an attacker to repeatedly construct an overly large HTTP/2 SETTINGS frame with a length of 14,400 bytes that causes excessive CPU usage, leading to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nghttp2: overly large SETTINGS frames can lead to DoS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only JBCS"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-11080"
},
{
"category": "external",
"summary": "RHBZ#1844929",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1844929"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-11080",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-11080"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-11080",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-11080"
},
{
"category": "external",
"summary": "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-q5wr-xfw9-q7xr",
"url": "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-q5wr-xfw9-q7xr"
}
],
"release_date": "2020-06-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T13:08:26+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"Text-Only JBCS"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2646"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Text-Only JBCS"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nghttp2: overly large SETTINGS frames can lead to DoS"
}
]
}
rhsa-2021_0949
Vulnerability from csaf_redhat
Published
2021-03-22 10:10
Modified
2024-11-22 16:18
Summary
Red Hat Security Advisory: Red Hat OpenShift Do openshift/odo-init-image 1.1.3 security update
Notes
Topic
Updated openshift/odo-init-image container image is now available for Red Hat Openshift Do 1.0.
Details
Red Hat OpenShift Do (odo) is a simple CLI tool for developers to create,
build, and deploy applications on OpenShift. The odo tool is completely
client-based and requires no server within the OpenShift cluster for
deployment. It detects changes to local code and deploys it to the cluster
automatically, giving instant feedback to validate changes in real-time. It
supports multiple programming languages and frameworks.
Red Hat OpenShift Do openshift/odo-init-image 1.1.3 is a container image
that is used as part of the InitContainer setup that provisions odo
components.
The advisory addresses the following issues:
* Re-release of odo-init-image 1.1.3 for security updates
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Low"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated openshift/odo-init-image container image is now available for Red Hat Openshift Do 1.0.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Do (odo) is a simple CLI tool for developers to create,\nbuild, and deploy applications on OpenShift. The odo tool is completely\nclient-based and requires no server within the OpenShift cluster for\ndeployment. It detects changes to local code and deploys it to the cluster\nautomatically, giving instant feedback to validate changes in real-time. It\nsupports multiple programming languages and frameworks.\n\nRed Hat OpenShift Do openshift/odo-init-image 1.1.3 is a container image\nthat is used as part of the InitContainer setup that provisions odo\ncomponents.\n\nThe advisory addresses the following issues:\n\n* Re-release of odo-init-image 1.1.3 for security updates",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2021:0949",
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#low",
"url": "https://access.redhat.com/security/updates/classification/#low"
},
{
"category": "external",
"summary": "https://docs.openshift.com/container-platform/4.4/cli_reference/openshift_developer_cli/installing-odo.html",
"url": "https://docs.openshift.com/container-platform/4.4/cli_reference/openshift_developer_cli/installing-odo.html"
},
{
"category": "external",
"summary": "1832983",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1832983"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0949.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Do openshift/odo-init-image 1.1.3 security update",
"tracking": {
"current_release_date": "2024-11-22T16:18:07+00:00",
"generator": {
"date": "2024-11-22T16:18:07+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2021:0949",
"initial_release_date": "2021-03-22T10:10:55+00:00",
"revision_history": [
{
"date": "2021-03-22T10:10:55+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2021-03-22T10:10:55+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T16:18:07+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "OpenShift Do 1",
"product": {
"name": "OpenShift Do 1",
"product_id": "7Server-RHODO-1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_do:1.0::el7"
}
}
}
],
"category": "product_family",
"name": "OpenShift Do"
},
{
"branches": [
{
"category": "product_version",
"name": "openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64",
"product": {
"name": "openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64",
"product_id": "openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96?arch=amd64\u0026repository_url=registry.redhat.io/openshiftdo/odo-init-image-rhel7\u0026tag=1.1.3-2"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64 as a component of OpenShift Do 1",
"product_id": "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
},
"product_reference": "openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64",
"relates_to_product_reference": "7Server-RHODO-1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-20843",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-06-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1723723"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the \"setElementTypePrefix()\" function incorrectly extracted XML namespace prefixes. By tricking an application into processing a specially crafted XML file, an attacker could cause unusually high consumption of memory resources and possibly lead to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "expat: large number of colons in input makes parser consume high amount of resources, leading to DoS",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "When processing a specially crafted XML file, expat may use more memory than ultimately necessary, which can also lead to increased CPU usage and longer processing times. Depending on available system resources and configuration, this may also lead to the application triggering the Out-Of-Memory-Killer, causing the application to be terminated.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-20843"
},
{
"category": "external",
"summary": "RHBZ#1723723",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1723723"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-20843",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-20843"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-20843",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-20843"
},
{
"category": "external",
"summary": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931031",
"url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931031"
}
],
"release_date": "2019-06-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "expat: large number of colons in input makes parser consume high amount of resources, leading to DoS"
},
{
"cve": "CVE-2019-5094",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2019-11-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1768555"
}
],
"notes": [
{
"category": "description",
"text": "An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "e2fsprogs: Crafted ext4 partition leads to out-of-bounds write",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5094"
},
{
"category": "external",
"summary": "RHBZ#1768555",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1768555"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5094",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5094"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5094",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5094"
},
{
"category": "external",
"summary": "https://talosintelligence.com/vulnerability_reports/TALOS-2019-0887",
"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2019-0887"
}
],
"release_date": "2019-08-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "e2fsprogs: Crafted ext4 partition leads to out-of-bounds write"
},
{
"cve": "CVE-2019-5188",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2020-01-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1790048"
}
],
"notes": [
{
"category": "description",
"text": "A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "e2fsprogs: Out-of-bounds write in e2fsck/rehash.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5188"
},
{
"category": "external",
"summary": "RHBZ#1790048",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1790048"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5188",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5188"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5188",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5188"
}
],
"release_date": "2020-01-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "e2fsprogs: Out-of-bounds write in e2fsck/rehash.c"
},
{
"acknowledgments": [
{
"names": [
"the Curl project"
]
},
{
"names": [
"Thomas Vegas"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-5482",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2019-09-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1749652"
}
],
"notes": [
{
"category": "description",
"text": "Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: heap buffer overflow in function tftp_receive_packet()",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5482"
},
{
"category": "external",
"summary": "RHBZ#1749652",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1749652"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5482",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5482"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5482",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5482"
},
{
"category": "external",
"summary": "https://curl.haxx.se/docs/CVE-2019-5482.html",
"url": "https://curl.haxx.se/docs/CVE-2019-5482.html"
}
],
"release_date": "2019-09-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
},
{
"category": "workaround",
"details": "Do not use TFTP with curl with smaller than the default BLKSIZE.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: heap buffer overflow in function tftp_receive_packet()"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Henry Corrigan-Gibbs"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11719",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2019-07-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1728436"
}
],
"notes": [
{
"category": "description",
"text": "When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger an out-of-bounds read in the Network Security Services (NSS) library. This could lead to information disclosure. This vulnerability affects Firefox ESR \u003c 60.8, Firefox \u003c 68, and Thunderbird \u003c 60.8.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: Out-of-bounds read when importing curve25519 private key",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Firefox on Red Hat Enterprise Linux is built against the system nss library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11719"
},
{
"category": "external",
"summary": "RHBZ#1728436",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1728436"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11719",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11719"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11719",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11719"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-22/#CVE-2019-11719",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-22/#CVE-2019-11719"
}
],
"release_date": "2019-07-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: Out-of-bounds read when importing curve25519 private key"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Hubert Kario"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11727",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"discovery_date": "2019-07-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1730988"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerability affects Firefox \u003c 68.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: PKCS#1 v1.5 signatures can be used for TLS 1.3",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11727"
},
{
"category": "external",
"summary": "RHBZ#1730988",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730988"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11727",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11727"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11727",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11727"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-21/#CVE-2019-11727",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-21/#CVE-2019-11727"
}
],
"release_date": "2019-07-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.4,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "nss: PKCS#1 v1.5 signatures can be used for TLS 1.3"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
}
],
"cve": "CVE-2019-11756",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-11-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1774835"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free flaw was found in Mozilla Network Security Services (NSS) related to PK11 session handling. An attacker could use this flaw to execute arbitrary code with the permissions of the user running the application compiled with NSS.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: Use-after-free in sftk_FreeSession due to improper refcounting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw was fixed in upstream nss-3.47. Exploitation of this flaw is difficult and even impossible in most cases.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11756"
},
{
"category": "external",
"summary": "RHBZ#1774835",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1774835"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11756",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11756"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11756",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11756"
},
{
"category": "external",
"summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.47_release_notes",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.47_release_notes"
}
],
"release_date": "2019-12-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: Use-after-free in sftk_FreeSession due to improper refcounting"
},
{
"cve": "CVE-2019-12450",
"cwe": {
"id": "CWE-552",
"name": "Files or Directories Accessible to External Parties"
},
"discovery_date": "2019-06-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1719141"
}
],
"notes": [
{
"category": "description",
"text": "file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissions are used.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the versions of glib2 as shipped with Red Hat Enterprise Linux 6, 7 and 8 . Red Hat Product Security has rated this issue as having a security impact of Moderate.\n\nRed Hat Enterprise Linux 6 is now in Maintenance Support 2 Phase of the support and maintenance life cycle. This has been rated as having a security impact of Important, and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-12450"
},
{
"category": "external",
"summary": "RHBZ#1719141",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1719141"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-12450",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-12450"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-12450",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-12450"
}
],
"release_date": "2019-05-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress"
},
{
"acknowledgments": [
{
"names": [
"the D-Bus project"
]
},
{
"names": [
"Joe Vennix"
],
"organization": "Apple Information Security",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-12749",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"discovery_date": "2019-06-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1719344"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in dbus. The implementation of DBUS_COOKIE_SHA1 is susceptible to a symbolic link attack. A malicious client with write access to its own home directory could manipulate a ~/.dbus-keyrings symlink to cause the DBusServer to read and write in unintended locations resulting in an authentication bypass. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is mitigated by the fact that by default, the well-known system dbus-daemon (since 2003) and the well-known session dbus-daemon (in stable releases since dbus 1.10.0 in 2015) only accept the EXTERNAL authentication mechanism, and as a result will reject DBUS_COOKIE_SHA1 at an early stage, before manipulating cookies. \n\nRed Hat Enterprise Linux 6 is affected by this flaw, which can be leveraged to achieve privilege escalation via upstart. This issue has been rated as having important impact for Red Hat Enterprise Linux 6.\n\nRed Hat Enterprise Linux 7 and 8, both ship dbus \u003e= 1.10 and therefore are affected by this flaw only when system or session dbus-daemons are used under non-standard configurations or by third party users of DBusServer. Red Hat Enterprise Linux 7 and 8 does not ship any affected DBusServer cosumer. However third party applications may be affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-12749"
},
{
"category": "external",
"summary": "RHBZ#1719344",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1719344"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-12749",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-12749"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-12749",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-12749"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2019/06/11/2",
"url": "https://www.openwall.com/lists/oss-security/2019/06/11/2"
}
],
"release_date": "2019-06-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass"
},
{
"acknowledgments": [
{
"names": [
"Simon McVittie"
],
"organization": "Collabora Ltd."
}
],
"cve": "CVE-2019-14822",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"discovery_date": "2019-06-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1717958"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was discovered in ibus that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to a misconfiguration in the DBus server setup. A local attacker may use this flaw to intercept all keystrokes of a victim user who is using the graphical interface, change the input method engine, or modify other input related configurations of the victim user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ibus: missing authorization allows local attacker to access the input bus of another user",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Gnome uses the ibus input framework only when the user explicitly configures it or when some input method sources are in use, like Korean from the ibus-hangul package or Chinese input methods from the ibus-libpinyin. Input methods like en-US are not handled by ibus, thus if the victim user just use them the attacker will not be able to intercept the key strokes of that user.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-14822"
},
{
"category": "external",
"summary": "RHBZ#1717958",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1717958"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-14822",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-14822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14822"
}
],
"release_date": "2019-09-13T07:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "ibus: missing authorization allows local attacker to access the input bus of another user"
},
{
"acknowledgments": [
{
"names": [
"Thomas Habets"
]
}
],
"cve": "CVE-2019-14866",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2019-10-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1765511"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered cpio does not properly validate input files when generating TAR archives. When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may contain files with permissions the attacker did not have or in paths he did not have access to. Extracting those archives from a high-privilege user without carefully reviewing them may lead to the compromise of the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cpio: improper input validation when writing tar header fields leads to unexpected tar generation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-14866"
},
{
"category": "external",
"summary": "RHBZ#1765511",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1765511"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-14866",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-14866"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14866",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14866"
}
],
"release_date": "2019-08-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
},
{
"category": "workaround",
"details": "TAR archives should be inspected before being extracted and the extraction should be performed with the `tar` command or `--no-absolute-filenames` option if done with `cpio`. Moreover, it should be performed by a low-privilege user whenever possible, to prevent extraction of files that could compromise the system.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cpio: improper input validation when writing tar header fields leads to unexpected tar generation"
},
{
"cve": "CVE-2019-15903",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2019-09-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1752592"
}
],
"notes": [
{
"category": "description",
"text": "In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "expat: heap-based buffer over-read via crafted XML input",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-15903"
},
{
"category": "external",
"summary": "RHBZ#1752592",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752592"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-15903",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-15903"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-15903",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-15903"
}
],
"release_date": "2019-09-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "expat: heap-based buffer over-read via crafted XML input"
},
{
"cve": "CVE-2019-16935",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2019-09-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1763229"
}
],
"notes": [
{
"category": "description",
"text": "A reflected cross-site scripting (XSS) vulnerability was found in Python XML-RPC server. The `server_title` field is not sufficiently sanitized allowing malicious JavaScript to be injected. Successful exploitation would allow a remote attacker to execute JavaScript code within the context of the affected user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: XSS vulnerability in the documentation XML-RPC server in server_title field",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw does not affect the versions of python27-python as shipped with Red Hat Software Collections 3 as they already include the fix.\nThis flaw does not affect the versions of python36:3.6/python36 as shipped with Red Hat Enterprise Linux 8 as they are \"symlinks\" to the main python3 component, which provides the actual interpreter of the Python programming language.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-16935"
},
{
"category": "external",
"summary": "RHBZ#1763229",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1763229"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-16935",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-16935"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-16935",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-16935"
}
],
"release_date": "2019-09-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "python: XSS vulnerability in the documentation XML-RPC server in server_title field"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla Project"
]
}
],
"cve": "CVE-2019-17006",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2019-11-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1775916"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was discovered in nss where input text length was not checked when using certain cryptographic primitives. This could lead to a heap-buffer overflow resulting in a crash and data leak. The highest threat is to confidentiality and integrity of data as well as system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: Check length of inputs for cryptographic primitives",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-17006"
},
{
"category": "external",
"summary": "RHBZ#1775916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1775916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-17006",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-17006"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-17006",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17006"
},
{
"category": "external",
"summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46_release_notes",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46_release_notes"
}
],
"release_date": "2019-12-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: Check length of inputs for cryptographic primitives"
},
{
"cve": "CVE-2019-17023",
"discovery_date": "2020-01-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1791225"
}
],
"notes": [
{
"category": "description",
"text": "A protocol downgrade flaw was found in Network Security Services (NSS). After a HelloRetryRequest has been sent, the client may negotiate a lower protocol than TLS 1.3, resulting in an invalid state transition in the TLS State Machine. If the client gets into this state, incoming Application Data records will be ignored.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw causes the client to hang when there is a downgrade attempt. Therefore no actual protocol downgrade occurs.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-17023"
},
{
"category": "external",
"summary": "RHBZ#1791225",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1791225"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-17023",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-17023"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-17023",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17023"
},
{
"category": "external",
"summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes"
}
],
"release_date": "2020-01-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state"
},
{
"cve": "CVE-2019-17498",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-10-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1766898"
}
],
"notes": [
{
"category": "description",
"text": "In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libssh2: integer overflow in SSH_MSG_DISCONNECT logic in packet.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw needs a malicious MITM SSH server. When an application compiled with libssh2 connects to such a MITM SSH server, the server can trigger an integer overflow leading to an OOB read in the SSH_MSG_DISCONNECT logic. This can cause the application compiled with libssh2 to crash. This is strictly a client side crash and the SSH server may not be affected.\n\nAlso note that when a user connects to a malicious MITM server there is already a risk of disclosing password/keys irrespective of the flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-17498"
},
{
"category": "external",
"summary": "RHBZ#1766898",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1766898"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-17498",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-17498"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-17498",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17498"
},
{
"category": "external",
"summary": "https://blog.semmle.com/libssh2-integer-overflow-CVE-2019-17498/",
"url": "https://blog.semmle.com/libssh2-integer-overflow-CVE-2019-17498/"
}
],
"release_date": "2019-10-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libssh2: integer overflow in SSH_MSG_DISCONNECT logic in packet.c"
},
{
"cve": "CVE-2019-19126",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2019-11-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1774681"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was discovered in glibc where the LD_PREFER_MAP_32BIT_EXEC environment variable is not ignored when running binaries with the setuid flag on x86_64 architectures. This allows an attacker to force system to utilize only half of the memory (making the system think the software is 32-bit only), thus lowering the amount of memory being used with address space layout randomization (ASLR). The highest threat is confidentiality although the complexity of attack is high. The affected application must already have other vulnerabilities for this flaw to be usable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-19126"
},
{
"category": "external",
"summary": "RHBZ#1774681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1774681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-19126",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19126"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19126",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19126"
}
],
"release_date": "2019-11-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 2.9,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries"
},
{
"cve": "CVE-2019-19956",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2020-01-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1788856"
}
],
"notes": [
{
"category": "description",
"text": "xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc-\u003eoldNs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-19956"
},
{
"category": "external",
"summary": "RHBZ#1788856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788856"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-19956",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956"
}
],
"release_date": "2020-01-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c"
},
{
"cve": "CVE-2019-20386",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2020-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1793979"
}
],
"notes": [
{
"category": "description",
"text": "A memory leak was discovered in the systemd-login when a power-switch event is received. A physical attacker may trigger one of these events and leak bytes due to a missing free.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "systemd: memory leak in button_open() in login/logind-button.c when udev events are received",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The version of systemd delivered in OpenShift Container Platform 4.1 and included in CoreOS images has been superseded by the version delivered in Red Hat Enterprise Linux 8. CoreOS updates for systemd in will be consumed from Red Hat Enterprise Linux 8 channels.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-20386"
},
{
"category": "external",
"summary": "RHBZ#1793979",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793979"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-20386",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20386"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20386",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20386"
}
],
"release_date": "2020-01-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "PHYSICAL",
"availabilityImpact": "LOW",
"baseScore": 2.4,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "systemd: memory leak in button_open() in login/logind-button.c when udev events are received"
},
{
"cve": "CVE-2019-20388",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"discovery_date": "2020-02-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1799734"
}
],
"notes": [
{
"category": "description",
"text": "A memory leak was found in the xmlSchemaValidateStream function of libxml2. Applications that use this library may be vulnerable to memory not being freed leading to a denial of service. System availability is the highest threat from this vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-20388"
},
{
"category": "external",
"summary": "RHBZ#1799734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799734"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-20388",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20388"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388"
}
],
"release_date": "2020-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c"
},
{
"cve": "CVE-2019-20907",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2020-07-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1856481"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in python. In Lib/tarfile.py an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: infinite loop in the tarfile module via crafted TAR archive",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A service is vulnerable if it uses python\u0027s tarfile module to open untrusted tar files. If an attacker is able to submit a crafted tar file to a service which uses the tarfile module to open it, an infinite loop will be executed, potentially causing a denial of service. The tarfile module is included with python.\n\nVersions of `python36:3.6/python36` as shipped with Red Hat Enterprise Linux 8 are marked as \u0027Not affected\u0027 as they just provide \"symlinks\" to the main `python3` component, which provides the actual interpreter of the Python programming language.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-20907"
},
{
"category": "external",
"summary": "RHBZ#1856481",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1856481"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-20907",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20907"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20907",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20907"
}
],
"release_date": "2019-12-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
},
{
"category": "workaround",
"details": "This flaw can be mitigated by not opening untrusted files with tarfile.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "python: infinite loop in the tarfile module via crafted TAR archive"
},
{
"cve": "CVE-2019-25013",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2021-01-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1912960"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in glibc. When processing input in the EUC-KR encoding, an invalid input sequence could cause glibc to read beyond the end of a buffer, resulting in a segmentation fault. The highest threat from this vulnerability is to system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has been rated as having moderate impact for glibc packages shipped with Red Hat Enterprise Linux because, the maximum impact of this vulnerability is a crash, and it relies on processing untrusted input in an uncommon encoding (EUC-KR). When this encoding is not used, the vulnerability can not be triggered.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-25013"
},
{
"category": "external",
"summary": "RHBZ#1912960",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1912960"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-25013",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-25013"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-25013",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-25013"
}
],
"release_date": "2019-09-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding"
},
{
"acknowledgments": [
{
"names": [
"the OpenSSL project"
]
},
{
"names": [
"David Benjamin"
],
"organization": "Google",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2020-1971",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2020-12-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1903409"
}
],
"notes": [
{
"category": "description",
"text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: EDIPARTYNAME NULL pointer de-reference",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-1971"
},
{
"category": "external",
"summary": "RHBZ#1903409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-1971"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20201208.txt",
"url": "https://www.openssl.org/news/secadv/20201208.txt"
}
],
"release_date": "2020-12-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
},
{
"category": "workaround",
"details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openssl: EDIPARTYNAME NULL pointer de-reference"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla Project"
]
},
{
"names": [
"Cesar Pereida",
"Nicola Tuveri",
"Yuval Yarom",
"Billy Bob Brumley"
],
"organization": "Network and Information Security Group (NISEC",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2020-6829",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"discovery_date": "2020-04-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1826187"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in nss. Using the EM side-channel, it is possible to extract the position of zero and non-zero wNAF digits while nss-certutil tool performs scalar multiplication during the ECDSA signature generation, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures, this information can be used to steal the private key. The highest threat from this vulnerability is to data confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: Side channel attack on ECDSA signature generation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a side channel attack which can used to exact pirate keys when ECDSA signatures are being generated. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-6829"
},
{
"category": "external",
"summary": "RHBZ#1826187",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1826187"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-6829",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-6829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6829"
},
{
"category": "external",
"summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes"
}
],
"release_date": "2020-06-02T12:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: Side channel attack on ECDSA signature generation"
},
{
"cve": "CVE-2020-7595",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2020-02-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1799786"
}
],
"notes": [
{
"category": "description",
"text": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-7595"
},
{
"category": "external",
"summary": "RHBZ#1799786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799786"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-7595",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-7595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595"
}
],
"release_date": "2020-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations"
},
{
"cve": "CVE-2020-8177",
"discovery_date": "2020-06-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1847915"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in curl. Overwriting local files is possible when using a certain combination of command line options. Requesting content from a malicious server could lead to overwriting local files with compromised files leading to unknown effects. The highest threat from this vulnerability is to file integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: Incorrect argument check can allow remote servers to overwrite local files",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue only affects the \u0027curl\u0027 command line utility. Additionally, this is only an issue when using the \u0027-J\u0027 (with the \u0027-O\u0027 option) and \u0027-i\u0027 command line options combined.\n\nIn most cases, there is nothing to gain for a local attacker here: the curl command line utility is likely running with the same privileges as the user, and thus the user can already overwrite all the files curl could overwrite. However, a local user will have to call curl with the \u0027-J\u0027 and \u0027-i\u0027 command line options while requesting content from a malicious server, which then opens up an opportunity for the malicious server to overwrite local files.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8177"
},
{
"category": "external",
"summary": "RHBZ#1847915",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1847915"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8177",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8177"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8177",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8177"
},
{
"category": "external",
"summary": "https://curl.haxx.se/docs/CVE-2020-8177.html",
"url": "https://curl.haxx.se/docs/CVE-2020-8177.html"
}
],
"release_date": "2020-06-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
},
{
"category": "workaround",
"details": "The vulnerability is only possible when using the \u0027-J\u0027 and \u0027-i\u0027 switches in conjunction with the curl command. Executing curl without these switches mitigates the flaw.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:L",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: Incorrect argument check can allow remote servers to overwrite local files"
},
{
"cve": "CVE-2020-10029",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"discovery_date": "2020-03-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1810670"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in glibc in versions prior to 2.32. Pseudo-zero values are not validated causing a stack corruption due to a stack-based overflow. The highest threat from this vulnerability is to system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The glibc version shipped with Red Hat Enterprise Linux 8 is compiled using gcc\u0027s stack-protector option which mitigates the possibility of code execution led by the stack corruption.\n\nThe glibc version shipped with Red Hat Enterprise Linux 7 is more difficult to exploit using this flaw, specifically for remote code execution. Because exploitation of the flaw depends on the usage of pseudo-zero values, an attacker can only overwrite the stack with 0s. Due to this, a valid address value for code execution is difficult to get and is likely to only result in a crash.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-10029"
},
{
"category": "external",
"summary": "RHBZ#1810670",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1810670"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-10029",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-10029"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-10029",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10029"
}
],
"release_date": "2020-02-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions"
},
{
"cve": "CVE-2020-12243",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2020-04-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1833535"
}
],
"notes": [
{
"category": "description",
"text": "In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openldap: denial of service via nested boolean expressions in LDAP search filters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does not affect Red Hat Enterprise Linux 8 because we don\u0027t ship openldap-servers subpackage with the Red Hat Enterprise Linux 8 (it is only present in the buildroot).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-12243"
},
{
"category": "external",
"summary": "RHBZ#1833535",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1833535"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-12243",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-12243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12243"
}
],
"release_date": "2020-04-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openldap: denial of service via nested boolean expressions in LDAP search filters"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla Project"
]
},
{
"names": [
"Cesar Pereida Garcia and the Network and Information Security Group"
],
"organization": "NISEC",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2020-12400",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"discovery_date": "2020-07-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1853983"
}
],
"notes": [
{
"category": "description",
"text": "A side-channel flaw was found in NSS, in the way P-384 and P-521 curves are used in the generation of EDSA signatures, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures, this information can be used to steal the private key. The highest threat from this vulnerability is to data confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a side-channel attack that can be used to exact pirate keys when ECDSA signatures are being generated. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-12400"
},
{
"category": "external",
"summary": "RHBZ#1853983",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1853983"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-12400",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-12400"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12400",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12400"
},
{
"category": "external",
"summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes"
}
],
"release_date": "2020-07-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla Project"
]
},
{
"names": [
"Cesar Pereida Garcia and the Network and Information Security Group"
],
"organization": "NISEC",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2020-12401",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"discovery_date": "2020-06-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1851294"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in nss. Using the EM side-channel, it is possible to extract the position of zero and non-zero wNAF digits while nss-certutil tool performs scalar multiplication during the ECDSA signature generation, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures, this information can be used to steal the private key. The highest threat from this vulnerability is to data confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: ECDSA timing attack mitigation bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a side channel attack which can used to exact pirate keys when ECDSA signatures are being generated. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-12401"
},
{
"category": "external",
"summary": "RHBZ#1851294",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1851294"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-12401",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-12401"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12401",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12401"
},
{
"category": "external",
"summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes"
}
],
"release_date": "2020-06-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
},
{
"category": "workaround",
"details": "This is a side channel attack which can used to exact pirate keys when ECDSA signatures are being generated. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: ECDSA timing attack mitigation bypass"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla Project"
]
},
{
"names": [
"Billy Bob Brumley",
"Cesar Pereida",
"Nicola Tuveri",
"Yuval Yarom"
],
"organization": "Network and Information Security Group (NISEC",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2020-12402",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"discovery_date": "2020-04-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1826231"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in NSS, where it is vulnerable to RSA key generation cache timing side-channel attacks. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. The highest threat to this flaw is to confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: Side channel vulnerabilities during RSA key generation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A timing attack was found in the way NSS generated RSA keys. A man-in-the-middle attacker could use this attack during RSA key generation to recover the private key. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-12402"
},
{
"category": "external",
"summary": "RHBZ#1826231",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1826231"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-12402",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-12402"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12402",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12402"
},
{
"category": "external",
"summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.53.1_release_notes",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.53.1_release_notes"
}
],
"release_date": "2020-06-02T12:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: Side channel vulnerabilities during RSA key generation"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla Project"
]
}
],
"cve": "CVE-2020-12403",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2020-08-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1868931"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which was not functioning correctly) and strictly enforcing tag length. The highest threat from this vulnerability is to confidentiality and system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-12403"
},
{
"category": "external",
"summary": "RHBZ#1868931",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1868931"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-12403",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-12403"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12403",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12403"
},
{
"category": "external",
"summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes"
}
],
"release_date": "2020-07-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read"
},
{
"cve": "CVE-2020-29573",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"discovery_date": "2020-12-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1905213"
}
],
"notes": [
{
"category": "description",
"text": "A stack buffer overflow flaw was found in glibc in the way the printf family of functions processed an 80-bit long double with a non-canonical bit pattern. This flaw allows an attacker who can control the arguments of these functions with the non-standard long double pattern to trigger an overflow and cause an application crash. The highest threat from this vulnerability is to system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is essentially a crash which can only be triggered by a non-standard argument passed as a long double input to a member of printf family of functions. The application has to be written in this way to allow this issue to be triggered. The maximum impact is an application crash.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-29573"
},
{
"category": "external",
"summary": "RHBZ#1905213",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1905213"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-29573",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-29573"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-29573",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-29573"
},
{
"category": "external",
"summary": "https://sourceware.org/pipermail/libc-alpha/2020-September/117779.html",
"url": "https://sourceware.org/pipermail/libc-alpha/2020-September/117779.html"
}
],
"release_date": "2020-09-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern"
}
]
}
rhsa-2020:2646
Vulnerability from csaf_redhat
Published
2020-06-22 13:08
Modified
2025-03-19 15:13
Summary
Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP3 security update
Notes
Topic
Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 3 zip release for RHEL 6, RHEL 7 and Microsoft Windows is available.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products, and is packaged under Red Hat JBoss Core Services to allow for faster distribution of updates, and for a more consistent update experience.
This release adds the new Apache HTTP Server 2.4.37 Service Pack 3 packages that are part of the JBoss Core Services offering.
This release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 2 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.
Security fix(es):
* httpd: mod_http2: read-after-free on a string compare (CVE-2019-0196)
* httpd: mod_http2: possible crash on late upgrade (CVE-2019-0197)
* httpd: mod_proxy_ftp use of uninitialized value (CVE-2020-1934)
* nghttp2: overly large SETTINGS frames can lead to DoS (CVE-2020-11080)
* libxml2: There's a memory leak in xmlParseBalancedChunkMemoryRecover in parser.c that could result in a crash (CVE-2019-19956)
* libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c (CVE-2019-20388)
* libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations (CVE-2020-7595)
* expat: large number of colons in input makes parser consume high amount of resources, leading to DoS (CVE-2018-20843)
* expat: heap-based buffer over-read via crafted XML input (CVE-2019-15903)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 3 zip release for RHEL 6, RHEL 7 and Microsoft Windows is available.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products, and is packaged under Red Hat JBoss Core Services to allow for faster distribution of updates, and for a more consistent update experience.\n\nThis release adds the new Apache HTTP Server 2.4.37 Service Pack 3 packages that are part of the JBoss Core Services offering.\n\nThis release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 2 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.\n\nSecurity fix(es):\n\n* httpd: mod_http2: read-after-free on a string compare (CVE-2019-0196)\n* httpd: mod_http2: possible crash on late upgrade (CVE-2019-0197)\n* httpd: mod_proxy_ftp use of uninitialized value (CVE-2020-1934)\n* nghttp2: overly large SETTINGS frames can lead to DoS (CVE-2020-11080)\n* libxml2: There\u0027s a memory leak in xmlParseBalancedChunkMemoryRecover in parser.c that could result in a crash (CVE-2019-19956)\n* libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c (CVE-2019-20388)\n* libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations (CVE-2020-7595)\n* expat: large number of colons in input makes parser consume high amount of resources, leading to DoS (CVE-2018-20843)\n* expat: heap-based buffer over-read via crafted XML input (CVE-2019-15903)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2020:2646",
"url": "https://access.redhat.com/errata/RHSA-2020:2646"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=core.service.apachehttp\u0026downloadType=securityPatches\u0026version=2.4.37",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=core.service.apachehttp\u0026downloadType=securityPatches\u0026version=2.4.37"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.37/",
"url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.37/"
},
{
"category": "external",
"summary": "1695030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695030"
},
{
"category": "external",
"summary": "1695042",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695042"
},
{
"category": "external",
"summary": "1723723",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1723723"
},
{
"category": "external",
"summary": "1752592",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752592"
},
{
"category": "external",
"summary": "1788856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788856"
},
{
"category": "external",
"summary": "1799734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799734"
},
{
"category": "external",
"summary": "1799786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799786"
},
{
"category": "external",
"summary": "1820772",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1820772"
},
{
"category": "external",
"summary": "1844929",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1844929"
},
{
"category": "external",
"summary": "JBCS-941",
"url": "https://issues.redhat.com/browse/JBCS-941"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2646.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP3 security update",
"tracking": {
"current_release_date": "2025-03-19T15:13:12+00:00",
"generator": {
"date": "2025-03-19T15:13:12+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.4.1"
}
},
"id": "RHSA-2020:2646",
"initial_release_date": "2020-06-22T13:08:26+00:00",
"revision_history": [
{
"date": "2020-06-22T13:08:26+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2020-06-22T13:08:26+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-03-19T15:13:12+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Text-Only JBCS",
"product": {
"name": "Text-Only JBCS",
"product_id": "Text-Only JBCS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_core_services:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Core Services"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-20843",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-06-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1723723"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the \"setElementTypePrefix()\" function incorrectly extracted XML namespace prefixes. By tricking an application into processing a specially crafted XML file, an attacker could cause unusually high consumption of memory resources and possibly lead to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "expat: large number of colons in input makes parser consume high amount of resources, leading to DoS",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "When processing a specially crafted XML file, expat may use more memory than ultimately necessary, which can also lead to increased CPU usage and longer processing times. Depending on available system resources and configuration, this may also lead to the application triggering the Out-Of-Memory-Killer, causing the application to be terminated.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only JBCS"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-20843"
},
{
"category": "external",
"summary": "RHBZ#1723723",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1723723"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-20843",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-20843"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-20843",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-20843"
},
{
"category": "external",
"summary": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931031",
"url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931031"
}
],
"release_date": "2019-06-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T13:08:26+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"Text-Only JBCS"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2646"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Text-Only JBCS"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "expat: large number of colons in input makes parser consume high amount of resources, leading to DoS"
},
{
"cve": "CVE-2019-0196",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-04-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1695030"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparison when determining the method of a request and thus process the request incorrectly.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: mod_http2: read-after-free on a string compare",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only JBCS"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-0196"
},
{
"category": "external",
"summary": "RHBZ#1695030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695030"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-0196",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0196"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0196",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0196"
},
{
"category": "external",
"summary": "http://www.apache.org/dist/httpd/CHANGES_2.4",
"url": "http://www.apache.org/dist/httpd/CHANGES_2.4"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2019-04-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T13:08:26+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"Text-Only JBCS"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2646"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"Text-Only JBCS"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "httpd: mod_http2: read-after-free on a string compare"
},
{
"cve": "CVE-2019-0197",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2019-04-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1695042"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. Server that never enabled the h2 protocol or that only enabled it for https: and did not set \"H2Upgrade on\" are unaffected by this issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: mod_http2: possible crash on late upgrade",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only JBCS"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-0197"
},
{
"category": "external",
"summary": "RHBZ#1695042",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695042"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-0197",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0197"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0197",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0197"
},
{
"category": "external",
"summary": "http://www.apache.org/dist/httpd/CHANGES_2.4",
"url": "http://www.apache.org/dist/httpd/CHANGES_2.4"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2019-02-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T13:08:26+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"Text-Only JBCS"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2646"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L",
"version": "3.0"
},
"products": [
"Text-Only JBCS"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "httpd: mod_http2: possible crash on late upgrade"
},
{
"cve": "CVE-2019-15903",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2019-09-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1752592"
}
],
"notes": [
{
"category": "description",
"text": "In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "expat: heap-based buffer over-read via crafted XML input",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only JBCS"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-15903"
},
{
"category": "external",
"summary": "RHBZ#1752592",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752592"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-15903",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-15903"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-15903",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-15903"
}
],
"release_date": "2019-09-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T13:08:26+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"Text-Only JBCS"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2646"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Text-Only JBCS"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"Text-Only JBCS"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "expat: heap-based buffer over-read via crafted XML input"
},
{
"cve": "CVE-2019-19956",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2020-01-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1788856"
}
],
"notes": [
{
"category": "description",
"text": "xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc-\u003eoldNs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only JBCS"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-19956"
},
{
"category": "external",
"summary": "RHBZ#1788856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788856"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-19956",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956"
}
],
"release_date": "2020-01-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T13:08:26+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"Text-Only JBCS"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2646"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Text-Only JBCS"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c"
},
{
"cve": "CVE-2019-20388",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"discovery_date": "2020-02-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1799734"
}
],
"notes": [
{
"category": "description",
"text": "A memory leak was found in the xmlSchemaValidateStream function of libxml2. Applications that use this library may be vulnerable to memory not being freed leading to a denial of service. System availability is the highest threat from this vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only JBCS"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-20388"
},
{
"category": "external",
"summary": "RHBZ#1799734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799734"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-20388",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20388"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388"
}
],
"release_date": "2020-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T13:08:26+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"Text-Only JBCS"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2646"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Text-Only JBCS"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c"
},
{
"cve": "CVE-2020-1934",
"cwe": {
"id": "CWE-456",
"name": "Missing Initialization of a Variable"
},
"discovery_date": "2020-04-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1820772"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache\u0027s HTTP server (httpd) .The mod_proxy_ftp module may use uninitialized memory with proxying to a malicious FTP server. The highest threat from this vulnerability is to data confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: mod_proxy_ftp use of uninitialized value",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is caused by use of an uninitialized memory variable. Practically this has no impact, but in some corner cases it is possible that the contents of this variable could be read by a remote process, causing loss of confidentiality as a result of this. There is no evidence of code execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only JBCS"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-1934"
},
{
"category": "external",
"summary": "RHBZ#1820772",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1820772"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-1934",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-1934"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1934",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1934"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2020-04-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T13:08:26+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"Text-Only JBCS"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2646"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"Text-Only JBCS"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "httpd: mod_proxy_ftp use of uninitialized value"
},
{
"cve": "CVE-2020-7595",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2020-02-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1799786"
}
],
"notes": [
{
"category": "description",
"text": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only JBCS"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-7595"
},
{
"category": "external",
"summary": "RHBZ#1799786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799786"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-7595",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-7595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595"
}
],
"release_date": "2020-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T13:08:26+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"Text-Only JBCS"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2646"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Text-Only JBCS"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations"
},
{
"acknowledgments": [
{
"names": [
"the Envoy security team"
]
}
],
"cve": "CVE-2020-11080",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2020-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1844929"
}
],
"notes": [
{
"category": "description",
"text": "A resource consumption vulnerability was found in nghttp2. This flaw allows an attacker to repeatedly construct an overly large HTTP/2 SETTINGS frame with a length of 14,400 bytes that causes excessive CPU usage, leading to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nghttp2: overly large SETTINGS frames can lead to DoS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only JBCS"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-11080"
},
{
"category": "external",
"summary": "RHBZ#1844929",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1844929"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-11080",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-11080"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-11080",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-11080"
},
{
"category": "external",
"summary": "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-q5wr-xfw9-q7xr",
"url": "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-q5wr-xfw9-q7xr"
}
],
"release_date": "2020-06-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T13:08:26+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"Text-Only JBCS"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2646"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Text-Only JBCS"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nghttp2: overly large SETTINGS frames can lead to DoS"
}
]
}
RHSA-2020:3996
Vulnerability from csaf_redhat
Published
2020-09-29 19:48
Modified
2025-01-09 05:57
Summary
Red Hat Security Advisory: libxml2 security and bug fix update
Notes
Topic
An update for libxml2 is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The libxml2 library is a development toolbox providing the implementation of various XML standards.
Security Fix(es):
* libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c (CVE-2019-19956)
* libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c (CVE-2019-20388)
* libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations (CVE-2020-7595)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.9 Release Notes linked from the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for libxml2 is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The libxml2 library is a development toolbox providing the implementation of various XML standards.\n\nSecurity Fix(es):\n\n* libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c (CVE-2019-19956)\n\n* libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c (CVE-2019-20388)\n\n* libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations (CVE-2020-7595)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.9 Release Notes linked from the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2020:3996",
"url": "https://access.redhat.com/errata/RHSA-2020:3996"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index"
},
{
"category": "external",
"summary": "1788856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788856"
},
{
"category": "external",
"summary": "1799734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799734"
},
{
"category": "external",
"summary": "1799786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799786"
},
{
"category": "external",
"summary": "1812145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1812145"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3996.json"
}
],
"title": "Red Hat Security Advisory: libxml2 security and bug fix update",
"tracking": {
"current_release_date": "2025-01-09T05:57:46+00:00",
"generator": {
"date": "2025-01-09T05:57:46+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.5"
}
},
"id": "RHSA-2020:3996",
"initial_release_date": "2020-09-29T19:48:02+00:00",
"revision_history": [
{
"date": "2020-09-29T19:48:02+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2020-09-29T19:48:02+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-01-09T05:57:46+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.1-6.el7.5.i686",
"product": {
"name": "libxml2-0:2.9.1-6.el7.5.i686",
"product_id": "libxml2-0:2.9.1-6.el7.5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.1-6.el7.5?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"product": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"product_id": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.1-6.el7.5?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.1-6.el7.5.i686",
"product": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.i686",
"product_id": "libxml2-devel-0:2.9.1-6.el7.5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.1-6.el7.5?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libxml2-static-0:2.9.1-6.el7.5.i686",
"product": {
"name": "libxml2-static-0:2.9.1-6.el7.5.i686",
"product_id": "libxml2-static-0:2.9.1-6.el7.5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-static@2.9.1-6.el7.5?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.1-6.el7.5.x86_64",
"product": {
"name": "libxml2-0:2.9.1-6.el7.5.x86_64",
"product_id": "libxml2-0:2.9.1-6.el7.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.1-6.el7.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libxml2-python-0:2.9.1-6.el7.5.x86_64",
"product": {
"name": "libxml2-python-0:2.9.1-6.el7.5.x86_64",
"product_id": "libxml2-python-0:2.9.1-6.el7.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-python@2.9.1-6.el7.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"product": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"product_id": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.1-6.el7.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"product": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"product_id": "libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.1-6.el7.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libxml2-static-0:2.9.1-6.el7.5.x86_64",
"product": {
"name": "libxml2-static-0:2.9.1-6.el7.5.x86_64",
"product_id": "libxml2-static-0:2.9.1-6.el7.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-static@2.9.1-6.el7.5?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.1-6.el7.5.src",
"product": {
"name": "libxml2-0:2.9.1-6.el7.5.src",
"product_id": "libxml2-0:2.9.1-6.el7.5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.1-6.el7.5?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.1-6.el7.5.s390x",
"product": {
"name": "libxml2-0:2.9.1-6.el7.5.s390x",
"product_id": "libxml2-0:2.9.1-6.el7.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.1-6.el7.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390x",
"product": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390x",
"product_id": "libxml2-devel-0:2.9.1-6.el7.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.1-6.el7.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libxml2-python-0:2.9.1-6.el7.5.s390x",
"product": {
"name": "libxml2-python-0:2.9.1-6.el7.5.s390x",
"product_id": "libxml2-python-0:2.9.1-6.el7.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-python@2.9.1-6.el7.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"product": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"product_id": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.1-6.el7.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libxml2-static-0:2.9.1-6.el7.5.s390x",
"product": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390x",
"product_id": "libxml2-static-0:2.9.1-6.el7.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-static@2.9.1-6.el7.5?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.1-6.el7.5.s390",
"product": {
"name": "libxml2-0:2.9.1-6.el7.5.s390",
"product_id": "libxml2-0:2.9.1-6.el7.5.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.1-6.el7.5?arch=s390"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390",
"product": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390",
"product_id": "libxml2-devel-0:2.9.1-6.el7.5.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.1-6.el7.5?arch=s390"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"product": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"product_id": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.1-6.el7.5?arch=s390"
}
}
},
{
"category": "product_version",
"name": "libxml2-static-0:2.9.1-6.el7.5.s390",
"product": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390",
"product_id": "libxml2-static-0:2.9.1-6.el7.5.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-static@2.9.1-6.el7.5?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.1-6.el7.5.ppc64",
"product": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64",
"product_id": "libxml2-0:2.9.1-6.el7.5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.1-6.el7.5?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"product": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"product_id": "libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.1-6.el7.5?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64",
"product": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64",
"product_id": "libxml2-python-0:2.9.1-6.el7.5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-python@2.9.1-6.el7.5?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"product": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"product_id": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.1-6.el7.5?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64",
"product": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64",
"product_id": "libxml2-static-0:2.9.1-6.el7.5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-static@2.9.1-6.el7.5?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.1-6.el7.5.ppc",
"product": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc",
"product_id": "libxml2-0:2.9.1-6.el7.5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.1-6.el7.5?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc",
"product": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc",
"product_id": "libxml2-devel-0:2.9.1-6.el7.5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.1-6.el7.5?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"product": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"product_id": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.1-6.el7.5?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc",
"product": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc",
"product_id": "libxml2-static-0:2.9.1-6.el7.5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-static@2.9.1-6.el7.5?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-0:2.9.1-6.el7.5.ppc64le",
"product": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64le",
"product_id": "libxml2-0:2.9.1-6.el7.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2@2.9.1-6.el7.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"product": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"product_id": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-devel@2.9.1-6.el7.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"product": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"product_id": "libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-python@2.9.1-6.el7.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"product": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"product_id": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-debuginfo@2.9.1-6.el7.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"product": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"product_id": "libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libxml2-static@2.9.1-6.el7.5?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.src as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-0:2.9.1-6.el7.5.src"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.src",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.src"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.src",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.src"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.src",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.src"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.src",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.src as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-0:2.9.1-6.el7.5.src"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.src",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.src"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.src",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Server-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.src"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.src",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.src"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.src",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-python-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.i686",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.s390x",
"relates_to_product_reference": "7Workstation-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-static-0:2.9.1-6.el7.5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
},
"product_reference": "libxml2-static-0:2.9.1-6.el7.5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.9"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-19956",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2020-01-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1788856"
}
],
"notes": [
{
"category": "description",
"text": "xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc-\u003eoldNs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-19956"
},
{
"category": "external",
"summary": "RHBZ#1788856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788856"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-19956",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956"
}
],
"release_date": "2020-01-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-09-29T19:48:02+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe desktop must be restarted (log out, then log back in) for this update to take effect.",
"product_ids": [
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:3996"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c"
},
{
"cve": "CVE-2019-20388",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"discovery_date": "2020-02-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1799734"
}
],
"notes": [
{
"category": "description",
"text": "A memory leak was found in the xmlSchemaValidateStream function of libxml2. Applications that use this library may be vulnerable to memory not being freed leading to a denial of service. System availability is the highest threat from this vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-20388"
},
{
"category": "external",
"summary": "RHBZ#1799734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799734"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-20388",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20388"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388"
}
],
"release_date": "2020-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-09-29T19:48:02+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe desktop must be restarted (log out, then log back in) for this update to take effect.",
"product_ids": [
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:3996"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c"
},
{
"cve": "CVE-2020-7595",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2020-02-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1799786"
}
],
"notes": [
{
"category": "description",
"text": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-7595"
},
{
"category": "external",
"summary": "RHBZ#1799786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799786"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-7595",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-7595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595"
}
],
"release_date": "2020-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-09-29T19:48:02+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe desktop must be restarted (log out, then log back in) for this update to take effect.",
"product_ids": [
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:3996"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Client-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Client-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7ComputeNode-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7ComputeNode-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Server-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Server-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.src",
"7Workstation-optional-7.9:libxml2-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-debuginfo-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-devel-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-python-0:2.9.1-6.el7.5.x86_64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.i686",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.ppc64le",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.s390x",
"7Workstation-optional-7.9:libxml2-static-0:2.9.1-6.el7.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations"
}
]
}
rhsa-2020:2644
Vulnerability from csaf_redhat
Published
2020-06-22 12:28
Modified
2025-03-19 15:13
Summary
Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP3 security update
Notes
Topic
Updated packages that provide Red Hat JBoss Core Services Pack Apache Server 2.4.37 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
This release adds the new Apache HTTP Server 2.4.37 Service Pack 3 packages that are part of the JBoss Core Services offering.
This release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 2 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.
Security fix(es):
* httpd: mod_http2: read-after-free on a string compare (CVE-2019-0196)
* httpd: mod_http2: possible crash on late upgrade (CVE-2019-0197)
* httpd: mod_proxy_ftp use of uninitialized value (CVE-2020-1934)
* nghttp2: overly large SETTINGS frames can lead to DoS (CVE-2020-11080)
* libxml2: There's a memory leak in xmlParseBalancedChunkMemoryRecover in parser.c that could result in a crash (CVE-2019-19956)
* libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c (CVE-2019-20388)
* libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations (CVE-2020-7595)
* expat: large number of colons in input makes parser consume high amount of resources, leading to DoS (CVE-2018-20843)
* expat: heap-based buffer over-read via crafted XML input (CVE-2019-15903)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated packages that provide Red Hat JBoss Core Services Pack Apache Server 2.4.37 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "This release adds the new Apache HTTP Server 2.4.37 Service Pack 3 packages that are part of the JBoss Core Services offering.\n\nThis release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 2 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.\n\nSecurity fix(es):\n\n* httpd: mod_http2: read-after-free on a string compare (CVE-2019-0196)\n* httpd: mod_http2: possible crash on late upgrade (CVE-2019-0197)\n* httpd: mod_proxy_ftp use of uninitialized value (CVE-2020-1934)\n* nghttp2: overly large SETTINGS frames can lead to DoS (CVE-2020-11080)\n* libxml2: There\u0027s a memory leak in xmlParseBalancedChunkMemoryRecover in parser.c that could result in a crash (CVE-2019-19956)\n* libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c (CVE-2019-20388)\n* libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations (CVE-2020-7595)\n* expat: large number of colons in input makes parser consume high amount of resources, leading to DoS (CVE-2018-20843)\n* expat: heap-based buffer over-read via crafted XML input (CVE-2019-15903)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2020:2644",
"url": "https://access.redhat.com/errata/RHSA-2020:2644"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1695030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695030"
},
{
"category": "external",
"summary": "1695042",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695042"
},
{
"category": "external",
"summary": "1723723",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1723723"
},
{
"category": "external",
"summary": "1752592",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752592"
},
{
"category": "external",
"summary": "1788856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788856"
},
{
"category": "external",
"summary": "1799734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799734"
},
{
"category": "external",
"summary": "1799786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799786"
},
{
"category": "external",
"summary": "1820772",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1820772"
},
{
"category": "external",
"summary": "1844929",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1844929"
},
{
"category": "external",
"summary": "JBCS-941",
"url": "https://issues.redhat.com/browse/JBCS-941"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2644.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP3 security update",
"tracking": {
"current_release_date": "2025-03-19T15:13:12+00:00",
"generator": {
"date": "2025-03-19T15:13:12+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.4.1"
}
},
"id": "RHSA-2020:2644",
"initial_release_date": "2020-06-22T12:28:02+00:00",
"revision_history": [
{
"date": "2020-06-22T12:28:02+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2020-06-22T12:28:02+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-03-19T15:13:12+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Core Services on RHEL 6 Server",
"product": {
"name": "Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_core_services:1::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat JBoss Core Services on RHEL 7 Server",
"product": {
"name": "Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_core_services:1::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Core Services"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"product_id": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-25.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"product_id": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.39.2-25.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.39.2-25.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"product_id": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-36.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"product_id": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl@7.64.1-36.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"product_id": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl-devel@7.64.1-36.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"product_id": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl-debuginfo@7.64.1-36.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"product_id": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-57.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"product_id": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.37-57.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"product_id": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.37-57.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"product_id": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.37-57.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.37-57.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.37-57.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.37-57.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.37-57.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.37-57.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-3.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2-debuginfo@1.15.7-3.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.48-4.redhat_1.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-manual@1.2.48-4.redhat_1.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo@1.2.48-4.redhat_1.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.0.8-24.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md-debuginfo@2.0.8-24.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-51.GA.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.2-51.GA.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.14-4.Final_redhat_2.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-debuginfo@1.3.14-4.Final_redhat_2.jbcs.el6?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-25.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.39.2-25.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.39.2-25.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-36.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl@7.64.1-36.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl-devel@7.64.1-36.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl-debuginfo@7.64.1-36.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-57.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.37-57.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.37-57.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.37-57.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.37-57.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.37-57.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.37-57.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.37-57.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.37-57.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-3.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2-debuginfo@1.15.7-3.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.48-4.redhat_1.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-manual@1.2.48-4.redhat_1.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo@1.2.48-4.redhat_1.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.0.8-24.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md-debuginfo@2.0.8-24.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-51.GA.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.2-51.GA.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.14-4.Final_redhat_2.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-debuginfo@1.3.14-4.Final_redhat_2.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-25.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.39.2-25.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.39.2-25.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-36.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl@7.64.1-36.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl-devel@7.64.1-36.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl-debuginfo@7.64.1-36.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-57.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.37-57.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.37-57.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.37-57.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.37-57.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.37-57.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.37-57.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.37-57.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.37-57.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-pkcs11@0.4.10-7.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-pkcs11-debuginfo@0.4.10-7.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-3.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2-debuginfo@1.15.7-3.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.48-4.redhat_1.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-manual@1.2.48-4.redhat_1.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo@1.2.48-4.redhat_1.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.0.8-24.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md-debuginfo@2.0.8-24.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-51.GA.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.2-51.GA.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.14-4.Final_redhat_2.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-debuginfo@1.3.14-4.Final_redhat_2.jbcs.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"product_id": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-25.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"product_id": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-36.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"product_id": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-57.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"product_id": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-3.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"product_id": "jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.48-4.redhat_1.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"product_id": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.0.8-24.jbcs.el6?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"product_id": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-51.GA.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.14-4.Final_redhat_2.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"product_id": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-25.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"product_id": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-36.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"product_id": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-57.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"product_id": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-pkcs11@0.4.10-7.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-3.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.48-4.redhat_1.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.0.8-24.jbcs.el7?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-51.GA.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.14-4.Final_redhat_2.jbcs.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"product": {
"name": "jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"product_id": "jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.37-57.jbcs.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"product": {
"name": "jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"product_id": "jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.37-57.jbcs.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch"
},
"product_reference": "jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch"
},
"product_reference": "jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-20843",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-06-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1723723"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the \"setElementTypePrefix()\" function incorrectly extracted XML namespace prefixes. By tricking an application into processing a specially crafted XML file, an attacker could cause unusually high consumption of memory resources and possibly lead to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "expat: large number of colons in input makes parser consume high amount of resources, leading to DoS",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "When processing a specially crafted XML file, expat may use more memory than ultimately necessary, which can also lead to increased CPU usage and longer processing times. Depending on available system resources and configuration, this may also lead to the application triggering the Out-Of-Memory-Killer, causing the application to be terminated.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-20843"
},
{
"category": "external",
"summary": "RHBZ#1723723",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1723723"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-20843",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-20843"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-20843",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-20843"
},
{
"category": "external",
"summary": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931031",
"url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931031"
}
],
"release_date": "2019-06-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T12:28:02+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2644"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "expat: large number of colons in input makes parser consume high amount of resources, leading to DoS"
},
{
"cve": "CVE-2019-0196",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-04-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1695030"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparison when determining the method of a request and thus process the request incorrectly.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: mod_http2: read-after-free on a string compare",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-0196"
},
{
"category": "external",
"summary": "RHBZ#1695030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695030"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-0196",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0196"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0196",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0196"
},
{
"category": "external",
"summary": "http://www.apache.org/dist/httpd/CHANGES_2.4",
"url": "http://www.apache.org/dist/httpd/CHANGES_2.4"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2019-04-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T12:28:02+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2644"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "httpd: mod_http2: read-after-free on a string compare"
},
{
"cve": "CVE-2019-0197",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2019-04-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1695042"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. Server that never enabled the h2 protocol or that only enabled it for https: and did not set \"H2Upgrade on\" are unaffected by this issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: mod_http2: possible crash on late upgrade",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-0197"
},
{
"category": "external",
"summary": "RHBZ#1695042",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695042"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-0197",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0197"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0197",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0197"
},
{
"category": "external",
"summary": "http://www.apache.org/dist/httpd/CHANGES_2.4",
"url": "http://www.apache.org/dist/httpd/CHANGES_2.4"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2019-02-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T12:28:02+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2644"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L",
"version": "3.0"
},
"products": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "httpd: mod_http2: possible crash on late upgrade"
},
{
"cve": "CVE-2019-15903",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2019-09-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1752592"
}
],
"notes": [
{
"category": "description",
"text": "In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "expat: heap-based buffer over-read via crafted XML input",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-15903"
},
{
"category": "external",
"summary": "RHBZ#1752592",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752592"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-15903",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-15903"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-15903",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-15903"
}
],
"release_date": "2019-09-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T12:28:02+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2644"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "expat: heap-based buffer over-read via crafted XML input"
},
{
"cve": "CVE-2019-19956",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2020-01-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1788856"
}
],
"notes": [
{
"category": "description",
"text": "xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc-\u003eoldNs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-19956"
},
{
"category": "external",
"summary": "RHBZ#1788856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788856"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-19956",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956"
}
],
"release_date": "2020-01-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T12:28:02+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2644"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c"
},
{
"cve": "CVE-2019-20388",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"discovery_date": "2020-02-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1799734"
}
],
"notes": [
{
"category": "description",
"text": "A memory leak was found in the xmlSchemaValidateStream function of libxml2. Applications that use this library may be vulnerable to memory not being freed leading to a denial of service. System availability is the highest threat from this vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-20388"
},
{
"category": "external",
"summary": "RHBZ#1799734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799734"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-20388",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20388"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388"
}
],
"release_date": "2020-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T12:28:02+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2644"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c"
},
{
"cve": "CVE-2020-1934",
"cwe": {
"id": "CWE-456",
"name": "Missing Initialization of a Variable"
},
"discovery_date": "2020-04-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1820772"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache\u0027s HTTP server (httpd) .The mod_proxy_ftp module may use uninitialized memory with proxying to a malicious FTP server. The highest threat from this vulnerability is to data confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: mod_proxy_ftp use of uninitialized value",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is caused by use of an uninitialized memory variable. Practically this has no impact, but in some corner cases it is possible that the contents of this variable could be read by a remote process, causing loss of confidentiality as a result of this. There is no evidence of code execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-1934"
},
{
"category": "external",
"summary": "RHBZ#1820772",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1820772"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-1934",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-1934"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1934",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1934"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2020-04-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T12:28:02+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2644"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "httpd: mod_proxy_ftp use of uninitialized value"
},
{
"cve": "CVE-2020-7595",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2020-02-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1799786"
}
],
"notes": [
{
"category": "description",
"text": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-7595"
},
{
"category": "external",
"summary": "RHBZ#1799786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799786"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-7595",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-7595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595"
}
],
"release_date": "2020-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T12:28:02+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2644"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations"
},
{
"acknowledgments": [
{
"names": [
"the Envoy security team"
]
}
],
"cve": "CVE-2020-11080",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2020-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1844929"
}
],
"notes": [
{
"category": "description",
"text": "A resource consumption vulnerability was found in nghttp2. This flaw allows an attacker to repeatedly construct an overly large HTTP/2 SETTINGS frame with a length of 14,400 bytes that causes excessive CPU usage, leading to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nghttp2: overly large SETTINGS frames can lead to DoS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-11080"
},
{
"category": "external",
"summary": "RHBZ#1844929",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1844929"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-11080",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-11080"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-11080",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-11080"
},
{
"category": "external",
"summary": "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-q5wr-xfw9-q7xr",
"url": "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-q5wr-xfw9-q7xr"
}
],
"release_date": "2020-06-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T12:28:02+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2644"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nghttp2: overly large SETTINGS frames can lead to DoS"
}
]
}
rhsa-2021:0949
Vulnerability from csaf_redhat
Published
2021-03-22 10:10
Modified
2025-02-28 01:28
Summary
Red Hat Security Advisory: Red Hat OpenShift Do openshift/odo-init-image 1.1.3 security update
Notes
Topic
Updated openshift/odo-init-image container image is now available for Red Hat Openshift Do 1.0.
Details
Red Hat OpenShift Do (odo) is a simple CLI tool for developers to create,
build, and deploy applications on OpenShift. The odo tool is completely
client-based and requires no server within the OpenShift cluster for
deployment. It detects changes to local code and deploys it to the cluster
automatically, giving instant feedback to validate changes in real-time. It
supports multiple programming languages and frameworks.
Red Hat OpenShift Do openshift/odo-init-image 1.1.3 is a container image
that is used as part of the InitContainer setup that provisions odo
components.
The advisory addresses the following issues:
* Re-release of odo-init-image 1.1.3 for security updates
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Low"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated openshift/odo-init-image container image is now available for Red Hat Openshift Do 1.0.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Do (odo) is a simple CLI tool for developers to create,\nbuild, and deploy applications on OpenShift. The odo tool is completely\nclient-based and requires no server within the OpenShift cluster for\ndeployment. It detects changes to local code and deploys it to the cluster\nautomatically, giving instant feedback to validate changes in real-time. It\nsupports multiple programming languages and frameworks.\n\nRed Hat OpenShift Do openshift/odo-init-image 1.1.3 is a container image\nthat is used as part of the InitContainer setup that provisions odo\ncomponents.\n\nThe advisory addresses the following issues:\n\n* Re-release of odo-init-image 1.1.3 for security updates",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2021:0949",
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#low",
"url": "https://access.redhat.com/security/updates/classification/#low"
},
{
"category": "external",
"summary": "https://docs.openshift.com/container-platform/4.4/cli_reference/openshift_developer_cli/installing-odo.html",
"url": "https://docs.openshift.com/container-platform/4.4/cli_reference/openshift_developer_cli/installing-odo.html"
},
{
"category": "external",
"summary": "1832983",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1832983"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0949.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Do openshift/odo-init-image 1.1.3 security update",
"tracking": {
"current_release_date": "2025-02-28T01:28:29+00:00",
"generator": {
"date": "2025-02-28T01:28:29+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.3.1"
}
},
"id": "RHSA-2021:0949",
"initial_release_date": "2021-03-22T10:10:55+00:00",
"revision_history": [
{
"date": "2021-03-22T10:10:55+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2021-03-22T10:10:55+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-02-28T01:28:29+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "OpenShift Do 1",
"product": {
"name": "OpenShift Do 1",
"product_id": "7Server-RHODO-1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_do:1.0::el7"
}
}
}
],
"category": "product_family",
"name": "OpenShift Do"
},
{
"branches": [
{
"category": "product_version",
"name": "openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64",
"product": {
"name": "openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64",
"product_id": "openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96?arch=amd64\u0026repository_url=registry.redhat.io/openshiftdo/odo-init-image-rhel7\u0026tag=1.1.3-2"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64 as a component of OpenShift Do 1",
"product_id": "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
},
"product_reference": "openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64",
"relates_to_product_reference": "7Server-RHODO-1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-20843",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-06-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1723723"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the \"setElementTypePrefix()\" function incorrectly extracted XML namespace prefixes. By tricking an application into processing a specially crafted XML file, an attacker could cause unusually high consumption of memory resources and possibly lead to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "expat: large number of colons in input makes parser consume high amount of resources, leading to DoS",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "When processing a specially crafted XML file, expat may use more memory than ultimately necessary, which can also lead to increased CPU usage and longer processing times. Depending on available system resources and configuration, this may also lead to the application triggering the Out-Of-Memory-Killer, causing the application to be terminated.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-20843"
},
{
"category": "external",
"summary": "RHBZ#1723723",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1723723"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-20843",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-20843"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-20843",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-20843"
},
{
"category": "external",
"summary": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931031",
"url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931031"
}
],
"release_date": "2019-06-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "expat: large number of colons in input makes parser consume high amount of resources, leading to DoS"
},
{
"cve": "CVE-2019-5094",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2019-11-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1768555"
}
],
"notes": [
{
"category": "description",
"text": "An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "e2fsprogs: Crafted ext4 partition leads to out-of-bounds write",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5094"
},
{
"category": "external",
"summary": "RHBZ#1768555",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1768555"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5094",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5094"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5094",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5094"
},
{
"category": "external",
"summary": "https://talosintelligence.com/vulnerability_reports/TALOS-2019-0887",
"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2019-0887"
}
],
"release_date": "2019-08-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "e2fsprogs: Crafted ext4 partition leads to out-of-bounds write"
},
{
"cve": "CVE-2019-5188",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2020-01-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1790048"
}
],
"notes": [
{
"category": "description",
"text": "A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "e2fsprogs: Out-of-bounds write in e2fsck/rehash.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5188"
},
{
"category": "external",
"summary": "RHBZ#1790048",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1790048"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5188",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5188"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5188",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5188"
}
],
"release_date": "2020-01-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "e2fsprogs: Out-of-bounds write in e2fsck/rehash.c"
},
{
"acknowledgments": [
{
"names": [
"the Curl project"
]
},
{
"names": [
"Thomas Vegas"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-5482",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2019-09-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1749652"
}
],
"notes": [
{
"category": "description",
"text": "Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: heap buffer overflow in function tftp_receive_packet()",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5482"
},
{
"category": "external",
"summary": "RHBZ#1749652",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1749652"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5482",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5482"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5482",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5482"
},
{
"category": "external",
"summary": "https://curl.haxx.se/docs/CVE-2019-5482.html",
"url": "https://curl.haxx.se/docs/CVE-2019-5482.html"
}
],
"release_date": "2019-09-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
},
{
"category": "workaround",
"details": "Do not use TFTP with curl with smaller than the default BLKSIZE.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: heap buffer overflow in function tftp_receive_packet()"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Henry Corrigan-Gibbs"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11719",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2019-07-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1728436"
}
],
"notes": [
{
"category": "description",
"text": "When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger an out-of-bounds read in the Network Security Services (NSS) library. This could lead to information disclosure. This vulnerability affects Firefox ESR \u003c 60.8, Firefox \u003c 68, and Thunderbird \u003c 60.8.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: Out-of-bounds read when importing curve25519 private key",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Firefox on Red Hat Enterprise Linux is built against the system nss library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11719"
},
{
"category": "external",
"summary": "RHBZ#1728436",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1728436"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11719",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11719"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11719",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11719"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-22/#CVE-2019-11719",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-22/#CVE-2019-11719"
}
],
"release_date": "2019-07-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: Out-of-bounds read when importing curve25519 private key"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Hubert Kario"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11727",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"discovery_date": "2019-07-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1730988"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerability affects Firefox \u003c 68.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: PKCS#1 v1.5 signatures can be used for TLS 1.3",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11727"
},
{
"category": "external",
"summary": "RHBZ#1730988",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730988"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11727",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11727"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11727",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11727"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-21/#CVE-2019-11727",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-21/#CVE-2019-11727"
}
],
"release_date": "2019-07-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.4,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "nss: PKCS#1 v1.5 signatures can be used for TLS 1.3"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
}
],
"cve": "CVE-2019-11756",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-11-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1774835"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free flaw was found in Mozilla Network Security Services (NSS) related to PK11 session handling. An attacker could use this flaw to execute arbitrary code with the permissions of the user running the application compiled with NSS.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: Use-after-free in sftk_FreeSession due to improper refcounting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw was fixed in upstream nss-3.47. Exploitation of this flaw is difficult and even impossible in most cases.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11756"
},
{
"category": "external",
"summary": "RHBZ#1774835",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1774835"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11756",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11756"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11756",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11756"
},
{
"category": "external",
"summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.47_release_notes",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.47_release_notes"
}
],
"release_date": "2019-12-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: Use-after-free in sftk_FreeSession due to improper refcounting"
},
{
"cve": "CVE-2019-12450",
"cwe": {
"id": "CWE-552",
"name": "Files or Directories Accessible to External Parties"
},
"discovery_date": "2019-06-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1719141"
}
],
"notes": [
{
"category": "description",
"text": "file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissions are used.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the versions of glib2 as shipped with Red Hat Enterprise Linux 6, 7 and 8 . Red Hat Product Security has rated this issue as having a security impact of Moderate.\n\nRed Hat Enterprise Linux 6 is now in Maintenance Support 2 Phase of the support and maintenance life cycle. This has been rated as having a security impact of Important, and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-12450"
},
{
"category": "external",
"summary": "RHBZ#1719141",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1719141"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-12450",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-12450"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-12450",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-12450"
}
],
"release_date": "2019-05-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress"
},
{
"acknowledgments": [
{
"names": [
"the D-Bus project"
]
},
{
"names": [
"Joe Vennix"
],
"organization": "Apple Information Security",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-12749",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"discovery_date": "2019-06-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1719344"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in dbus. The implementation of DBUS_COOKIE_SHA1 is susceptible to a symbolic link attack. A malicious client with write access to its own home directory could manipulate a ~/.dbus-keyrings symlink to cause the DBusServer to read and write in unintended locations resulting in an authentication bypass. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is mitigated by the fact that by default, the well-known system dbus-daemon (since 2003) and the well-known session dbus-daemon (in stable releases since dbus 1.10.0 in 2015) only accept the EXTERNAL authentication mechanism, and as a result will reject DBUS_COOKIE_SHA1 at an early stage, before manipulating cookies. \n\nRed Hat Enterprise Linux 6 is affected by this flaw, which can be leveraged to achieve privilege escalation via upstart. This issue has been rated as having important impact for Red Hat Enterprise Linux 6.\n\nRed Hat Enterprise Linux 7 and 8, both ship dbus \u003e= 1.10 and therefore are affected by this flaw only when system or session dbus-daemons are used under non-standard configurations or by third party users of DBusServer. Red Hat Enterprise Linux 7 and 8 does not ship any affected DBusServer cosumer. However third party applications may be affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-12749"
},
{
"category": "external",
"summary": "RHBZ#1719344",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1719344"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-12749",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-12749"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-12749",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-12749"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2019/06/11/2",
"url": "https://www.openwall.com/lists/oss-security/2019/06/11/2"
}
],
"release_date": "2019-06-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass"
},
{
"acknowledgments": [
{
"names": [
"Simon McVittie"
],
"organization": "Collabora Ltd."
}
],
"cve": "CVE-2019-14822",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"discovery_date": "2019-06-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1717958"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was discovered in ibus that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to a misconfiguration in the DBus server setup. A local attacker may use this flaw to intercept all keystrokes of a victim user who is using the graphical interface, change the input method engine, or modify other input related configurations of the victim user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ibus: missing authorization allows local attacker to access the input bus of another user",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Gnome uses the ibus input framework only when the user explicitly configures it or when some input method sources are in use, like Korean from the ibus-hangul package or Chinese input methods from the ibus-libpinyin. Input methods like en-US are not handled by ibus, thus if the victim user just use them the attacker will not be able to intercept the key strokes of that user.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-14822"
},
{
"category": "external",
"summary": "RHBZ#1717958",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1717958"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-14822",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-14822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14822"
}
],
"release_date": "2019-09-13T07:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "ibus: missing authorization allows local attacker to access the input bus of another user"
},
{
"acknowledgments": [
{
"names": [
"Thomas Habets"
]
}
],
"cve": "CVE-2019-14866",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2019-10-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1765511"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered cpio does not properly validate input files when generating TAR archives. When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may contain files with permissions the attacker did not have or in paths he did not have access to. Extracting those archives from a high-privilege user without carefully reviewing them may lead to the compromise of the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cpio: improper input validation when writing tar header fields leads to unexpected tar generation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-14866"
},
{
"category": "external",
"summary": "RHBZ#1765511",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1765511"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-14866",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-14866"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14866",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14866"
}
],
"release_date": "2019-08-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
},
{
"category": "workaround",
"details": "TAR archives should be inspected before being extracted and the extraction should be performed with the `tar` command or `--no-absolute-filenames` option if done with `cpio`. Moreover, it should be performed by a low-privilege user whenever possible, to prevent extraction of files that could compromise the system.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cpio: improper input validation when writing tar header fields leads to unexpected tar generation"
},
{
"cve": "CVE-2019-15903",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2019-09-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1752592"
}
],
"notes": [
{
"category": "description",
"text": "In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "expat: heap-based buffer over-read via crafted XML input",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-15903"
},
{
"category": "external",
"summary": "RHBZ#1752592",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752592"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-15903",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-15903"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-15903",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-15903"
}
],
"release_date": "2019-09-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "expat: heap-based buffer over-read via crafted XML input"
},
{
"cve": "CVE-2019-16935",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2019-09-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1763229"
}
],
"notes": [
{
"category": "description",
"text": "A reflected cross-site scripting (XSS) vulnerability was found in Python XML-RPC server. The `server_title` field is not sufficiently sanitized allowing malicious JavaScript to be injected. Successful exploitation would allow a remote attacker to execute JavaScript code within the context of the affected user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: XSS vulnerability in the documentation XML-RPC server in server_title field",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw does not affect the versions of python27-python as shipped with Red Hat Software Collections 3 as they already include the fix.\nThis flaw does not affect the versions of python36:3.6/python36 as shipped with Red Hat Enterprise Linux 8 as they are \"symlinks\" to the main python3 component, which provides the actual interpreter of the Python programming language.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-16935"
},
{
"category": "external",
"summary": "RHBZ#1763229",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1763229"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-16935",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-16935"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-16935",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-16935"
}
],
"release_date": "2019-09-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "python: XSS vulnerability in the documentation XML-RPC server in server_title field"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla Project"
]
}
],
"cve": "CVE-2019-17006",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2019-11-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1775916"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was discovered in nss where input text length was not checked when using certain cryptographic primitives. This could lead to a heap-buffer overflow resulting in a crash and data leak. The highest threat is to confidentiality and integrity of data as well as system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: Check length of inputs for cryptographic primitives",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-17006"
},
{
"category": "external",
"summary": "RHBZ#1775916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1775916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-17006",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-17006"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-17006",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17006"
},
{
"category": "external",
"summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46_release_notes",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46_release_notes"
}
],
"release_date": "2019-12-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: Check length of inputs for cryptographic primitives"
},
{
"cve": "CVE-2019-17023",
"discovery_date": "2020-01-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1791225"
}
],
"notes": [
{
"category": "description",
"text": "A protocol downgrade flaw was found in Network Security Services (NSS). After a HelloRetryRequest has been sent, the client may negotiate a lower protocol than TLS 1.3, resulting in an invalid state transition in the TLS State Machine. If the client gets into this state, incoming Application Data records will be ignored.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw causes the client to hang when there is a downgrade attempt. Therefore no actual protocol downgrade occurs.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-17023"
},
{
"category": "external",
"summary": "RHBZ#1791225",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1791225"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-17023",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-17023"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-17023",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17023"
},
{
"category": "external",
"summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes"
}
],
"release_date": "2020-01-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state"
},
{
"cve": "CVE-2019-17498",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-10-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1766898"
}
],
"notes": [
{
"category": "description",
"text": "In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libssh2: integer overflow in SSH_MSG_DISCONNECT logic in packet.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw needs a malicious MITM SSH server. When an application compiled with libssh2 connects to such a MITM SSH server, the server can trigger an integer overflow leading to an OOB read in the SSH_MSG_DISCONNECT logic. This can cause the application compiled with libssh2 to crash. This is strictly a client side crash and the SSH server may not be affected.\n\nAlso note that when a user connects to a malicious MITM server there is already a risk of disclosing password/keys irrespective of the flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-17498"
},
{
"category": "external",
"summary": "RHBZ#1766898",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1766898"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-17498",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-17498"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-17498",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17498"
},
{
"category": "external",
"summary": "https://blog.semmle.com/libssh2-integer-overflow-CVE-2019-17498/",
"url": "https://blog.semmle.com/libssh2-integer-overflow-CVE-2019-17498/"
}
],
"release_date": "2019-10-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libssh2: integer overflow in SSH_MSG_DISCONNECT logic in packet.c"
},
{
"cve": "CVE-2019-19126",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2019-11-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1774681"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was discovered in glibc where the LD_PREFER_MAP_32BIT_EXEC environment variable is not ignored when running binaries with the setuid flag on x86_64 architectures. This allows an attacker to force system to utilize only half of the memory (making the system think the software is 32-bit only), thus lowering the amount of memory being used with address space layout randomization (ASLR). The highest threat is confidentiality although the complexity of attack is high. The affected application must already have other vulnerabilities for this flaw to be usable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-19126"
},
{
"category": "external",
"summary": "RHBZ#1774681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1774681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-19126",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19126"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19126",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19126"
}
],
"release_date": "2019-11-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 2.9,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries"
},
{
"cve": "CVE-2019-19956",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2020-01-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1788856"
}
],
"notes": [
{
"category": "description",
"text": "xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc-\u003eoldNs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-19956"
},
{
"category": "external",
"summary": "RHBZ#1788856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788856"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-19956",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956"
}
],
"release_date": "2020-01-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c"
},
{
"cve": "CVE-2019-20386",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2020-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1793979"
}
],
"notes": [
{
"category": "description",
"text": "A memory leak was discovered in the systemd-login when a power-switch event is received. A physical attacker may trigger one of these events and leak bytes due to a missing free.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "systemd: memory leak in button_open() in login/logind-button.c when udev events are received",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The version of systemd delivered in OpenShift Container Platform 4.1 and included in CoreOS images has been superseded by the version delivered in Red Hat Enterprise Linux 8. CoreOS updates for systemd in will be consumed from Red Hat Enterprise Linux 8 channels.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-20386"
},
{
"category": "external",
"summary": "RHBZ#1793979",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793979"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-20386",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20386"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20386",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20386"
}
],
"release_date": "2020-01-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "PHYSICAL",
"availabilityImpact": "LOW",
"baseScore": 2.4,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "systemd: memory leak in button_open() in login/logind-button.c when udev events are received"
},
{
"cve": "CVE-2019-20388",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"discovery_date": "2020-02-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1799734"
}
],
"notes": [
{
"category": "description",
"text": "A memory leak was found in the xmlSchemaValidateStream function of libxml2. Applications that use this library may be vulnerable to memory not being freed leading to a denial of service. System availability is the highest threat from this vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-20388"
},
{
"category": "external",
"summary": "RHBZ#1799734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799734"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-20388",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20388"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388"
}
],
"release_date": "2020-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c"
},
{
"cve": "CVE-2019-20907",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2020-07-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1856481"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in python. In Lib/tarfile.py an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: infinite loop in the tarfile module via crafted TAR archive",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A service is vulnerable if it uses python\u0027s tarfile module to open untrusted tar files. If an attacker is able to submit a crafted tar file to a service which uses the tarfile module to open it, an infinite loop will be executed, potentially causing a denial of service. The tarfile module is included with python.\n\nVersions of `python36:3.6/python36` as shipped with Red Hat Enterprise Linux 8 are marked as \u0027Not affected\u0027 as they just provide \"symlinks\" to the main `python3` component, which provides the actual interpreter of the Python programming language.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-20907"
},
{
"category": "external",
"summary": "RHBZ#1856481",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1856481"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-20907",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20907"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20907",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20907"
}
],
"release_date": "2019-12-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
},
{
"category": "workaround",
"details": "This flaw can be mitigated by not opening untrusted files with tarfile.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "python: infinite loop in the tarfile module via crafted TAR archive"
},
{
"cve": "CVE-2019-25013",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2021-01-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1912960"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in glibc. When processing input in the EUC-KR encoding, an invalid input sequence could cause glibc to read beyond the end of a buffer, resulting in a segmentation fault. The highest threat from this vulnerability is to system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has been rated as having moderate impact for glibc packages shipped with Red Hat Enterprise Linux because, the maximum impact of this vulnerability is a crash, and it relies on processing untrusted input in an uncommon encoding (EUC-KR). When this encoding is not used, the vulnerability can not be triggered.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-25013"
},
{
"category": "external",
"summary": "RHBZ#1912960",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1912960"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-25013",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-25013"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-25013",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-25013"
}
],
"release_date": "2019-09-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding"
},
{
"acknowledgments": [
{
"names": [
"the OpenSSL project"
]
},
{
"names": [
"David Benjamin"
],
"organization": "Google",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2020-1971",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2020-12-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1903409"
}
],
"notes": [
{
"category": "description",
"text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: EDIPARTYNAME NULL pointer de-reference",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-1971"
},
{
"category": "external",
"summary": "RHBZ#1903409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-1971"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20201208.txt",
"url": "https://www.openssl.org/news/secadv/20201208.txt"
}
],
"release_date": "2020-12-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
},
{
"category": "workaround",
"details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openssl: EDIPARTYNAME NULL pointer de-reference"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla Project"
]
},
{
"names": [
"Cesar Pereida",
"Nicola Tuveri",
"Yuval Yarom",
"Billy Bob Brumley"
],
"organization": "Network and Information Security Group (NISEC",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2020-6829",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"discovery_date": "2020-04-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1826187"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in nss. Using the EM side-channel, it is possible to extract the position of zero and non-zero wNAF digits while nss-certutil tool performs scalar multiplication during the ECDSA signature generation, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures, this information can be used to steal the private key. The highest threat from this vulnerability is to data confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: Side channel attack on ECDSA signature generation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a side channel attack which can used to exact pirate keys when ECDSA signatures are being generated. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-6829"
},
{
"category": "external",
"summary": "RHBZ#1826187",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1826187"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-6829",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-6829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6829"
},
{
"category": "external",
"summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes"
}
],
"release_date": "2020-06-02T12:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: Side channel attack on ECDSA signature generation"
},
{
"cve": "CVE-2020-7595",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2020-02-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1799786"
}
],
"notes": [
{
"category": "description",
"text": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-7595"
},
{
"category": "external",
"summary": "RHBZ#1799786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799786"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-7595",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-7595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595"
}
],
"release_date": "2020-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations"
},
{
"cve": "CVE-2020-8177",
"discovery_date": "2020-06-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1847915"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in curl. Overwriting local files is possible when using a certain combination of command line options. Requesting content from a malicious server could lead to overwriting local files with compromised files leading to unknown effects. The highest threat from this vulnerability is to file integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: Incorrect argument check can allow remote servers to overwrite local files",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue only affects the \u0027curl\u0027 command line utility. Additionally, this is only an issue when using the \u0027-J\u0027 (with the \u0027-O\u0027 option) and \u0027-i\u0027 command line options combined.\n\nIn most cases, there is nothing to gain for a local attacker here: the curl command line utility is likely running with the same privileges as the user, and thus the user can already overwrite all the files curl could overwrite. However, a local user will have to call curl with the \u0027-J\u0027 and \u0027-i\u0027 command line options while requesting content from a malicious server, which then opens up an opportunity for the malicious server to overwrite local files.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8177"
},
{
"category": "external",
"summary": "RHBZ#1847915",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1847915"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8177",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8177"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8177",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8177"
},
{
"category": "external",
"summary": "https://curl.haxx.se/docs/CVE-2020-8177.html",
"url": "https://curl.haxx.se/docs/CVE-2020-8177.html"
}
],
"release_date": "2020-06-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
},
{
"category": "workaround",
"details": "The vulnerability is only possible when using the \u0027-J\u0027 and \u0027-i\u0027 switches in conjunction with the curl command. Executing curl without these switches mitigates the flaw.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:L",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: Incorrect argument check can allow remote servers to overwrite local files"
},
{
"cve": "CVE-2020-10029",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"discovery_date": "2020-03-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1810670"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in glibc in versions prior to 2.32. Pseudo-zero values are not validated causing a stack corruption due to a stack-based overflow. The highest threat from this vulnerability is to system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The glibc version shipped with Red Hat Enterprise Linux 8 is compiled using gcc\u0027s stack-protector option which mitigates the possibility of code execution led by the stack corruption.\n\nThe glibc version shipped with Red Hat Enterprise Linux 7 is more difficult to exploit using this flaw, specifically for remote code execution. Because exploitation of the flaw depends on the usage of pseudo-zero values, an attacker can only overwrite the stack with 0s. Due to this, a valid address value for code execution is difficult to get and is likely to only result in a crash.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-10029"
},
{
"category": "external",
"summary": "RHBZ#1810670",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1810670"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-10029",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-10029"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-10029",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10029"
}
],
"release_date": "2020-02-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions"
},
{
"cve": "CVE-2020-12243",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2020-04-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1833535"
}
],
"notes": [
{
"category": "description",
"text": "In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openldap: denial of service via nested boolean expressions in LDAP search filters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does not affect Red Hat Enterprise Linux 8 because we don\u0027t ship openldap-servers subpackage with the Red Hat Enterprise Linux 8 (it is only present in the buildroot).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-12243"
},
{
"category": "external",
"summary": "RHBZ#1833535",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1833535"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-12243",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-12243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12243"
}
],
"release_date": "2020-04-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openldap: denial of service via nested boolean expressions in LDAP search filters"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla Project"
]
},
{
"names": [
"Cesar Pereida Garcia and the Network and Information Security Group"
],
"organization": "NISEC",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2020-12400",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"discovery_date": "2020-07-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1853983"
}
],
"notes": [
{
"category": "description",
"text": "A side-channel flaw was found in NSS, in the way P-384 and P-521 curves are used in the generation of EDSA signatures, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures, this information can be used to steal the private key. The highest threat from this vulnerability is to data confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a side-channel attack that can be used to exact pirate keys when ECDSA signatures are being generated. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-12400"
},
{
"category": "external",
"summary": "RHBZ#1853983",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1853983"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-12400",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-12400"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12400",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12400"
},
{
"category": "external",
"summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes"
}
],
"release_date": "2020-07-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla Project"
]
},
{
"names": [
"Cesar Pereida Garcia and the Network and Information Security Group"
],
"organization": "NISEC",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2020-12401",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"discovery_date": "2020-06-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1851294"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in nss. Using the EM side-channel, it is possible to extract the position of zero and non-zero wNAF digits while nss-certutil tool performs scalar multiplication during the ECDSA signature generation, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures, this information can be used to steal the private key. The highest threat from this vulnerability is to data confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: ECDSA timing attack mitigation bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a side channel attack which can used to exact pirate keys when ECDSA signatures are being generated. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-12401"
},
{
"category": "external",
"summary": "RHBZ#1851294",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1851294"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-12401",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-12401"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12401",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12401"
},
{
"category": "external",
"summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes"
}
],
"release_date": "2020-06-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
},
{
"category": "workaround",
"details": "This is a side channel attack which can used to exact pirate keys when ECDSA signatures are being generated. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: ECDSA timing attack mitigation bypass"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla Project"
]
},
{
"names": [
"Billy Bob Brumley",
"Cesar Pereida",
"Nicola Tuveri",
"Yuval Yarom"
],
"organization": "Network and Information Security Group (NISEC",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2020-12402",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"discovery_date": "2020-04-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1826231"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in NSS, where it is vulnerable to RSA key generation cache timing side-channel attacks. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. The highest threat to this flaw is to confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: Side channel vulnerabilities during RSA key generation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A timing attack was found in the way NSS generated RSA keys. A man-in-the-middle attacker could use this attack during RSA key generation to recover the private key. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-12402"
},
{
"category": "external",
"summary": "RHBZ#1826231",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1826231"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-12402",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-12402"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12402",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12402"
},
{
"category": "external",
"summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.53.1_release_notes",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.53.1_release_notes"
}
],
"release_date": "2020-06-02T12:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: Side channel vulnerabilities during RSA key generation"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla Project"
]
}
],
"cve": "CVE-2020-12403",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2020-08-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1868931"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which was not functioning correctly) and strictly enforcing tag length. The highest threat from this vulnerability is to confidentiality and system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-12403"
},
{
"category": "external",
"summary": "RHBZ#1868931",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1868931"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-12403",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-12403"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12403",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12403"
},
{
"category": "external",
"summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes"
}
],
"release_date": "2020-07-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read"
},
{
"cve": "CVE-2020-29573",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"discovery_date": "2020-12-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1905213"
}
],
"notes": [
{
"category": "description",
"text": "A stack buffer overflow flaw was found in glibc in the way the printf family of functions processed an 80-bit long double with a non-canonical bit pattern. This flaw allows an attacker who can control the arguments of these functions with the non-standard long double pattern to trigger an overflow and cause an application crash. The highest threat from this vulnerability is to system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is essentially a crash which can only be triggered by a non-standard argument passed as a long double input to a member of printf family of functions. The application has to be written in this way to allow this issue to be triggered. The maximum impact is an application crash.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-29573"
},
{
"category": "external",
"summary": "RHBZ#1905213",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1905213"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-29573",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-29573"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-29573",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-29573"
},
{
"category": "external",
"summary": "https://sourceware.org/pipermail/libc-alpha/2020-September/117779.html",
"url": "https://sourceware.org/pipermail/libc-alpha/2020-September/117779.html"
}
],
"release_date": "2020-09-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-03-22T10:10:55+00:00",
"details": "Download and install a new CLI binary by following the instructions linked from the References section.",
"product_ids": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern"
}
]
}
rhsa-2020_2644
Vulnerability from csaf_redhat
Published
2020-06-22 12:28
Modified
2024-11-22 14:57
Summary
Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP3 security update
Notes
Topic
Updated packages that provide Red Hat JBoss Core Services Pack Apache Server 2.4.37 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
This release adds the new Apache HTTP Server 2.4.37 Service Pack 3 packages that are part of the JBoss Core Services offering.
This release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 2 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.
Security fix(es):
* httpd: mod_http2: read-after-free on a string compare (CVE-2019-0196)
* httpd: mod_http2: possible crash on late upgrade (CVE-2019-0197)
* httpd: mod_proxy_ftp use of uninitialized value (CVE-2020-1934)
* nghttp2: overly large SETTINGS frames can lead to DoS (CVE-2020-11080)
* libxml2: There's a memory leak in xmlParseBalancedChunkMemoryRecover in parser.c that could result in a crash (CVE-2019-19956)
* libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c (CVE-2019-20388)
* libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations (CVE-2020-7595)
* expat: large number of colons in input makes parser consume high amount of resources, leading to DoS (CVE-2018-20843)
* expat: heap-based buffer over-read via crafted XML input (CVE-2019-15903)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated packages that provide Red Hat JBoss Core Services Pack Apache Server 2.4.37 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "This release adds the new Apache HTTP Server 2.4.37 Service Pack 3 packages that are part of the JBoss Core Services offering.\n\nThis release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 2 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.\n\nSecurity fix(es):\n\n* httpd: mod_http2: read-after-free on a string compare (CVE-2019-0196)\n* httpd: mod_http2: possible crash on late upgrade (CVE-2019-0197)\n* httpd: mod_proxy_ftp use of uninitialized value (CVE-2020-1934)\n* nghttp2: overly large SETTINGS frames can lead to DoS (CVE-2020-11080)\n* libxml2: There\u0027s a memory leak in xmlParseBalancedChunkMemoryRecover in parser.c that could result in a crash (CVE-2019-19956)\n* libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c (CVE-2019-20388)\n* libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations (CVE-2020-7595)\n* expat: large number of colons in input makes parser consume high amount of resources, leading to DoS (CVE-2018-20843)\n* expat: heap-based buffer over-read via crafted XML input (CVE-2019-15903)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2020:2644",
"url": "https://access.redhat.com/errata/RHSA-2020:2644"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1695030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695030"
},
{
"category": "external",
"summary": "1695042",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695042"
},
{
"category": "external",
"summary": "1723723",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1723723"
},
{
"category": "external",
"summary": "1752592",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752592"
},
{
"category": "external",
"summary": "1788856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788856"
},
{
"category": "external",
"summary": "1799734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799734"
},
{
"category": "external",
"summary": "1799786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799786"
},
{
"category": "external",
"summary": "1820772",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1820772"
},
{
"category": "external",
"summary": "1844929",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1844929"
},
{
"category": "external",
"summary": "JBCS-941",
"url": "https://issues.redhat.com/browse/JBCS-941"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2644.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP3 security update",
"tracking": {
"current_release_date": "2024-11-22T14:57:20+00:00",
"generator": {
"date": "2024-11-22T14:57:20+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2020:2644",
"initial_release_date": "2020-06-22T12:28:02+00:00",
"revision_history": [
{
"date": "2020-06-22T12:28:02+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2020-06-22T12:28:02+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T14:57:20+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Core Services on RHEL 6 Server",
"product": {
"name": "Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_core_services:1::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat JBoss Core Services on RHEL 7 Server",
"product": {
"name": "Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_core_services:1::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Core Services"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"product_id": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-25.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"product_id": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.39.2-25.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.39.2-25.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"product_id": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-36.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"product_id": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl@7.64.1-36.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"product_id": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl-devel@7.64.1-36.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"product_id": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl-debuginfo@7.64.1-36.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"product_id": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-57.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"product_id": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.37-57.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"product_id": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.37-57.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"product_id": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.37-57.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.37-57.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.37-57.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.37-57.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.37-57.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.37-57.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-3.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2-debuginfo@1.15.7-3.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.48-4.redhat_1.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-manual@1.2.48-4.redhat_1.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo@1.2.48-4.redhat_1.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.0.8-24.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md-debuginfo@2.0.8-24.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-51.GA.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.2-51.GA.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.14-4.Final_redhat_2.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-debuginfo@1.3.14-4.Final_redhat_2.jbcs.el6?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-25.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.39.2-25.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.39.2-25.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-36.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl@7.64.1-36.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl-devel@7.64.1-36.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl-debuginfo@7.64.1-36.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-57.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.37-57.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.37-57.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.37-57.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.37-57.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.37-57.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.37-57.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.37-57.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.37-57.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-3.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2-debuginfo@1.15.7-3.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.48-4.redhat_1.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-manual@1.2.48-4.redhat_1.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo@1.2.48-4.redhat_1.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.0.8-24.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md-debuginfo@2.0.8-24.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-51.GA.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.2-51.GA.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.14-4.Final_redhat_2.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-debuginfo@1.3.14-4.Final_redhat_2.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-25.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.39.2-25.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.39.2-25.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-36.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl@7.64.1-36.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl-devel@7.64.1-36.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl-debuginfo@7.64.1-36.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-57.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.37-57.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.37-57.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.37-57.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.37-57.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.37-57.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.37-57.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.37-57.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.37-57.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-pkcs11@0.4.10-7.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-pkcs11-debuginfo@0.4.10-7.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-3.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2-debuginfo@1.15.7-3.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.48-4.redhat_1.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-manual@1.2.48-4.redhat_1.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo@1.2.48-4.redhat_1.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.0.8-24.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md-debuginfo@2.0.8-24.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-51.GA.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.2-51.GA.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.14-4.Final_redhat_2.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-debuginfo@1.3.14-4.Final_redhat_2.jbcs.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"product_id": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-25.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"product_id": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-36.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"product_id": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-57.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"product_id": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-3.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"product_id": "jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.48-4.redhat_1.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"product_id": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.0.8-24.jbcs.el6?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"product_id": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-51.GA.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.14-4.Final_redhat_2.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"product_id": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-25.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"product_id": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-36.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"product_id": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-57.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"product_id": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-pkcs11@0.4.10-7.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-3.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.48-4.redhat_1.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.0.8-24.jbcs.el7?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-51.GA.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.14-4.Final_redhat_2.jbcs.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"product": {
"name": "jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"product_id": "jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.37-57.jbcs.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"product": {
"name": "jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"product_id": "jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.37-57.jbcs.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch"
},
"product_reference": "jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch"
},
"product_reference": "jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-20843",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-06-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1723723"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the \"setElementTypePrefix()\" function incorrectly extracted XML namespace prefixes. By tricking an application into processing a specially crafted XML file, an attacker could cause unusually high consumption of memory resources and possibly lead to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "expat: large number of colons in input makes parser consume high amount of resources, leading to DoS",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "When processing a specially crafted XML file, expat may use more memory than ultimately necessary, which can also lead to increased CPU usage and longer processing times. Depending on available system resources and configuration, this may also lead to the application triggering the Out-Of-Memory-Killer, causing the application to be terminated.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-20843"
},
{
"category": "external",
"summary": "RHBZ#1723723",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1723723"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-20843",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-20843"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-20843",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-20843"
},
{
"category": "external",
"summary": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931031",
"url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931031"
}
],
"release_date": "2019-06-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T12:28:02+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2644"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "expat: large number of colons in input makes parser consume high amount of resources, leading to DoS"
},
{
"cve": "CVE-2019-0196",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-04-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1695030"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparison when determining the method of a request and thus process the request incorrectly.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: mod_http2: read-after-free on a string compare",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-0196"
},
{
"category": "external",
"summary": "RHBZ#1695030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695030"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-0196",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0196"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0196",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0196"
},
{
"category": "external",
"summary": "http://www.apache.org/dist/httpd/CHANGES_2.4",
"url": "http://www.apache.org/dist/httpd/CHANGES_2.4"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2019-04-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T12:28:02+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2644"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "httpd: mod_http2: read-after-free on a string compare"
},
{
"cve": "CVE-2019-0197",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2019-04-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1695042"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. Server that never enabled the h2 protocol or that only enabled it for https: and did not set \"H2Upgrade on\" are unaffected by this issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: mod_http2: possible crash on late upgrade",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-0197"
},
{
"category": "external",
"summary": "RHBZ#1695042",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695042"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-0197",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0197"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0197",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0197"
},
{
"category": "external",
"summary": "http://www.apache.org/dist/httpd/CHANGES_2.4",
"url": "http://www.apache.org/dist/httpd/CHANGES_2.4"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2019-02-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T12:28:02+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2644"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L",
"version": "3.0"
},
"products": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "httpd: mod_http2: possible crash on late upgrade"
},
{
"cve": "CVE-2019-15903",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2019-09-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1752592"
}
],
"notes": [
{
"category": "description",
"text": "In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "expat: heap-based buffer over-read via crafted XML input",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-15903"
},
{
"category": "external",
"summary": "RHBZ#1752592",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752592"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-15903",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-15903"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-15903",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-15903"
}
],
"release_date": "2019-09-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T12:28:02+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2644"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "expat: heap-based buffer over-read via crafted XML input"
},
{
"cve": "CVE-2019-19956",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2020-01-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1788856"
}
],
"notes": [
{
"category": "description",
"text": "xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc-\u003eoldNs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-19956"
},
{
"category": "external",
"summary": "RHBZ#1788856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788856"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-19956",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956"
}
],
"release_date": "2020-01-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T12:28:02+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2644"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c"
},
{
"cve": "CVE-2019-20388",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"discovery_date": "2020-02-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1799734"
}
],
"notes": [
{
"category": "description",
"text": "A memory leak was found in the xmlSchemaValidateStream function of libxml2. Applications that use this library may be vulnerable to memory not being freed leading to a denial of service. System availability is the highest threat from this vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-20388"
},
{
"category": "external",
"summary": "RHBZ#1799734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799734"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-20388",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20388"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388"
}
],
"release_date": "2020-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T12:28:02+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2644"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c"
},
{
"cve": "CVE-2020-1934",
"cwe": {
"id": "CWE-456",
"name": "Missing Initialization of a Variable"
},
"discovery_date": "2020-04-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1820772"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache\u0027s HTTP server (httpd) .The mod_proxy_ftp module may use uninitialized memory with proxying to a malicious FTP server. The highest threat from this vulnerability is to data confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: mod_proxy_ftp use of uninitialized value",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is caused by use of an uninitialized memory variable. Practically this has no impact, but in some corner cases it is possible that the contents of this variable could be read by a remote process, causing loss of confidentiality as a result of this. There is no evidence of code execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-1934"
},
{
"category": "external",
"summary": "RHBZ#1820772",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1820772"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-1934",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-1934"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1934",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1934"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2020-04-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T12:28:02+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2644"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "httpd: mod_proxy_ftp use of uninitialized value"
},
{
"cve": "CVE-2020-7595",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2020-02-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1799786"
}
],
"notes": [
{
"category": "description",
"text": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-7595"
},
{
"category": "external",
"summary": "RHBZ#1799786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799786"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-7595",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-7595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595"
}
],
"release_date": "2020-01-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T12:28:02+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2644"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations"
},
{
"acknowledgments": [
{
"names": [
"the Envoy security team"
]
}
],
"cve": "CVE-2020-11080",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2020-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1844929"
}
],
"notes": [
{
"category": "description",
"text": "A resource consumption vulnerability was found in nghttp2. This flaw allows an attacker to repeatedly construct an overly large HTTP/2 SETTINGS frame with a length of 14,400 bytes that causes excessive CPU usage, leading to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nghttp2: overly large SETTINGS frames can lead to DoS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-11080"
},
{
"category": "external",
"summary": "RHBZ#1844929",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1844929"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-11080",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-11080"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-11080",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-11080"
},
{
"category": "external",
"summary": "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-q5wr-xfw9-q7xr",
"url": "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-q5wr-xfw9-q7xr"
}
],
"release_date": "2020-06-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-22T12:28:02+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2644"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el6.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-57.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-4.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-3.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-4.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-4.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-24.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-51.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-57.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-25.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-7.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-7.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nghttp2: overly large SETTINGS frames can lead to DoS"
}
]
}
suse-su-2021:14729-1
Vulnerability from csaf_suse
Published
2021-05-19 14:41
Modified
2021-05-19 14:41
Summary
Security update for libxml2
Notes
Title of the patch
Security update for libxml2
Description of the patch
This update for libxml2 fixes the following issues:
Security issues fixed:
- CVE-2021-3537: NULL pointer dereference in valid.c:xmlValidBuildAContentModel (bsc#1185698)
- CVE-2021-3518: Fixed a use after free in xinclude.c:xmlXIncludeDoProcess (bsc#1185408).
- CVE-2021-3517: Fixed a heap based buffer overflow in entities.c:xmlEncodeEntitiesInternal (bsc#1185410).
- CVE-2021-3516: Fixed a use after free in xmlEncodeEntitiesInternal() in entities.c (bsc#1185409)
- CVE-2020-24977: Fixed a global-buffer-overflow in xmlEncodeEntitiesInternal (bsc#1176179).
- CVE-2019-20388: Fixed a memory leak in xmlSchemaPreRun (bsc#1161521).
- CVE-2020-7595: Fixed an infinite loop in an EOF situation (bsc#1161517).
- CVE-2019-19956: Fixed a memory leak in xmlParseBalancedChunkMemoryRecover (bsc#1159928).
Patchnames
sleposp3-libxml2-14729,slessp4-libxml2-14729
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for libxml2",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for libxml2 fixes the following issues:\n\nSecurity issues fixed: \n\n- CVE-2021-3537: NULL pointer dereference in valid.c:xmlValidBuildAContentModel (bsc#1185698)\n- CVE-2021-3518: Fixed a use after free in xinclude.c:xmlXIncludeDoProcess (bsc#1185408).\n- CVE-2021-3517: Fixed a heap based buffer overflow in entities.c:xmlEncodeEntitiesInternal (bsc#1185410).\n- CVE-2021-3516: Fixed a use after free in xmlEncodeEntitiesInternal() in entities.c (bsc#1185409)\n- CVE-2020-24977: Fixed a global-buffer-overflow in xmlEncodeEntitiesInternal (bsc#1176179).\t \n- CVE-2019-20388: Fixed a memory leak in xmlSchemaPreRun (bsc#1161521).\n- CVE-2020-7595: Fixed an infinite loop in an EOF situation (bsc#1161517).\n- CVE-2019-19956: Fixed a memory leak in xmlParseBalancedChunkMemoryRecover (bsc#1159928).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "sleposp3-libxml2-14729,slessp4-libxml2-14729",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2021_14729-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2021:14729-1",
"url": "https://www.suse.com/support/update/announcement/2021/suse-su-202114729-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2021:14729-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2021-May/008797.html"
},
{
"category": "self",
"summary": "SUSE Bug 1159928",
"url": "https://bugzilla.suse.com/1159928"
},
{
"category": "self",
"summary": "SUSE Bug 1161517",
"url": "https://bugzilla.suse.com/1161517"
},
{
"category": "self",
"summary": "SUSE Bug 1161521",
"url": "https://bugzilla.suse.com/1161521"
},
{
"category": "self",
"summary": "SUSE Bug 1176179",
"url": "https://bugzilla.suse.com/1176179"
},
{
"category": "self",
"summary": "SUSE Bug 1185408",
"url": "https://bugzilla.suse.com/1185408"
},
{
"category": "self",
"summary": "SUSE Bug 1185409",
"url": "https://bugzilla.suse.com/1185409"
},
{
"category": "self",
"summary": "SUSE Bug 1185410",
"url": "https://bugzilla.suse.com/1185410"
},
{
"category": "self",
"summary": "SUSE Bug 1185698",
"url": "https://bugzilla.suse.com/1185698"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0191 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0191/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-19956 page",
"url": "https://www.suse.com/security/cve/CVE-2019-19956/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-20388 page",
"url": "https://www.suse.com/security/cve/CVE-2019-20388/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-24977 page",
"url": "https://www.suse.com/security/cve/CVE-2020-24977/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-7595 page",
"url": "https://www.suse.com/security/cve/CVE-2020-7595/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3516 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3516/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3517 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3517/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3518 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3518/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3537 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3537/"
}
],
"title": "Security update for libxml2",
"tracking": {
"current_release_date": "2021-05-19T14:41:30Z",
"generator": {
"date": "2021-05-19T14:41:30Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2021:14729-1",
"initial_release_date": "2021-05-19T14:41:30Z",
"revision_history": [
{
"date": "2021-05-19T14:41:30Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libxml2-2.7.6-0.77.36.1.i586",
"product": {
"name": "libxml2-2.7.6-0.77.36.1.i586",
"product_id": "libxml2-2.7.6-0.77.36.1.i586"
}
},
{
"category": "product_version",
"name": "libxml2-doc-2.7.6-0.77.36.1.i586",
"product": {
"name": "libxml2-doc-2.7.6-0.77.36.1.i586",
"product_id": "libxml2-doc-2.7.6-0.77.36.1.i586"
}
},
{
"category": "product_version",
"name": "libxml2-python-2.7.6-0.77.36.1.i586",
"product": {
"name": "libxml2-python-2.7.6-0.77.36.1.i586",
"product_id": "libxml2-python-2.7.6-0.77.36.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-2.7.6-0.77.36.1.ppc64",
"product": {
"name": "libxml2-2.7.6-0.77.36.1.ppc64",
"product_id": "libxml2-2.7.6-0.77.36.1.ppc64"
}
},
{
"category": "product_version",
"name": "libxml2-32bit-2.7.6-0.77.36.1.ppc64",
"product": {
"name": "libxml2-32bit-2.7.6-0.77.36.1.ppc64",
"product_id": "libxml2-32bit-2.7.6-0.77.36.1.ppc64"
}
},
{
"category": "product_version",
"name": "libxml2-doc-2.7.6-0.77.36.1.ppc64",
"product": {
"name": "libxml2-doc-2.7.6-0.77.36.1.ppc64",
"product_id": "libxml2-doc-2.7.6-0.77.36.1.ppc64"
}
},
{
"category": "product_version",
"name": "libxml2-python-2.7.6-0.77.36.1.ppc64",
"product": {
"name": "libxml2-python-2.7.6-0.77.36.1.ppc64",
"product_id": "libxml2-python-2.7.6-0.77.36.1.ppc64"
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-2.7.6-0.77.36.1.s390x",
"product": {
"name": "libxml2-2.7.6-0.77.36.1.s390x",
"product_id": "libxml2-2.7.6-0.77.36.1.s390x"
}
},
{
"category": "product_version",
"name": "libxml2-32bit-2.7.6-0.77.36.1.s390x",
"product": {
"name": "libxml2-32bit-2.7.6-0.77.36.1.s390x",
"product_id": "libxml2-32bit-2.7.6-0.77.36.1.s390x"
}
},
{
"category": "product_version",
"name": "libxml2-doc-2.7.6-0.77.36.1.s390x",
"product": {
"name": "libxml2-doc-2.7.6-0.77.36.1.s390x",
"product_id": "libxml2-doc-2.7.6-0.77.36.1.s390x"
}
},
{
"category": "product_version",
"name": "libxml2-python-2.7.6-0.77.36.1.s390x",
"product": {
"name": "libxml2-python-2.7.6-0.77.36.1.s390x",
"product_id": "libxml2-python-2.7.6-0.77.36.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-2.7.6-0.77.36.1.x86_64",
"product": {
"name": "libxml2-2.7.6-0.77.36.1.x86_64",
"product_id": "libxml2-2.7.6-0.77.36.1.x86_64"
}
},
{
"category": "product_version",
"name": "libxml2-32bit-2.7.6-0.77.36.1.x86_64",
"product": {
"name": "libxml2-32bit-2.7.6-0.77.36.1.x86_64",
"product_id": "libxml2-32bit-2.7.6-0.77.36.1.x86_64"
}
},
{
"category": "product_version",
"name": "libxml2-doc-2.7.6-0.77.36.1.x86_64",
"product": {
"name": "libxml2-doc-2.7.6-0.77.36.1.x86_64",
"product_id": "libxml2-doc-2.7.6-0.77.36.1.x86_64"
}
},
{
"category": "product_version",
"name": "libxml2-python-2.7.6-0.77.36.1.x86_64",
"product": {
"name": "libxml2-python-2.7.6-0.77.36.1.x86_64",
"product_id": "libxml2-python-2.7.6-0.77.36.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Point of Sale 11 SP3",
"product": {
"name": "SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-pos:11:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles:11:sp4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-2.7.6-0.77.36.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-2.7.6-0.77.36.1.i586"
},
"product_reference": "libxml2-2.7.6-0.77.36.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-doc-2.7.6-0.77.36.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-doc-2.7.6-0.77.36.1.i586"
},
"product_reference": "libxml2-doc-2.7.6-0.77.36.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-2.7.6-0.77.36.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-python-2.7.6-0.77.36.1.i586"
},
"product_reference": "libxml2-python-2.7.6-0.77.36.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-2.7.6-0.77.36.1.i586 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.i586"
},
"product_reference": "libxml2-2.7.6-0.77.36.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-2.7.6-0.77.36.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.ppc64"
},
"product_reference": "libxml2-2.7.6-0.77.36.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-2.7.6-0.77.36.1.s390x as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.s390x"
},
"product_reference": "libxml2-2.7.6-0.77.36.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-2.7.6-0.77.36.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.x86_64"
},
"product_reference": "libxml2-2.7.6-0.77.36.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-32bit-2.7.6-0.77.36.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.ppc64"
},
"product_reference": "libxml2-32bit-2.7.6-0.77.36.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-32bit-2.7.6-0.77.36.1.s390x as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.s390x"
},
"product_reference": "libxml2-32bit-2.7.6-0.77.36.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-32bit-2.7.6-0.77.36.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.x86_64"
},
"product_reference": "libxml2-32bit-2.7.6-0.77.36.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-doc-2.7.6-0.77.36.1.i586 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.i586"
},
"product_reference": "libxml2-doc-2.7.6-0.77.36.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-doc-2.7.6-0.77.36.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.ppc64"
},
"product_reference": "libxml2-doc-2.7.6-0.77.36.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-doc-2.7.6-0.77.36.1.s390x as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.s390x"
},
"product_reference": "libxml2-doc-2.7.6-0.77.36.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-doc-2.7.6-0.77.36.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.x86_64"
},
"product_reference": "libxml2-doc-2.7.6-0.77.36.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-2.7.6-0.77.36.1.i586 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.i586"
},
"product_reference": "libxml2-python-2.7.6-0.77.36.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-2.7.6-0.77.36.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.ppc64"
},
"product_reference": "libxml2-python-2.7.6-0.77.36.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-2.7.6-0.77.36.1.s390x as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.s390x"
},
"product_reference": "libxml2-python-2.7.6-0.77.36.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-python-2.7.6-0.77.36.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.x86_64"
},
"product_reference": "libxml2-python-2.7.6-0.77.36.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-0191",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0191"
}
],
"notes": [
{
"category": "general",
"text": "The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Server in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 and other products, loads external parameter entities regardless of whether entity substitution or validation is enabled, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XML document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0191",
"url": "https://www.suse.com/security/cve/CVE-2014-0191"
},
{
"category": "external",
"summary": "SUSE Bug 1014873 for CVE-2014-0191",
"url": "https://bugzilla.suse.com/1014873"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2014-0191",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 876652 for CVE-2014-0191",
"url": "https://bugzilla.suse.com/876652"
},
{
"category": "external",
"summary": "SUSE Bug 877506 for CVE-2014-0191",
"url": "https://bugzilla.suse.com/877506"
},
{
"category": "external",
"summary": "SUSE Bug 996079 for CVE-2014-0191",
"url": "https://bugzilla.suse.com/996079"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-19T14:41:30Z",
"details": "important"
}
],
"title": "CVE-2014-0191"
},
{
"cve": "CVE-2019-19956",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-19956"
}
],
"notes": [
{
"category": "general",
"text": "xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc-\u003eoldNs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-19956",
"url": "https://www.suse.com/security/cve/CVE-2019-19956"
},
{
"category": "external",
"summary": "SUSE Bug 1159928 for CVE-2019-19956",
"url": "https://bugzilla.suse.com/1159928"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2019-19956",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-19T14:41:30Z",
"details": "moderate"
}
],
"title": "CVE-2019-19956"
},
{
"cve": "CVE-2019-20388",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-20388"
}
],
"notes": [
{
"category": "general",
"text": "xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-20388",
"url": "https://www.suse.com/security/cve/CVE-2019-20388"
},
{
"category": "external",
"summary": "SUSE Bug 1161521 for CVE-2019-20388",
"url": "https://bugzilla.suse.com/1161521"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2019-20388",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-19T14:41:30Z",
"details": "low"
}
],
"title": "CVE-2019-20388"
},
{
"cve": "CVE-2020-24977",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-24977"
}
],
"notes": [
{
"category": "general",
"text": "GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-24977",
"url": "https://www.suse.com/security/cve/CVE-2020-24977"
},
{
"category": "external",
"summary": "SUSE Bug 1176179 for CVE-2020-24977",
"url": "https://bugzilla.suse.com/1176179"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2020-24977",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-19T14:41:30Z",
"details": "moderate"
}
],
"title": "CVE-2020-24977"
},
{
"cve": "CVE-2020-7595",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-7595"
}
],
"notes": [
{
"category": "general",
"text": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-7595",
"url": "https://www.suse.com/security/cve/CVE-2020-7595"
},
{
"category": "external",
"summary": "SUSE Bug 1161517 for CVE-2020-7595",
"url": "https://bugzilla.suse.com/1161517"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2020-7595",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-19T14:41:30Z",
"details": "moderate"
}
],
"title": "CVE-2020-7595"
},
{
"cve": "CVE-2021-3516",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3516"
}
],
"notes": [
{
"category": "general",
"text": "There\u0027s a flaw in libxml2\u0027s xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-after-free. The greatest impact of this flaw is to confidentiality, integrity, and availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3516",
"url": "https://www.suse.com/security/cve/CVE-2021-3516"
},
{
"category": "external",
"summary": "SUSE Bug 1185409 for CVE-2021-3516",
"url": "https://bugzilla.suse.com/1185409"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2021-3516",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-19T14:41:30Z",
"details": "moderate"
}
],
"title": "CVE-2021-3516"
},
{
"cve": "CVE-2021-3517",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3517"
}
],
"notes": [
{
"category": "general",
"text": "There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3517",
"url": "https://www.suse.com/security/cve/CVE-2021-3517"
},
{
"category": "external",
"summary": "SUSE Bug 1185410 for CVE-2021-3517",
"url": "https://bugzilla.suse.com/1185410"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2021-3517",
"url": "https://bugzilla.suse.com/1191860"
},
{
"category": "external",
"summary": "SUSE Bug 1194438 for CVE-2021-3517",
"url": "https://bugzilla.suse.com/1194438"
},
{
"category": "external",
"summary": "SUSE Bug 1196383 for CVE-2021-3517",
"url": "https://bugzilla.suse.com/1196383"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-19T14:41:30Z",
"details": "important"
}
],
"title": "CVE-2021-3517"
},
{
"cve": "CVE-2021-3518",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3518"
}
],
"notes": [
{
"category": "general",
"text": "There\u0027s a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3518",
"url": "https://www.suse.com/security/cve/CVE-2021-3518"
},
{
"category": "external",
"summary": "SUSE Bug 1185408 for CVE-2021-3518",
"url": "https://bugzilla.suse.com/1185408"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2021-3518",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-19T14:41:30Z",
"details": "moderate"
}
],
"title": "CVE-2021-3518"
},
{
"cve": "CVE-2021-3537",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3537"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest threat from this vulnerability is to system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3537",
"url": "https://www.suse.com/security/cve/CVE-2021-3537"
},
{
"category": "external",
"summary": "SUSE Bug 1185698 for CVE-2021-3537",
"url": "https://bugzilla.suse.com/1185698"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-32bit-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-doc-2.7.6-0.77.36.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:libxml2-python-2.7.6-0.77.36.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-19T14:41:30Z",
"details": "important"
}
],
"title": "CVE-2021-3537"
}
]
}
suse-su-2020:2609-1
Vulnerability from csaf_suse
Published
2020-09-11 08:59
Modified
2020-09-11 08:59
Summary
Security update for libxml2
Notes
Title of the patch
Security update for libxml2
Description of the patch
This update for libxml2 fixes the following issues:
- CVE-2019-20388: Fixed a memory leak in xmlSchemaPreRun (bsc#1161521).
- CVE-2020-7595: Fixed an infinite loop in an EOF situation (bsc#1161517).
- CVE-2020-24977: Fixed a global-buffer-overflow in xmlEncodeEntitiesInternal (bsc#1176179).
- Fixed invalid xmlns references due to CVE-2019-19956 (bsc#1172021).
Patchnames
SUSE-2020-2609,SUSE-SLE-SDK-12-SP5-2020-2609,SUSE-SLE-SERVER-12-SP5-2020-2609
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for libxml2",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for libxml2 fixes the following issues:\n\n- CVE-2019-20388: Fixed a memory leak in xmlSchemaPreRun (bsc#1161521).\n- CVE-2020-7595: Fixed an infinite loop in an EOF situation (bsc#1161517).\n- CVE-2020-24977: Fixed a global-buffer-overflow in xmlEncodeEntitiesInternal (bsc#1176179).\n- Fixed invalid xmlns references due to CVE-2019-19956 (bsc#1172021).\n ",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2020-2609,SUSE-SLE-SDK-12-SP5-2020-2609,SUSE-SLE-SERVER-12-SP5-2020-2609",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_2609-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2020:2609-1",
"url": "https://www.suse.com/support/update/announcement/2020/suse-su-20202609-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2020:2609-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2020-September/007409.html"
},
{
"category": "self",
"summary": "SUSE Bug 1159928",
"url": "https://bugzilla.suse.com/1159928"
},
{
"category": "self",
"summary": "SUSE Bug 1161517",
"url": "https://bugzilla.suse.com/1161517"
},
{
"category": "self",
"summary": "SUSE Bug 1161521",
"url": "https://bugzilla.suse.com/1161521"
},
{
"category": "self",
"summary": "SUSE Bug 1172021",
"url": "https://bugzilla.suse.com/1172021"
},
{
"category": "self",
"summary": "SUSE Bug 1176179",
"url": "https://bugzilla.suse.com/1176179"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-19956 page",
"url": "https://www.suse.com/security/cve/CVE-2019-19956/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-20388 page",
"url": "https://www.suse.com/security/cve/CVE-2019-20388/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-24977 page",
"url": "https://www.suse.com/security/cve/CVE-2020-24977/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-7595 page",
"url": "https://www.suse.com/security/cve/CVE-2020-7595/"
}
],
"title": "Security update for libxml2",
"tracking": {
"current_release_date": "2020-09-11T08:59:10Z",
"generator": {
"date": "2020-09-11T08:59:10Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2020:2609-1",
"initial_release_date": "2020-09-11T08:59:10Z",
"revision_history": [
{
"date": "2020-09-11T08:59:10Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libxml2-2-2.9.4-46.34.1.aarch64",
"product": {
"name": "libxml2-2-2.9.4-46.34.1.aarch64",
"product_id": "libxml2-2-2.9.4-46.34.1.aarch64"
}
},
{
"category": "product_version",
"name": "libxml2-devel-2.9.4-46.34.1.aarch64",
"product": {
"name": "libxml2-devel-2.9.4-46.34.1.aarch64",
"product_id": "libxml2-devel-2.9.4-46.34.1.aarch64"
}
},
{
"category": "product_version",
"name": "libxml2-tools-2.9.4-46.34.1.aarch64",
"product": {
"name": "libxml2-tools-2.9.4-46.34.1.aarch64",
"product_id": "libxml2-tools-2.9.4-46.34.1.aarch64"
}
},
{
"category": "product_version",
"name": "python-libxml2-2.9.4-46.34.1.aarch64",
"product": {
"name": "python-libxml2-2.9.4-46.34.1.aarch64",
"product_id": "python-libxml2-2.9.4-46.34.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-2-64bit-2.9.4-46.34.1.aarch64_ilp32",
"product": {
"name": "libxml2-2-64bit-2.9.4-46.34.1.aarch64_ilp32",
"product_id": "libxml2-2-64bit-2.9.4-46.34.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libxml2-devel-64bit-2.9.4-46.34.1.aarch64_ilp32",
"product": {
"name": "libxml2-devel-64bit-2.9.4-46.34.1.aarch64_ilp32",
"product_id": "libxml2-devel-64bit-2.9.4-46.34.1.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-2-2.9.4-46.34.1.i586",
"product": {
"name": "libxml2-2-2.9.4-46.34.1.i586",
"product_id": "libxml2-2-2.9.4-46.34.1.i586"
}
},
{
"category": "product_version",
"name": "libxml2-devel-2.9.4-46.34.1.i586",
"product": {
"name": "libxml2-devel-2.9.4-46.34.1.i586",
"product_id": "libxml2-devel-2.9.4-46.34.1.i586"
}
},
{
"category": "product_version",
"name": "libxml2-tools-2.9.4-46.34.1.i586",
"product": {
"name": "libxml2-tools-2.9.4-46.34.1.i586",
"product_id": "libxml2-tools-2.9.4-46.34.1.i586"
}
},
{
"category": "product_version",
"name": "python-libxml2-2.9.4-46.34.1.i586",
"product": {
"name": "python-libxml2-2.9.4-46.34.1.i586",
"product_id": "python-libxml2-2.9.4-46.34.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-doc-2.9.4-46.34.1.noarch",
"product": {
"name": "libxml2-doc-2.9.4-46.34.1.noarch",
"product_id": "libxml2-doc-2.9.4-46.34.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-2-2.9.4-46.34.1.ppc64le",
"product": {
"name": "libxml2-2-2.9.4-46.34.1.ppc64le",
"product_id": "libxml2-2-2.9.4-46.34.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libxml2-devel-2.9.4-46.34.1.ppc64le",
"product": {
"name": "libxml2-devel-2.9.4-46.34.1.ppc64le",
"product_id": "libxml2-devel-2.9.4-46.34.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libxml2-tools-2.9.4-46.34.1.ppc64le",
"product": {
"name": "libxml2-tools-2.9.4-46.34.1.ppc64le",
"product_id": "libxml2-tools-2.9.4-46.34.1.ppc64le"
}
},
{
"category": "product_version",
"name": "python-libxml2-2.9.4-46.34.1.ppc64le",
"product": {
"name": "python-libxml2-2.9.4-46.34.1.ppc64le",
"product_id": "python-libxml2-2.9.4-46.34.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-2-2.9.4-46.34.1.s390",
"product": {
"name": "libxml2-2-2.9.4-46.34.1.s390",
"product_id": "libxml2-2-2.9.4-46.34.1.s390"
}
},
{
"category": "product_version",
"name": "libxml2-devel-2.9.4-46.34.1.s390",
"product": {
"name": "libxml2-devel-2.9.4-46.34.1.s390",
"product_id": "libxml2-devel-2.9.4-46.34.1.s390"
}
},
{
"category": "product_version",
"name": "libxml2-tools-2.9.4-46.34.1.s390",
"product": {
"name": "libxml2-tools-2.9.4-46.34.1.s390",
"product_id": "libxml2-tools-2.9.4-46.34.1.s390"
}
},
{
"category": "product_version",
"name": "python-libxml2-2.9.4-46.34.1.s390",
"product": {
"name": "python-libxml2-2.9.4-46.34.1.s390",
"product_id": "python-libxml2-2.9.4-46.34.1.s390"
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-2-2.9.4-46.34.1.s390x",
"product": {
"name": "libxml2-2-2.9.4-46.34.1.s390x",
"product_id": "libxml2-2-2.9.4-46.34.1.s390x"
}
},
{
"category": "product_version",
"name": "libxml2-2-32bit-2.9.4-46.34.1.s390x",
"product": {
"name": "libxml2-2-32bit-2.9.4-46.34.1.s390x",
"product_id": "libxml2-2-32bit-2.9.4-46.34.1.s390x"
}
},
{
"category": "product_version",
"name": "libxml2-devel-2.9.4-46.34.1.s390x",
"product": {
"name": "libxml2-devel-2.9.4-46.34.1.s390x",
"product_id": "libxml2-devel-2.9.4-46.34.1.s390x"
}
},
{
"category": "product_version",
"name": "libxml2-devel-32bit-2.9.4-46.34.1.s390x",
"product": {
"name": "libxml2-devel-32bit-2.9.4-46.34.1.s390x",
"product_id": "libxml2-devel-32bit-2.9.4-46.34.1.s390x"
}
},
{
"category": "product_version",
"name": "libxml2-tools-2.9.4-46.34.1.s390x",
"product": {
"name": "libxml2-tools-2.9.4-46.34.1.s390x",
"product_id": "libxml2-tools-2.9.4-46.34.1.s390x"
}
},
{
"category": "product_version",
"name": "python-libxml2-2.9.4-46.34.1.s390x",
"product": {
"name": "python-libxml2-2.9.4-46.34.1.s390x",
"product_id": "python-libxml2-2.9.4-46.34.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-2-2.9.4-46.34.1.x86_64",
"product": {
"name": "libxml2-2-2.9.4-46.34.1.x86_64",
"product_id": "libxml2-2-2.9.4-46.34.1.x86_64"
}
},
{
"category": "product_version",
"name": "libxml2-2-32bit-2.9.4-46.34.1.x86_64",
"product": {
"name": "libxml2-2-32bit-2.9.4-46.34.1.x86_64",
"product_id": "libxml2-2-32bit-2.9.4-46.34.1.x86_64"
}
},
{
"category": "product_version",
"name": "libxml2-devel-2.9.4-46.34.1.x86_64",
"product": {
"name": "libxml2-devel-2.9.4-46.34.1.x86_64",
"product_id": "libxml2-devel-2.9.4-46.34.1.x86_64"
}
},
{
"category": "product_version",
"name": "libxml2-devel-32bit-2.9.4-46.34.1.x86_64",
"product": {
"name": "libxml2-devel-32bit-2.9.4-46.34.1.x86_64",
"product_id": "libxml2-devel-32bit-2.9.4-46.34.1.x86_64"
}
},
{
"category": "product_version",
"name": "libxml2-tools-2.9.4-46.34.1.x86_64",
"product": {
"name": "libxml2-tools-2.9.4-46.34.1.x86_64",
"product_id": "libxml2-tools-2.9.4-46.34.1.x86_64"
}
},
{
"category": "product_version",
"name": "python-libxml2-2.9.4-46.34.1.x86_64",
"product": {
"name": "python-libxml2-2.9.4-46.34.1.x86_64",
"product_id": "python-libxml2-2.9.4-46.34.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-2.9.4-46.34.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.aarch64"
},
"product_reference": "libxml2-devel-2.9.4-46.34.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-2.9.4-46.34.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.ppc64le"
},
"product_reference": "libxml2-devel-2.9.4-46.34.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-2.9.4-46.34.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.s390x"
},
"product_reference": "libxml2-devel-2.9.4-46.34.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-2.9.4-46.34.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.x86_64"
},
"product_reference": "libxml2-devel-2.9.4-46.34.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-2-2.9.4-46.34.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.aarch64"
},
"product_reference": "libxml2-2-2.9.4-46.34.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-2-2.9.4-46.34.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.ppc64le"
},
"product_reference": "libxml2-2-2.9.4-46.34.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-2-2.9.4-46.34.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.s390x"
},
"product_reference": "libxml2-2-2.9.4-46.34.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-2-2.9.4-46.34.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.x86_64"
},
"product_reference": "libxml2-2-2.9.4-46.34.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-2-32bit-2.9.4-46.34.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.s390x"
},
"product_reference": "libxml2-2-32bit-2.9.4-46.34.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-2-32bit-2.9.4-46.34.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.x86_64"
},
"product_reference": "libxml2-2-32bit-2.9.4-46.34.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-doc-2.9.4-46.34.1.noarch as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libxml2-doc-2.9.4-46.34.1.noarch"
},
"product_reference": "libxml2-doc-2.9.4-46.34.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-tools-2.9.4-46.34.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.aarch64"
},
"product_reference": "libxml2-tools-2.9.4-46.34.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-tools-2.9.4-46.34.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.ppc64le"
},
"product_reference": "libxml2-tools-2.9.4-46.34.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-tools-2.9.4-46.34.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.s390x"
},
"product_reference": "libxml2-tools-2.9.4-46.34.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-tools-2.9.4-46.34.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.x86_64"
},
"product_reference": "libxml2-tools-2.9.4-46.34.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-libxml2-2.9.4-46.34.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.aarch64"
},
"product_reference": "python-libxml2-2.9.4-46.34.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-libxml2-2.9.4-46.34.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.ppc64le"
},
"product_reference": "python-libxml2-2.9.4-46.34.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-libxml2-2.9.4-46.34.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.s390x"
},
"product_reference": "python-libxml2-2.9.4-46.34.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-libxml2-2.9.4-46.34.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.x86_64"
},
"product_reference": "python-libxml2-2.9.4-46.34.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-2-2.9.4-46.34.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.aarch64"
},
"product_reference": "libxml2-2-2.9.4-46.34.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-2-2.9.4-46.34.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.ppc64le"
},
"product_reference": "libxml2-2-2.9.4-46.34.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-2-2.9.4-46.34.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.s390x"
},
"product_reference": "libxml2-2-2.9.4-46.34.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-2-2.9.4-46.34.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.x86_64"
},
"product_reference": "libxml2-2-2.9.4-46.34.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-2-32bit-2.9.4-46.34.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.s390x"
},
"product_reference": "libxml2-2-32bit-2.9.4-46.34.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-2-32bit-2.9.4-46.34.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.x86_64"
},
"product_reference": "libxml2-2-32bit-2.9.4-46.34.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-doc-2.9.4-46.34.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-doc-2.9.4-46.34.1.noarch"
},
"product_reference": "libxml2-doc-2.9.4-46.34.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-tools-2.9.4-46.34.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.aarch64"
},
"product_reference": "libxml2-tools-2.9.4-46.34.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-tools-2.9.4-46.34.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.ppc64le"
},
"product_reference": "libxml2-tools-2.9.4-46.34.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-tools-2.9.4-46.34.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.s390x"
},
"product_reference": "libxml2-tools-2.9.4-46.34.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-tools-2.9.4-46.34.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.x86_64"
},
"product_reference": "libxml2-tools-2.9.4-46.34.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-libxml2-2.9.4-46.34.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.aarch64"
},
"product_reference": "python-libxml2-2.9.4-46.34.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-libxml2-2.9.4-46.34.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.ppc64le"
},
"product_reference": "python-libxml2-2.9.4-46.34.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-libxml2-2.9.4-46.34.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.s390x"
},
"product_reference": "python-libxml2-2.9.4-46.34.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-libxml2-2.9.4-46.34.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.x86_64"
},
"product_reference": "python-libxml2-2.9.4-46.34.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-19956",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-19956"
}
],
"notes": [
{
"category": "general",
"text": "xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc-\u003eoldNs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-doc-2.9.4-46.34.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-doc-2.9.4-46.34.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-19956",
"url": "https://www.suse.com/security/cve/CVE-2019-19956"
},
{
"category": "external",
"summary": "SUSE Bug 1159928 for CVE-2019-19956",
"url": "https://bugzilla.suse.com/1159928"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2019-19956",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-doc-2.9.4-46.34.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-doc-2.9.4-46.34.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-doc-2.9.4-46.34.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-doc-2.9.4-46.34.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-09-11T08:59:10Z",
"details": "moderate"
}
],
"title": "CVE-2019-19956"
},
{
"cve": "CVE-2019-20388",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-20388"
}
],
"notes": [
{
"category": "general",
"text": "xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-doc-2.9.4-46.34.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-doc-2.9.4-46.34.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-20388",
"url": "https://www.suse.com/security/cve/CVE-2019-20388"
},
{
"category": "external",
"summary": "SUSE Bug 1161521 for CVE-2019-20388",
"url": "https://bugzilla.suse.com/1161521"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2019-20388",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-doc-2.9.4-46.34.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-doc-2.9.4-46.34.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-doc-2.9.4-46.34.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-doc-2.9.4-46.34.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-09-11T08:59:10Z",
"details": "low"
}
],
"title": "CVE-2019-20388"
},
{
"cve": "CVE-2020-24977",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-24977"
}
],
"notes": [
{
"category": "general",
"text": "GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-doc-2.9.4-46.34.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-doc-2.9.4-46.34.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-24977",
"url": "https://www.suse.com/security/cve/CVE-2020-24977"
},
{
"category": "external",
"summary": "SUSE Bug 1176179 for CVE-2020-24977",
"url": "https://bugzilla.suse.com/1176179"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2020-24977",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-doc-2.9.4-46.34.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-doc-2.9.4-46.34.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-doc-2.9.4-46.34.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-doc-2.9.4-46.34.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-09-11T08:59:10Z",
"details": "moderate"
}
],
"title": "CVE-2020-24977"
},
{
"cve": "CVE-2020-7595",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-7595"
}
],
"notes": [
{
"category": "general",
"text": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-doc-2.9.4-46.34.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-doc-2.9.4-46.34.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-7595",
"url": "https://www.suse.com/security/cve/CVE-2020-7595"
},
{
"category": "external",
"summary": "SUSE Bug 1161517 for CVE-2020-7595",
"url": "https://bugzilla.suse.com/1161517"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2020-7595",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-doc-2.9.4-46.34.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-doc-2.9.4-46.34.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-doc-2.9.4-46.34.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libxml2-tools-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:python-libxml2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-2-32bit-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-doc-2.9.4-46.34.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxml2-tools-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-libxml2-2.9.4-46.34.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libxml2-devel-2.9.4-46.34.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-09-11T08:59:10Z",
"details": "moderate"
}
],
"title": "CVE-2020-7595"
}
]
}
suse-su-2020:1299-1
Vulnerability from csaf_suse
Published
2020-05-18 05:43
Modified
2020-05-18 05:43
Summary
Security update for libxml2
Notes
Title of the patch
Security update for libxml2
Description of the patch
This update for libxml2 fixes the following issues:
- CVE-2019-20388: Fixed a memory leak in xmlSchemaPreRun (bsc#1161521).
- CVE-2019-19956: Fixed a memory leak (bsc#1159928).
- CVE-2020-7595: Fixed an infinite loop in an EOF situation (bsc#1161517).
Patchnames
SUSE-2020-1299,SUSE-SLE-Module-Basesystem-15-SP1-2020-1299,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2020-1299,SUSE-SLE-Module-Python2-15-SP1-2020-1299
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for libxml2",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for libxml2 fixes the following issues:\n\n- CVE-2019-20388: Fixed a memory leak in xmlSchemaPreRun (bsc#1161521).\n- CVE-2019-19956: Fixed a memory leak (bsc#1159928).\n- CVE-2020-7595: Fixed an infinite loop in an EOF situation (bsc#1161517).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2020-1299,SUSE-SLE-Module-Basesystem-15-SP1-2020-1299,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2020-1299,SUSE-SLE-Module-Python2-15-SP1-2020-1299",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_1299-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2020:1299-1",
"url": "https://www.suse.com/support/update/announcement/2020/suse-su-20201299-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2020:1299-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2020-May/006823.html"
},
{
"category": "self",
"summary": "SUSE Bug 1159928",
"url": "https://bugzilla.suse.com/1159928"
},
{
"category": "self",
"summary": "SUSE Bug 1161517",
"url": "https://bugzilla.suse.com/1161517"
},
{
"category": "self",
"summary": "SUSE Bug 1161521",
"url": "https://bugzilla.suse.com/1161521"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-19956 page",
"url": "https://www.suse.com/security/cve/CVE-2019-19956/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-20388 page",
"url": "https://www.suse.com/security/cve/CVE-2019-20388/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-7595 page",
"url": "https://www.suse.com/security/cve/CVE-2020-7595/"
}
],
"title": "Security update for libxml2",
"tracking": {
"current_release_date": "2020-05-18T05:43:36Z",
"generator": {
"date": "2020-05-18T05:43:36Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2020:1299-1",
"initial_release_date": "2020-05-18T05:43:36Z",
"revision_history": [
{
"date": "2020-05-18T05:43:36Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libxml2-2-2.9.7-3.19.8.aarch64",
"product": {
"name": "libxml2-2-2.9.7-3.19.8.aarch64",
"product_id": "libxml2-2-2.9.7-3.19.8.aarch64"
}
},
{
"category": "product_version",
"name": "libxml2-devel-2.9.7-3.19.8.aarch64",
"product": {
"name": "libxml2-devel-2.9.7-3.19.8.aarch64",
"product_id": "libxml2-devel-2.9.7-3.19.8.aarch64"
}
},
{
"category": "product_version",
"name": "libxml2-tools-2.9.7-3.19.8.aarch64",
"product": {
"name": "libxml2-tools-2.9.7-3.19.8.aarch64",
"product_id": "libxml2-tools-2.9.7-3.19.8.aarch64"
}
},
{
"category": "product_version",
"name": "python2-libxml2-python-2.9.7-3.19.10.aarch64",
"product": {
"name": "python2-libxml2-python-2.9.7-3.19.10.aarch64",
"product_id": "python2-libxml2-python-2.9.7-3.19.10.aarch64"
}
},
{
"category": "product_version",
"name": "python3-libxml2-python-2.9.7-3.19.10.aarch64",
"product": {
"name": "python3-libxml2-python-2.9.7-3.19.10.aarch64",
"product_id": "python3-libxml2-python-2.9.7-3.19.10.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-2-64bit-2.9.7-3.19.8.aarch64_ilp32",
"product": {
"name": "libxml2-2-64bit-2.9.7-3.19.8.aarch64_ilp32",
"product_id": "libxml2-2-64bit-2.9.7-3.19.8.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libxml2-devel-64bit-2.9.7-3.19.8.aarch64_ilp32",
"product": {
"name": "libxml2-devel-64bit-2.9.7-3.19.8.aarch64_ilp32",
"product_id": "libxml2-devel-64bit-2.9.7-3.19.8.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-2-2.9.7-3.19.8.i586",
"product": {
"name": "libxml2-2-2.9.7-3.19.8.i586",
"product_id": "libxml2-2-2.9.7-3.19.8.i586"
}
},
{
"category": "product_version",
"name": "libxml2-devel-2.9.7-3.19.8.i586",
"product": {
"name": "libxml2-devel-2.9.7-3.19.8.i586",
"product_id": "libxml2-devel-2.9.7-3.19.8.i586"
}
},
{
"category": "product_version",
"name": "libxml2-tools-2.9.7-3.19.8.i586",
"product": {
"name": "libxml2-tools-2.9.7-3.19.8.i586",
"product_id": "libxml2-tools-2.9.7-3.19.8.i586"
}
},
{
"category": "product_version",
"name": "python2-libxml2-python-2.9.7-3.19.10.i586",
"product": {
"name": "python2-libxml2-python-2.9.7-3.19.10.i586",
"product_id": "python2-libxml2-python-2.9.7-3.19.10.i586"
}
},
{
"category": "product_version",
"name": "python3-libxml2-python-2.9.7-3.19.10.i586",
"product": {
"name": "python3-libxml2-python-2.9.7-3.19.10.i586",
"product_id": "python3-libxml2-python-2.9.7-3.19.10.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-doc-2.9.7-3.19.8.noarch",
"product": {
"name": "libxml2-doc-2.9.7-3.19.8.noarch",
"product_id": "libxml2-doc-2.9.7-3.19.8.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-2-2.9.7-3.19.8.ppc64le",
"product": {
"name": "libxml2-2-2.9.7-3.19.8.ppc64le",
"product_id": "libxml2-2-2.9.7-3.19.8.ppc64le"
}
},
{
"category": "product_version",
"name": "libxml2-devel-2.9.7-3.19.8.ppc64le",
"product": {
"name": "libxml2-devel-2.9.7-3.19.8.ppc64le",
"product_id": "libxml2-devel-2.9.7-3.19.8.ppc64le"
}
},
{
"category": "product_version",
"name": "libxml2-tools-2.9.7-3.19.8.ppc64le",
"product": {
"name": "libxml2-tools-2.9.7-3.19.8.ppc64le",
"product_id": "libxml2-tools-2.9.7-3.19.8.ppc64le"
}
},
{
"category": "product_version",
"name": "python2-libxml2-python-2.9.7-3.19.10.ppc64le",
"product": {
"name": "python2-libxml2-python-2.9.7-3.19.10.ppc64le",
"product_id": "python2-libxml2-python-2.9.7-3.19.10.ppc64le"
}
},
{
"category": "product_version",
"name": "python3-libxml2-python-2.9.7-3.19.10.ppc64le",
"product": {
"name": "python3-libxml2-python-2.9.7-3.19.10.ppc64le",
"product_id": "python3-libxml2-python-2.9.7-3.19.10.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-2-2.9.7-3.19.8.s390x",
"product": {
"name": "libxml2-2-2.9.7-3.19.8.s390x",
"product_id": "libxml2-2-2.9.7-3.19.8.s390x"
}
},
{
"category": "product_version",
"name": "libxml2-devel-2.9.7-3.19.8.s390x",
"product": {
"name": "libxml2-devel-2.9.7-3.19.8.s390x",
"product_id": "libxml2-devel-2.9.7-3.19.8.s390x"
}
},
{
"category": "product_version",
"name": "libxml2-tools-2.9.7-3.19.8.s390x",
"product": {
"name": "libxml2-tools-2.9.7-3.19.8.s390x",
"product_id": "libxml2-tools-2.9.7-3.19.8.s390x"
}
},
{
"category": "product_version",
"name": "python2-libxml2-python-2.9.7-3.19.10.s390x",
"product": {
"name": "python2-libxml2-python-2.9.7-3.19.10.s390x",
"product_id": "python2-libxml2-python-2.9.7-3.19.10.s390x"
}
},
{
"category": "product_version",
"name": "python3-libxml2-python-2.9.7-3.19.10.s390x",
"product": {
"name": "python3-libxml2-python-2.9.7-3.19.10.s390x",
"product_id": "python3-libxml2-python-2.9.7-3.19.10.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libxml2-2-2.9.7-3.19.8.x86_64",
"product": {
"name": "libxml2-2-2.9.7-3.19.8.x86_64",
"product_id": "libxml2-2-2.9.7-3.19.8.x86_64"
}
},
{
"category": "product_version",
"name": "libxml2-2-32bit-2.9.7-3.19.8.x86_64",
"product": {
"name": "libxml2-2-32bit-2.9.7-3.19.8.x86_64",
"product_id": "libxml2-2-32bit-2.9.7-3.19.8.x86_64"
}
},
{
"category": "product_version",
"name": "libxml2-devel-2.9.7-3.19.8.x86_64",
"product": {
"name": "libxml2-devel-2.9.7-3.19.8.x86_64",
"product_id": "libxml2-devel-2.9.7-3.19.8.x86_64"
}
},
{
"category": "product_version",
"name": "libxml2-devel-32bit-2.9.7-3.19.8.x86_64",
"product": {
"name": "libxml2-devel-32bit-2.9.7-3.19.8.x86_64",
"product_id": "libxml2-devel-32bit-2.9.7-3.19.8.x86_64"
}
},
{
"category": "product_version",
"name": "libxml2-tools-2.9.7-3.19.8.x86_64",
"product": {
"name": "libxml2-tools-2.9.7-3.19.8.x86_64",
"product_id": "libxml2-tools-2.9.7-3.19.8.x86_64"
}
},
{
"category": "product_version",
"name": "python2-libxml2-python-2.9.7-3.19.10.x86_64",
"product": {
"name": "python2-libxml2-python-2.9.7-3.19.10.x86_64",
"product_id": "python2-libxml2-python-2.9.7-3.19.10.x86_64"
}
},
{
"category": "product_version",
"name": "python3-libxml2-python-2.9.7-3.19.10.x86_64",
"product": {
"name": "python3-libxml2-python-2.9.7-3.19.10.x86_64",
"product_id": "python3-libxml2-python-2.9.7-3.19.10.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Python 2 15 SP1",
"product": {
"name": "SUSE Linux Enterprise Module for Python 2 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Python 2 15 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-python2:15:sp1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-2-2.9.7-3.19.8.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.aarch64"
},
"product_reference": "libxml2-2-2.9.7-3.19.8.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-2-2.9.7-3.19.8.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.ppc64le"
},
"product_reference": "libxml2-2-2.9.7-3.19.8.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-2-2.9.7-3.19.8.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.s390x"
},
"product_reference": "libxml2-2-2.9.7-3.19.8.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-2-2.9.7-3.19.8.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.x86_64"
},
"product_reference": "libxml2-2-2.9.7-3.19.8.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-2-32bit-2.9.7-3.19.8.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-32bit-2.9.7-3.19.8.x86_64"
},
"product_reference": "libxml2-2-32bit-2.9.7-3.19.8.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-2.9.7-3.19.8.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.aarch64"
},
"product_reference": "libxml2-devel-2.9.7-3.19.8.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-2.9.7-3.19.8.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.ppc64le"
},
"product_reference": "libxml2-devel-2.9.7-3.19.8.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-2.9.7-3.19.8.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.s390x"
},
"product_reference": "libxml2-devel-2.9.7-3.19.8.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-devel-2.9.7-3.19.8.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.x86_64"
},
"product_reference": "libxml2-devel-2.9.7-3.19.8.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-tools-2.9.7-3.19.8.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.aarch64"
},
"product_reference": "libxml2-tools-2.9.7-3.19.8.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-tools-2.9.7-3.19.8.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.ppc64le"
},
"product_reference": "libxml2-tools-2.9.7-3.19.8.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-tools-2.9.7-3.19.8.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.s390x"
},
"product_reference": "libxml2-tools-2.9.7-3.19.8.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libxml2-tools-2.9.7-3.19.8.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.x86_64"
},
"product_reference": "libxml2-tools-2.9.7-3.19.8.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-python-2.9.7-3.19.10.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.aarch64"
},
"product_reference": "python3-libxml2-python-2.9.7-3.19.10.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-python-2.9.7-3.19.10.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.ppc64le"
},
"product_reference": "python3-libxml2-python-2.9.7-3.19.10.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-python-2.9.7-3.19.10.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.s390x"
},
"product_reference": "python3-libxml2-python-2.9.7-3.19.10.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libxml2-python-2.9.7-3.19.10.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.x86_64"
},
"product_reference": "python3-libxml2-python-2.9.7-3.19.10.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-libxml2-python-2.9.7-3.19.10.aarch64 as component of SUSE Linux Enterprise Module for Python 2 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.aarch64"
},
"product_reference": "python2-libxml2-python-2.9.7-3.19.10.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Python 2 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-libxml2-python-2.9.7-3.19.10.ppc64le as component of SUSE Linux Enterprise Module for Python 2 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.ppc64le"
},
"product_reference": "python2-libxml2-python-2.9.7-3.19.10.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Python 2 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-libxml2-python-2.9.7-3.19.10.s390x as component of SUSE Linux Enterprise Module for Python 2 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.s390x"
},
"product_reference": "python2-libxml2-python-2.9.7-3.19.10.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Python 2 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-libxml2-python-2.9.7-3.19.10.x86_64 as component of SUSE Linux Enterprise Module for Python 2 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.x86_64"
},
"product_reference": "python2-libxml2-python-2.9.7-3.19.10.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Python 2 15 SP1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-19956",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-19956"
}
],
"notes": [
{
"category": "general",
"text": "xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc-\u003eoldNs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-32bit-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-19956",
"url": "https://www.suse.com/security/cve/CVE-2019-19956"
},
{
"category": "external",
"summary": "SUSE Bug 1159928 for CVE-2019-19956",
"url": "https://bugzilla.suse.com/1159928"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2019-19956",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-32bit-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-32bit-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-05-18T05:43:36Z",
"details": "moderate"
}
],
"title": "CVE-2019-19956"
},
{
"cve": "CVE-2019-20388",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-20388"
}
],
"notes": [
{
"category": "general",
"text": "xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-32bit-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-20388",
"url": "https://www.suse.com/security/cve/CVE-2019-20388"
},
{
"category": "external",
"summary": "SUSE Bug 1161521 for CVE-2019-20388",
"url": "https://bugzilla.suse.com/1161521"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2019-20388",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-32bit-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-32bit-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-05-18T05:43:36Z",
"details": "low"
}
],
"title": "CVE-2019-20388"
},
{
"cve": "CVE-2020-7595",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-7595"
}
],
"notes": [
{
"category": "general",
"text": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-32bit-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-7595",
"url": "https://www.suse.com/security/cve/CVE-2020-7595"
},
{
"category": "external",
"summary": "SUSE Bug 1161517 for CVE-2020-7595",
"url": "https://bugzilla.suse.com/1161517"
},
{
"category": "external",
"summary": "SUSE Bug 1191860 for CVE-2020-7595",
"url": "https://bugzilla.suse.com/1191860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-32bit-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-2-32bit-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-devel-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libxml2-tools-2.9.7-3.19.8.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-libxml2-python-2.9.7-3.19.10.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python2-libxml2-python-2.9.7-3.19.10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-05-18T05:43:36Z",
"details": "moderate"
}
],
"title": "CVE-2020-7595"
}
]
}
suse-su-2020:0640-1
Vulnerability from csaf_suse
Published
2020-03-11 11:30
Modified
2020-03-11 11:30
Summary
Security update for ardana-cinder, ardana-cobbler, ardana-designate, ardana-extensions-example, ardana-extensions-nsx, ardana-glance, ardana-heat, ardana-input-model, ardana-ironic, ardana-keystone, ardana-logging, ardana-monasca, ardana-monasca-transform, ardana-mq, ardana-neutron, ardana-nova, ardana-octavia, ardana-osconfig, ardana-tempest, crowbar-core, crowbar-ha, crowbar-openstack, crowbar-ui, keepalived, mariadb, openstack-cinder, openstack-dashboard, openstack-dashboard-theme-SUSE, openstack-heat, openstack-heat-templates, openstack-horizon-plugin-designate-ui, openstack-horizon-plugin-neutron-lbaas-ui, openstack-ironic, openstack-keystone, openstack-monasca-agent, openstack-neutron, openstack-neutron-gbp, openstack-neutron-vsphere, openstack-nova, openstack-octavia, openstack-octavia-amphora-image, openstack-resource-agents, openstack-sahara, openstack-trove, python-cinderlm, python-congressclient, python-designateclient, python-ironic-lib, python-networking-cisco, python-osc-lib, python-oslo.context, python-oslo.rootwrap, python-oslo.serialization, python-oslo.service, python-stevedore, python-taskflow, rubygem-crowbar-client, rubygem-pumavenv-openstack-swift
Notes
Title of the patch
Security update for ardana-cinder, ardana-cobbler, ardana-designate, ardana-extensions-example, ardana-extensions-nsx, ardana-glance, ardana-heat, ardana-input-model, ardana-ironic, ardana-keystone, ardana-logging, ardana-monasca, ardana-monasca-transform, ardana-mq, ardana-neutron, ardana-nova, ardana-octavia, ardana-osconfig, ardana-tempest, crowbar-core, crowbar-ha, crowbar-openstack, crowbar-ui, keepalived, mariadb, openstack-cinder, openstack-dashboard, openstack-dashboard-theme-SUSE, openstack-heat, openstack-heat-templates, openstack-horizon-plugin-designate-ui, openstack-horizon-plugin-neutron-lbaas-ui, openstack-ironic, openstack-keystone, openstack-monasca-agent, openstack-neutron, openstack-neutron-gbp, openstack-neutron-vsphere, openstack-nova, openstack-octavia, openstack-octavia-amphora-image, openstack-resource-agents, openstack-sahara, openstack-trove, python-cinderlm, python-congressclient, python-designateclient, python-ironic-lib, python-networking-cisco, python-osc-lib, python-oslo.context, python-oslo.rootwrap, python-oslo.serialization, python-oslo.service, python-stevedore, python-taskflow, rubygem-crowbar-client, rubygem-pumavenv-openstack-swift
Description of the patch
This update for ardana-cinder, ardana-cobbler, ardana-designate, ardana-extensions-example, ardana-extensions-nsx, ardana-glance, ardana-heat, ardana-input-model, ardana-ironic, ardana-keystone, ardana-logging, ardana-monasca, ardana-monasca-transform, ardana-mq, ardana-neutron, ardana-nova, ardana-octavia, ardana-osconfig, ardana-tempest, crowbar-core, crowbar-ha, crowbar-openstack, crowbar-ui, keepalived, mariadb, openstack-cinder, openstack-dashboard, openstack-dashboard-theme-SUSE, openstack-heat, openstack-heat-templates, openstack-horizon-plugin-designate-ui, openstack-horizon-plugin-neutron-lbaas-ui, openstack-ironic, openstack-keystone, openstack-monasca-agent, openstack-neutron, openstack-neutron-gbp, openstack-neutron-vsphere, openstack-nova, openstack-octavia, openstack-octavia-amphora-image, openstack-resource-agents, openstack-sahara, openstack-trove, python-cinderlm, python-congressclient, python-designateclient, python-ironic-lib, python-networking-cisco, python-osc-lib, python-oslo.context, python-oslo.rootwrap, python-oslo.serialization, python-oslo.service, python-stevedore, python-taskflow, rubygem-crowbar-client, rubygem-puma, venv-openstack-swift fixes the following issues:
Security issues fixed:
The update of rubygem-crowbar-client, rubygem-puma fixes the following security issues:
- CVE-2018-17954: Fixed an issue where crowbar was leaking the secret admin passwords to all nodes (bsc#1117080).
- CVE-2019-16770: Fixed a denial-of-service vulnerability that was exploitable by clients sending extraneous keepalive requests (bsc#1158675).
The update of mariadb to 10.2.29 fixes several security issues:
- CVE-2020-2574: Fixed a difficult to exploit vulnerability that allowed an attacker to crash the client (bsc#1162388).
- CVE-2019-18901: Fixed a difficult to exploit vulnerability that allowed an attacker to crash the client (bsc#1162388).
- CVE-2017-1002201: Fixed an issue where special characters did not escpae properly (bsc#1155089)
- CVE-2019-2737, CVE-2019-2739, CVE-2019-2740, CVE-2019-2758, CVE-2019-2805, CVE-2019-2938, CVE-2019-2974: Fixed an issue where could lead a remote attacker to cause denial of service (bsc#1156669)
Non-security issues fixed:
Changes in ardana-cinder:
- Update to version 8.0+git.1579279939.ee7da88:
* Add option to flatten snapshots when using SES (SOC-11054)
- Update to version 8.0+git.1571846011.1a2f62b:
* SCRD-4764 move v2.0 endpoints to v3 (SOC-9753)
Changes in ardana-cobbler:
- Update to version 8.0+git.1575037115.0326803:
* Set root device on SLES autoyast templates (SOC-7365)
Changes in ardana-designate:
- Update to version 8.0+git.1573597788.15b7984:
* Update gerrit location (SOC-9140)
Changes in ardana-extensions-example:
- Switch to new Gerrit Server
- Update to version 8.0+git.1534266307.db1ec28:
* SCPL-409 Fix .gitreview for stable/pike
Changes in ardana-extensions-nsx:
- Update to version 8.0+git.1567529036.a41a037:
* Update policy json templates for vmware-nsx (SOC-10254)
- Switch to new Gerrit Server
Changes in ardana-glance:
- Update to version 8.0+git.1571846045.ab9e3ea:
* SCRD-4764 move v2.0 endpoints to v3 (SOC-9753)
Changes in ardana-heat:
- Update to version 8.0+git.1571777596.14dce6a:
* SCRD-4764 remove V2.0 auth end points (SOC-9753)
Changes in ardana-input-model:
- Update to version 8.0+git.1582147997.b9ed134:
* Enable port security extension neutron (SOC-11027)
- Update to version 8.0+git.1573658751.38e822a:
* Move manila share to controller (SOC-10938)
Changes in ardana-ironic:
- Update to version 8.0+git.1571845225.006843d:
* SCRD-4764 remove V2.0 auth end points (SOC-9753)
Changes in ardana-keystone:
- Update to version 8.0+git.1573147067.09e3ea0:
* enable debug and insecure_debug on demand (SOC-10934)
Changes in ardana-logging:
- Update to version 8.0+git.1572452293.e65d714:
* use correct Keystone v3 params bsc#1117840 (SOC-9753)
Changes in ardana-monasca:
- Update to version 8.0+git.1572527728.9b34bdf:
* use correct Keystone v3 params bsc#1117840 (SOC-9753)
* SCRD-4764 remove V2.0 auth end points (SOC-9753)
Changes in ardana-monasca-transform:
- Update to version 8.0+git.1571845965.97714fb:
* SCRD-4764 remove V2.0 auth end points (SOC-9753)
Changes in ardana-mq:
- Update to version 8.0+git.1581024906.fbf0be3:
* Ensure HA queue sync wait fails (SOC-11083)
* Fix HA policy setting comments (SOC-10317, SOC-11082)
- Update to version 8.0+git.1580853688.4e72fc1:
* Set HA policy accordingly (SOC-10317, SOC-11082)
- Update to version 8.0+git.1579014733.a855e3a:
* Change the HA policy mirror (SOC-10317)
Changes in ardana-neutron:
- Update to version 8.0+git.1573050365.ff6fa06:
* Kill dhclient before restarting neutron-openvswitch-agent (SOC-9230)
- Update to version 8.0+git.1571846086.19cb7eb:
* SCRD-4764 move v2.0 endpoints to v3 (SOC-9753)
Changes in ardana-nova:
- Update to version 8.0+git.1571846125.584d988:
* SCRD-4764 remove V2.0 auth end points (SOC-9753)
Changes in ardana-octavia:
- Update to version 8.0+git.1575642049.1f321d0:
* Change event_streamer_driver to noop (bsc#1154235)
Changes in ardana-osconfig:
- Update to version 8.0+git.1581015942.2d21e63:
* Adjust 'fs.inotify.max_user_instances' to align with crowbar (bsc#1161351)
- Update to version 8.0+git.1580469528.0ac2a8b:
* Start OVS services before wicked service at boot (SOC-11067)
Changes in ardana-tempest:
- Update to version 8.0+git.1579261264.7dd213a:
* Create network resources needed by some heat tests (SOC-7028)
- Update to version 8.0+git.1573571182.8fa9823:
* Restrore designate test (SOC-9753)
- Update to version 8.0+git.1571846164.6279bc0:
* SCRD-4764 remove V2.0 auth end points (SOC-9753)
Changes in crowbar-core:
- Update to version 5.0+git.1582968668.1a55c77c5:
* Ignore CVE-2020-7595 in CI (bsc#1161517)
- Update to version 5.0+git.1582543433.f71d39544:
* Fix deployment queue display (SOC-10741)
- Update to version 5.0+git.1580209640.80f2ba3d9:
* network: start OVS before wickedd (SOC-11067)
- Update to version 5.0+git.1579705862.220974047:
* dns: add checks to designate migration (SOC-11047)
- Update to version 5.0+git.1579271614.eac1c490c:
* upgrade: Add the upgrade menu entry (SOC-11053)
* upgrade: Fix upgrade link (SOC-11053)
- Update to version 5.0+git.1578989446.a2d23b7e1:
* Do not log an error for a case that is correct (trivial)
- Update to version 5.0+git.1578472131.b88a31055:
* apache2: Restart after enabling SSL flag (SOC-11029)
- Update to version 5.0+git.1578295229.96952deab:
* Avoid nil crash when provisioner attributes are not set (bsc#1160048)
- Update to version 5.0+git.1578063264.d0223905b:
* Ignore CVE-2019-16770 (SOC-10999)
- Update to version 5.0+git.1576053049.a2f4c9820:
* upgrade: Remove DRBD specific code from the preparation parts (SOC-10985)
- Update to version 5.0+git.1575020613.fc167f4dc:
* List XEN nodes when failing precheck (trivial)
- Update to version 5.0+git.1574763025.0a6957f37:
* Disable installation repository (bsc#1152007)
* Disable automatic repo services (bsc#1152007)
* Designate: Don't add the admin node to the public network (SOC-10658)
- Update to version 5.0+git.1574715523.ee8e58f4b:
* upgrade: Check the result after commiting proposal (noref)
* upgrade: Do not try to disable services that might not exist (noref)
- Update to version 5.0+git.1574667034.76644f658:
* [upgrade] Remove existing upgrade directories from nodes (SOC-10956)
- Update to version 5.0+git.1574348992.88de970a6:
* [upgrade] Wait for keystone to be ready after start (bsc#1157206)
- Update to version 5.0+git.1574270784.294f0e830:
* upgrade: Ignore Cloud repository during repocheck (bsc#1152007)
- Update to version 5.0+git.1574165163.52870c62e:
* [upgrade] Call finalize_nodes_upgrade at the very end (bsc#1155942)
- Update to version 5.0+git.1574103089.1fbb5a51d:
* Ignore CVE-2019-13117 in CI builds (bsc#1157028)
* upgrade: Make the time before next upgrade configurable (SOC-10955)
* upgrade: Make sure cinder-volume is really stopped (bsc#1156305)
- Update to version 5.0+git.1573110008.449237f0d:
* Allow pacemaker remotes for upgrade (SOC-10133)
* upgrade: Precheck for unsaved proposals (SOC-10912)
- Update to version 5.0+git.1572880575.4a6efa3a1:
* upgrade: Add a precheck for XEN compute nodes presence (SOC-10495)
* upgrade: Reload repo config in repochecks (SOC-10718)
- Update to version 5.0+git.1572097431.519baa552:
* Ignore CVE-2017-1002201 in CI builds (bsc#1155089)
- Update to version 5.0+git.1571210032.8648ab99c:
* Revert 'Use block-migration when needed' (SOC-10133)
Changes in crowbar-ha:
- Update to version 5.0+git.1574286229.e0364c3:
* Drop g-haproxy location before group deletion (bsc#1156914)
Changes in crowbar-openstack:
- Update to version 5.0+git.1582911795.5081ef1da:
* designate: Mark as user managed (SOC-10233)
* Designate: make sure dns-server is active on a non-admin node (SOC-10636)
- Update to version 5.0+git.1580549331.ba1e1a0a3:
* [5.0] ec2-api: run keystone_register on cluster founder only (SOC-11079)
- Update to version 5.0+git.1579182968.f54cfa8f5:
* tempest: tempest run filters as templates (SOC-11052)
- Update to version 5.0+git.1578515319.fdab3a0b2:
* Install openstack client for neutron recipes (SOC-11039)
- Update to version 5.0+git.1576764142.8efe58655:
* Do not read data from barclamp that has not been saved (SOC-11028)
- Update to version 5.0+git.1576666547.b7a0b8814:
* Revert 'Octavia: Hide UI until complete (SOC-10550)'
- Update to version 5.0+git.1576250115.67b80cbca:
* [5.0] tempest: Update default image on schema (SOC-11023)
- Update to version 5.0+git.1576078873.ecc798ffe:
* neutron: Revert remove .openrc creation from neutron cookbooks (SOC-10378)
* keystone: Add OS_INTERFACE env var to .openrc (SOC-11006)
- Update to version 5.0+git.1574927541.694ac3863:
* designate: move keystone resource lookup to convergence (SOC-10887)
- Update to version 5.0+git.1574769056.07a7c373e:
* designate: declare all mdns servers as master on pool config (SOC-10952)
* designate: add support for SSL (SOC-10877)
* designate: change default configuration (SOC-10899)
- Update to version 5.0+git.1574421761.ace345683:
* Add tempest filter for designate (SOC-10288)
- Update to version 5.0+git.1574359417.113b616b2:
* horizon: install lbaas horizon dashboard (SOC-10883)
- Update to version 5.0+git.1572937880.ffb86e88b:
* Make sure the input file with ssh key exists (SOC-10133)
- Update to version 5.0+git.1571764038.ad48726d6:
* mysql: fix WSREP sync race (SOC-10717)
* mysql: stop service for mysql_install_db (SOC-10717)
* Do not use obsoleted --endpoint-type option with CLI
- Update to version 5.0+git.1571323259.7402ef5eb:
* [5.0] Tempest: blacklist test_volume_boot_pattern (SOC-10874)
- Update to version 5.0+git.1571241534.f4af21325:
* rabbitmq: fix migration 200 (SOC-10623)
* Fix Cloud 8 no-op migrations (SOC-10623)
* neutron-lbaas: remove loadbalancer/pool limit
* [5.0] Configurable timeout for Galera pre-sync
- Update to version 5.0+git.1571138324.edb9e8b56:
* horizon: tighten check for existence of monasca while deploying grafana
* monasca: improve detection if monasca-server is available
* monasca: install agent before run setup monitors in server
* Monasca: Handle node reinstall (jsc#SOC-10440, bsc#1148158 )
- Update to version 5.0+git.1570618886.06022a6ef:
* glance: Set barbican auth endpoint (bsc#1123191, SOC-10844)
* tempest: Add barbican run_filters from ardana (SOC-10844)
* Fix nova tempest tests (SOC-9298, SOC-10844)
- Update to version 5.0+git.1570505588.4bdc5aa6f:
* No rndc key if no public DNS server (SOC-10835)
Changes in crowbar-ui:
- Update to version 1.2.0+git.1575896697.a01a3a08:
* upgrade: Added missing error title
* travis: Stop testing against nodejs4
- Update to version 1.2.0+git.1572871359.50fc6087:
* Add title for XEN compute nodes precheck (SOC-10495)
Changes in keepalived:
- update to 2.0.19
- new BR pkgconfig(libnftnl) to fix nftables support
- add nftables to the BR
- added patch
* linux-4.15.patch
- add buildrequires for file-devel
- used in the checker to verify scripts
- enable json stats and config dump support
new BR: pkgconfig(json-c)
- enable http regexp support: new BR pcre2-devel
- disable dbus instance creation support as it is marked as
dangerous
- Add BFD build option to keepalived.spec rpm file
Issue #1114 identified that the keepalived.spec file was not being
generated to build BFD support even if keepalived had been
configured to support it.
- full changelog
https://keepalived.org/changelog.html
Changes in mariadb:
- update to 10.2.31 GA [bsc#1162388]
* Fixes for the following security vulnerabilities:
* 10.2.31: CVE-2020-2574
* 10.2.30: none
* release notes and changelog:
https://mariadb.com/kb/en/library/mariadb-10231-release-notes
https://mariadb.com/kb/en/library/mariadb-10231-changelog
https://mariadb.com/kb/en/library/mariadb-10230-release-notes
https://mariadb.com/kb/en/library/mariadb-10230-changelog
- refresh mariadb-10.1.12-deharcode-libdir.patch
- remove mariadb-10.2.29-bufferoverflowstrncat.patch (upstreamed)
- pack pam_user_map.so module in the /%{_lib}/security directory
and user_map.conf configuration file in the /etc/security directory
- fix race condition with mysql_upgrade_info status file by moving
it to the location owned by root (/var/lib/misc) CVE-2019-18901
[bsc#1160895]
- move .run-mysql_upgrade file from $datadir/.run-mysql_upgrade
to /var/lib/misc/.mariadb_run_upgrade so the mysql user can't
use it for a symlink attack [bsc#1160912]
- on BTRFS systems /var/lib/mysql is created as a subvolume with
755 permissions during the system installaion. Fix it to 700 as
mysql_install_db doesn't do it [bsc#1077717]
- add important options to mariadb.service and mariadb@.service
(ProtectSystem, ProtectHome and UMask) [bsc#1160878]
- mysql-systemd-helper: use systemd-tmpfiles instead of shell
script operations for a cleaner and safer creating of /run/mysql
[bsc#1160883]
- update to 10.2.29 GA
* Fixes for the following security vulnerabilities:
* 10.2.29: none
* 10.2.28: CVE-2019-2974, CVE-2019-2938
* 10.2.27: none
* 10.2.26: CVE-2019-2805, CVE-2019-2740, CVE-2019-2739,
CVE-2019-2737, CVE-2019-2758
* release notes and changelog:
https://mariadb.com/kb/en/library/mariadb-10229-release-notes
https://mariadb.com/kb/en/library/mariadb-10229-changelog
https://mariadb.com/kb/en/library/mariadb-10228-release-notes
https://mariadb.com/kb/en/library/mariadb-10228-changelog
https://mariadb.com/kb/en/library/mariadb-10227-release-notes
https://mariadb.com/kb/en/library/mariadb-10227-changelog
https://mariadb.com/kb/en/library/mariadb-10226-release-notes
https://mariadb.com/kb/en/library/mariadb-10226-changelog
- refresh
mariadb-10.0.15-logrotate-su.patch
mariadb-10.2.4-logrotate.patch
- add mariadb-10.2.29-bufferoverflowstrncat.patch to fix 'Statement
might be overflowing a buffer in strncat' error
- tracker bug [bsc#1156669]
- add main.gis_notembedded to the skipped tests (fails when latin1
is not set)
Changes in openstack-cinder:
- Update to version cinder-11.2.3.dev23:
* Fix handling of 'cinder\_encryption\_key\_id' image metadata
- Update to version cinder-11.2.3.dev21:
* Add retry to LVM deactivation
- Update to version cinder-11.2.3.dev19:
* Fix ceph: only close rbd image after snapshot iteration is finished
- Update to version cinder-11.2.3.dev17:
* Exclude disabled API versions from listing
Changes in openstack-cinder:
- Update to version cinder-11.2.3.dev23:
* Fix handling of 'cinder\_encryption\_key\_id' image metadata
- Update to version cinder-11.2.3.dev21:
* Add retry to LVM deactivation
- Update to version cinder-11.2.3.dev19:
* Fix ceph: only close rbd image after snapshot iteration is finished
- Update to version cinder-11.2.3.dev17:
* Exclude disabled API versions from listing
Changes in openstack-dashboard:
- Update to version horizon-12.0.5.dev2:
* Use python 2.7 as the default interpreter in tox
* OpenDev Migration Patch
12.0.4
Changes in openstack-dashboard-theme-SUSE:
- Update to version 2017.2+git.1573629528.6b21fa5:
* SCRD-7984 fixed help links
Changes in openstack-heat:
- Update to version heat-9.0.8.dev22:
* Do deepcopy when copying templates
- Update to version heat-9.0.8.dev21:
* Set stack.thread\_group\_mgr for cancel\_update
* Eliminate client race condition in convergence delete
* Delete snapshots using contemporary resources
- Update to version heat-9.0.8.dev15:
* Unskip StackSnapshotRestoreTest
- Update to version heat-9.0.8.dev14:
* Fix translate tenants in flavor
Changes in openstack-heat:
- Update to version heat-9.0.8.dev22:
* Do deepcopy when copying templates
- Update to version heat-9.0.8.dev21:
* Set stack.thread\_group\_mgr for cancel\_update
* Eliminate client race condition in convergence delete
* Delete snapshots using contemporary resources
- Update to version heat-9.0.8.dev15:
* Unskip StackSnapshotRestoreTest
- Update to version heat-9.0.8.dev14:
* Fix translate tenants in flavor
Changes in openstack-heat-templates:
- Update to version 0.0.0+git.1560033670.e3b5a52:
* Add example for running Zun container
* OpenDev Migration Patch
* Replace openstack.org git:// URLs with https://
* Remove docs, deprecated hooks, tests
* Update the bugs link to storyboard
* Use octavia resources for autoscaling example
* Fix the incorrect cirros default password
Changes in openstack-horizon-plugin-designate-ui:
- Update to version designate-dashboard-5.0.3.dev2:
* Fix list zones updated at same time
* OpenDev Migration Patch
5.0.2
Changes in openstack-horizon-plugin-neutron-lbaas-ui:
- Add _1481_project_ng_loadbalancersv2_panel.pyc file to package (SOC-10883)
The .pyc file needs to be removed when the package is uninstalled,
otherwise the panel will remain enabled in the dashboard and cause
errors.
Changes in openstack-ironic:
- Update to version ironic-9.1.8.dev8:
* Place upper bound on python-dracclient version
Changes in openstack-ironic:
- Update to version ironic-9.1.8.dev8:
* Place upper bound on python-dracclient version
Changes in openstack-keystone:
- Update to version keystone-12.0.4.dev5:
* Import LDAP job into project
Changes in openstack-keystone:
- Update to version keystone-12.0.4.dev5:
* Import LDAP job into project
Changes in openstack-monasca-agent:
- Added dependency:
* fdupes
* pwdutils and shadow-utils for useradd/groupadd
- added 0001-add-X.509-certificate-check-plugin.patch
Changes in openstack-neutron:
- Update to version neutron-11.0.9.dev60:
* Set DB retry for quota\_enforcement pecan\_wsgi hook
- Update to version neutron-11.0.9.dev58:
* don't clear skb mark when ovs is hw-offload enabled
- Update to version neutron-11.0.9.dev57:
* doc: add known limitation about attaching SR-IOV ports
- Update to version neutron-11.0.9.dev56:
* raise priority of dead vlan drop
- Update to version neutron-11.0.9.dev54:
* [Unit tests] Skip TestWSGIServer with IPv6 if no IPv6 enabled
- Update to version neutron-11.0.9.dev52:
* Initialize phys bridges before setup\_rpc
Changes in openstack-neutron:
- Update neutron-ha-tool to latest version:
* Add DHCP agent evacuation (SOC-11046)
- Update to version neutron-11.0.9.dev60:
* Set DB retry for quota\_enforcement pecan\_wsgi hook
- Update to version neutron-11.0.9.dev58:
* don't clear skb mark when ovs is hw-offload enabled
- neutron: Remove stop action from ovs-cleanup (bsc#1157482)
backport of https://review.opendev.org/#/c/695867/
- Update to version neutron-11.0.9.dev57:
* doc: add known limitation about attaching SR-IOV ports
- Update to version neutron-11.0.9.dev56:
* raise priority of dead vlan drop
- Update to version neutron-11.0.9.dev54:
* [Unit tests] Skip TestWSGIServer with IPv6 if no IPv6 enabled
- Update to version neutron-11.0.9.dev52:
* Initialize phys bridges before setup\_rpc
Changes in openstack-neutron-gbp:
- Update to version group-based-policy-7.3.1.dev72:
* Refactor static path code
- Update to version group-based-policy-7.3.1.dev71:
* Support named ip protocols for SecurityGroupRules
- Update to version group-based-policy-7.3.1.dev70:
* Allow both FIP and SNAT on a single port
- Update to version group-based-policy-7.3.1.dev69:
* Fix active-active AAP RPC query
- Update to version group-based-policy-7.3.1.dev67:
* [AIM] Add extra provided/consumed contracts to network extension
- Update to version group-based-policy-7.3.1.dev66:
* Active active AAP feature
- Update to version group-based-policy-7.3.1.dev64:
* Support cache option for legacy GBP driver
- Update to version group-based-policy-7.3.1.dev63:
* Fix host ID length in VM names table
- Update to version group-based-policy-7.3.1.dev62:
* Update\_proj\_descr in apic when project description is updated in os
- Update to version group-based-policy-7.3.1.dev61:
* Send port notifications when host\_route is getting updated
* Provide a control knob to use the internal EP interface
- Update to version group-based-policy-7.3.1.dev57:
* Fix pep8 failures seen on submitted patches
Changes in openstack-neutron-vsphere:
- Update to version networking-vsphere-2.0.1.dev133:
* Update to use Agent model from neutron.db.models
* Fix neutron-dvs-agent startup errors
* OpenDev Migration Patch
- Remove 0001-fix-dvs-agent-config.patch as changes
had been backported to stable/pike
- See https://review.opendev.org/#/c/682482
Changes in openstack-nova:
- Update to version nova-16.1.9.dev49:
* Use stable constraint for Tempest pinned stable branches
- Update to version nova-16.1.9.dev48:
* Avoid redundant initialize\_connection on source post live migration
* Error out interrupted builds
* Skip checking of target\_dev for vhostuser
* Functional reproduce for bug 1833581
* Prevent init\_host test to interfere with other tests
* Add functional test for resize crash compute restart revert
* Move restart\_compute\_service to a common place
* lxc: make use of filter python3 compatible
* cleanup evacuated instances not on hypervisor
* Delete resource providers for all nodes when deleting compute service
- Update to version nova-16.1.9.dev30:
* Explicitly fail if trying to attach SR-IOV port
* Stabilize unshelve notification sample tests
- Update to version nova-16.1.9.dev26:
* Fix listing deleted servers with a marker
* Add functional regression test for bug 1849409
- Update to version nova-16.1.9.dev22:
* Hook resource\_tracker to remove stale node information
- Update to version nova-16.1.9.dev20:
* Workaround missing RequestSpec.instance\_group.uuid
* Add regression recreate test for bug 1830747
- Update to version nova-16.1.9.dev16:
* Changing scheduler sync event from INFO to DEBUG
- Update to version nova-16.1.9.dev14:
* Only nil az during shelve offload
* Delete instance\_id\_mappings record in instance\_destroy
- Update to version nova-16.1.9.dev11:
* Revert 'openstack server create' to 'nova boot' in nova docs
* doc: fix and clarify --block-device usage in user docs
- Update to version nova-16.1.9.dev8:
* Functional reproduce for bug 1852207
Changes in openstack-nova:
- Update to version nova-16.1.9.dev49:
* Use stable constraint for Tempest pinned stable branches
- Update to version nova-16.1.9.dev48:
* Avoid redundant initialize\_connection on source post live migration
* Error out interrupted builds
* Skip checking of target\_dev for vhostuser
* Functional reproduce for bug 1833581
* Prevent init\_host test to interfere with other tests
* Add functional test for resize crash compute restart revert
* Move restart\_compute\_service to a common place
* lxc: make use of filter python3 compatible
* cleanup evacuated instances not on hypervisor
* Delete resource providers for all nodes when deleting compute service
- Update to version nova-16.1.9.dev30:
* Explicitly fail if trying to attach SR-IOV port
* Stabilize unshelve notification sample tests
- Update to version nova-16.1.9.dev26:
* Fix listing deleted servers with a marker
* Add functional regression test for bug 1849409
- Update to version nova-16.1.9.dev22:
* Hook resource\_tracker to remove stale node information
- Update to version nova-16.1.9.dev20:
* Workaround missing RequestSpec.instance\_group.uuid
* Add regression recreate test for bug 1830747
- Update to version nova-16.1.9.dev16:
* Changing scheduler sync event from INFO to DEBUG
- Update to version nova-16.1.9.dev14:
* Only nil az during shelve offload
* Delete instance\_id\_mappings record in instance\_destroy
- Update to version nova-16.1.9.dev11:
* Revert 'openstack server create' to 'nova boot' in nova docs
* doc: fix and clarify --block-device usage in user docs
- Update to version nova-16.1.9.dev8:
* Functional reproduce for bug 1852207
Changes in openstack-octavia:
- Update to version octavia-1.0.6.dev3:
* Fix urgent amphora two-way auth security bug
Changes in openstack-octavia-amphora-image:
- Update image to 0.1.2 to include udated keepalived 2.0.19
- Update image to 0.1.1 to include latest changes
- Add keepalived service
Changes in openstack-resource-agents:
- Update to version 1.0+git.1569436425.8b9c49f:
* Add a configurable delay to Nova Evacuate calls
* OpenDev Migration Patch
* NovaEvacuate: fix a syntax error
* NovaEvacuate: Support the new split-out IHA fence agents with backwards compatibility
* NovaEvacuate: Correctly handle stopped hypervisors
* neutron-ha-tool: do not replicate dhcp
* NovaCompute: Support parsing host option from /etc/nova/nova.conf.d
* NovaCompute: Use variable to avoid calling crudini a second time
* NovaEvacuate: Allow debug logging to be turned on easily
Changes in openstack-sahara:
- Update to version sahara-7.0.5.dev4:
* Run sahara-scenario using Python 3
* Enforce python 2 for documentation build
* Fix requirements(bandit)
* OpenDev Migration Patch
7.0.4
Changes in openstack-sahara:
- Update to version sahara-7.0.5.dev4:
* Run sahara-scenario using Python 3
* Enforce python 2 for documentation build
* Fix requirements (bandit)
* OpenDev Migration Patch
7.0.4
Changes in openstack-trove:
- Update to version trove-8.0.2.dev2:
* Add local bindep.txt
* OpenDev Migration Patch
8.0.1
Changes in openstack-trove:
- Update to version trove-8.0.2.dev2:
* Add local bindep.txt
* OpenDev Migration Patch
8.0.1
Changes in python-cinderlm:
- Update to version 0.0.2+git.1571845893.27f0b7b:
* SCRD-4764 remove V2.0 auth end points (SOC-9753)
Changes in python-congressclient:
- update to version 1.8.1
- Update .gitreview for stable/pike
- Update UPPER_CONSTRAINTS_FILE for stable/pike
- import zuul job settings from project-config
- Updated from global requirements
Changes in python-designateclient:
- update to version 2.7.1
- Update .gitreview for stable/pike
- Updated from global requirements
- import zuul job settings from project-config
- Update UPPER_CONSTRAINTS_FILE for stable/pike
- server-get/update show wrong values about 'id' and 'update_at'
Changes in python-ironic-lib:
- update to version 2.10.2
- Replace openstack.org git:// URLs with https://
- Make search for config drive partition case insensitive
- Revert 'Use dd conv=sparse when writing images to nodes'
- Check GPT table with sgdisk insread of partprobe
- Avoid tox_install.sh for constraints support
- Fix GPT bug with whole disk images
- import zuul job settings from project-config
Changes in python-networking-cisco:
- Update to version networking-cisco-6.1.1.dev65:
* Nexus: Add CA Bundle path to https doc
* Improve Nexus Ironic related doc and logs
* Upgrade release notes to include Tripleo/puppet
* Fix socket not closed errors in unit test logs
* Add release note about adding support for Rocky OpenStack
* Update publish-openstack-python-branch-tarball job
* Remove MultiConfigParser from SAF application
* More fixes for networking\_cisco rocky support
* Remove MultiConfigParser from the device manger config loader
* Ensure CFG agent is started after neutron config is written
* Removed older version of python added 3.5
* Begin process of supporting neutron Rocky
* Typo in tar command in doc install guide
* Add cisco providernet extension to Nexus doc
* Add missing policy to fix stable/queens unit tests
* Pin stestr version (1.1.0) for Mitaka
* Fix places in ucsm network driver using .ucsm instead of .ucsms
* Fix doc build under python3
* Fix mitaka bug with NeutronWorker missing parameter
* Eliminate 30 sec delay for Nexus replay thread
* Fix foreign key constraint violation while creating primary key with subnet\_id
* Put upper constraint on ncclient version to prevent breakages
* Improvements to the networking-cisco zuul jobs
* Remove deprecated host/interface map config
* Include device manager configuration file when starting config agent
* Fix pep8 and other tox environments locally
* Add rocky to CI
* Add bandit to tox and resolve Nexus SA errors
* Deprecate old ML2 Nexus/UCSM documentation file
* Secure Nexus https certificates by default
- Add tempest_plugin subpackage
Changes in python-osc-lib:
- update to version 1.7.1
- import zuul job settings from project-config
- Update UPPER_CONSTRAINTS_FILE for stable/pike
- Updated from global requirements
- Update .gitreview for stable/pike
- Avoid tox_install.sh for constraints support
Changes iython-oslo.context:
- update to version 2.17.2
- Fix sphinx-docs job for stable branch
- import zuul job settings from project-config
Changes in python-oslo.rootwrap:
- update to version 5.9.3
- Avoid tox_install.sh for constraints support
- Follow the new PTI for document build
- import zuul job settings from project-config
Changes in python-oslo.serialization:
- update to version 2.20.3
- import zuul job settings from project-config
- Fix sphinx-docs job for stable branch
Changes in python-oslo.service:
- update to version 1.25.2
- import zuul job settings from project-config
- Fix sphinx-docs job for stable branch
Changes in python-stevedore:
- update to version 1.25.2
- move doc requirements to doc/requirements.txt
- Use stable branch for upper-constraints
- remove duplicate sphinx dependency
- Avoid tox_install.sh for constraints support
- import zuul job settings from project-config
Changes in python-taskflow:
- update to version 2.14.2
- don't let tox_install.sh error if there is nothing to do
- import zuul job settings from project-config
- Updated from global requirements
- Use doc/requirements.txt
Changes in rubygem-crowbar-client:
- Update to 3.9.1
- Fix repocheck table output (SOC-10718)
- Enable restricted commands for Cloud8 (bsc#1117080, CVE-2018-17954)
Changes in rubygem-puma:
- Add CVE-2019-16770.patch (bsc#1158675, SOC-10999, CVE-2019-16770)
This patch fixes a DoS vulnerability a malicious client could use to
block a large amount of threads.
Changes in venv-openstack-swift:
- Fix lower version numver after inheriting the version from main
component (SCRD-8523)
- Revert: 'Inherit version number of venv from main component
(SCRD-8523)' as zypper reports the new version number as older
than what is released
- Inherit version number of venv from main component (SCRD-8523)
Patchnames
HPE-Helion-OpenStack-8-2020-640,SUSE-2020-640,SUSE-OpenStack-Cloud-8-2020-640,SUSE-OpenStack-Cloud-Crowbar-8-2020-640
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for ardana-cinder, ardana-cobbler, ardana-designate, ardana-extensions-example, ardana-extensions-nsx, ardana-glance, ardana-heat, ardana-input-model, ardana-ironic, ardana-keystone, ardana-logging, ardana-monasca, ardana-monasca-transform, ardana-mq, ardana-neutron, ardana-nova, ardana-octavia, ardana-osconfig, ardana-tempest, crowbar-core, crowbar-ha, crowbar-openstack, crowbar-ui, keepalived, mariadb, openstack-cinder, openstack-dashboard, openstack-dashboard-theme-SUSE, openstack-heat, openstack-heat-templates, openstack-horizon-plugin-designate-ui, openstack-horizon-plugin-neutron-lbaas-ui, openstack-ironic, openstack-keystone, openstack-monasca-agent, openstack-neutron, openstack-neutron-gbp, openstack-neutron-vsphere, openstack-nova, openstack-octavia, openstack-octavia-amphora-image, openstack-resource-agents, openstack-sahara, openstack-trove, python-cinderlm, python-congressclient, python-designateclient, python-ironic-lib, python-networking-cisco, python-osc-lib, python-oslo.context, python-oslo.rootwrap, python-oslo.serialization, python-oslo.service, python-stevedore, python-taskflow, rubygem-crowbar-client, rubygem-pumavenv-openstack-swift",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for ardana-cinder, ardana-cobbler, ardana-designate, ardana-extensions-example, ardana-extensions-nsx, ardana-glance, ardana-heat, ardana-input-model, ardana-ironic, ardana-keystone, ardana-logging, ardana-monasca, ardana-monasca-transform, ardana-mq, ardana-neutron, ardana-nova, ardana-octavia, ardana-osconfig, ardana-tempest, crowbar-core, crowbar-ha, crowbar-openstack, crowbar-ui, keepalived, mariadb, openstack-cinder, openstack-dashboard, openstack-dashboard-theme-SUSE, openstack-heat, openstack-heat-templates, openstack-horizon-plugin-designate-ui, openstack-horizon-plugin-neutron-lbaas-ui, openstack-ironic, openstack-keystone, openstack-monasca-agent, openstack-neutron, openstack-neutron-gbp, openstack-neutron-vsphere, openstack-nova, openstack-octavia, openstack-octavia-amphora-image, openstack-resource-agents, openstack-sahara, openstack-trove, python-cinderlm, python-congressclient, python-designateclient, python-ironic-lib, python-networking-cisco, python-osc-lib, python-oslo.context, python-oslo.rootwrap, python-oslo.serialization, python-oslo.service, python-stevedore, python-taskflow, rubygem-crowbar-client, rubygem-puma, venv-openstack-swift fixes the following issues:\nSecurity issues fixed:\n\nThe update of rubygem-crowbar-client, rubygem-puma fixes the following security issues:\n- CVE-2018-17954: Fixed an issue where crowbar was leaking the secret admin passwords to all nodes (bsc#1117080).\n- CVE-2019-16770: Fixed a denial-of-service vulnerability that was exploitable by clients sending extraneous keepalive requests (bsc#1158675).\n\nThe update of mariadb to 10.2.29 fixes several security issues:\n- CVE-2020-2574: Fixed a difficult to exploit vulnerability that allowed an attacker to crash the client (bsc#1162388).\n- CVE-2019-18901: Fixed a difficult to exploit vulnerability that allowed an attacker to crash the client (bsc#1162388).\n- CVE-2017-1002201: Fixed an issue where special characters did not escpae properly (bsc#1155089)\n- CVE-2019-2737, CVE-2019-2739, CVE-2019-2740, CVE-2019-2758, CVE-2019-2805, CVE-2019-2938, CVE-2019-2974: Fixed an issue where could lead a remote attacker to cause denial of service (bsc#1156669)\n\nNon-security issues fixed:\n\nChanges in ardana-cinder:\n- Update to version 8.0+git.1579279939.ee7da88:\n * Add option to flatten snapshots when using SES (SOC-11054)\n\n- Update to version 8.0+git.1571846011.1a2f62b:\n * SCRD-4764 move v2.0 endpoints to v3 (SOC-9753)\n\nChanges in ardana-cobbler:\n- Update to version 8.0+git.1575037115.0326803:\n * Set root device on SLES autoyast templates (SOC-7365)\n\nChanges in ardana-designate:\n- Update to version 8.0+git.1573597788.15b7984:\n * Update gerrit location (SOC-9140)\n\nChanges in ardana-extensions-example:\n- Switch to new Gerrit Server\n\n- Update to version 8.0+git.1534266307.db1ec28:\n * SCPL-409 Fix .gitreview for stable/pike\n\nChanges in ardana-extensions-nsx:\n- Update to version 8.0+git.1567529036.a41a037:\n * Update policy json templates for vmware-nsx (SOC-10254)\n\n- Switch to new Gerrit Server\n\nChanges in ardana-glance:\n- Update to version 8.0+git.1571846045.ab9e3ea:\n * SCRD-4764 move v2.0 endpoints to v3 (SOC-9753)\n\nChanges in ardana-heat:\n- Update to version 8.0+git.1571777596.14dce6a:\n * SCRD-4764 remove V2.0 auth end points (SOC-9753)\n\nChanges in ardana-input-model:\n- Update to version 8.0+git.1582147997.b9ed134:\n * Enable port security extension neutron (SOC-11027)\n\n- Update to version 8.0+git.1573658751.38e822a:\n * Move manila share to controller (SOC-10938)\n\nChanges in ardana-ironic:\n- Update to version 8.0+git.1571845225.006843d:\n * SCRD-4764 remove V2.0 auth end points (SOC-9753)\n\nChanges in ardana-keystone:\n- Update to version 8.0+git.1573147067.09e3ea0:\n * enable debug and insecure_debug on demand (SOC-10934)\n\nChanges in ardana-logging:\n- Update to version 8.0+git.1572452293.e65d714:\n * use correct Keystone v3 params bsc#1117840 (SOC-9753)\n\nChanges in ardana-monasca:\n- Update to version 8.0+git.1572527728.9b34bdf:\n * use correct Keystone v3 params bsc#1117840 (SOC-9753)\n * SCRD-4764 remove V2.0 auth end points (SOC-9753)\n\nChanges in ardana-monasca-transform:\n- Update to version 8.0+git.1571845965.97714fb:\n * SCRD-4764 remove V2.0 auth end points (SOC-9753)\n\nChanges in ardana-mq:\n- Update to version 8.0+git.1581024906.fbf0be3:\n * Ensure HA queue sync wait fails (SOC-11083)\n * Fix HA policy setting comments (SOC-10317, SOC-11082)\n\n- Update to version 8.0+git.1580853688.4e72fc1:\n * Set HA policy accordingly (SOC-10317, SOC-11082)\n\n- Update to version 8.0+git.1579014733.a855e3a:\n * Change the HA policy mirror (SOC-10317)\n\nChanges in ardana-neutron:\n- Update to version 8.0+git.1573050365.ff6fa06:\n * Kill dhclient before restarting neutron-openvswitch-agent (SOC-9230)\n\n- Update to version 8.0+git.1571846086.19cb7eb:\n * SCRD-4764 move v2.0 endpoints to v3 (SOC-9753)\n\nChanges in ardana-nova:\n- Update to version 8.0+git.1571846125.584d988:\n * SCRD-4764 remove V2.0 auth end points (SOC-9753)\n\nChanges in ardana-octavia:\n- Update to version 8.0+git.1575642049.1f321d0:\n * Change event_streamer_driver to noop (bsc#1154235)\n\nChanges in ardana-osconfig:\n- Update to version 8.0+git.1581015942.2d21e63:\n * Adjust \u0027fs.inotify.max_user_instances\u0027 to align with crowbar (bsc#1161351)\n\n- Update to version 8.0+git.1580469528.0ac2a8b:\n * Start OVS services before wicked service at boot (SOC-11067)\n\nChanges in ardana-tempest:\n- Update to version 8.0+git.1579261264.7dd213a:\n * Create network resources needed by some heat tests (SOC-7028)\n\n- Update to version 8.0+git.1573571182.8fa9823:\n * Restrore designate test (SOC-9753)\n\n- Update to version 8.0+git.1571846164.6279bc0:\n * SCRD-4764 remove V2.0 auth end points (SOC-9753)\n\nChanges in crowbar-core:\n- Update to version 5.0+git.1582968668.1a55c77c5:\n * Ignore CVE-2020-7595 in CI (bsc#1161517)\n\n- Update to version 5.0+git.1582543433.f71d39544:\n * Fix deployment queue display (SOC-10741)\n\n- Update to version 5.0+git.1580209640.80f2ba3d9:\n * network: start OVS before wickedd (SOC-11067)\n\n- Update to version 5.0+git.1579705862.220974047:\n * dns: add checks to designate migration (SOC-11047)\n\n- Update to version 5.0+git.1579271614.eac1c490c:\n * upgrade: Add the upgrade menu entry (SOC-11053)\n * upgrade: Fix upgrade link (SOC-11053)\n\n- Update to version 5.0+git.1578989446.a2d23b7e1:\n * Do not log an error for a case that is correct (trivial)\n\n- Update to version 5.0+git.1578472131.b88a31055:\n * apache2: Restart after enabling SSL flag (SOC-11029)\n\n- Update to version 5.0+git.1578295229.96952deab:\n * Avoid nil crash when provisioner attributes are not set (bsc#1160048)\n\n- Update to version 5.0+git.1578063264.d0223905b:\n * Ignore CVE-2019-16770 (SOC-10999)\n\n- Update to version 5.0+git.1576053049.a2f4c9820:\n * upgrade: Remove DRBD specific code from the preparation parts (SOC-10985)\n\n- Update to version 5.0+git.1575020613.fc167f4dc:\n * List XEN nodes when failing precheck (trivial)\n\n- Update to version 5.0+git.1574763025.0a6957f37:\n * Disable installation repository (bsc#1152007)\n * Disable automatic repo services (bsc#1152007)\n * Designate: Don\u0027t add the admin node to the public network (SOC-10658)\n\n- Update to version 5.0+git.1574715523.ee8e58f4b:\n * upgrade: Check the result after commiting proposal (noref)\n * upgrade: Do not try to disable services that might not exist (noref)\n\n- Update to version 5.0+git.1574667034.76644f658:\n * [upgrade] Remove existing upgrade directories from nodes (SOC-10956)\n\n- Update to version 5.0+git.1574348992.88de970a6:\n * [upgrade] Wait for keystone to be ready after start (bsc#1157206)\n\n- Update to version 5.0+git.1574270784.294f0e830:\n * upgrade: Ignore Cloud repository during repocheck (bsc#1152007)\n\n- Update to version 5.0+git.1574165163.52870c62e:\n * [upgrade] Call finalize_nodes_upgrade at the very end (bsc#1155942)\n\n- Update to version 5.0+git.1574103089.1fbb5a51d:\n * Ignore CVE-2019-13117 in CI builds (bsc#1157028)\n * upgrade: Make the time before next upgrade configurable (SOC-10955)\n * upgrade: Make sure cinder-volume is really stopped (bsc#1156305)\n\n- Update to version 5.0+git.1573110008.449237f0d:\n * Allow pacemaker remotes for upgrade (SOC-10133)\n * upgrade: Precheck for unsaved proposals (SOC-10912)\n\n- Update to version 5.0+git.1572880575.4a6efa3a1:\n * upgrade: Add a precheck for XEN compute nodes presence (SOC-10495)\n * upgrade: Reload repo config in repochecks (SOC-10718)\n\n- Update to version 5.0+git.1572097431.519baa552:\n * Ignore CVE-2017-1002201 in CI builds (bsc#1155089)\n\n- Update to version 5.0+git.1571210032.8648ab99c:\n * Revert \u0027Use block-migration when needed\u0027 (SOC-10133)\n\nChanges in crowbar-ha:\n- Update to version 5.0+git.1574286229.e0364c3:\n * Drop g-haproxy location before group deletion (bsc#1156914)\n\nChanges in crowbar-openstack:\n- Update to version 5.0+git.1582911795.5081ef1da:\n * designate: Mark as user managed (SOC-10233)\n * Designate: make sure dns-server is active on a non-admin node (SOC-10636)\n\n- Update to version 5.0+git.1580549331.ba1e1a0a3:\n * [5.0] ec2-api: run keystone_register on cluster founder only (SOC-11079)\n\n- Update to version 5.0+git.1579182968.f54cfa8f5:\n * tempest: tempest run filters as templates (SOC-11052)\n\n- Update to version 5.0+git.1578515319.fdab3a0b2:\n * Install openstack client for neutron recipes (SOC-11039)\n\n- Update to version 5.0+git.1576764142.8efe58655:\n * Do not read data from barclamp that has not been saved (SOC-11028)\n\n- Update to version 5.0+git.1576666547.b7a0b8814:\n * Revert \u0027Octavia: Hide UI until complete (SOC-10550)\u0027\n\n- Update to version 5.0+git.1576250115.67b80cbca:\n * [5.0] tempest: Update default image on schema (SOC-11023)\n\n- Update to version 5.0+git.1576078873.ecc798ffe:\n * neutron: Revert remove .openrc creation from neutron cookbooks (SOC-10378)\n * keystone: Add OS_INTERFACE env var to .openrc (SOC-11006)\n\n- Update to version 5.0+git.1574927541.694ac3863:\n * designate: move keystone resource lookup to convergence (SOC-10887)\n\n- Update to version 5.0+git.1574769056.07a7c373e:\n * designate: declare all mdns servers as master on pool config (SOC-10952)\n * designate: add support for SSL (SOC-10877)\n * designate: change default configuration (SOC-10899)\n\n- Update to version 5.0+git.1574421761.ace345683:\n * Add tempest filter for designate (SOC-10288)\n\n- Update to version 5.0+git.1574359417.113b616b2:\n * horizon: install lbaas horizon dashboard (SOC-10883)\n\n- Update to version 5.0+git.1572937880.ffb86e88b:\n * Make sure the input file with ssh key exists (SOC-10133)\n\n- Update to version 5.0+git.1571764038.ad48726d6:\n * mysql: fix WSREP sync race (SOC-10717)\n * mysql: stop service for mysql_install_db (SOC-10717)\n * Do not use obsoleted --endpoint-type option with CLI\n\n- Update to version 5.0+git.1571323259.7402ef5eb:\n * [5.0] Tempest: blacklist test_volume_boot_pattern (SOC-10874)\n\n- Update to version 5.0+git.1571241534.f4af21325:\n * rabbitmq: fix migration 200 (SOC-10623)\n * Fix Cloud 8 no-op migrations (SOC-10623)\n * neutron-lbaas: remove loadbalancer/pool limit\n * [5.0] Configurable timeout for Galera pre-sync\n\n- Update to version 5.0+git.1571138324.edb9e8b56:\n * horizon: tighten check for existence of monasca while deploying grafana\n * monasca: improve detection if monasca-server is available\n * monasca: install agent before run setup monitors in server\n * Monasca: Handle node reinstall (jsc#SOC-10440, bsc#1148158 )\n\n- Update to version 5.0+git.1570618886.06022a6ef:\n * glance: Set barbican auth endpoint (bsc#1123191, SOC-10844)\n * tempest: Add barbican run_filters from ardana (SOC-10844)\n * Fix nova tempest tests (SOC-9298, SOC-10844)\n\n- Update to version 5.0+git.1570505588.4bdc5aa6f:\n * No rndc key if no public DNS server (SOC-10835)\n\nChanges in crowbar-ui:\n- Update to version 1.2.0+git.1575896697.a01a3a08:\n * upgrade: Added missing error title\n * travis: Stop testing against nodejs4\n\n- Update to version 1.2.0+git.1572871359.50fc6087:\n * Add title for XEN compute nodes precheck (SOC-10495)\n\nChanges in keepalived:\n- update to 2.0.19\n- new BR pkgconfig(libnftnl) to fix nftables support\n- add nftables to the BR\n- added patch\n * linux-4.15.patch\n- add buildrequires for file-devel\n - used in the checker to verify scripts\n- enable json stats and config dump support\n new BR: pkgconfig(json-c)\n- enable http regexp support: new BR pcre2-devel\n- disable dbus instance creation support as it is marked as\n dangerous\n- Add BFD build option to keepalived.spec rpm file\n Issue #1114 identified that the keepalived.spec file was not being\n generated to build BFD support even if keepalived had been\n configured to support it.\n- full changelog\n https://keepalived.org/changelog.html\n\nChanges in mariadb:\n- update to 10.2.31 GA [bsc#1162388]\n * Fixes for the following security vulnerabilities:\n * 10.2.31: CVE-2020-2574\n * 10.2.30: none\n * release notes and changelog:\n https://mariadb.com/kb/en/library/mariadb-10231-release-notes\n https://mariadb.com/kb/en/library/mariadb-10231-changelog\n https://mariadb.com/kb/en/library/mariadb-10230-release-notes\n https://mariadb.com/kb/en/library/mariadb-10230-changelog\n- refresh mariadb-10.1.12-deharcode-libdir.patch\n- remove mariadb-10.2.29-bufferoverflowstrncat.patch (upstreamed)\n- pack pam_user_map.so module in the /%{_lib}/security directory\n and user_map.conf configuration file in the /etc/security directory\n\n- fix race condition with mysql_upgrade_info status file by moving\n it to the location owned by root (/var/lib/misc) CVE-2019-18901\n [bsc#1160895]\n- move .run-mysql_upgrade file from $datadir/.run-mysql_upgrade\n to /var/lib/misc/.mariadb_run_upgrade so the mysql user can\u0027t\n use it for a symlink attack [bsc#1160912]\n\n- on BTRFS systems /var/lib/mysql is created as a subvolume with \n 755 permissions during the system installaion. Fix it to 700 as \n mysql_install_db doesn\u0027t do it [bsc#1077717]\n- add important options to mariadb.service and mariadb@.service\n (ProtectSystem, ProtectHome and UMask) [bsc#1160878]\n- mysql-systemd-helper: use systemd-tmpfiles instead of shell \n script operations for a cleaner and safer creating of /run/mysql\n [bsc#1160883]\n\n- update to 10.2.29 GA\n * Fixes for the following security vulnerabilities:\n * 10.2.29: none\n * 10.2.28: CVE-2019-2974, CVE-2019-2938\n * 10.2.27: none\n * 10.2.26: CVE-2019-2805, CVE-2019-2740, CVE-2019-2739,\n CVE-2019-2737, CVE-2019-2758\n * release notes and changelog:\n https://mariadb.com/kb/en/library/mariadb-10229-release-notes\n https://mariadb.com/kb/en/library/mariadb-10229-changelog\n https://mariadb.com/kb/en/library/mariadb-10228-release-notes\n https://mariadb.com/kb/en/library/mariadb-10228-changelog\n https://mariadb.com/kb/en/library/mariadb-10227-release-notes\n https://mariadb.com/kb/en/library/mariadb-10227-changelog\n https://mariadb.com/kb/en/library/mariadb-10226-release-notes\n https://mariadb.com/kb/en/library/mariadb-10226-changelog\n- refresh\n mariadb-10.0.15-logrotate-su.patch\n mariadb-10.2.4-logrotate.patch\n- add mariadb-10.2.29-bufferoverflowstrncat.patch to fix \u0027Statement\n might be overflowing a buffer in strncat\u0027 error\n- tracker bug [bsc#1156669]\n- add main.gis_notembedded to the skipped tests (fails when latin1\n is not set)\n\nChanges in openstack-cinder:\n- Update to version cinder-11.2.3.dev23:\n * Fix handling of \u0027cinder\\_encryption\\_key\\_id\u0027 image metadata\n\n- Update to version cinder-11.2.3.dev21:\n * Add retry to LVM deactivation\n\n- Update to version cinder-11.2.3.dev19:\n * Fix ceph: only close rbd image after snapshot iteration is finished\n\n- Update to version cinder-11.2.3.dev17:\n * Exclude disabled API versions from listing\n\nChanges in openstack-cinder:\n- Update to version cinder-11.2.3.dev23:\n * Fix handling of \u0027cinder\\_encryption\\_key\\_id\u0027 image metadata\n\n- Update to version cinder-11.2.3.dev21:\n * Add retry to LVM deactivation\n\n- Update to version cinder-11.2.3.dev19:\n * Fix ceph: only close rbd image after snapshot iteration is finished\n\n- Update to version cinder-11.2.3.dev17:\n * Exclude disabled API versions from listing\n\nChanges in openstack-dashboard:\n- Update to version horizon-12.0.5.dev2:\n * Use python 2.7 as the default interpreter in tox\n * OpenDev Migration Patch\n 12.0.4\n\nChanges in openstack-dashboard-theme-SUSE:\n- Update to version 2017.2+git.1573629528.6b21fa5:\n * SCRD-7984 fixed help links\n\nChanges in openstack-heat:\n- Update to version heat-9.0.8.dev22:\n * Do deepcopy when copying templates\n\n- Update to version heat-9.0.8.dev21:\n * Set stack.thread\\_group\\_mgr for cancel\\_update\n * Eliminate client race condition in convergence delete\n * Delete snapshots using contemporary resources\n\n- Update to version heat-9.0.8.dev15:\n * Unskip StackSnapshotRestoreTest\n\n- Update to version heat-9.0.8.dev14:\n * Fix translate tenants in flavor\n\nChanges in openstack-heat:\n- Update to version heat-9.0.8.dev22:\n * Do deepcopy when copying templates\n\n- Update to version heat-9.0.8.dev21:\n * Set stack.thread\\_group\\_mgr for cancel\\_update\n * Eliminate client race condition in convergence delete\n * Delete snapshots using contemporary resources\n\n- Update to version heat-9.0.8.dev15:\n * Unskip StackSnapshotRestoreTest\n\n- Update to version heat-9.0.8.dev14:\n * Fix translate tenants in flavor\n\nChanges in openstack-heat-templates:\n- Update to version 0.0.0+git.1560033670.e3b5a52:\n * Add example for running Zun container\n * OpenDev Migration Patch\n * Replace openstack.org git:// URLs with https://\n * Remove docs, deprecated hooks, tests\n * Update the bugs link to storyboard\n * Use octavia resources for autoscaling example\n * Fix the incorrect cirros default password\n\nChanges in openstack-horizon-plugin-designate-ui:\n- Update to version designate-dashboard-5.0.3.dev2:\n * Fix list zones updated at same time\n * OpenDev Migration Patch\n 5.0.2\n\nChanges in openstack-horizon-plugin-neutron-lbaas-ui:\n- Add _1481_project_ng_loadbalancersv2_panel.pyc file to package (SOC-10883)\nThe .pyc file needs to be removed when the package is uninstalled,\notherwise the panel will remain enabled in the dashboard and cause\nerrors.\n\nChanges in openstack-ironic:\n- Update to version ironic-9.1.8.dev8:\n * Place upper bound on python-dracclient version\n\nChanges in openstack-ironic:\n- Update to version ironic-9.1.8.dev8:\n * Place upper bound on python-dracclient version\n\nChanges in openstack-keystone:\n- Update to version keystone-12.0.4.dev5:\n * Import LDAP job into project\n\nChanges in openstack-keystone:\n- Update to version keystone-12.0.4.dev5:\n * Import LDAP job into project\n\nChanges in openstack-monasca-agent:\n- Added dependency:\n * fdupes\n * pwdutils and shadow-utils for useradd/groupadd\n\n- added 0001-add-X.509-certificate-check-plugin.patch\n\nChanges in openstack-neutron:\n- Update to version neutron-11.0.9.dev60:\n * Set DB retry for quota\\_enforcement pecan\\_wsgi hook\n\n- Update to version neutron-11.0.9.dev58:\n * don\u0027t clear skb mark when ovs is hw-offload enabled\n\n- Update to version neutron-11.0.9.dev57:\n * doc: add known limitation about attaching SR-IOV ports\n\n- Update to version neutron-11.0.9.dev56:\n * raise priority of dead vlan drop\n\n- Update to version neutron-11.0.9.dev54:\n * [Unit tests] Skip TestWSGIServer with IPv6 if no IPv6 enabled\n\n- Update to version neutron-11.0.9.dev52:\n * Initialize phys bridges before setup\\_rpc\n\nChanges in openstack-neutron:\n- Update neutron-ha-tool to latest version:\n * Add DHCP agent evacuation (SOC-11046)\n\n- Update to version neutron-11.0.9.dev60:\n * Set DB retry for quota\\_enforcement pecan\\_wsgi hook\n\n- Update to version neutron-11.0.9.dev58:\n * don\u0027t clear skb mark when ovs is hw-offload enabled\n\n- neutron: Remove stop action from ovs-cleanup (bsc#1157482)\n backport of https://review.opendev.org/#/c/695867/\n\n- Update to version neutron-11.0.9.dev57:\n * doc: add known limitation about attaching SR-IOV ports\n\n- Update to version neutron-11.0.9.dev56:\n * raise priority of dead vlan drop\n\n- Update to version neutron-11.0.9.dev54:\n * [Unit tests] Skip TestWSGIServer with IPv6 if no IPv6 enabled\n\n- Update to version neutron-11.0.9.dev52:\n * Initialize phys bridges before setup\\_rpc\n\nChanges in openstack-neutron-gbp:\n- Update to version group-based-policy-7.3.1.dev72:\n * Refactor static path code\n\n- Update to version group-based-policy-7.3.1.dev71:\n * Support named ip protocols for SecurityGroupRules\n\n- Update to version group-based-policy-7.3.1.dev70:\n * Allow both FIP and SNAT on a single port\n\n- Update to version group-based-policy-7.3.1.dev69:\n * Fix active-active AAP RPC query\n\n- Update to version group-based-policy-7.3.1.dev67:\n * [AIM] Add extra provided/consumed contracts to network extension\n\n- Update to version group-based-policy-7.3.1.dev66:\n * Active active AAP feature\n\n- Update to version group-based-policy-7.3.1.dev64:\n * Support cache option for legacy GBP driver\n\n- Update to version group-based-policy-7.3.1.dev63:\n * Fix host ID length in VM names table\n\n- Update to version group-based-policy-7.3.1.dev62:\n * Update\\_proj\\_descr in apic when project description is updated in os\n\n- Update to version group-based-policy-7.3.1.dev61:\n * Send port notifications when host\\_route is getting updated\n * Provide a control knob to use the internal EP interface\n\n- Update to version group-based-policy-7.3.1.dev57:\n * Fix pep8 failures seen on submitted patches\n\nChanges in openstack-neutron-vsphere:\n- Update to version networking-vsphere-2.0.1.dev133:\n * Update to use Agent model from neutron.db.models\n * Fix neutron-dvs-agent startup errors\n * OpenDev Migration Patch\n- Remove 0001-fix-dvs-agent-config.patch as changes\n had been backported to stable/pike\n - See https://review.opendev.org/#/c/682482\n\nChanges in openstack-nova:\n- Update to version nova-16.1.9.dev49:\n * Use stable constraint for Tempest pinned stable branches\n\n- Update to version nova-16.1.9.dev48:\n * Avoid redundant initialize\\_connection on source post live migration\n * Error out interrupted builds\n * Skip checking of target\\_dev for vhostuser\n * Functional reproduce for bug 1833581\n * Prevent init\\_host test to interfere with other tests\n * Add functional test for resize crash compute restart revert\n * Move restart\\_compute\\_service to a common place\n * lxc: make use of filter python3 compatible\n * cleanup evacuated instances not on hypervisor\n * Delete resource providers for all nodes when deleting compute service\n\n- Update to version nova-16.1.9.dev30:\n * Explicitly fail if trying to attach SR-IOV port\n * Stabilize unshelve notification sample tests\n\n- Update to version nova-16.1.9.dev26:\n * Fix listing deleted servers with a marker\n * Add functional regression test for bug 1849409\n\n- Update to version nova-16.1.9.dev22:\n * Hook resource\\_tracker to remove stale node information\n\n- Update to version nova-16.1.9.dev20:\n * Workaround missing RequestSpec.instance\\_group.uuid\n * Add regression recreate test for bug 1830747\n\n- Update to version nova-16.1.9.dev16:\n * Changing scheduler sync event from INFO to DEBUG\n\n- Update to version nova-16.1.9.dev14:\n * Only nil az during shelve offload\n * Delete instance\\_id\\_mappings record in instance\\_destroy\n\n- Update to version nova-16.1.9.dev11:\n * Revert \u0027openstack server create\u0027 to \u0027nova boot\u0027 in nova docs\n * doc: fix and clarify --block-device usage in user docs\n\n- Update to version nova-16.1.9.dev8:\n * Functional reproduce for bug 1852207\n\nChanges in openstack-nova:\n- Update to version nova-16.1.9.dev49:\n * Use stable constraint for Tempest pinned stable branches\n\n- Update to version nova-16.1.9.dev48:\n * Avoid redundant initialize\\_connection on source post live migration\n * Error out interrupted builds\n * Skip checking of target\\_dev for vhostuser\n * Functional reproduce for bug 1833581\n * Prevent init\\_host test to interfere with other tests\n * Add functional test for resize crash compute restart revert\n * Move restart\\_compute\\_service to a common place\n * lxc: make use of filter python3 compatible\n * cleanup evacuated instances not on hypervisor\n * Delete resource providers for all nodes when deleting compute service\n\n- Update to version nova-16.1.9.dev30:\n * Explicitly fail if trying to attach SR-IOV port\n * Stabilize unshelve notification sample tests\n\n- Update to version nova-16.1.9.dev26:\n * Fix listing deleted servers with a marker\n * Add functional regression test for bug 1849409\n\n- Update to version nova-16.1.9.dev22:\n * Hook resource\\_tracker to remove stale node information\n\n- Update to version nova-16.1.9.dev20:\n * Workaround missing RequestSpec.instance\\_group.uuid\n * Add regression recreate test for bug 1830747\n\n- Update to version nova-16.1.9.dev16:\n * Changing scheduler sync event from INFO to DEBUG\n\n- Update to version nova-16.1.9.dev14:\n * Only nil az during shelve offload\n * Delete instance\\_id\\_mappings record in instance\\_destroy\n\n- Update to version nova-16.1.9.dev11:\n * Revert \u0027openstack server create\u0027 to \u0027nova boot\u0027 in nova docs\n * doc: fix and clarify --block-device usage in user docs\n\n- Update to version nova-16.1.9.dev8:\n * Functional reproduce for bug 1852207\n\nChanges in openstack-octavia:\n- Update to version octavia-1.0.6.dev3:\n * Fix urgent amphora two-way auth security bug\n\nChanges in openstack-octavia-amphora-image:\n- Update image to 0.1.2 to include udated keepalived 2.0.19\n\n- Update image to 0.1.1 to include latest changes\n\n- Add keepalived service\nChanges in openstack-resource-agents:\n- Update to version 1.0+git.1569436425.8b9c49f:\n * Add a configurable delay to Nova Evacuate calls\n * OpenDev Migration Patch\n * NovaEvacuate: fix a syntax error\n * NovaEvacuate: Support the new split-out IHA fence agents with backwards compatibility\n * NovaEvacuate: Correctly handle stopped hypervisors\n * neutron-ha-tool: do not replicate dhcp\n * NovaCompute: Support parsing host option from /etc/nova/nova.conf.d\n * NovaCompute: Use variable to avoid calling crudini a second time\n * NovaEvacuate: Allow debug logging to be turned on easily\n\nChanges in openstack-sahara:\n- Update to version sahara-7.0.5.dev4:\n * Run sahara-scenario using Python 3\n * Enforce python 2 for documentation build\n * Fix requirements(bandit)\n * OpenDev Migration Patch\n 7.0.4\n\nChanges in openstack-sahara:\n- Update to version sahara-7.0.5.dev4:\n * Run sahara-scenario using Python 3\n * Enforce python 2 for documentation build\n * Fix requirements (bandit)\n * OpenDev Migration Patch\n 7.0.4\n\nChanges in openstack-trove:\n- Update to version trove-8.0.2.dev2:\n * Add local bindep.txt\n * OpenDev Migration Patch\n 8.0.1\n\nChanges in openstack-trove:\n- Update to version trove-8.0.2.dev2:\n * Add local bindep.txt\n * OpenDev Migration Patch\n 8.0.1\n\nChanges in python-cinderlm:\n- Update to version 0.0.2+git.1571845893.27f0b7b:\n * SCRD-4764 remove V2.0 auth end points (SOC-9753)\n\nChanges in python-congressclient:\n- update to version 1.8.1\n - Update .gitreview for stable/pike\n - Update UPPER_CONSTRAINTS_FILE for stable/pike\n - import zuul job settings from project-config\n - Updated from global requirements\n\nChanges in python-designateclient:\n- update to version 2.7.1\n - Update .gitreview for stable/pike\n - Updated from global requirements\n - import zuul job settings from project-config\n - Update UPPER_CONSTRAINTS_FILE for stable/pike\n - server-get/update show wrong values about \u0027id\u0027 and \u0027update_at\u0027\n\nChanges in python-ironic-lib:\n- update to version 2.10.2\n - Replace openstack.org git:// URLs with https://\n - Make search for config drive partition case insensitive\n - Revert \u0027Use dd conv=sparse when writing images to nodes\u0027\n - Check GPT table with sgdisk insread of partprobe\n - Avoid tox_install.sh for constraints support\n - Fix GPT bug with whole disk images\n - import zuul job settings from project-config\n\nChanges in python-networking-cisco:\n- Update to version networking-cisco-6.1.1.dev65:\n * Nexus: Add CA Bundle path to https doc\n * Improve Nexus Ironic related doc and logs\n * Upgrade release notes to include Tripleo/puppet\n * Fix socket not closed errors in unit test logs\n * Add release note about adding support for Rocky OpenStack\n * Update publish-openstack-python-branch-tarball job\n * Remove MultiConfigParser from SAF application\n * More fixes for networking\\_cisco rocky support\n * Remove MultiConfigParser from the device manger config loader\n * Ensure CFG agent is started after neutron config is written\n * Removed older version of python added 3.5\n * Begin process of supporting neutron Rocky\n * Typo in tar command in doc install guide\n * Add cisco providernet extension to Nexus doc\n * Add missing policy to fix stable/queens unit tests\n * Pin stestr version (1.1.0) for Mitaka\n * Fix places in ucsm network driver using .ucsm instead of .ucsms\n * Fix doc build under python3\n * Fix mitaka bug with NeutronWorker missing parameter\n * Eliminate 30 sec delay for Nexus replay thread\n * Fix foreign key constraint violation while creating primary key with subnet\\_id\n * Put upper constraint on ncclient version to prevent breakages\n * Improvements to the networking-cisco zuul jobs\n * Remove deprecated host/interface map config\n * Include device manager configuration file when starting config agent\n * Fix pep8 and other tox environments locally\n * Add rocky to CI\n * Add bandit to tox and resolve Nexus SA errors\n * Deprecate old ML2 Nexus/UCSM documentation file\n * Secure Nexus https certificates by default\n- Add tempest_plugin subpackage\n\nChanges in python-osc-lib:\n- update to version 1.7.1\n - import zuul job settings from project-config\n - Update UPPER_CONSTRAINTS_FILE for stable/pike\n - Updated from global requirements\n - Update .gitreview for stable/pike\n - Avoid tox_install.sh for constraints support\n\nChanges iython-oslo.context:\n- update to version 2.17.2\n - Fix sphinx-docs job for stable branch\n - import zuul job settings from project-config\n\nChanges in python-oslo.rootwrap:\n- update to version 5.9.3\n - Avoid tox_install.sh for constraints support\n - Follow the new PTI for document build\n - import zuul job settings from project-config\n\nChanges in python-oslo.serialization:\n- update to version 2.20.3\n - import zuul job settings from project-config\n - Fix sphinx-docs job for stable branch\n\nChanges in python-oslo.service:\n- update to version 1.25.2\n - import zuul job settings from project-config\n - Fix sphinx-docs job for stable branch\n\nChanges in python-stevedore:\n- update to version 1.25.2\n - move doc requirements to doc/requirements.txt\n - Use stable branch for upper-constraints\n - remove duplicate sphinx dependency\n - Avoid tox_install.sh for constraints support\n - import zuul job settings from project-config\n\nChanges in python-taskflow:\n- update to version 2.14.2\n - don\u0027t let tox_install.sh error if there is nothing to do\n - import zuul job settings from project-config\n - Updated from global requirements\n - Use doc/requirements.txt\n\nChanges in rubygem-crowbar-client:\n- Update to 3.9.1\n - Fix repocheck table output (SOC-10718)\n - Enable restricted commands for Cloud8 (bsc#1117080, CVE-2018-17954)\n\nChanges in rubygem-puma:\n- Add CVE-2019-16770.patch (bsc#1158675, SOC-10999, CVE-2019-16770)\n This patch fixes a DoS vulnerability a malicious client could use to\n block a large amount of threads.\n\nChanges in venv-openstack-swift:\n- Fix lower version numver after inheriting the version from main\n component (SCRD-8523)\n\n- Revert: \u0027Inherit version number of venv from main component\n (SCRD-8523)\u0027 as zypper reports the new version number as older\n than what is released\n\n- Inherit version number of venv from main component (SCRD-8523)\n\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "HPE-Helion-OpenStack-8-2020-640,SUSE-2020-640,SUSE-OpenStack-Cloud-8-2020-640,SUSE-OpenStack-Cloud-Crowbar-8-2020-640",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_0640-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2020:0640-1",
"url": "https://www.suse.com/support/update/announcement/2020/suse-su-20200640-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2020:0640-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2020-March/006597.html"
},
{
"category": "self",
"summary": "SUSE Bug 1077717",
"url": "https://bugzilla.suse.com/1077717"
},
{
"category": "self",
"summary": "SUSE Bug 1117080",
"url": "https://bugzilla.suse.com/1117080"
},
{
"category": "self",
"summary": "SUSE Bug 1117840",
"url": "https://bugzilla.suse.com/1117840"
},
{
"category": "self",
"summary": "SUSE Bug 1123191",
"url": "https://bugzilla.suse.com/1123191"
},
{
"category": "self",
"summary": "SUSE Bug 1148158",
"url": "https://bugzilla.suse.com/1148158"
},
{
"category": "self",
"summary": "SUSE Bug 1152007",
"url": "https://bugzilla.suse.com/1152007"
},
{
"category": "self",
"summary": "SUSE Bug 1154235",
"url": "https://bugzilla.suse.com/1154235"
},
{
"category": "self",
"summary": "SUSE Bug 1155089",
"url": "https://bugzilla.suse.com/1155089"
},
{
"category": "self",
"summary": "SUSE Bug 1155942",
"url": "https://bugzilla.suse.com/1155942"
},
{
"category": "self",
"summary": "SUSE Bug 1156305",
"url": "https://bugzilla.suse.com/1156305"
},
{
"category": "self",
"summary": "SUSE Bug 1156669",
"url": "https://bugzilla.suse.com/1156669"
},
{
"category": "self",
"summary": "SUSE Bug 1156914",
"url": "https://bugzilla.suse.com/1156914"
},
{
"category": "self",
"summary": "SUSE Bug 1157028",
"url": "https://bugzilla.suse.com/1157028"
},
{
"category": "self",
"summary": "SUSE Bug 1157206",
"url": "https://bugzilla.suse.com/1157206"
},
{
"category": "self",
"summary": "SUSE Bug 1157482",
"url": "https://bugzilla.suse.com/1157482"
},
{
"category": "self",
"summary": "SUSE Bug 1158675",
"url": "https://bugzilla.suse.com/1158675"
},
{
"category": "self",
"summary": "SUSE Bug 1160048",
"url": "https://bugzilla.suse.com/1160048"
},
{
"category": "self",
"summary": "SUSE Bug 1160878",
"url": "https://bugzilla.suse.com/1160878"
},
{
"category": "self",
"summary": "SUSE Bug 1160883",
"url": "https://bugzilla.suse.com/1160883"
},
{
"category": "self",
"summary": "SUSE Bug 1160895",
"url": "https://bugzilla.suse.com/1160895"
},
{
"category": "self",
"summary": "SUSE Bug 1160912",
"url": "https://bugzilla.suse.com/1160912"
},
{
"category": "self",
"summary": "SUSE Bug 1161351",
"url": "https://bugzilla.suse.com/1161351"
},
{
"category": "self",
"summary": "SUSE Bug 1161517",
"url": "https://bugzilla.suse.com/1161517"
},
{
"category": "self",
"summary": "SUSE Bug 1162388",
"url": "https://bugzilla.suse.com/1162388"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-1002201 page",
"url": "https://www.suse.com/security/cve/CVE-2017-1002201/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17954 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17954/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13117 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13117/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-16770 page",
"url": "https://www.suse.com/security/cve/CVE-2019-16770/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-18901 page",
"url": "https://www.suse.com/security/cve/CVE-2019-18901/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2737 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2737/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2739 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2739/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2740 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2740/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2758 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2758/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2805 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2805/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2938 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2938/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2974 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2974/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2574 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2574/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-7595 page",
"url": "https://www.suse.com/security/cve/CVE-2020-7595/"
}
],
"title": "Security update for ardana-cinder, ardana-cobbler, ardana-designate, ardana-extensions-example, ardana-extensions-nsx, ardana-glance, ardana-heat, ardana-input-model, ardana-ironic, ardana-keystone, ardana-logging, ardana-monasca, ardana-monasca-transform, ardana-mq, ardana-neutron, ardana-nova, ardana-octavia, ardana-osconfig, ardana-tempest, crowbar-core, crowbar-ha, crowbar-openstack, crowbar-ui, keepalived, mariadb, openstack-cinder, openstack-dashboard, openstack-dashboard-theme-SUSE, openstack-heat, openstack-heat-templates, openstack-horizon-plugin-designate-ui, openstack-horizon-plugin-neutron-lbaas-ui, openstack-ironic, openstack-keystone, openstack-monasca-agent, openstack-neutron, openstack-neutron-gbp, openstack-neutron-vsphere, openstack-nova, openstack-octavia, openstack-octavia-amphora-image, openstack-resource-agents, openstack-sahara, openstack-trove, python-cinderlm, python-congressclient, python-designateclient, python-ironic-lib, python-networking-cisco, python-osc-lib, python-oslo.context, python-oslo.rootwrap, python-oslo.serialization, python-oslo.service, python-stevedore, python-taskflow, rubygem-crowbar-client, rubygem-pumavenv-openstack-swift",
"tracking": {
"current_release_date": "2020-03-11T11:30:47Z",
"generator": {
"date": "2020-03-11T11:30:47Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2020:0640-1",
"initial_release_date": "2020-03-11T11:30:47Z",
"revision_history": [
{
"date": "2020-03-11T11:30:47Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "crowbar-core-5.0+git.1582968668.1a55c77c5-3.35.4.aarch64",
"product": {
"name": "crowbar-core-5.0+git.1582968668.1a55c77c5-3.35.4.aarch64",
"product_id": "crowbar-core-5.0+git.1582968668.1a55c77c5-3.35.4.aarch64"
}
},
{
"category": "product_version",
"name": "crowbar-core-branding-upstream-5.0+git.1582968668.1a55c77c5-3.35.4.aarch64",
"product": {
"name": "crowbar-core-branding-upstream-5.0+git.1582968668.1a55c77c5-3.35.4.aarch64",
"product_id": "crowbar-core-branding-upstream-5.0+git.1582968668.1a55c77c5-3.35.4.aarch64"
}
},
{
"category": "product_version",
"name": "crowbar-core-devel-5.0+git.1582968668.1a55c77c5-3.35.4.aarch64",
"product": {
"name": "crowbar-core-devel-5.0+git.1582968668.1a55c77c5-3.35.4.aarch64",
"product_id": "crowbar-core-devel-5.0+git.1582968668.1a55c77c5-3.35.4.aarch64"
}
},
{
"category": "product_version",
"name": "keepalived-2.0.19-3.6.3.aarch64",
"product": {
"name": "keepalived-2.0.19-3.6.3.aarch64",
"product_id": "keepalived-2.0.19-3.6.3.aarch64"
}
},
{
"category": "product_version",
"name": "libmysqld-devel-10.2.31-4.17.3.aarch64",
"product": {
"name": "libmysqld-devel-10.2.31-4.17.3.aarch64",
"product_id": "libmysqld-devel-10.2.31-4.17.3.aarch64"
}
},
{
"category": "product_version",
"name": "libmysqld19-10.2.31-4.17.3.aarch64",
"product": {
"name": "libmysqld19-10.2.31-4.17.3.aarch64",
"product_id": "libmysqld19-10.2.31-4.17.3.aarch64"
}
},
{
"category": "product_version",
"name": "mariadb-10.2.31-4.17.3.aarch64",
"product": {
"name": "mariadb-10.2.31-4.17.3.aarch64",
"product_id": "mariadb-10.2.31-4.17.3.aarch64"
}
},
{
"category": "product_version",
"name": "mariadb-bench-10.2.31-4.17.3.aarch64",
"product": {
"name": "mariadb-bench-10.2.31-4.17.3.aarch64",
"product_id": "mariadb-bench-10.2.31-4.17.3.aarch64"
}
},
{
"category": "product_version",
"name": "mariadb-client-10.2.31-4.17.3.aarch64",
"product": {
"name": "mariadb-client-10.2.31-4.17.3.aarch64",
"product_id": "mariadb-client-10.2.31-4.17.3.aarch64"
}
},
{
"category": "product_version",
"name": "mariadb-galera-10.2.31-4.17.3.aarch64",
"product": {
"name": "mariadb-galera-10.2.31-4.17.3.aarch64",
"product_id": "mariadb-galera-10.2.31-4.17.3.aarch64"
}
},
{
"category": "product_version",
"name": "mariadb-test-10.2.31-4.17.3.aarch64",
"product": {
"name": "mariadb-test-10.2.31-4.17.3.aarch64",
"product_id": "mariadb-test-10.2.31-4.17.3.aarch64"
}
},
{
"category": "product_version",
"name": "mariadb-tools-10.2.31-4.17.3.aarch64",
"product": {
"name": "mariadb-tools-10.2.31-4.17.3.aarch64",
"product_id": "mariadb-tools-10.2.31-4.17.3.aarch64"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-crowbar-client-3.9.1-3.9.3.aarch64",
"product": {
"name": "ruby2.1-rubygem-crowbar-client-3.9.1-3.9.3.aarch64",
"product_id": "ruby2.1-rubygem-crowbar-client-3.9.1-3.9.3.aarch64"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-crowbar-client-doc-3.9.1-3.9.3.aarch64",
"product": {
"name": "ruby2.1-rubygem-crowbar-client-doc-3.9.1-3.9.3.aarch64",
"product_id": "ruby2.1-rubygem-crowbar-client-doc-3.9.1-3.9.3.aarch64"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-crowbar-client-testsuite-3.9.1-3.9.3.aarch64",
"product": {
"name": "ruby2.1-rubygem-crowbar-client-testsuite-3.9.1-3.9.3.aarch64",
"product_id": "ruby2.1-rubygem-crowbar-client-testsuite-3.9.1-3.9.3.aarch64"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-puma-2.16.0-3.3.3.aarch64",
"product": {
"name": "ruby2.1-rubygem-puma-2.16.0-3.3.3.aarch64",
"product_id": "ruby2.1-rubygem-puma-2.16.0-3.3.3.aarch64"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-puma-doc-2.16.0-3.3.3.aarch64",
"product": {
"name": "ruby2.1-rubygem-puma-doc-2.16.0-3.3.3.aarch64",
"product_id": "ruby2.1-rubygem-puma-doc-2.16.0-3.3.3.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"product": {
"name": "ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"product_id": "ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch"
}
},
{
"category": "product_version",
"name": "ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"product": {
"name": "ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"product_id": "ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch"
}
},
{
"category": "product_version",
"name": "ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"product": {
"name": "ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"product_id": "ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch"
}
},
{
"category": "product_version",
"name": "ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"product": {
"name": "ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"product_id": "ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch"
}
},
{
"category": "product_version",
"name": "ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"product": {
"name": "ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"product_id": "ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch"
}
},
{
"category": "product_version",
"name": "ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"product": {
"name": "ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"product_id": "ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch"
}
},
{
"category": "product_version",
"name": "ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"product": {
"name": "ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"product_id": "ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch"
}
},
{
"category": "product_version",
"name": "ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"product": {
"name": "ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"product_id": "ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch"
}
},
{
"category": "product_version",
"name": "ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"product": {
"name": "ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"product_id": "ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch"
}
},
{
"category": "product_version",
"name": "ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"product": {
"name": "ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"product_id": "ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch"
}
},
{
"category": "product_version",
"name": "ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"product": {
"name": "ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"product_id": "ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch"
}
},
{
"category": "product_version",
"name": "ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"product": {
"name": "ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"product_id": "ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch"
}
},
{
"category": "product_version",
"name": "ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"product": {
"name": "ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"product_id": "ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch"
}
},
{
"category": "product_version",
"name": "ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"product": {
"name": "ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"product_id": "ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch"
}
},
{
"category": "product_version",
"name": "ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"product": {
"name": "ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"product_id": "ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch"
}
},
{
"category": "product_version",
"name": "ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"product": {
"name": "ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"product_id": "ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch"
}
},
{
"category": "product_version",
"name": "ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"product": {
"name": "ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"product_id": "ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch"
}
},
{
"category": "product_version",
"name": "ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"product": {
"name": "ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"product_id": "ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch"
}
},
{
"category": "product_version",
"name": "ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"product": {
"name": "ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"product_id": "ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch"
}
},
{
"category": "product_version",
"name": "mariadb-errormessages-10.2.31-4.17.3.noarch",
"product": {
"name": "mariadb-errormessages-10.2.31-4.17.3.noarch",
"product_id": "mariadb-errormessages-10.2.31-4.17.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"product": {
"name": "openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"product_id": "openstack-cinder-11.2.3~dev23-3.24.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"product": {
"name": "openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"product_id": "openstack-cinder-api-11.2.3~dev23-3.24.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"product": {
"name": "openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"product_id": "openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"product": {
"name": "openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"product_id": "openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"product": {
"name": "openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"product_id": "openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"product": {
"name": "openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"product_id": "openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"product": {
"name": "openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"product_id": "openstack-dashboard-12.0.5~dev2-3.23.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-heat-9.0.8~dev22-3.27.4.noarch",
"product": {
"name": "openstack-heat-9.0.8~dev22-3.27.4.noarch",
"product_id": "openstack-heat-9.0.8~dev22-3.27.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"product": {
"name": "openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"product_id": "openstack-heat-api-9.0.8~dev22-3.27.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"product": {
"name": "openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"product_id": "openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"product": {
"name": "openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"product_id": "openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"product": {
"name": "openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"product_id": "openstack-heat-doc-9.0.8~dev22-3.27.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"product": {
"name": "openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"product_id": "openstack-heat-engine-9.0.8~dev22-3.27.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"product": {
"name": "openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"product_id": "openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"product": {
"name": "openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"product_id": "openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"product": {
"name": "openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"product_id": "openstack-heat-test-9.0.8~dev22-3.27.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"product": {
"name": "openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"product_id": "openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"product": {
"name": "openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"product_id": "openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"product": {
"name": "openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"product_id": "openstack-ironic-9.1.8~dev8-3.24.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"product": {
"name": "openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"product_id": "openstack-ironic-api-9.1.8~dev8-3.24.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"product": {
"name": "openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"product_id": "openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"product": {
"name": "openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"product_id": "openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"product": {
"name": "openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"product_id": "openstack-keystone-12.0.4~dev5-5.30.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"product": {
"name": "openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"product_id": "openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"product": {
"name": "openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"product_id": "openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch"
}
},
{
"category": "product_version",
"name": "openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"product": {
"name": "openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"product_id": "openstack-neutron-11.0.9~dev60-3.27.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"product": {
"name": "openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"product_id": "openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"product": {
"name": "openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"product_id": "openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"product": {
"name": "openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"product_id": "openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"product": {
"name": "openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"product_id": "openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"product": {
"name": "openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"product_id": "openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"product": {
"name": "openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"product_id": "openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"product": {
"name": "openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"product_id": "openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"product": {
"name": "openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"product_id": "openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"product": {
"name": "openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"product_id": "openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"product": {
"name": "openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"product_id": "openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"product": {
"name": "openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"product_id": "openstack-neutron-server-11.0.9~dev60-3.27.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"product": {
"name": "openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"product_id": "openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"product": {
"name": "openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"product_id": "openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"product": {
"name": "openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"product_id": "openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"product": {
"name": "openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"product_id": "openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-nova-16.1.9~dev49-3.32.4.noarch",
"product": {
"name": "openstack-nova-16.1.9~dev49-3.32.4.noarch",
"product_id": "openstack-nova-16.1.9~dev49-3.32.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"product": {
"name": "openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"product_id": "openstack-nova-api-16.1.9~dev49-3.32.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"product": {
"name": "openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"product_id": "openstack-nova-cells-16.1.9~dev49-3.32.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"product": {
"name": "openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"product_id": "openstack-nova-compute-16.1.9~dev49-3.32.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"product": {
"name": "openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"product_id": "openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"product": {
"name": "openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"product_id": "openstack-nova-console-16.1.9~dev49-3.32.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"product": {
"name": "openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"product_id": "openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"product": {
"name": "openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"product_id": "openstack-nova-doc-16.1.9~dev49-3.32.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"product": {
"name": "openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"product_id": "openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"product": {
"name": "openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"product_id": "openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"product": {
"name": "openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"product_id": "openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"product": {
"name": "openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"product_id": "openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"product": {
"name": "openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"product_id": "openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"product": {
"name": "openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"product_id": "openstack-octavia-1.0.6~dev3-4.21.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"product": {
"name": "openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"product_id": "openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"product": {
"name": "openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"product_id": "openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"product": {
"name": "openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"product_id": "openstack-octavia-api-1.0.6~dev3-4.21.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"product": {
"name": "openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"product_id": "openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"product": {
"name": "openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"product_id": "openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"product": {
"name": "openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"product_id": "openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"product": {
"name": "openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"product_id": "openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"product": {
"name": "openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"product_id": "openstack-sahara-7.0.5~dev4-3.12.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"product": {
"name": "openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"product_id": "openstack-sahara-api-7.0.5~dev4-3.12.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"product": {
"name": "openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"product_id": "openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"product": {
"name": "openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"product_id": "openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-trove-8.0.2~dev2-3.12.3.noarch",
"product": {
"name": "openstack-trove-8.0.2~dev2-3.12.3.noarch",
"product_id": "openstack-trove-8.0.2~dev2-3.12.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"product": {
"name": "openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"product_id": "openstack-trove-api-8.0.2~dev2-3.12.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"product": {
"name": "openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"product_id": "openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"product": {
"name": "openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"product_id": "openstack-trove-doc-8.0.2~dev2-3.12.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"product": {
"name": "openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"product_id": "openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"product": {
"name": "openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"product_id": "openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch"
}
},
{
"category": "product_version",
"name": "python-cinder-11.2.3~dev23-3.24.4.noarch",
"product": {
"name": "python-cinder-11.2.3~dev23-3.24.4.noarch",
"product_id": "python-cinder-11.2.3~dev23-3.24.4.noarch"
}
},
{
"category": "product_version",
"name": "python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"product": {
"name": "python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"product_id": "python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch"
}
},
{
"category": "product_version",
"name": "python-congressclient-1.8.1-3.3.4.noarch",
"product": {
"name": "python-congressclient-1.8.1-3.3.4.noarch",
"product_id": "python-congressclient-1.8.1-3.3.4.noarch"
}
},
{
"category": "product_version",
"name": "python-designateclient-2.7.1-3.3.4.noarch",
"product": {
"name": "python-designateclient-2.7.1-3.3.4.noarch",
"product_id": "python-designateclient-2.7.1-3.3.4.noarch"
}
},
{
"category": "product_version",
"name": "python-designateclient-doc-2.7.1-3.3.4.noarch",
"product": {
"name": "python-designateclient-doc-2.7.1-3.3.4.noarch",
"product_id": "python-designateclient-doc-2.7.1-3.3.4.noarch"
}
},
{
"category": "product_version",
"name": "python-heat-9.0.8~dev22-3.27.4.noarch",
"product": {
"name": "python-heat-9.0.8~dev22-3.27.4.noarch",
"product_id": "python-heat-9.0.8~dev22-3.27.4.noarch"
}
},
{
"category": "product_version",
"name": "python-horizon-12.0.5~dev2-3.23.4.noarch",
"product": {
"name": "python-horizon-12.0.5~dev2-3.23.4.noarch",
"product_id": "python-horizon-12.0.5~dev2-3.23.4.noarch"
}
},
{
"category": "product_version",
"name": "python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"product": {
"name": "python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"product_id": "python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch"
}
},
{
"category": "product_version",
"name": "python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"product": {
"name": "python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"product_id": "python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch"
}
},
{
"category": "product_version",
"name": "python-ironic-9.1.8~dev8-3.24.4.noarch",
"product": {
"name": "python-ironic-9.1.8~dev8-3.24.4.noarch",
"product_id": "python-ironic-9.1.8~dev8-3.24.4.noarch"
}
},
{
"category": "product_version",
"name": "python-ironic-lib-2.10.2-3.3.3.noarch",
"product": {
"name": "python-ironic-lib-2.10.2-3.3.3.noarch",
"product_id": "python-ironic-lib-2.10.2-3.3.3.noarch"
}
},
{
"category": "product_version",
"name": "python-keystone-12.0.4~dev5-5.30.4.noarch",
"product": {
"name": "python-keystone-12.0.4~dev5-5.30.4.noarch",
"product_id": "python-keystone-12.0.4~dev5-5.30.4.noarch"
}
},
{
"category": "product_version",
"name": "python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"product": {
"name": "python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"product_id": "python-monasca-agent-2.2.5~dev5-3.15.2.noarch"
}
},
{
"category": "product_version",
"name": "python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"product": {
"name": "python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"product_id": "python-networking-cisco-6.1.1~dev65-3.3.3.noarch"
}
},
{
"category": "product_version",
"name": "python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"product": {
"name": "python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"product_id": "python-networking-vsphere-2.0.1~dev133-3.12.3.noarch"
}
},
{
"category": "product_version",
"name": "python-neutron-11.0.9~dev60-3.27.4.noarch",
"product": {
"name": "python-neutron-11.0.9~dev60-3.27.4.noarch",
"product_id": "python-neutron-11.0.9~dev60-3.27.4.noarch"
}
},
{
"category": "product_version",
"name": "python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"product": {
"name": "python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"product_id": "python-neutron-gbp-7.3.1~dev72-3.12.3.noarch"
}
},
{
"category": "product_version",
"name": "python-nova-16.1.9~dev49-3.32.4.noarch",
"product": {
"name": "python-nova-16.1.9~dev49-3.32.4.noarch",
"product_id": "python-nova-16.1.9~dev49-3.32.4.noarch"
}
},
{
"category": "product_version",
"name": "python-octavia-1.0.6~dev3-4.21.3.noarch",
"product": {
"name": "python-octavia-1.0.6~dev3-4.21.3.noarch",
"product_id": "python-octavia-1.0.6~dev3-4.21.3.noarch"
}
},
{
"category": "product_version",
"name": "python-osc-lib-1.7.1-3.3.3.noarch",
"product": {
"name": "python-osc-lib-1.7.1-3.3.3.noarch",
"product_id": "python-osc-lib-1.7.1-3.3.3.noarch"
}
},
{
"category": "product_version",
"name": "python-oslo.context-2.17.2-3.3.3.noarch",
"product": {
"name": "python-oslo.context-2.17.2-3.3.3.noarch",
"product_id": "python-oslo.context-2.17.2-3.3.3.noarch"
}
},
{
"category": "product_version",
"name": "python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"product": {
"name": "python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"product_id": "python-oslo.rootwrap-5.9.3-3.3.3.noarch"
}
},
{
"category": "product_version",
"name": "python-oslo.serialization-2.20.3-3.3.3.noarch",
"product": {
"name": "python-oslo.serialization-2.20.3-3.3.3.noarch",
"product_id": "python-oslo.serialization-2.20.3-3.3.3.noarch"
}
},
{
"category": "product_version",
"name": "python-oslo.service-1.25.2-3.3.3.noarch",
"product": {
"name": "python-oslo.service-1.25.2-3.3.3.noarch",
"product_id": "python-oslo.service-1.25.2-3.3.3.noarch"
}
},
{
"category": "product_version",
"name": "python-sahara-7.0.5~dev4-3.12.4.noarch",
"product": {
"name": "python-sahara-7.0.5~dev4-3.12.4.noarch",
"product_id": "python-sahara-7.0.5~dev4-3.12.4.noarch"
}
},
{
"category": "product_version",
"name": "python-stevedore-1.25.2-3.3.3.noarch",
"product": {
"name": "python-stevedore-1.25.2-3.3.3.noarch",
"product_id": "python-stevedore-1.25.2-3.3.3.noarch"
}
},
{
"category": "product_version",
"name": "python-taskflow-2.14.2-3.3.3.noarch",
"product": {
"name": "python-taskflow-2.14.2-3.3.3.noarch",
"product_id": "python-taskflow-2.14.2-3.3.3.noarch"
}
},
{
"category": "product_version",
"name": "python-trove-8.0.2~dev2-3.12.3.noarch",
"product": {
"name": "python-trove-8.0.2~dev2-3.12.3.noarch",
"product_id": "python-trove-8.0.2~dev2-3.12.3.noarch"
}
},
{
"category": "product_version",
"name": "venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"product": {
"name": "venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"product_id": "venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch"
}
},
{
"category": "product_version",
"name": "venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"product": {
"name": "venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"product_id": "venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch"
}
},
{
"category": "product_version",
"name": "venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"product": {
"name": "venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"product_id": "venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch"
}
},
{
"category": "product_version",
"name": "venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"product": {
"name": "venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"product_id": "venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch"
}
},
{
"category": "product_version",
"name": "venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"product": {
"name": "venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"product_id": "venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch"
}
},
{
"category": "product_version",
"name": "venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"product": {
"name": "venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"product_id": "venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch"
}
},
{
"category": "product_version",
"name": "venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"product": {
"name": "venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"product_id": "venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch"
}
},
{
"category": "product_version",
"name": "venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"product": {
"name": "venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"product_id": "venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch"
}
},
{
"category": "product_version",
"name": "venv-openstack-horizon-hpe-x86_64-12.0.5~dev2-14.28.2.noarch",
"product": {
"name": "venv-openstack-horizon-hpe-x86_64-12.0.5~dev2-14.28.2.noarch",
"product_id": "venv-openstack-horizon-hpe-x86_64-12.0.5~dev2-14.28.2.noarch"
}
},
{
"category": "product_version",
"name": "venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"product": {
"name": "venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"product_id": "venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch"
}
},
{
"category": "product_version",
"name": "venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"product": {
"name": "venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"product_id": "venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch"
}
},
{
"category": "product_version",
"name": "venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"product": {
"name": "venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"product_id": "venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch"
}
},
{
"category": "product_version",
"name": "venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"product": {
"name": "venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"product_id": "venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch"
}
},
{
"category": "product_version",
"name": "venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"product": {
"name": "venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"product_id": "venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch"
}
},
{
"category": "product_version",
"name": "venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"product": {
"name": "venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"product_id": "venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch"
}
},
{
"category": "product_version",
"name": "venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"product": {
"name": "venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"product_id": "venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch"
}
},
{
"category": "product_version",
"name": "venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"product": {
"name": "venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"product_id": "venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch"
}
},
{
"category": "product_version",
"name": "venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"product": {
"name": "venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"product_id": "venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch"
}
},
{
"category": "product_version",
"name": "venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"product": {
"name": "venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"product_id": "venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch"
}
},
{
"category": "product_version",
"name": "venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"product": {
"name": "venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"product_id": "venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch"
}
},
{
"category": "product_version",
"name": "venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"product": {
"name": "venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"product_id": "venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch"
}
},
{
"category": "product_version",
"name": "venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"product": {
"name": "venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"product_id": "venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch"
}
},
{
"category": "product_version",
"name": "crowbar-ha-5.0+git.1574286229.e0364c3-3.29.3.noarch",
"product": {
"name": "crowbar-ha-5.0+git.1574286229.e0364c3-3.29.3.noarch",
"product_id": "crowbar-ha-5.0+git.1574286229.e0364c3-3.29.3.noarch"
}
},
{
"category": "product_version",
"name": "crowbar-openstack-5.0+git.1582911795.5081ef1da-4.34.3.noarch",
"product": {
"name": "crowbar-openstack-5.0+git.1582911795.5081ef1da-4.34.3.noarch",
"product_id": "crowbar-openstack-5.0+git.1582911795.5081ef1da-4.34.3.noarch"
}
},
{
"category": "product_version",
"name": "crowbar-ui-1.2.0+git.1575896697.a01a3a08-3.15.3.noarch",
"product": {
"name": "crowbar-ui-1.2.0+git.1575896697.a01a3a08-3.15.3.noarch",
"product_id": "crowbar-ui-1.2.0+git.1575896697.a01a3a08-3.15.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-cinder-test-11.2.3~dev23-3.24.4.noarch",
"product": {
"name": "openstack-cinder-test-11.2.3~dev23-3.24.4.noarch",
"product_id": "openstack-cinder-test-11.2.3~dev23-3.24.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-dashboard-test-12.0.5~dev2-3.23.4.noarch",
"product": {
"name": "openstack-dashboard-test-12.0.5~dev2-3.23.4.noarch",
"product_id": "openstack-dashboard-test-12.0.5~dev2-3.23.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"product": {
"name": "openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"product_id": "openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-horizon-plugin-designate-ui-test-5.0.3~dev2-3.9.3.noarch",
"product": {
"name": "openstack-horizon-plugin-designate-ui-test-5.0.3~dev2-3.9.3.noarch",
"product_id": "openstack-horizon-plugin-designate-ui-test-5.0.3~dev2-3.9.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-horizon-plugin-neutron-lbaas-ui-test-3.0.3~dev5-3.14.3.noarch",
"product": {
"name": "openstack-horizon-plugin-neutron-lbaas-ui-test-3.0.3~dev5-3.14.3.noarch",
"product_id": "openstack-horizon-plugin-neutron-lbaas-ui-test-3.0.3~dev5-3.14.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-ironic-test-9.1.8~dev8-3.24.4.noarch",
"product": {
"name": "openstack-ironic-test-9.1.8~dev8-3.24.4.noarch",
"product_id": "openstack-ironic-test-9.1.8~dev8-3.24.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-keystone-test-12.0.4~dev5-5.30.4.noarch",
"product": {
"name": "openstack-keystone-test-12.0.4~dev5-5.30.4.noarch",
"product_id": "openstack-keystone-test-12.0.4~dev5-5.30.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-neutron-gbp-test-7.3.1~dev72-3.12.3.noarch",
"product": {
"name": "openstack-neutron-gbp-test-7.3.1~dev72-3.12.3.noarch",
"product_id": "openstack-neutron-gbp-test-7.3.1~dev72-3.12.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-neutron-test-11.0.9~dev60-3.27.4.noarch",
"product": {
"name": "openstack-neutron-test-11.0.9~dev60-3.27.4.noarch",
"product_id": "openstack-neutron-test-11.0.9~dev60-3.27.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-neutron-vsphere-test-2.0.1~dev133-3.12.3.noarch",
"product": {
"name": "openstack-neutron-vsphere-test-2.0.1~dev133-3.12.3.noarch",
"product_id": "openstack-neutron-vsphere-test-2.0.1~dev133-3.12.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-nova-network-16.1.9~dev49-3.32.4.noarch",
"product": {
"name": "openstack-nova-network-16.1.9~dev49-3.32.4.noarch",
"product_id": "openstack-nova-network-16.1.9~dev49-3.32.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-nova-test-16.1.9~dev49-3.32.4.noarch",
"product": {
"name": "openstack-nova-test-16.1.9~dev49-3.32.4.noarch",
"product_id": "openstack-nova-test-16.1.9~dev49-3.32.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-octavia-network-namespace-scripts-1.0.6~dev3-4.21.3.noarch",
"product": {
"name": "openstack-octavia-network-namespace-scripts-1.0.6~dev3-4.21.3.noarch",
"product_id": "openstack-octavia-network-namespace-scripts-1.0.6~dev3-4.21.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-octavia-test-1.0.6~dev3-4.21.3.noarch",
"product": {
"name": "openstack-octavia-test-1.0.6~dev3-4.21.3.noarch",
"product_id": "openstack-octavia-test-1.0.6~dev3-4.21.3.noarch"
}
},
{
"category": "product_version",
"name": "openstack-sahara-test-7.0.5~dev4-3.12.4.noarch",
"product": {
"name": "openstack-sahara-test-7.0.5~dev4-3.12.4.noarch",
"product_id": "openstack-sahara-test-7.0.5~dev4-3.12.4.noarch"
}
},
{
"category": "product_version",
"name": "openstack-trove-test-8.0.2~dev2-3.12.3.noarch",
"product": {
"name": "openstack-trove-test-8.0.2~dev2-3.12.3.noarch",
"product_id": "openstack-trove-test-8.0.2~dev2-3.12.3.noarch"
}
},
{
"category": "product_version",
"name": "python-congressclient-doc-1.8.1-3.3.4.noarch",
"product": {
"name": "python-congressclient-doc-1.8.1-3.3.4.noarch",
"product_id": "python-congressclient-doc-1.8.1-3.3.4.noarch"
}
},
{
"category": "product_version",
"name": "python-freezegun-0.3.9-1.3.3.noarch",
"product": {
"name": "python-freezegun-0.3.9-1.3.3.noarch",
"product_id": "python-freezegun-0.3.9-1.3.3.noarch"
}
},
{
"category": "product_version",
"name": "python-networking-cisco-tempest_plugin-6.1.1~dev65-3.3.3.noarch",
"product": {
"name": "python-networking-cisco-tempest_plugin-6.1.1~dev65-3.3.3.noarch",
"product_id": "python-networking-cisco-tempest_plugin-6.1.1~dev65-3.3.3.noarch"
}
},
{
"category": "product_version",
"name": "python-networking-cisco-test-6.1.1~dev65-3.3.3.noarch",
"product": {
"name": "python-networking-cisco-test-6.1.1~dev65-3.3.3.noarch",
"product_id": "python-networking-cisco-test-6.1.1~dev65-3.3.3.noarch"
}
},
{
"category": "product_version",
"name": "python-osc-lib-doc-1.7.1-3.3.3.noarch",
"product": {
"name": "python-osc-lib-doc-1.7.1-3.3.3.noarch",
"product_id": "python-osc-lib-doc-1.7.1-3.3.3.noarch"
}
},
{
"category": "product_version",
"name": "python-oslo.context-doc-2.17.2-3.3.3.noarch",
"product": {
"name": "python-oslo.context-doc-2.17.2-3.3.3.noarch",
"product_id": "python-oslo.context-doc-2.17.2-3.3.3.noarch"
}
},
{
"category": "product_version",
"name": "python-oslo.rootwrap-doc-5.9.3-3.3.3.noarch",
"product": {
"name": "python-oslo.rootwrap-doc-5.9.3-3.3.3.noarch",
"product_id": "python-oslo.rootwrap-doc-5.9.3-3.3.3.noarch"
}
},
{
"category": "product_version",
"name": "python-oslo.serialization-doc-2.20.3-3.3.3.noarch",
"product": {
"name": "python-oslo.serialization-doc-2.20.3-3.3.3.noarch",
"product_id": "python-oslo.serialization-doc-2.20.3-3.3.3.noarch"
}
},
{
"category": "product_version",
"name": "python-oslo.service-doc-1.25.2-3.3.3.noarch",
"product": {
"name": "python-oslo.service-doc-1.25.2-3.3.3.noarch",
"product_id": "python-oslo.service-doc-1.25.2-3.3.3.noarch"
}
},
{
"category": "product_version",
"name": "python-stevedore-doc-1.25.2-3.3.3.noarch",
"product": {
"name": "python-stevedore-doc-1.25.2-3.3.3.noarch",
"product_id": "python-stevedore-doc-1.25.2-3.3.3.noarch"
}
},
{
"category": "product_version",
"name": "python-taskflow-doc-2.14.2-3.3.3.noarch",
"product": {
"name": "python-taskflow-doc-2.14.2-3.3.3.noarch",
"product_id": "python-taskflow-doc-2.14.2-3.3.3.noarch"
}
},
{
"category": "product_version",
"name": "python3-freezegun-0.3.9-1.3.3.noarch",
"product": {
"name": "python3-freezegun-0.3.9-1.3.3.noarch",
"product_id": "python3-freezegun-0.3.9-1.3.3.noarch"
}
},
{
"category": "product_version",
"name": "venv-openstack-horizon-x86_64-12.0.5~dev2-14.28.2.noarch",
"product": {
"name": "venv-openstack-horizon-x86_64-12.0.5~dev2-14.28.2.noarch",
"product_id": "venv-openstack-horizon-x86_64-12.0.5~dev2-14.28.2.noarch"
}
},
{
"category": "product_version",
"name": "venv-openstack-zaqar-x86_64-5.0.1-10.8.2.noarch",
"product": {
"name": "venv-openstack-zaqar-x86_64-5.0.1-10.8.2.noarch",
"product_id": "venv-openstack-zaqar-x86_64-5.0.1-10.8.2.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "crowbar-core-5.0+git.1582968668.1a55c77c5-3.35.4.ppc64le",
"product": {
"name": "crowbar-core-5.0+git.1582968668.1a55c77c5-3.35.4.ppc64le",
"product_id": "crowbar-core-5.0+git.1582968668.1a55c77c5-3.35.4.ppc64le"
}
},
{
"category": "product_version",
"name": "crowbar-core-branding-upstream-5.0+git.1582968668.1a55c77c5-3.35.4.ppc64le",
"product": {
"name": "crowbar-core-branding-upstream-5.0+git.1582968668.1a55c77c5-3.35.4.ppc64le",
"product_id": "crowbar-core-branding-upstream-5.0+git.1582968668.1a55c77c5-3.35.4.ppc64le"
}
},
{
"category": "product_version",
"name": "crowbar-core-devel-5.0+git.1582968668.1a55c77c5-3.35.4.ppc64le",
"product": {
"name": "crowbar-core-devel-5.0+git.1582968668.1a55c77c5-3.35.4.ppc64le",
"product_id": "crowbar-core-devel-5.0+git.1582968668.1a55c77c5-3.35.4.ppc64le"
}
},
{
"category": "product_version",
"name": "keepalived-2.0.19-3.6.3.ppc64le",
"product": {
"name": "keepalived-2.0.19-3.6.3.ppc64le",
"product_id": "keepalived-2.0.19-3.6.3.ppc64le"
}
},
{
"category": "product_version",
"name": "libmysqld-devel-10.2.31-4.17.3.ppc64le",
"product": {
"name": "libmysqld-devel-10.2.31-4.17.3.ppc64le",
"product_id": "libmysqld-devel-10.2.31-4.17.3.ppc64le"
}
},
{
"category": "product_version",
"name": "libmysqld19-10.2.31-4.17.3.ppc64le",
"product": {
"name": "libmysqld19-10.2.31-4.17.3.ppc64le",
"product_id": "libmysqld19-10.2.31-4.17.3.ppc64le"
}
},
{
"category": "product_version",
"name": "mariadb-10.2.31-4.17.3.ppc64le",
"product": {
"name": "mariadb-10.2.31-4.17.3.ppc64le",
"product_id": "mariadb-10.2.31-4.17.3.ppc64le"
}
},
{
"category": "product_version",
"name": "mariadb-bench-10.2.31-4.17.3.ppc64le",
"product": {
"name": "mariadb-bench-10.2.31-4.17.3.ppc64le",
"product_id": "mariadb-bench-10.2.31-4.17.3.ppc64le"
}
},
{
"category": "product_version",
"name": "mariadb-client-10.2.31-4.17.3.ppc64le",
"product": {
"name": "mariadb-client-10.2.31-4.17.3.ppc64le",
"product_id": "mariadb-client-10.2.31-4.17.3.ppc64le"
}
},
{
"category": "product_version",
"name": "mariadb-galera-10.2.31-4.17.3.ppc64le",
"product": {
"name": "mariadb-galera-10.2.31-4.17.3.ppc64le",
"product_id": "mariadb-galera-10.2.31-4.17.3.ppc64le"
}
},
{
"category": "product_version",
"name": "mariadb-test-10.2.31-4.17.3.ppc64le",
"product": {
"name": "mariadb-test-10.2.31-4.17.3.ppc64le",
"product_id": "mariadb-test-10.2.31-4.17.3.ppc64le"
}
},
{
"category": "product_version",
"name": "mariadb-tools-10.2.31-4.17.3.ppc64le",
"product": {
"name": "mariadb-tools-10.2.31-4.17.3.ppc64le",
"product_id": "mariadb-tools-10.2.31-4.17.3.ppc64le"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-crowbar-client-3.9.1-3.9.3.ppc64le",
"product": {
"name": "ruby2.1-rubygem-crowbar-client-3.9.1-3.9.3.ppc64le",
"product_id": "ruby2.1-rubygem-crowbar-client-3.9.1-3.9.3.ppc64le"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-crowbar-client-doc-3.9.1-3.9.3.ppc64le",
"product": {
"name": "ruby2.1-rubygem-crowbar-client-doc-3.9.1-3.9.3.ppc64le",
"product_id": "ruby2.1-rubygem-crowbar-client-doc-3.9.1-3.9.3.ppc64le"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-crowbar-client-testsuite-3.9.1-3.9.3.ppc64le",
"product": {
"name": "ruby2.1-rubygem-crowbar-client-testsuite-3.9.1-3.9.3.ppc64le",
"product_id": "ruby2.1-rubygem-crowbar-client-testsuite-3.9.1-3.9.3.ppc64le"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-puma-2.16.0-3.3.3.ppc64le",
"product": {
"name": "ruby2.1-rubygem-puma-2.16.0-3.3.3.ppc64le",
"product_id": "ruby2.1-rubygem-puma-2.16.0-3.3.3.ppc64le"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-puma-doc-2.16.0-3.3.3.ppc64le",
"product": {
"name": "ruby2.1-rubygem-puma-doc-2.16.0-3.3.3.ppc64le",
"product_id": "ruby2.1-rubygem-puma-doc-2.16.0-3.3.3.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "crowbar-core-5.0+git.1582968668.1a55c77c5-3.35.4.s390x",
"product": {
"name": "crowbar-core-5.0+git.1582968668.1a55c77c5-3.35.4.s390x",
"product_id": "crowbar-core-5.0+git.1582968668.1a55c77c5-3.35.4.s390x"
}
},
{
"category": "product_version",
"name": "crowbar-core-branding-upstream-5.0+git.1582968668.1a55c77c5-3.35.4.s390x",
"product": {
"name": "crowbar-core-branding-upstream-5.0+git.1582968668.1a55c77c5-3.35.4.s390x",
"product_id": "crowbar-core-branding-upstream-5.0+git.1582968668.1a55c77c5-3.35.4.s390x"
}
},
{
"category": "product_version",
"name": "crowbar-core-devel-5.0+git.1582968668.1a55c77c5-3.35.4.s390x",
"product": {
"name": "crowbar-core-devel-5.0+git.1582968668.1a55c77c5-3.35.4.s390x",
"product_id": "crowbar-core-devel-5.0+git.1582968668.1a55c77c5-3.35.4.s390x"
}
},
{
"category": "product_version",
"name": "keepalived-2.0.19-3.6.3.s390x",
"product": {
"name": "keepalived-2.0.19-3.6.3.s390x",
"product_id": "keepalived-2.0.19-3.6.3.s390x"
}
},
{
"category": "product_version",
"name": "libmysqld-devel-10.2.31-4.17.3.s390x",
"product": {
"name": "libmysqld-devel-10.2.31-4.17.3.s390x",
"product_id": "libmysqld-devel-10.2.31-4.17.3.s390x"
}
},
{
"category": "product_version",
"name": "libmysqld19-10.2.31-4.17.3.s390x",
"product": {
"name": "libmysqld19-10.2.31-4.17.3.s390x",
"product_id": "libmysqld19-10.2.31-4.17.3.s390x"
}
},
{
"category": "product_version",
"name": "mariadb-10.2.31-4.17.3.s390x",
"product": {
"name": "mariadb-10.2.31-4.17.3.s390x",
"product_id": "mariadb-10.2.31-4.17.3.s390x"
}
},
{
"category": "product_version",
"name": "mariadb-bench-10.2.31-4.17.3.s390x",
"product": {
"name": "mariadb-bench-10.2.31-4.17.3.s390x",
"product_id": "mariadb-bench-10.2.31-4.17.3.s390x"
}
},
{
"category": "product_version",
"name": "mariadb-client-10.2.31-4.17.3.s390x",
"product": {
"name": "mariadb-client-10.2.31-4.17.3.s390x",
"product_id": "mariadb-client-10.2.31-4.17.3.s390x"
}
},
{
"category": "product_version",
"name": "mariadb-galera-10.2.31-4.17.3.s390x",
"product": {
"name": "mariadb-galera-10.2.31-4.17.3.s390x",
"product_id": "mariadb-galera-10.2.31-4.17.3.s390x"
}
},
{
"category": "product_version",
"name": "mariadb-test-10.2.31-4.17.3.s390x",
"product": {
"name": "mariadb-test-10.2.31-4.17.3.s390x",
"product_id": "mariadb-test-10.2.31-4.17.3.s390x"
}
},
{
"category": "product_version",
"name": "mariadb-tools-10.2.31-4.17.3.s390x",
"product": {
"name": "mariadb-tools-10.2.31-4.17.3.s390x",
"product_id": "mariadb-tools-10.2.31-4.17.3.s390x"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-crowbar-client-3.9.1-3.9.3.s390x",
"product": {
"name": "ruby2.1-rubygem-crowbar-client-3.9.1-3.9.3.s390x",
"product_id": "ruby2.1-rubygem-crowbar-client-3.9.1-3.9.3.s390x"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-crowbar-client-doc-3.9.1-3.9.3.s390x",
"product": {
"name": "ruby2.1-rubygem-crowbar-client-doc-3.9.1-3.9.3.s390x",
"product_id": "ruby2.1-rubygem-crowbar-client-doc-3.9.1-3.9.3.s390x"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-crowbar-client-testsuite-3.9.1-3.9.3.s390x",
"product": {
"name": "ruby2.1-rubygem-crowbar-client-testsuite-3.9.1-3.9.3.s390x",
"product_id": "ruby2.1-rubygem-crowbar-client-testsuite-3.9.1-3.9.3.s390x"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-puma-2.16.0-3.3.3.s390x",
"product": {
"name": "ruby2.1-rubygem-puma-2.16.0-3.3.3.s390x",
"product_id": "ruby2.1-rubygem-puma-2.16.0-3.3.3.s390x"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-puma-doc-2.16.0-3.3.3.s390x",
"product": {
"name": "ruby2.1-rubygem-puma-doc-2.16.0-3.3.3.s390x",
"product_id": "ruby2.1-rubygem-puma-doc-2.16.0-3.3.3.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "keepalived-2.0.19-3.6.3.x86_64",
"product": {
"name": "keepalived-2.0.19-3.6.3.x86_64",
"product_id": "keepalived-2.0.19-3.6.3.x86_64"
}
},
{
"category": "product_version",
"name": "mariadb-10.2.31-4.17.3.x86_64",
"product": {
"name": "mariadb-10.2.31-4.17.3.x86_64",
"product_id": "mariadb-10.2.31-4.17.3.x86_64"
}
},
{
"category": "product_version",
"name": "mariadb-client-10.2.31-4.17.3.x86_64",
"product": {
"name": "mariadb-client-10.2.31-4.17.3.x86_64",
"product_id": "mariadb-client-10.2.31-4.17.3.x86_64"
}
},
{
"category": "product_version",
"name": "mariadb-galera-10.2.31-4.17.3.x86_64",
"product": {
"name": "mariadb-galera-10.2.31-4.17.3.x86_64",
"product_id": "mariadb-galera-10.2.31-4.17.3.x86_64"
}
},
{
"category": "product_version",
"name": "mariadb-tools-10.2.31-4.17.3.x86_64",
"product": {
"name": "mariadb-tools-10.2.31-4.17.3.x86_64",
"product_id": "mariadb-tools-10.2.31-4.17.3.x86_64"
}
},
{
"category": "product_version",
"name": "crowbar-core-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"product": {
"name": "crowbar-core-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"product_id": "crowbar-core-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64"
}
},
{
"category": "product_version",
"name": "crowbar-core-branding-upstream-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"product": {
"name": "crowbar-core-branding-upstream-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"product_id": "crowbar-core-branding-upstream-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64"
}
},
{
"category": "product_version",
"name": "crowbar-core-devel-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"product": {
"name": "crowbar-core-devel-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"product_id": "crowbar-core-devel-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64"
}
},
{
"category": "product_version",
"name": "libmysqld-devel-10.2.31-4.17.3.x86_64",
"product": {
"name": "libmysqld-devel-10.2.31-4.17.3.x86_64",
"product_id": "libmysqld-devel-10.2.31-4.17.3.x86_64"
}
},
{
"category": "product_version",
"name": "libmysqld19-10.2.31-4.17.3.x86_64",
"product": {
"name": "libmysqld19-10.2.31-4.17.3.x86_64",
"product_id": "libmysqld19-10.2.31-4.17.3.x86_64"
}
},
{
"category": "product_version",
"name": "mariadb-bench-10.2.31-4.17.3.x86_64",
"product": {
"name": "mariadb-bench-10.2.31-4.17.3.x86_64",
"product_id": "mariadb-bench-10.2.31-4.17.3.x86_64"
}
},
{
"category": "product_version",
"name": "mariadb-test-10.2.31-4.17.3.x86_64",
"product": {
"name": "mariadb-test-10.2.31-4.17.3.x86_64",
"product_id": "mariadb-test-10.2.31-4.17.3.x86_64"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-crowbar-client-3.9.1-3.9.3.x86_64",
"product": {
"name": "ruby2.1-rubygem-crowbar-client-3.9.1-3.9.3.x86_64",
"product_id": "ruby2.1-rubygem-crowbar-client-3.9.1-3.9.3.x86_64"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-crowbar-client-doc-3.9.1-3.9.3.x86_64",
"product": {
"name": "ruby2.1-rubygem-crowbar-client-doc-3.9.1-3.9.3.x86_64",
"product_id": "ruby2.1-rubygem-crowbar-client-doc-3.9.1-3.9.3.x86_64"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-crowbar-client-testsuite-3.9.1-3.9.3.x86_64",
"product": {
"name": "ruby2.1-rubygem-crowbar-client-testsuite-3.9.1-3.9.3.x86_64",
"product_id": "ruby2.1-rubygem-crowbar-client-testsuite-3.9.1-3.9.3.x86_64"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-puma-2.16.0-3.3.3.x86_64",
"product": {
"name": "ruby2.1-rubygem-puma-2.16.0-3.3.3.x86_64",
"product_id": "ruby2.1-rubygem-puma-2.16.0-3.3.3.x86_64"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-puma-doc-2.16.0-3.3.3.x86_64",
"product": {
"name": "ruby2.1-rubygem-puma-doc-2.16.0-3.3.3.x86_64",
"product_id": "ruby2.1-rubygem-puma-doc-2.16.0-3.3.3.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "HPE Helion OpenStack 8",
"product": {
"name": "HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:hpe-helion-openstack:8"
}
}
},
{
"category": "product_name",
"name": "SUSE OpenStack Cloud 8",
"product": {
"name": "SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-openstack-cloud:8"
}
}
},
{
"category": "product_name",
"name": "SUSE OpenStack Cloud Crowbar 8",
"product": {
"name": "SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-openstack-cloud-crowbar:8"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch"
},
"product_reference": "ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch"
},
"product_reference": "ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch"
},
"product_reference": "ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch"
},
"product_reference": "ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch"
},
"product_reference": "ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch"
},
"product_reference": "ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch"
},
"product_reference": "ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch"
},
"product_reference": "ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch"
},
"product_reference": "ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch"
},
"product_reference": "ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch"
},
"product_reference": "ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch"
},
"product_reference": "ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch"
},
"product_reference": "ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch"
},
"product_reference": "ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch"
},
"product_reference": "ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch"
},
"product_reference": "ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch"
},
"product_reference": "ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch"
},
"product_reference": "ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch"
},
"product_reference": "ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "keepalived-2.0.19-3.6.3.x86_64 as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:keepalived-2.0.19-3.6.3.x86_64"
},
"product_reference": "keepalived-2.0.19-3.6.3.x86_64",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-10.2.31-4.17.3.x86_64 as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:mariadb-10.2.31-4.17.3.x86_64"
},
"product_reference": "mariadb-10.2.31-4.17.3.x86_64",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-client-10.2.31-4.17.3.x86_64 as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:mariadb-client-10.2.31-4.17.3.x86_64"
},
"product_reference": "mariadb-client-10.2.31-4.17.3.x86_64",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-errormessages-10.2.31-4.17.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:mariadb-errormessages-10.2.31-4.17.3.noarch"
},
"product_reference": "mariadb-errormessages-10.2.31-4.17.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-galera-10.2.31-4.17.3.x86_64 as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:mariadb-galera-10.2.31-4.17.3.x86_64"
},
"product_reference": "mariadb-galera-10.2.31-4.17.3.x86_64",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-tools-10.2.31-4.17.3.x86_64 as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:mariadb-tools-10.2.31-4.17.3.x86_64"
},
"product_reference": "mariadb-tools-10.2.31-4.17.3.x86_64",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-cinder-11.2.3~dev23-3.24.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch"
},
"product_reference": "openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-cinder-api-11.2.3~dev23-3.24.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch"
},
"product_reference": "openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch"
},
"product_reference": "openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch"
},
"product_reference": "openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch"
},
"product_reference": "openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch"
},
"product_reference": "openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-dashboard-12.0.5~dev2-3.23.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch"
},
"product_reference": "openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-9.0.8~dev22-3.27.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-heat-9.0.8~dev22-3.27.4.noarch"
},
"product_reference": "openstack-heat-9.0.8~dev22-3.27.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-api-9.0.8~dev22-3.27.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch"
},
"product_reference": "openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch"
},
"product_reference": "openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch"
},
"product_reference": "openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-doc-9.0.8~dev22-3.27.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch"
},
"product_reference": "openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-engine-9.0.8~dev22-3.27.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch"
},
"product_reference": "openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch"
},
"product_reference": "openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch"
},
"product_reference": "openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-test-9.0.8~dev22-3.27.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch"
},
"product_reference": "openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch"
},
"product_reference": "openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch"
},
"product_reference": "openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-ironic-9.1.8~dev8-3.24.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch"
},
"product_reference": "openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-ironic-api-9.1.8~dev8-3.24.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch"
},
"product_reference": "openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch"
},
"product_reference": "openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch"
},
"product_reference": "openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-keystone-12.0.4~dev5-5.30.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch"
},
"product_reference": "openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch"
},
"product_reference": "openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch"
},
"product_reference": "openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-11.0.9~dev60-3.27.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch"
},
"product_reference": "openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch"
},
"product_reference": "openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch"
},
"product_reference": "openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch"
},
"product_reference": "openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch"
},
"product_reference": "openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch"
},
"product_reference": "openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch"
},
"product_reference": "openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch"
},
"product_reference": "openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch"
},
"product_reference": "openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch"
},
"product_reference": "openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch"
},
"product_reference": "openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-server-11.0.9~dev60-3.27.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch"
},
"product_reference": "openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch"
},
"product_reference": "openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch"
},
"product_reference": "openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch"
},
"product_reference": "openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch"
},
"product_reference": "openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-16.1.9~dev49-3.32.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-nova-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-api-16.1.9~dev49-3.32.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-cells-16.1.9~dev49-3.32.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-compute-16.1.9~dev49-3.32.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-console-16.1.9~dev49-3.32.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-doc-16.1.9~dev49-3.32.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch"
},
"product_reference": "openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-octavia-1.0.6~dev3-4.21.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch"
},
"product_reference": "openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch"
},
"product_reference": "openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch"
},
"product_reference": "openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-octavia-api-1.0.6~dev3-4.21.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch"
},
"product_reference": "openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch"
},
"product_reference": "openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch"
},
"product_reference": "openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch"
},
"product_reference": "openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch"
},
"product_reference": "openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-sahara-7.0.5~dev4-3.12.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch"
},
"product_reference": "openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-sahara-api-7.0.5~dev4-3.12.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch"
},
"product_reference": "openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch"
},
"product_reference": "openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch"
},
"product_reference": "openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-trove-8.0.2~dev2-3.12.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-trove-8.0.2~dev2-3.12.3.noarch"
},
"product_reference": "openstack-trove-8.0.2~dev2-3.12.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-trove-api-8.0.2~dev2-3.12.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch"
},
"product_reference": "openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch"
},
"product_reference": "openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-trove-doc-8.0.2~dev2-3.12.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch"
},
"product_reference": "openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch"
},
"product_reference": "openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch"
},
"product_reference": "openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-cinder-11.2.3~dev23-3.24.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:python-cinder-11.2.3~dev23-3.24.4.noarch"
},
"product_reference": "python-cinder-11.2.3~dev23-3.24.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch"
},
"product_reference": "python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-congressclient-1.8.1-3.3.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:python-congressclient-1.8.1-3.3.4.noarch"
},
"product_reference": "python-congressclient-1.8.1-3.3.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-designateclient-2.7.1-3.3.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:python-designateclient-2.7.1-3.3.4.noarch"
},
"product_reference": "python-designateclient-2.7.1-3.3.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-designateclient-doc-2.7.1-3.3.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:python-designateclient-doc-2.7.1-3.3.4.noarch"
},
"product_reference": "python-designateclient-doc-2.7.1-3.3.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-heat-9.0.8~dev22-3.27.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:python-heat-9.0.8~dev22-3.27.4.noarch"
},
"product_reference": "python-heat-9.0.8~dev22-3.27.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-horizon-12.0.5~dev2-3.23.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:python-horizon-12.0.5~dev2-3.23.4.noarch"
},
"product_reference": "python-horizon-12.0.5~dev2-3.23.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch"
},
"product_reference": "python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch"
},
"product_reference": "python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-ironic-9.1.8~dev8-3.24.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:python-ironic-9.1.8~dev8-3.24.4.noarch"
},
"product_reference": "python-ironic-9.1.8~dev8-3.24.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-ironic-lib-2.10.2-3.3.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:python-ironic-lib-2.10.2-3.3.3.noarch"
},
"product_reference": "python-ironic-lib-2.10.2-3.3.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-keystone-12.0.4~dev5-5.30.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:python-keystone-12.0.4~dev5-5.30.4.noarch"
},
"product_reference": "python-keystone-12.0.4~dev5-5.30.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-monasca-agent-2.2.5~dev5-3.15.2.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch"
},
"product_reference": "python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-networking-cisco-6.1.1~dev65-3.3.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch"
},
"product_reference": "python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-networking-vsphere-2.0.1~dev133-3.12.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch"
},
"product_reference": "python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-neutron-11.0.9~dev60-3.27.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:python-neutron-11.0.9~dev60-3.27.4.noarch"
},
"product_reference": "python-neutron-11.0.9~dev60-3.27.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-neutron-gbp-7.3.1~dev72-3.12.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch"
},
"product_reference": "python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-nova-16.1.9~dev49-3.32.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:python-nova-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "python-nova-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-octavia-1.0.6~dev3-4.21.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:python-octavia-1.0.6~dev3-4.21.3.noarch"
},
"product_reference": "python-octavia-1.0.6~dev3-4.21.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-osc-lib-1.7.1-3.3.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:python-osc-lib-1.7.1-3.3.3.noarch"
},
"product_reference": "python-osc-lib-1.7.1-3.3.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo.context-2.17.2-3.3.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:python-oslo.context-2.17.2-3.3.3.noarch"
},
"product_reference": "python-oslo.context-2.17.2-3.3.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo.rootwrap-5.9.3-3.3.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch"
},
"product_reference": "python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo.serialization-2.20.3-3.3.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:python-oslo.serialization-2.20.3-3.3.3.noarch"
},
"product_reference": "python-oslo.serialization-2.20.3-3.3.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo.service-1.25.2-3.3.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:python-oslo.service-1.25.2-3.3.3.noarch"
},
"product_reference": "python-oslo.service-1.25.2-3.3.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-sahara-7.0.5~dev4-3.12.4.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:python-sahara-7.0.5~dev4-3.12.4.noarch"
},
"product_reference": "python-sahara-7.0.5~dev4-3.12.4.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-stevedore-1.25.2-3.3.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:python-stevedore-1.25.2-3.3.3.noarch"
},
"product_reference": "python-stevedore-1.25.2-3.3.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-taskflow-2.14.2-3.3.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:python-taskflow-2.14.2-3.3.3.noarch"
},
"product_reference": "python-taskflow-2.14.2-3.3.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-trove-8.0.2~dev2-3.12.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:python-trove-8.0.2~dev2-3.12.3.noarch"
},
"product_reference": "python-trove-8.0.2~dev2-3.12.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch"
},
"product_reference": "venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch"
},
"product_reference": "venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch"
},
"product_reference": "venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch"
},
"product_reference": "venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch"
},
"product_reference": "venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch"
},
"product_reference": "venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch"
},
"product_reference": "venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch"
},
"product_reference": "venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-horizon-hpe-x86_64-12.0.5~dev2-14.28.2.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:venv-openstack-horizon-hpe-x86_64-12.0.5~dev2-14.28.2.noarch"
},
"product_reference": "venv-openstack-horizon-hpe-x86_64-12.0.5~dev2-14.28.2.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch"
},
"product_reference": "venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch"
},
"product_reference": "venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch"
},
"product_reference": "venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch"
},
"product_reference": "venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch"
},
"product_reference": "venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch"
},
"product_reference": "venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch"
},
"product_reference": "venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch"
},
"product_reference": "venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch"
},
"product_reference": "venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch"
},
"product_reference": "venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch"
},
"product_reference": "venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch"
},
"product_reference": "venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch"
},
"product_reference": "venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch"
},
"product_reference": "ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch"
},
"product_reference": "ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch"
},
"product_reference": "ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch"
},
"product_reference": "ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch"
},
"product_reference": "ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch"
},
"product_reference": "ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch"
},
"product_reference": "ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch"
},
"product_reference": "ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch"
},
"product_reference": "ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch"
},
"product_reference": "ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch"
},
"product_reference": "ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch"
},
"product_reference": "ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch"
},
"product_reference": "ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch"
},
"product_reference": "ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch"
},
"product_reference": "ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch"
},
"product_reference": "ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch"
},
"product_reference": "ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch"
},
"product_reference": "ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch"
},
"product_reference": "ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "keepalived-2.0.19-3.6.3.x86_64 as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:keepalived-2.0.19-3.6.3.x86_64"
},
"product_reference": "keepalived-2.0.19-3.6.3.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-10.2.31-4.17.3.x86_64 as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:mariadb-10.2.31-4.17.3.x86_64"
},
"product_reference": "mariadb-10.2.31-4.17.3.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-client-10.2.31-4.17.3.x86_64 as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:mariadb-client-10.2.31-4.17.3.x86_64"
},
"product_reference": "mariadb-client-10.2.31-4.17.3.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-errormessages-10.2.31-4.17.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.31-4.17.3.noarch"
},
"product_reference": "mariadb-errormessages-10.2.31-4.17.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-galera-10.2.31-4.17.3.x86_64 as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:mariadb-galera-10.2.31-4.17.3.x86_64"
},
"product_reference": "mariadb-galera-10.2.31-4.17.3.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-tools-10.2.31-4.17.3.x86_64 as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:mariadb-tools-10.2.31-4.17.3.x86_64"
},
"product_reference": "mariadb-tools-10.2.31-4.17.3.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-cinder-11.2.3~dev23-3.24.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch"
},
"product_reference": "openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-cinder-api-11.2.3~dev23-3.24.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch"
},
"product_reference": "openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch"
},
"product_reference": "openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch"
},
"product_reference": "openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch"
},
"product_reference": "openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch"
},
"product_reference": "openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-dashboard-12.0.5~dev2-3.23.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch"
},
"product_reference": "openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch"
},
"product_reference": "openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-9.0.8~dev22-3.27.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-heat-9.0.8~dev22-3.27.4.noarch"
},
"product_reference": "openstack-heat-9.0.8~dev22-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-api-9.0.8~dev22-3.27.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch"
},
"product_reference": "openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch"
},
"product_reference": "openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch"
},
"product_reference": "openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-doc-9.0.8~dev22-3.27.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch"
},
"product_reference": "openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-engine-9.0.8~dev22-3.27.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch"
},
"product_reference": "openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch"
},
"product_reference": "openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch"
},
"product_reference": "openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-test-9.0.8~dev22-3.27.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch"
},
"product_reference": "openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch"
},
"product_reference": "openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch"
},
"product_reference": "openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-ironic-9.1.8~dev8-3.24.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch"
},
"product_reference": "openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-ironic-api-9.1.8~dev8-3.24.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch"
},
"product_reference": "openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch"
},
"product_reference": "openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch"
},
"product_reference": "openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-keystone-12.0.4~dev5-5.30.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch"
},
"product_reference": "openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch"
},
"product_reference": "openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch"
},
"product_reference": "openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-11.0.9~dev60-3.27.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch"
},
"product_reference": "openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch"
},
"product_reference": "openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch"
},
"product_reference": "openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch"
},
"product_reference": "openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch"
},
"product_reference": "openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch"
},
"product_reference": "openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch"
},
"product_reference": "openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch"
},
"product_reference": "openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch"
},
"product_reference": "openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch"
},
"product_reference": "openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch"
},
"product_reference": "openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-server-11.0.9~dev60-3.27.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch"
},
"product_reference": "openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch"
},
"product_reference": "openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch"
},
"product_reference": "openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch"
},
"product_reference": "openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch"
},
"product_reference": "openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-16.1.9~dev49-3.32.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-nova-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-api-16.1.9~dev49-3.32.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-cells-16.1.9~dev49-3.32.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-compute-16.1.9~dev49-3.32.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-console-16.1.9~dev49-3.32.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-doc-16.1.9~dev49-3.32.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch"
},
"product_reference": "openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-octavia-1.0.6~dev3-4.21.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch"
},
"product_reference": "openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch"
},
"product_reference": "openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch"
},
"product_reference": "openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-octavia-api-1.0.6~dev3-4.21.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch"
},
"product_reference": "openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch"
},
"product_reference": "openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch"
},
"product_reference": "openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch"
},
"product_reference": "openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch"
},
"product_reference": "openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-sahara-7.0.5~dev4-3.12.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch"
},
"product_reference": "openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-sahara-api-7.0.5~dev4-3.12.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch"
},
"product_reference": "openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch"
},
"product_reference": "openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch"
},
"product_reference": "openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-trove-8.0.2~dev2-3.12.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-trove-8.0.2~dev2-3.12.3.noarch"
},
"product_reference": "openstack-trove-8.0.2~dev2-3.12.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-trove-api-8.0.2~dev2-3.12.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch"
},
"product_reference": "openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch"
},
"product_reference": "openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-trove-doc-8.0.2~dev2-3.12.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch"
},
"product_reference": "openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch"
},
"product_reference": "openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch"
},
"product_reference": "openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-cinder-11.2.3~dev23-3.24.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:python-cinder-11.2.3~dev23-3.24.4.noarch"
},
"product_reference": "python-cinder-11.2.3~dev23-3.24.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch"
},
"product_reference": "python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-congressclient-1.8.1-3.3.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:python-congressclient-1.8.1-3.3.4.noarch"
},
"product_reference": "python-congressclient-1.8.1-3.3.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-designateclient-2.7.1-3.3.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:python-designateclient-2.7.1-3.3.4.noarch"
},
"product_reference": "python-designateclient-2.7.1-3.3.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-designateclient-doc-2.7.1-3.3.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:python-designateclient-doc-2.7.1-3.3.4.noarch"
},
"product_reference": "python-designateclient-doc-2.7.1-3.3.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-freezegun-0.3.9-1.3.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:python-freezegun-0.3.9-1.3.3.noarch"
},
"product_reference": "python-freezegun-0.3.9-1.3.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-heat-9.0.8~dev22-3.27.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:python-heat-9.0.8~dev22-3.27.4.noarch"
},
"product_reference": "python-heat-9.0.8~dev22-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-horizon-12.0.5~dev2-3.23.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:python-horizon-12.0.5~dev2-3.23.4.noarch"
},
"product_reference": "python-horizon-12.0.5~dev2-3.23.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch"
},
"product_reference": "python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch"
},
"product_reference": "python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-ironic-9.1.8~dev8-3.24.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:python-ironic-9.1.8~dev8-3.24.4.noarch"
},
"product_reference": "python-ironic-9.1.8~dev8-3.24.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-ironic-lib-2.10.2-3.3.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:python-ironic-lib-2.10.2-3.3.3.noarch"
},
"product_reference": "python-ironic-lib-2.10.2-3.3.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-keystone-12.0.4~dev5-5.30.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:python-keystone-12.0.4~dev5-5.30.4.noarch"
},
"product_reference": "python-keystone-12.0.4~dev5-5.30.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-monasca-agent-2.2.5~dev5-3.15.2.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch"
},
"product_reference": "python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-networking-cisco-6.1.1~dev65-3.3.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch"
},
"product_reference": "python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-networking-vsphere-2.0.1~dev133-3.12.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch"
},
"product_reference": "python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-neutron-11.0.9~dev60-3.27.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:python-neutron-11.0.9~dev60-3.27.4.noarch"
},
"product_reference": "python-neutron-11.0.9~dev60-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-neutron-gbp-7.3.1~dev72-3.12.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch"
},
"product_reference": "python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-nova-16.1.9~dev49-3.32.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:python-nova-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "python-nova-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-octavia-1.0.6~dev3-4.21.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:python-octavia-1.0.6~dev3-4.21.3.noarch"
},
"product_reference": "python-octavia-1.0.6~dev3-4.21.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-osc-lib-1.7.1-3.3.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:python-osc-lib-1.7.1-3.3.3.noarch"
},
"product_reference": "python-osc-lib-1.7.1-3.3.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo.context-2.17.2-3.3.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:python-oslo.context-2.17.2-3.3.3.noarch"
},
"product_reference": "python-oslo.context-2.17.2-3.3.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo.rootwrap-5.9.3-3.3.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch"
},
"product_reference": "python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo.serialization-2.20.3-3.3.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:python-oslo.serialization-2.20.3-3.3.3.noarch"
},
"product_reference": "python-oslo.serialization-2.20.3-3.3.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo.service-1.25.2-3.3.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:python-oslo.service-1.25.2-3.3.3.noarch"
},
"product_reference": "python-oslo.service-1.25.2-3.3.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-sahara-7.0.5~dev4-3.12.4.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:python-sahara-7.0.5~dev4-3.12.4.noarch"
},
"product_reference": "python-sahara-7.0.5~dev4-3.12.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-stevedore-1.25.2-3.3.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:python-stevedore-1.25.2-3.3.3.noarch"
},
"product_reference": "python-stevedore-1.25.2-3.3.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-taskflow-2.14.2-3.3.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:python-taskflow-2.14.2-3.3.3.noarch"
},
"product_reference": "python-taskflow-2.14.2-3.3.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-trove-8.0.2~dev2-3.12.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:python-trove-8.0.2~dev2-3.12.3.noarch"
},
"product_reference": "python-trove-8.0.2~dev2-3.12.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch"
},
"product_reference": "venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch"
},
"product_reference": "venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch"
},
"product_reference": "venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch"
},
"product_reference": "venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch"
},
"product_reference": "venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch"
},
"product_reference": "venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch"
},
"product_reference": "venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch"
},
"product_reference": "venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-horizon-x86_64-12.0.5~dev2-14.28.2.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:venv-openstack-horizon-x86_64-12.0.5~dev2-14.28.2.noarch"
},
"product_reference": "venv-openstack-horizon-x86_64-12.0.5~dev2-14.28.2.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch"
},
"product_reference": "venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch"
},
"product_reference": "venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch"
},
"product_reference": "venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch"
},
"product_reference": "venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch"
},
"product_reference": "venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch"
},
"product_reference": "venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch"
},
"product_reference": "venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch"
},
"product_reference": "venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch"
},
"product_reference": "venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch"
},
"product_reference": "venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch"
},
"product_reference": "venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch"
},
"product_reference": "venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch"
},
"product_reference": "venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "crowbar-core-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:crowbar-core-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64"
},
"product_reference": "crowbar-core-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "crowbar-core-branding-upstream-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:crowbar-core-branding-upstream-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64"
},
"product_reference": "crowbar-core-branding-upstream-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "crowbar-ha-5.0+git.1574286229.e0364c3-3.29.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:crowbar-ha-5.0+git.1574286229.e0364c3-3.29.3.noarch"
},
"product_reference": "crowbar-ha-5.0+git.1574286229.e0364c3-3.29.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "crowbar-openstack-5.0+git.1582911795.5081ef1da-4.34.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:crowbar-openstack-5.0+git.1582911795.5081ef1da-4.34.3.noarch"
},
"product_reference": "crowbar-openstack-5.0+git.1582911795.5081ef1da-4.34.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "crowbar-ui-1.2.0+git.1575896697.a01a3a08-3.15.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:crowbar-ui-1.2.0+git.1575896697.a01a3a08-3.15.3.noarch"
},
"product_reference": "crowbar-ui-1.2.0+git.1575896697.a01a3a08-3.15.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "keepalived-2.0.19-3.6.3.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:keepalived-2.0.19-3.6.3.x86_64"
},
"product_reference": "keepalived-2.0.19-3.6.3.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-10.2.31-4.17.3.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:mariadb-10.2.31-4.17.3.x86_64"
},
"product_reference": "mariadb-10.2.31-4.17.3.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-client-10.2.31-4.17.3.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:mariadb-client-10.2.31-4.17.3.x86_64"
},
"product_reference": "mariadb-client-10.2.31-4.17.3.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-errormessages-10.2.31-4.17.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages-10.2.31-4.17.3.noarch"
},
"product_reference": "mariadb-errormessages-10.2.31-4.17.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-galera-10.2.31-4.17.3.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:mariadb-galera-10.2.31-4.17.3.x86_64"
},
"product_reference": "mariadb-galera-10.2.31-4.17.3.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-tools-10.2.31-4.17.3.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:mariadb-tools-10.2.31-4.17.3.x86_64"
},
"product_reference": "mariadb-tools-10.2.31-4.17.3.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-cinder-11.2.3~dev23-3.24.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch"
},
"product_reference": "openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-cinder-api-11.2.3~dev23-3.24.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch"
},
"product_reference": "openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch"
},
"product_reference": "openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch"
},
"product_reference": "openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch"
},
"product_reference": "openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch"
},
"product_reference": "openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-dashboard-12.0.5~dev2-3.23.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch"
},
"product_reference": "openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch"
},
"product_reference": "openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-9.0.8~dev22-3.27.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-heat-9.0.8~dev22-3.27.4.noarch"
},
"product_reference": "openstack-heat-9.0.8~dev22-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-api-9.0.8~dev22-3.27.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch"
},
"product_reference": "openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch"
},
"product_reference": "openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch"
},
"product_reference": "openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-doc-9.0.8~dev22-3.27.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch"
},
"product_reference": "openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-engine-9.0.8~dev22-3.27.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch"
},
"product_reference": "openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch"
},
"product_reference": "openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch"
},
"product_reference": "openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-test-9.0.8~dev22-3.27.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch"
},
"product_reference": "openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch"
},
"product_reference": "openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch"
},
"product_reference": "openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-ironic-9.1.8~dev8-3.24.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch"
},
"product_reference": "openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-ironic-api-9.1.8~dev8-3.24.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch"
},
"product_reference": "openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch"
},
"product_reference": "openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch"
},
"product_reference": "openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-keystone-12.0.4~dev5-5.30.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch"
},
"product_reference": "openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch"
},
"product_reference": "openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch"
},
"product_reference": "openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-11.0.9~dev60-3.27.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch"
},
"product_reference": "openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch"
},
"product_reference": "openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch"
},
"product_reference": "openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch"
},
"product_reference": "openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch"
},
"product_reference": "openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch"
},
"product_reference": "openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch"
},
"product_reference": "openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch"
},
"product_reference": "openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch"
},
"product_reference": "openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch"
},
"product_reference": "openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch"
},
"product_reference": "openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-server-11.0.9~dev60-3.27.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch"
},
"product_reference": "openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch"
},
"product_reference": "openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch"
},
"product_reference": "openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch"
},
"product_reference": "openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch"
},
"product_reference": "openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-16.1.9~dev49-3.32.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-nova-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-api-16.1.9~dev49-3.32.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-cells-16.1.9~dev49-3.32.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-compute-16.1.9~dev49-3.32.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-console-16.1.9~dev49-3.32.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-doc-16.1.9~dev49-3.32.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch"
},
"product_reference": "openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-octavia-1.0.6~dev3-4.21.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch"
},
"product_reference": "openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch"
},
"product_reference": "openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch"
},
"product_reference": "openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-octavia-api-1.0.6~dev3-4.21.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch"
},
"product_reference": "openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch"
},
"product_reference": "openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch"
},
"product_reference": "openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch"
},
"product_reference": "openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch"
},
"product_reference": "openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-sahara-7.0.5~dev4-3.12.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch"
},
"product_reference": "openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-sahara-api-7.0.5~dev4-3.12.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch"
},
"product_reference": "openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch"
},
"product_reference": "openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch"
},
"product_reference": "openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-trove-8.0.2~dev2-3.12.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-trove-8.0.2~dev2-3.12.3.noarch"
},
"product_reference": "openstack-trove-8.0.2~dev2-3.12.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-trove-api-8.0.2~dev2-3.12.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch"
},
"product_reference": "openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch"
},
"product_reference": "openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-trove-doc-8.0.2~dev2-3.12.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch"
},
"product_reference": "openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch"
},
"product_reference": "openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch"
},
"product_reference": "openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-cinder-11.2.3~dev23-3.24.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:python-cinder-11.2.3~dev23-3.24.4.noarch"
},
"product_reference": "python-cinder-11.2.3~dev23-3.24.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-congressclient-1.8.1-3.3.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:python-congressclient-1.8.1-3.3.4.noarch"
},
"product_reference": "python-congressclient-1.8.1-3.3.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-designateclient-2.7.1-3.3.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:python-designateclient-2.7.1-3.3.4.noarch"
},
"product_reference": "python-designateclient-2.7.1-3.3.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-designateclient-doc-2.7.1-3.3.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:python-designateclient-doc-2.7.1-3.3.4.noarch"
},
"product_reference": "python-designateclient-doc-2.7.1-3.3.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-freezegun-0.3.9-1.3.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:python-freezegun-0.3.9-1.3.3.noarch"
},
"product_reference": "python-freezegun-0.3.9-1.3.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-heat-9.0.8~dev22-3.27.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:python-heat-9.0.8~dev22-3.27.4.noarch"
},
"product_reference": "python-heat-9.0.8~dev22-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-horizon-12.0.5~dev2-3.23.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:python-horizon-12.0.5~dev2-3.23.4.noarch"
},
"product_reference": "python-horizon-12.0.5~dev2-3.23.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch"
},
"product_reference": "python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch"
},
"product_reference": "python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-ironic-9.1.8~dev8-3.24.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:python-ironic-9.1.8~dev8-3.24.4.noarch"
},
"product_reference": "python-ironic-9.1.8~dev8-3.24.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-ironic-lib-2.10.2-3.3.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:python-ironic-lib-2.10.2-3.3.3.noarch"
},
"product_reference": "python-ironic-lib-2.10.2-3.3.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-keystone-12.0.4~dev5-5.30.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:python-keystone-12.0.4~dev5-5.30.4.noarch"
},
"product_reference": "python-keystone-12.0.4~dev5-5.30.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-monasca-agent-2.2.5~dev5-3.15.2.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch"
},
"product_reference": "python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-networking-cisco-6.1.1~dev65-3.3.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch"
},
"product_reference": "python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-networking-vsphere-2.0.1~dev133-3.12.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch"
},
"product_reference": "python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-neutron-11.0.9~dev60-3.27.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:python-neutron-11.0.9~dev60-3.27.4.noarch"
},
"product_reference": "python-neutron-11.0.9~dev60-3.27.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-neutron-gbp-7.3.1~dev72-3.12.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch"
},
"product_reference": "python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-nova-16.1.9~dev49-3.32.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:python-nova-16.1.9~dev49-3.32.4.noarch"
},
"product_reference": "python-nova-16.1.9~dev49-3.32.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-octavia-1.0.6~dev3-4.21.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:python-octavia-1.0.6~dev3-4.21.3.noarch"
},
"product_reference": "python-octavia-1.0.6~dev3-4.21.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-osc-lib-1.7.1-3.3.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:python-osc-lib-1.7.1-3.3.3.noarch"
},
"product_reference": "python-osc-lib-1.7.1-3.3.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo.context-2.17.2-3.3.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:python-oslo.context-2.17.2-3.3.3.noarch"
},
"product_reference": "python-oslo.context-2.17.2-3.3.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo.rootwrap-5.9.3-3.3.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch"
},
"product_reference": "python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo.serialization-2.20.3-3.3.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:python-oslo.serialization-2.20.3-3.3.3.noarch"
},
"product_reference": "python-oslo.serialization-2.20.3-3.3.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo.service-1.25.2-3.3.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:python-oslo.service-1.25.2-3.3.3.noarch"
},
"product_reference": "python-oslo.service-1.25.2-3.3.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-sahara-7.0.5~dev4-3.12.4.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:python-sahara-7.0.5~dev4-3.12.4.noarch"
},
"product_reference": "python-sahara-7.0.5~dev4-3.12.4.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-stevedore-1.25.2-3.3.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:python-stevedore-1.25.2-3.3.3.noarch"
},
"product_reference": "python-stevedore-1.25.2-3.3.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-taskflow-2.14.2-3.3.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:python-taskflow-2.14.2-3.3.3.noarch"
},
"product_reference": "python-taskflow-2.14.2-3.3.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-trove-8.0.2~dev2-3.12.3.noarch as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:python-trove-8.0.2~dev2-3.12.3.noarch"
},
"product_reference": "python-trove-8.0.2~dev2-3.12.3.noarch",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.1-rubygem-crowbar-client-3.9.1-3.9.3.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-crowbar-client-3.9.1-3.9.3.x86_64"
},
"product_reference": "ruby2.1-rubygem-crowbar-client-3.9.1-3.9.3.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.1-rubygem-puma-2.16.0-3.3.3.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-puma-2.16.0-3.3.3.x86_64"
},
"product_reference": "ruby2.1-rubygem-puma-2.16.0-3.3.3.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2017-1002201",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-1002201"
}
],
"notes": [
{
"category": "general",
"text": "In haml versions prior to version 5.0.0.beta.2, when using user input to perform tasks on the server, characters like \u003c \u003e \" \u0027 must be escaped properly. In this case, the \u0027 character was missed. An attacker can manipulate the input to introduce additional attributes, potentially executing code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"HPE Helion OpenStack 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"HPE Helion OpenStack 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"HPE Helion OpenStack 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"HPE Helion OpenStack 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"HPE Helion OpenStack 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"HPE Helion OpenStack 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"HPE Helion OpenStack 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"HPE Helion OpenStack 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"HPE Helion OpenStack 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"HPE Helion OpenStack 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"HPE Helion OpenStack 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"HPE Helion OpenStack 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"HPE Helion OpenStack 8:keepalived-2.0.19-3.6.3.x86_64",
"HPE Helion OpenStack 8:mariadb-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-client-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"HPE Helion OpenStack 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"HPE Helion OpenStack 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"HPE Helion OpenStack 8:python-congressclient-1.8.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"HPE Helion OpenStack 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:python-osc-lib-1.7.1-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.context-2.17.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.service-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:python-stevedore-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-taskflow-2.14.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-horizon-hpe-x86_64-12.0.5~dev2-14.28.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"SUSE OpenStack Cloud 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"SUSE OpenStack Cloud 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"SUSE OpenStack Cloud 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"SUSE OpenStack Cloud 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"SUSE OpenStack Cloud 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"SUSE OpenStack Cloud 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"SUSE OpenStack Cloud 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"SUSE OpenStack Cloud 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"SUSE OpenStack Cloud 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"SUSE OpenStack Cloud 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"SUSE OpenStack Cloud 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"SUSE OpenStack Cloud 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"SUSE OpenStack Cloud 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"SUSE OpenStack Cloud 8:keepalived-2.0.19-3.6.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-client-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"SUSE OpenStack Cloud 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"SUSE OpenStack Cloud 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"SUSE OpenStack Cloud 8:python-congressclient-1.8.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-designateclient-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-freezegun-0.3.9-1.3.3.noarch",
"SUSE OpenStack Cloud 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:python-osc-lib-1.7.1-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.context-2.17.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.service-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:python-stevedore-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-taskflow-2.14.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-horizon-x86_64-12.0.5~dev2-14.28.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-core-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"SUSE OpenStack Cloud Crowbar 8:crowbar-core-branding-upstream-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"SUSE OpenStack Cloud Crowbar 8:crowbar-ha-5.0+git.1574286229.e0364c3-3.29.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-openstack-5.0+git.1582911795.5081ef1da-4.34.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-ui-1.2.0+git.1575896697.a01a3a08-3.15.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:keepalived-2.0.19-3.6.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-client-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-congressclient-1.8.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-designateclient-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-freezegun-0.3.9-1.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-osc-lib-1.7.1-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.context-2.17.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.service-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-stevedore-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-taskflow-2.14.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-crowbar-client-3.9.1-3.9.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-puma-2.16.0-3.3.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-1002201",
"url": "https://www.suse.com/security/cve/CVE-2017-1002201"
},
{
"category": "external",
"summary": "SUSE Bug 1155089 for CVE-2017-1002201",
"url": "https://bugzilla.suse.com/1155089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"HPE Helion OpenStack 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"HPE Helion OpenStack 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"HPE Helion OpenStack 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"HPE Helion OpenStack 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"HPE Helion OpenStack 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"HPE Helion OpenStack 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"HPE Helion OpenStack 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"HPE Helion OpenStack 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"HPE Helion OpenStack 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"HPE Helion OpenStack 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"HPE Helion OpenStack 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"HPE Helion OpenStack 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"HPE Helion OpenStack 8:keepalived-2.0.19-3.6.3.x86_64",
"HPE Helion OpenStack 8:mariadb-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-client-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"HPE Helion OpenStack 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"HPE Helion OpenStack 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"HPE Helion OpenStack 8:python-congressclient-1.8.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"HPE Helion OpenStack 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:python-osc-lib-1.7.1-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.context-2.17.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.service-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:python-stevedore-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-taskflow-2.14.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-horizon-hpe-x86_64-12.0.5~dev2-14.28.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"SUSE OpenStack Cloud 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"SUSE OpenStack Cloud 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"SUSE OpenStack Cloud 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"SUSE OpenStack Cloud 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"SUSE OpenStack Cloud 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"SUSE OpenStack Cloud 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"SUSE OpenStack Cloud 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"SUSE OpenStack Cloud 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"SUSE OpenStack Cloud 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"SUSE OpenStack Cloud 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"SUSE OpenStack Cloud 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"SUSE OpenStack Cloud 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"SUSE OpenStack Cloud 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"SUSE OpenStack Cloud 8:keepalived-2.0.19-3.6.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-client-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"SUSE OpenStack Cloud 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"SUSE OpenStack Cloud 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"SUSE OpenStack Cloud 8:python-congressclient-1.8.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-designateclient-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-freezegun-0.3.9-1.3.3.noarch",
"SUSE OpenStack Cloud 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:python-osc-lib-1.7.1-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.context-2.17.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.service-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:python-stevedore-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-taskflow-2.14.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-horizon-x86_64-12.0.5~dev2-14.28.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-core-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"SUSE OpenStack Cloud Crowbar 8:crowbar-core-branding-upstream-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"SUSE OpenStack Cloud Crowbar 8:crowbar-ha-5.0+git.1574286229.e0364c3-3.29.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-openstack-5.0+git.1582911795.5081ef1da-4.34.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-ui-1.2.0+git.1575896697.a01a3a08-3.15.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:keepalived-2.0.19-3.6.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-client-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-congressclient-1.8.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-designateclient-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-freezegun-0.3.9-1.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-osc-lib-1.7.1-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.context-2.17.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.service-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-stevedore-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-taskflow-2.14.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-crowbar-client-3.9.1-3.9.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-puma-2.16.0-3.3.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"HPE Helion OpenStack 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"HPE Helion OpenStack 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"HPE Helion OpenStack 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"HPE Helion OpenStack 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"HPE Helion OpenStack 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"HPE Helion OpenStack 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"HPE Helion OpenStack 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"HPE Helion OpenStack 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"HPE Helion OpenStack 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"HPE Helion OpenStack 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"HPE Helion OpenStack 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"HPE Helion OpenStack 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"HPE Helion OpenStack 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"HPE Helion OpenStack 8:keepalived-2.0.19-3.6.3.x86_64",
"HPE Helion OpenStack 8:mariadb-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-client-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"HPE Helion OpenStack 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"HPE Helion OpenStack 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"HPE Helion OpenStack 8:python-congressclient-1.8.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"HPE Helion OpenStack 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:python-osc-lib-1.7.1-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.context-2.17.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.service-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:python-stevedore-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-taskflow-2.14.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-horizon-hpe-x86_64-12.0.5~dev2-14.28.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"SUSE OpenStack Cloud 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"SUSE OpenStack Cloud 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"SUSE OpenStack Cloud 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"SUSE OpenStack Cloud 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"SUSE OpenStack Cloud 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"SUSE OpenStack Cloud 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"SUSE OpenStack Cloud 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"SUSE OpenStack Cloud 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"SUSE OpenStack Cloud 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"SUSE OpenStack Cloud 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"SUSE OpenStack Cloud 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"SUSE OpenStack Cloud 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"SUSE OpenStack Cloud 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"SUSE OpenStack Cloud 8:keepalived-2.0.19-3.6.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-client-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"SUSE OpenStack Cloud 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"SUSE OpenStack Cloud 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"SUSE OpenStack Cloud 8:python-congressclient-1.8.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-designateclient-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-freezegun-0.3.9-1.3.3.noarch",
"SUSE OpenStack Cloud 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:python-osc-lib-1.7.1-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.context-2.17.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.service-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:python-stevedore-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-taskflow-2.14.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-horizon-x86_64-12.0.5~dev2-14.28.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-core-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"SUSE OpenStack Cloud Crowbar 8:crowbar-core-branding-upstream-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"SUSE OpenStack Cloud Crowbar 8:crowbar-ha-5.0+git.1574286229.e0364c3-3.29.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-openstack-5.0+git.1582911795.5081ef1da-4.34.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-ui-1.2.0+git.1575896697.a01a3a08-3.15.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:keepalived-2.0.19-3.6.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-client-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-congressclient-1.8.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-designateclient-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-freezegun-0.3.9-1.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-osc-lib-1.7.1-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.context-2.17.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.service-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-stevedore-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-taskflow-2.14.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-crowbar-client-3.9.1-3.9.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-puma-2.16.0-3.3.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-03-11T11:30:47Z",
"details": "moderate"
}
],
"title": "CVE-2017-1002201"
},
{
"cve": "CVE-2018-17954",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17954"
}
],
"notes": [
{
"category": "general",
"text": "An Improper Privilege Management in crowbar of SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud 9, SUSE OpenStack Cloud Crowbar 8, SUSE OpenStack Cloud Crowbar 9 allows root users on any crowbar managed node to cause become root on any other node. This issue affects: SUSE OpenStack Cloud 7 crowbar-core versions prior to 4.0+git.1578392992.fabfd186c-9.63.1, crowbar-. SUSE OpenStack Cloud 8 ardana-cinder versions prior to 8.0+git.1579279939.ee7da88-3.39.3, ardana-. SUSE OpenStack Cloud 9 ardana-ansible versions prior to 9.0+git.1581611758.f694f7d-3.16.1, ardana-. SUSE OpenStack Cloud Crowbar 8 crowbar-core versions prior to 5.0+git.1582968668.1a55c77c5-3.35.4, crowbar-. SUSE OpenStack Cloud Crowbar 9 crowbar-core versions prior to 6.0+git.1582892022.cbd70e833-3.19.3, crowbar-.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"HPE Helion OpenStack 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"HPE Helion OpenStack 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"HPE Helion OpenStack 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"HPE Helion OpenStack 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"HPE Helion OpenStack 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"HPE Helion OpenStack 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"HPE Helion OpenStack 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"HPE Helion OpenStack 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"HPE Helion OpenStack 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"HPE Helion OpenStack 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"HPE Helion OpenStack 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"HPE Helion OpenStack 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"HPE Helion OpenStack 8:keepalived-2.0.19-3.6.3.x86_64",
"HPE Helion OpenStack 8:mariadb-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-client-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"HPE Helion OpenStack 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"HPE Helion OpenStack 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"HPE Helion OpenStack 8:python-congressclient-1.8.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"HPE Helion OpenStack 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:python-osc-lib-1.7.1-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.context-2.17.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.service-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:python-stevedore-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-taskflow-2.14.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-horizon-hpe-x86_64-12.0.5~dev2-14.28.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"SUSE OpenStack Cloud 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"SUSE OpenStack Cloud 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"SUSE OpenStack Cloud 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"SUSE OpenStack Cloud 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"SUSE OpenStack Cloud 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"SUSE OpenStack Cloud 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"SUSE OpenStack Cloud 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"SUSE OpenStack Cloud 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"SUSE OpenStack Cloud 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"SUSE OpenStack Cloud 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"SUSE OpenStack Cloud 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"SUSE OpenStack Cloud 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"SUSE OpenStack Cloud 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"SUSE OpenStack Cloud 8:keepalived-2.0.19-3.6.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-client-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"SUSE OpenStack Cloud 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"SUSE OpenStack Cloud 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"SUSE OpenStack Cloud 8:python-congressclient-1.8.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-designateclient-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-freezegun-0.3.9-1.3.3.noarch",
"SUSE OpenStack Cloud 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:python-osc-lib-1.7.1-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.context-2.17.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.service-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:python-stevedore-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-taskflow-2.14.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-horizon-x86_64-12.0.5~dev2-14.28.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-core-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"SUSE OpenStack Cloud Crowbar 8:crowbar-core-branding-upstream-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"SUSE OpenStack Cloud Crowbar 8:crowbar-ha-5.0+git.1574286229.e0364c3-3.29.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-openstack-5.0+git.1582911795.5081ef1da-4.34.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-ui-1.2.0+git.1575896697.a01a3a08-3.15.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:keepalived-2.0.19-3.6.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-client-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-congressclient-1.8.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-designateclient-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-freezegun-0.3.9-1.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-osc-lib-1.7.1-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.context-2.17.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.service-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-stevedore-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-taskflow-2.14.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-crowbar-client-3.9.1-3.9.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-puma-2.16.0-3.3.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17954",
"url": "https://www.suse.com/security/cve/CVE-2018-17954"
},
{
"category": "external",
"summary": "SUSE Bug 1117080 for CVE-2018-17954",
"url": "https://bugzilla.suse.com/1117080"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"HPE Helion OpenStack 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"HPE Helion OpenStack 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"HPE Helion OpenStack 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"HPE Helion OpenStack 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"HPE Helion OpenStack 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"HPE Helion OpenStack 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"HPE Helion OpenStack 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"HPE Helion OpenStack 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"HPE Helion OpenStack 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"HPE Helion OpenStack 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"HPE Helion OpenStack 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"HPE Helion OpenStack 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"HPE Helion OpenStack 8:keepalived-2.0.19-3.6.3.x86_64",
"HPE Helion OpenStack 8:mariadb-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-client-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"HPE Helion OpenStack 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"HPE Helion OpenStack 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"HPE Helion OpenStack 8:python-congressclient-1.8.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"HPE Helion OpenStack 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:python-osc-lib-1.7.1-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.context-2.17.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.service-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:python-stevedore-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-taskflow-2.14.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-horizon-hpe-x86_64-12.0.5~dev2-14.28.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"SUSE OpenStack Cloud 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"SUSE OpenStack Cloud 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"SUSE OpenStack Cloud 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"SUSE OpenStack Cloud 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"SUSE OpenStack Cloud 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"SUSE OpenStack Cloud 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"SUSE OpenStack Cloud 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"SUSE OpenStack Cloud 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"SUSE OpenStack Cloud 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"SUSE OpenStack Cloud 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"SUSE OpenStack Cloud 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"SUSE OpenStack Cloud 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"SUSE OpenStack Cloud 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"SUSE OpenStack Cloud 8:keepalived-2.0.19-3.6.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-client-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"SUSE OpenStack Cloud 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"SUSE OpenStack Cloud 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"SUSE OpenStack Cloud 8:python-congressclient-1.8.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-designateclient-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-freezegun-0.3.9-1.3.3.noarch",
"SUSE OpenStack Cloud 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:python-osc-lib-1.7.1-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.context-2.17.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.service-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:python-stevedore-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-taskflow-2.14.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-horizon-x86_64-12.0.5~dev2-14.28.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-core-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"SUSE OpenStack Cloud Crowbar 8:crowbar-core-branding-upstream-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"SUSE OpenStack Cloud Crowbar 8:crowbar-ha-5.0+git.1574286229.e0364c3-3.29.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-openstack-5.0+git.1582911795.5081ef1da-4.34.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-ui-1.2.0+git.1575896697.a01a3a08-3.15.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:keepalived-2.0.19-3.6.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-client-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-congressclient-1.8.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-designateclient-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-freezegun-0.3.9-1.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-osc-lib-1.7.1-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.context-2.17.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.service-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-stevedore-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-taskflow-2.14.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-crowbar-client-3.9.1-3.9.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-puma-2.16.0-3.3.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"HPE Helion OpenStack 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"HPE Helion OpenStack 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"HPE Helion OpenStack 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"HPE Helion OpenStack 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"HPE Helion OpenStack 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"HPE Helion OpenStack 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"HPE Helion OpenStack 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"HPE Helion OpenStack 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"HPE Helion OpenStack 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"HPE Helion OpenStack 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"HPE Helion OpenStack 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"HPE Helion OpenStack 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"HPE Helion OpenStack 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"HPE Helion OpenStack 8:keepalived-2.0.19-3.6.3.x86_64",
"HPE Helion OpenStack 8:mariadb-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-client-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"HPE Helion OpenStack 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"HPE Helion OpenStack 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"HPE Helion OpenStack 8:python-congressclient-1.8.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"HPE Helion OpenStack 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:python-osc-lib-1.7.1-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.context-2.17.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.service-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:python-stevedore-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-taskflow-2.14.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-horizon-hpe-x86_64-12.0.5~dev2-14.28.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"SUSE OpenStack Cloud 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"SUSE OpenStack Cloud 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"SUSE OpenStack Cloud 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"SUSE OpenStack Cloud 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"SUSE OpenStack Cloud 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"SUSE OpenStack Cloud 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"SUSE OpenStack Cloud 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"SUSE OpenStack Cloud 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"SUSE OpenStack Cloud 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"SUSE OpenStack Cloud 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"SUSE OpenStack Cloud 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"SUSE OpenStack Cloud 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"SUSE OpenStack Cloud 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"SUSE OpenStack Cloud 8:keepalived-2.0.19-3.6.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-client-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"SUSE OpenStack Cloud 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"SUSE OpenStack Cloud 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"SUSE OpenStack Cloud 8:python-congressclient-1.8.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-designateclient-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-freezegun-0.3.9-1.3.3.noarch",
"SUSE OpenStack Cloud 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:python-osc-lib-1.7.1-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.context-2.17.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.service-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:python-stevedore-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-taskflow-2.14.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-horizon-x86_64-12.0.5~dev2-14.28.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-core-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"SUSE OpenStack Cloud Crowbar 8:crowbar-core-branding-upstream-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"SUSE OpenStack Cloud Crowbar 8:crowbar-ha-5.0+git.1574286229.e0364c3-3.29.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-openstack-5.0+git.1582911795.5081ef1da-4.34.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-ui-1.2.0+git.1575896697.a01a3a08-3.15.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:keepalived-2.0.19-3.6.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-client-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-congressclient-1.8.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-designateclient-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-freezegun-0.3.9-1.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-osc-lib-1.7.1-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.context-2.17.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.service-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-stevedore-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-taskflow-2.14.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-crowbar-client-3.9.1-3.9.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-puma-2.16.0-3.3.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-03-11T11:30:47Z",
"details": "important"
}
],
"title": "CVE-2018-17954"
},
{
"cve": "CVE-2019-13117",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13117"
}
],
"notes": [
{
"category": "general",
"text": "In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This could allow an attacker to discern whether a byte on the stack contains the characters A, a, I, i, or 0, or any other character.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"HPE Helion OpenStack 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"HPE Helion OpenStack 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"HPE Helion OpenStack 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"HPE Helion OpenStack 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"HPE Helion OpenStack 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"HPE Helion OpenStack 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"HPE Helion OpenStack 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"HPE Helion OpenStack 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"HPE Helion OpenStack 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"HPE Helion OpenStack 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"HPE Helion OpenStack 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"HPE Helion OpenStack 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"HPE Helion OpenStack 8:keepalived-2.0.19-3.6.3.x86_64",
"HPE Helion OpenStack 8:mariadb-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-client-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"HPE Helion OpenStack 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"HPE Helion OpenStack 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"HPE Helion OpenStack 8:python-congressclient-1.8.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"HPE Helion OpenStack 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:python-osc-lib-1.7.1-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.context-2.17.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.service-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:python-stevedore-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-taskflow-2.14.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-horizon-hpe-x86_64-12.0.5~dev2-14.28.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"SUSE OpenStack Cloud 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"SUSE OpenStack Cloud 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"SUSE OpenStack Cloud 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"SUSE OpenStack Cloud 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"SUSE OpenStack Cloud 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"SUSE OpenStack Cloud 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"SUSE OpenStack Cloud 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"SUSE OpenStack Cloud 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"SUSE OpenStack Cloud 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"SUSE OpenStack Cloud 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"SUSE OpenStack Cloud 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"SUSE OpenStack Cloud 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"SUSE OpenStack Cloud 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"SUSE OpenStack Cloud 8:keepalived-2.0.19-3.6.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-client-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"SUSE OpenStack Cloud 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"SUSE OpenStack Cloud 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"SUSE OpenStack Cloud 8:python-congressclient-1.8.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-designateclient-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-freezegun-0.3.9-1.3.3.noarch",
"SUSE OpenStack Cloud 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:python-osc-lib-1.7.1-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.context-2.17.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.service-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:python-stevedore-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-taskflow-2.14.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-horizon-x86_64-12.0.5~dev2-14.28.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-core-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"SUSE OpenStack Cloud Crowbar 8:crowbar-core-branding-upstream-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"SUSE OpenStack Cloud Crowbar 8:crowbar-ha-5.0+git.1574286229.e0364c3-3.29.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-openstack-5.0+git.1582911795.5081ef1da-4.34.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-ui-1.2.0+git.1575896697.a01a3a08-3.15.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:keepalived-2.0.19-3.6.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-client-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-congressclient-1.8.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-designateclient-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-freezegun-0.3.9-1.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-osc-lib-1.7.1-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.context-2.17.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.service-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-stevedore-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-taskflow-2.14.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-crowbar-client-3.9.1-3.9.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-puma-2.16.0-3.3.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13117",
"url": "https://www.suse.com/security/cve/CVE-2019-13117"
},
{
"category": "external",
"summary": "SUSE Bug 1140095 for CVE-2019-13117",
"url": "https://bugzilla.suse.com/1140095"
},
{
"category": "external",
"summary": "SUSE Bug 1157028 for CVE-2019-13117",
"url": "https://bugzilla.suse.com/1157028"
},
{
"category": "external",
"summary": "SUSE Bug 1160968 for CVE-2019-13117",
"url": "https://bugzilla.suse.com/1160968"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"HPE Helion OpenStack 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"HPE Helion OpenStack 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"HPE Helion OpenStack 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"HPE Helion OpenStack 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"HPE Helion OpenStack 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"HPE Helion OpenStack 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"HPE Helion OpenStack 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"HPE Helion OpenStack 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"HPE Helion OpenStack 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"HPE Helion OpenStack 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"HPE Helion OpenStack 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"HPE Helion OpenStack 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"HPE Helion OpenStack 8:keepalived-2.0.19-3.6.3.x86_64",
"HPE Helion OpenStack 8:mariadb-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-client-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"HPE Helion OpenStack 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"HPE Helion OpenStack 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"HPE Helion OpenStack 8:python-congressclient-1.8.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"HPE Helion OpenStack 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:python-osc-lib-1.7.1-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.context-2.17.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.service-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:python-stevedore-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-taskflow-2.14.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-horizon-hpe-x86_64-12.0.5~dev2-14.28.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"SUSE OpenStack Cloud 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"SUSE OpenStack Cloud 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"SUSE OpenStack Cloud 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"SUSE OpenStack Cloud 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"SUSE OpenStack Cloud 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"SUSE OpenStack Cloud 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"SUSE OpenStack Cloud 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"SUSE OpenStack Cloud 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"SUSE OpenStack Cloud 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"SUSE OpenStack Cloud 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"SUSE OpenStack Cloud 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"SUSE OpenStack Cloud 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"SUSE OpenStack Cloud 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"SUSE OpenStack Cloud 8:keepalived-2.0.19-3.6.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-client-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"SUSE OpenStack Cloud 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"SUSE OpenStack Cloud 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"SUSE OpenStack Cloud 8:python-congressclient-1.8.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-designateclient-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-freezegun-0.3.9-1.3.3.noarch",
"SUSE OpenStack Cloud 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:python-osc-lib-1.7.1-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.context-2.17.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.service-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:python-stevedore-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-taskflow-2.14.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-horizon-x86_64-12.0.5~dev2-14.28.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-core-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"SUSE OpenStack Cloud Crowbar 8:crowbar-core-branding-upstream-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"SUSE OpenStack Cloud Crowbar 8:crowbar-ha-5.0+git.1574286229.e0364c3-3.29.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-openstack-5.0+git.1582911795.5081ef1da-4.34.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-ui-1.2.0+git.1575896697.a01a3a08-3.15.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:keepalived-2.0.19-3.6.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-client-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-congressclient-1.8.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-designateclient-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-freezegun-0.3.9-1.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-osc-lib-1.7.1-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.context-2.17.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.service-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-stevedore-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-taskflow-2.14.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-crowbar-client-3.9.1-3.9.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-puma-2.16.0-3.3.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"HPE Helion OpenStack 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"HPE Helion OpenStack 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"HPE Helion OpenStack 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"HPE Helion OpenStack 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"HPE Helion OpenStack 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"HPE Helion OpenStack 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"HPE Helion OpenStack 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"HPE Helion OpenStack 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"HPE Helion OpenStack 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"HPE Helion OpenStack 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"HPE Helion OpenStack 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"HPE Helion OpenStack 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"HPE Helion OpenStack 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"HPE Helion OpenStack 8:keepalived-2.0.19-3.6.3.x86_64",
"HPE Helion OpenStack 8:mariadb-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-client-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"HPE Helion OpenStack 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"HPE Helion OpenStack 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"HPE Helion OpenStack 8:python-congressclient-1.8.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"HPE Helion OpenStack 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:python-osc-lib-1.7.1-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.context-2.17.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.service-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:python-stevedore-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-taskflow-2.14.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-horizon-hpe-x86_64-12.0.5~dev2-14.28.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"SUSE OpenStack Cloud 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"SUSE OpenStack Cloud 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"SUSE OpenStack Cloud 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"SUSE OpenStack Cloud 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"SUSE OpenStack Cloud 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"SUSE OpenStack Cloud 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"SUSE OpenStack Cloud 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"SUSE OpenStack Cloud 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"SUSE OpenStack Cloud 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"SUSE OpenStack Cloud 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"SUSE OpenStack Cloud 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"SUSE OpenStack Cloud 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"SUSE OpenStack Cloud 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"SUSE OpenStack Cloud 8:keepalived-2.0.19-3.6.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-client-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"SUSE OpenStack Cloud 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"SUSE OpenStack Cloud 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"SUSE OpenStack Cloud 8:python-congressclient-1.8.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-designateclient-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-freezegun-0.3.9-1.3.3.noarch",
"SUSE OpenStack Cloud 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:python-osc-lib-1.7.1-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.context-2.17.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.service-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:python-stevedore-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-taskflow-2.14.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-horizon-x86_64-12.0.5~dev2-14.28.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-core-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"SUSE OpenStack Cloud Crowbar 8:crowbar-core-branding-upstream-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"SUSE OpenStack Cloud Crowbar 8:crowbar-ha-5.0+git.1574286229.e0364c3-3.29.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-openstack-5.0+git.1582911795.5081ef1da-4.34.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-ui-1.2.0+git.1575896697.a01a3a08-3.15.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:keepalived-2.0.19-3.6.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-client-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-congressclient-1.8.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-designateclient-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-freezegun-0.3.9-1.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-osc-lib-1.7.1-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.context-2.17.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.service-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-stevedore-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-taskflow-2.14.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-crowbar-client-3.9.1-3.9.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-puma-2.16.0-3.3.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-03-11T11:30:47Z",
"details": "moderate"
}
],
"title": "CVE-2019-13117"
},
{
"cve": "CVE-2019-16770",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-16770"
}
],
"notes": [
{
"category": "general",
"text": "In Puma before versions 3.12.2 and 4.3.1, a poorly-behaved client could use keepalive requests to monopolize Puma\u0027s reactor and create a denial of service attack. If more keepalive connections to Puma are opened than there are threads available, additional connections will wait permanently if the attacker sends requests frequently enough. This vulnerability is patched in Puma 4.3.1 and 3.12.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"HPE Helion OpenStack 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"HPE Helion OpenStack 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"HPE Helion OpenStack 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"HPE Helion OpenStack 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"HPE Helion OpenStack 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"HPE Helion OpenStack 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"HPE Helion OpenStack 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"HPE Helion OpenStack 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"HPE Helion OpenStack 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"HPE Helion OpenStack 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"HPE Helion OpenStack 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"HPE Helion OpenStack 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"HPE Helion OpenStack 8:keepalived-2.0.19-3.6.3.x86_64",
"HPE Helion OpenStack 8:mariadb-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-client-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"HPE Helion OpenStack 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"HPE Helion OpenStack 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"HPE Helion OpenStack 8:python-congressclient-1.8.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"HPE Helion OpenStack 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:python-osc-lib-1.7.1-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.context-2.17.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.service-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:python-stevedore-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-taskflow-2.14.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-horizon-hpe-x86_64-12.0.5~dev2-14.28.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"SUSE OpenStack Cloud 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"SUSE OpenStack Cloud 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"SUSE OpenStack Cloud 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"SUSE OpenStack Cloud 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"SUSE OpenStack Cloud 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"SUSE OpenStack Cloud 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"SUSE OpenStack Cloud 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"SUSE OpenStack Cloud 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"SUSE OpenStack Cloud 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"SUSE OpenStack Cloud 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"SUSE OpenStack Cloud 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"SUSE OpenStack Cloud 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"SUSE OpenStack Cloud 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"SUSE OpenStack Cloud 8:keepalived-2.0.19-3.6.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-client-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"SUSE OpenStack Cloud 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"SUSE OpenStack Cloud 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"SUSE OpenStack Cloud 8:python-congressclient-1.8.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-designateclient-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-freezegun-0.3.9-1.3.3.noarch",
"SUSE OpenStack Cloud 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:python-osc-lib-1.7.1-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.context-2.17.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.service-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:python-stevedore-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-taskflow-2.14.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-horizon-x86_64-12.0.5~dev2-14.28.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-core-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"SUSE OpenStack Cloud Crowbar 8:crowbar-core-branding-upstream-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"SUSE OpenStack Cloud Crowbar 8:crowbar-ha-5.0+git.1574286229.e0364c3-3.29.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-openstack-5.0+git.1582911795.5081ef1da-4.34.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-ui-1.2.0+git.1575896697.a01a3a08-3.15.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:keepalived-2.0.19-3.6.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-client-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-congressclient-1.8.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-designateclient-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-freezegun-0.3.9-1.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-osc-lib-1.7.1-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.context-2.17.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.service-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-stevedore-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-taskflow-2.14.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-crowbar-client-3.9.1-3.9.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-puma-2.16.0-3.3.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-16770",
"url": "https://www.suse.com/security/cve/CVE-2019-16770"
},
{
"category": "external",
"summary": "SUSE Bug 1158675 for CVE-2019-16770",
"url": "https://bugzilla.suse.com/1158675"
},
{
"category": "external",
"summary": "SUSE Bug 1188527 for CVE-2019-16770",
"url": "https://bugzilla.suse.com/1188527"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"HPE Helion OpenStack 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"HPE Helion OpenStack 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"HPE Helion OpenStack 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"HPE Helion OpenStack 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"HPE Helion OpenStack 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"HPE Helion OpenStack 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"HPE Helion OpenStack 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"HPE Helion OpenStack 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"HPE Helion OpenStack 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"HPE Helion OpenStack 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"HPE Helion OpenStack 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"HPE Helion OpenStack 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"HPE Helion OpenStack 8:keepalived-2.0.19-3.6.3.x86_64",
"HPE Helion OpenStack 8:mariadb-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-client-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"HPE Helion OpenStack 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"HPE Helion OpenStack 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"HPE Helion OpenStack 8:python-congressclient-1.8.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"HPE Helion OpenStack 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:python-osc-lib-1.7.1-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.context-2.17.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.service-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:python-stevedore-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-taskflow-2.14.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-horizon-hpe-x86_64-12.0.5~dev2-14.28.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"SUSE OpenStack Cloud 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"SUSE OpenStack Cloud 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"SUSE OpenStack Cloud 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"SUSE OpenStack Cloud 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"SUSE OpenStack Cloud 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"SUSE OpenStack Cloud 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"SUSE OpenStack Cloud 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"SUSE OpenStack Cloud 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"SUSE OpenStack Cloud 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"SUSE OpenStack Cloud 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"SUSE OpenStack Cloud 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"SUSE OpenStack Cloud 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"SUSE OpenStack Cloud 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"SUSE OpenStack Cloud 8:keepalived-2.0.19-3.6.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-client-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"SUSE OpenStack Cloud 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"SUSE OpenStack Cloud 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"SUSE OpenStack Cloud 8:python-congressclient-1.8.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-designateclient-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-freezegun-0.3.9-1.3.3.noarch",
"SUSE OpenStack Cloud 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:python-osc-lib-1.7.1-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.context-2.17.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.service-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:python-stevedore-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-taskflow-2.14.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-horizon-x86_64-12.0.5~dev2-14.28.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-core-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"SUSE OpenStack Cloud Crowbar 8:crowbar-core-branding-upstream-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"SUSE OpenStack Cloud Crowbar 8:crowbar-ha-5.0+git.1574286229.e0364c3-3.29.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-openstack-5.0+git.1582911795.5081ef1da-4.34.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-ui-1.2.0+git.1575896697.a01a3a08-3.15.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:keepalived-2.0.19-3.6.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-client-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-congressclient-1.8.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-designateclient-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-freezegun-0.3.9-1.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-osc-lib-1.7.1-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.context-2.17.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.service-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-stevedore-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-taskflow-2.14.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-crowbar-client-3.9.1-3.9.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-puma-2.16.0-3.3.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"HPE Helion OpenStack 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"HPE Helion OpenStack 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"HPE Helion OpenStack 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"HPE Helion OpenStack 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"HPE Helion OpenStack 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"HPE Helion OpenStack 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"HPE Helion OpenStack 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"HPE Helion OpenStack 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"HPE Helion OpenStack 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"HPE Helion OpenStack 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"HPE Helion OpenStack 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"HPE Helion OpenStack 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"HPE Helion OpenStack 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"HPE Helion OpenStack 8:keepalived-2.0.19-3.6.3.x86_64",
"HPE Helion OpenStack 8:mariadb-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-client-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"HPE Helion OpenStack 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"HPE Helion OpenStack 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"HPE Helion OpenStack 8:python-congressclient-1.8.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"HPE Helion OpenStack 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:python-osc-lib-1.7.1-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.context-2.17.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.service-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:python-stevedore-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-taskflow-2.14.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-horizon-hpe-x86_64-12.0.5~dev2-14.28.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"SUSE OpenStack Cloud 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"SUSE OpenStack Cloud 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"SUSE OpenStack Cloud 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"SUSE OpenStack Cloud 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"SUSE OpenStack Cloud 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"SUSE OpenStack Cloud 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"SUSE OpenStack Cloud 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"SUSE OpenStack Cloud 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"SUSE OpenStack Cloud 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"SUSE OpenStack Cloud 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"SUSE OpenStack Cloud 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"SUSE OpenStack Cloud 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"SUSE OpenStack Cloud 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"SUSE OpenStack Cloud 8:keepalived-2.0.19-3.6.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-client-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"SUSE OpenStack Cloud 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"SUSE OpenStack Cloud 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"SUSE OpenStack Cloud 8:python-congressclient-1.8.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-designateclient-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-freezegun-0.3.9-1.3.3.noarch",
"SUSE OpenStack Cloud 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:python-osc-lib-1.7.1-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.context-2.17.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.service-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:python-stevedore-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-taskflow-2.14.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-horizon-x86_64-12.0.5~dev2-14.28.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-core-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"SUSE OpenStack Cloud Crowbar 8:crowbar-core-branding-upstream-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"SUSE OpenStack Cloud Crowbar 8:crowbar-ha-5.0+git.1574286229.e0364c3-3.29.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-openstack-5.0+git.1582911795.5081ef1da-4.34.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-ui-1.2.0+git.1575896697.a01a3a08-3.15.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:keepalived-2.0.19-3.6.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-client-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-congressclient-1.8.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-designateclient-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-freezegun-0.3.9-1.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-osc-lib-1.7.1-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.context-2.17.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.service-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-stevedore-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-taskflow-2.14.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-crowbar-client-3.9.1-3.9.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-puma-2.16.0-3.3.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-03-11T11:30:47Z",
"details": "important"
}
],
"title": "CVE-2019-16770"
},
{
"cve": "CVE-2019-18901",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-18901"
}
],
"notes": [
{
"category": "general",
"text": "A UNIX Symbolic Link (Symlink) Following vulnerability in the mysql-systemd-helper of the mariadb packaging of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows local attackers to change the permissions of arbitrary files to 0640. This issue affects: SUSE Linux Enterprise Server 12 mariadb versions prior to 10.2.31-3.25.1. SUSE Linux Enterprise Server 15 mariadb versions prior to 10.2.31-3.26.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"HPE Helion OpenStack 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"HPE Helion OpenStack 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"HPE Helion OpenStack 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"HPE Helion OpenStack 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"HPE Helion OpenStack 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"HPE Helion OpenStack 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"HPE Helion OpenStack 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"HPE Helion OpenStack 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"HPE Helion OpenStack 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"HPE Helion OpenStack 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"HPE Helion OpenStack 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"HPE Helion OpenStack 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"HPE Helion OpenStack 8:keepalived-2.0.19-3.6.3.x86_64",
"HPE Helion OpenStack 8:mariadb-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-client-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"HPE Helion OpenStack 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"HPE Helion OpenStack 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"HPE Helion OpenStack 8:python-congressclient-1.8.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"HPE Helion OpenStack 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:python-osc-lib-1.7.1-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.context-2.17.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.service-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:python-stevedore-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-taskflow-2.14.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-horizon-hpe-x86_64-12.0.5~dev2-14.28.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"SUSE OpenStack Cloud 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"SUSE OpenStack Cloud 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"SUSE OpenStack Cloud 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"SUSE OpenStack Cloud 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"SUSE OpenStack Cloud 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"SUSE OpenStack Cloud 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"SUSE OpenStack Cloud 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"SUSE OpenStack Cloud 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"SUSE OpenStack Cloud 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"SUSE OpenStack Cloud 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"SUSE OpenStack Cloud 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"SUSE OpenStack Cloud 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"SUSE OpenStack Cloud 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"SUSE OpenStack Cloud 8:keepalived-2.0.19-3.6.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-client-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"SUSE OpenStack Cloud 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"SUSE OpenStack Cloud 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"SUSE OpenStack Cloud 8:python-congressclient-1.8.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-designateclient-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-freezegun-0.3.9-1.3.3.noarch",
"SUSE OpenStack Cloud 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:python-osc-lib-1.7.1-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.context-2.17.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.service-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:python-stevedore-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-taskflow-2.14.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-horizon-x86_64-12.0.5~dev2-14.28.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-core-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"SUSE OpenStack Cloud Crowbar 8:crowbar-core-branding-upstream-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"SUSE OpenStack Cloud Crowbar 8:crowbar-ha-5.0+git.1574286229.e0364c3-3.29.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-openstack-5.0+git.1582911795.5081ef1da-4.34.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-ui-1.2.0+git.1575896697.a01a3a08-3.15.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:keepalived-2.0.19-3.6.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-client-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-congressclient-1.8.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-designateclient-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-freezegun-0.3.9-1.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-osc-lib-1.7.1-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.context-2.17.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.service-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-stevedore-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-taskflow-2.14.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-crowbar-client-3.9.1-3.9.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-puma-2.16.0-3.3.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-18901",
"url": "https://www.suse.com/security/cve/CVE-2019-18901"
},
{
"category": "external",
"summary": "SUSE Bug 1160285 for CVE-2019-18901",
"url": "https://bugzilla.suse.com/1160285"
},
{
"category": "external",
"summary": "SUSE Bug 1160895 for CVE-2019-18901",
"url": "https://bugzilla.suse.com/1160895"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"HPE Helion OpenStack 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"HPE Helion OpenStack 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"HPE Helion OpenStack 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"HPE Helion OpenStack 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"HPE Helion OpenStack 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"HPE Helion OpenStack 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"HPE Helion OpenStack 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"HPE Helion OpenStack 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"HPE Helion OpenStack 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"HPE Helion OpenStack 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"HPE Helion OpenStack 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"HPE Helion OpenStack 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"HPE Helion OpenStack 8:keepalived-2.0.19-3.6.3.x86_64",
"HPE Helion OpenStack 8:mariadb-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-client-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"HPE Helion OpenStack 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"HPE Helion OpenStack 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"HPE Helion OpenStack 8:python-congressclient-1.8.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"HPE Helion OpenStack 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:python-osc-lib-1.7.1-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.context-2.17.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.service-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:python-stevedore-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-taskflow-2.14.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-horizon-hpe-x86_64-12.0.5~dev2-14.28.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"SUSE OpenStack Cloud 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"SUSE OpenStack Cloud 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"SUSE OpenStack Cloud 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"SUSE OpenStack Cloud 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"SUSE OpenStack Cloud 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"SUSE OpenStack Cloud 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"SUSE OpenStack Cloud 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"SUSE OpenStack Cloud 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"SUSE OpenStack Cloud 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"SUSE OpenStack Cloud 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"SUSE OpenStack Cloud 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"SUSE OpenStack Cloud 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"SUSE OpenStack Cloud 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"SUSE OpenStack Cloud 8:keepalived-2.0.19-3.6.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-client-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"SUSE OpenStack Cloud 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"SUSE OpenStack Cloud 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"SUSE OpenStack Cloud 8:python-congressclient-1.8.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-designateclient-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-freezegun-0.3.9-1.3.3.noarch",
"SUSE OpenStack Cloud 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:python-osc-lib-1.7.1-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.context-2.17.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.service-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:python-stevedore-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-taskflow-2.14.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-horizon-x86_64-12.0.5~dev2-14.28.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-core-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"SUSE OpenStack Cloud Crowbar 8:crowbar-core-branding-upstream-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"SUSE OpenStack Cloud Crowbar 8:crowbar-ha-5.0+git.1574286229.e0364c3-3.29.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-openstack-5.0+git.1582911795.5081ef1da-4.34.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-ui-1.2.0+git.1575896697.a01a3a08-3.15.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:keepalived-2.0.19-3.6.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-client-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-congressclient-1.8.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-designateclient-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-freezegun-0.3.9-1.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-osc-lib-1.7.1-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.context-2.17.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.service-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-stevedore-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-taskflow-2.14.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-crowbar-client-3.9.1-3.9.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-puma-2.16.0-3.3.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"HPE Helion OpenStack 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"HPE Helion OpenStack 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"HPE Helion OpenStack 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"HPE Helion OpenStack 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"HPE Helion OpenStack 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"HPE Helion OpenStack 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"HPE Helion OpenStack 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"HPE Helion OpenStack 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"HPE Helion OpenStack 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"HPE Helion OpenStack 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"HPE Helion OpenStack 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"HPE Helion OpenStack 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"HPE Helion OpenStack 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"HPE Helion OpenStack 8:keepalived-2.0.19-3.6.3.x86_64",
"HPE Helion OpenStack 8:mariadb-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-client-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"HPE Helion OpenStack 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"HPE Helion OpenStack 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"HPE Helion OpenStack 8:python-congressclient-1.8.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"HPE Helion OpenStack 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:python-osc-lib-1.7.1-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.context-2.17.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.service-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:python-stevedore-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-taskflow-2.14.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-horizon-hpe-x86_64-12.0.5~dev2-14.28.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"SUSE OpenStack Cloud 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"SUSE OpenStack Cloud 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"SUSE OpenStack Cloud 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"SUSE OpenStack Cloud 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"SUSE OpenStack Cloud 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"SUSE OpenStack Cloud 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"SUSE OpenStack Cloud 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"SUSE OpenStack Cloud 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"SUSE OpenStack Cloud 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"SUSE OpenStack Cloud 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"SUSE OpenStack Cloud 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"SUSE OpenStack Cloud 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"SUSE OpenStack Cloud 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"SUSE OpenStack Cloud 8:keepalived-2.0.19-3.6.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-client-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"SUSE OpenStack Cloud 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"SUSE OpenStack Cloud 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"SUSE OpenStack Cloud 8:python-congressclient-1.8.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-designateclient-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-freezegun-0.3.9-1.3.3.noarch",
"SUSE OpenStack Cloud 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:python-osc-lib-1.7.1-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.context-2.17.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.service-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:python-stevedore-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-taskflow-2.14.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-horizon-x86_64-12.0.5~dev2-14.28.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-core-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"SUSE OpenStack Cloud Crowbar 8:crowbar-core-branding-upstream-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"SUSE OpenStack Cloud Crowbar 8:crowbar-ha-5.0+git.1574286229.e0364c3-3.29.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-openstack-5.0+git.1582911795.5081ef1da-4.34.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-ui-1.2.0+git.1575896697.a01a3a08-3.15.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:keepalived-2.0.19-3.6.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-client-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-congressclient-1.8.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-designateclient-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-freezegun-0.3.9-1.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-osc-lib-1.7.1-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.context-2.17.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.service-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-stevedore-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-taskflow-2.14.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-crowbar-client-3.9.1-3.9.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-puma-2.16.0-3.3.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-03-11T11:30:47Z",
"details": "moderate"
}
],
"title": "CVE-2019-18901"
},
{
"cve": "CVE-2019-2737",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2737"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable Auth). Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"HPE Helion OpenStack 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"HPE Helion OpenStack 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"HPE Helion OpenStack 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"HPE Helion OpenStack 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"HPE Helion OpenStack 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"HPE Helion OpenStack 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"HPE Helion OpenStack 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"HPE Helion OpenStack 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"HPE Helion OpenStack 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"HPE Helion OpenStack 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"HPE Helion OpenStack 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"HPE Helion OpenStack 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"HPE Helion OpenStack 8:keepalived-2.0.19-3.6.3.x86_64",
"HPE Helion OpenStack 8:mariadb-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-client-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"HPE Helion OpenStack 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"HPE Helion OpenStack 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"HPE Helion OpenStack 8:python-congressclient-1.8.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"HPE Helion OpenStack 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:python-osc-lib-1.7.1-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.context-2.17.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.service-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:python-stevedore-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-taskflow-2.14.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-horizon-hpe-x86_64-12.0.5~dev2-14.28.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"SUSE OpenStack Cloud 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"SUSE OpenStack Cloud 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"SUSE OpenStack Cloud 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"SUSE OpenStack Cloud 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"SUSE OpenStack Cloud 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"SUSE OpenStack Cloud 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"SUSE OpenStack Cloud 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"SUSE OpenStack Cloud 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"SUSE OpenStack Cloud 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"SUSE OpenStack Cloud 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"SUSE OpenStack Cloud 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"SUSE OpenStack Cloud 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"SUSE OpenStack Cloud 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"SUSE OpenStack Cloud 8:keepalived-2.0.19-3.6.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-client-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"SUSE OpenStack Cloud 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"SUSE OpenStack Cloud 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"SUSE OpenStack Cloud 8:python-congressclient-1.8.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-designateclient-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud 8:python-freezegun-0.3.9-1.3.3.noarch",
"SUSE OpenStack Cloud 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:python-osc-lib-1.7.1-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.context-2.17.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-oslo.service-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:python-stevedore-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-taskflow-2.14.2-3.3.3.noarch",
"SUSE OpenStack Cloud 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-horizon-x86_64-12.0.5~dev2-14.28.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"SUSE OpenStack Cloud 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-core-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"SUSE OpenStack Cloud Crowbar 8:crowbar-core-branding-upstream-5.0+git.1582968668.1a55c77c5-3.35.4.x86_64",
"SUSE OpenStack Cloud Crowbar 8:crowbar-ha-5.0+git.1574286229.e0364c3-3.29.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-openstack-5.0+git.1582911795.5081ef1da-4.34.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:crowbar-ui-1.2.0+git.1575896697.a01a3a08-3.15.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:keepalived-2.0.19-3.6.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-client-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-congressclient-1.8.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-designateclient-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-freezegun-0.3.9-1.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-osc-lib-1.7.1-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.context-2.17.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-oslo.service-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-stevedore-1.25.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-taskflow-2.14.2-3.3.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-crowbar-client-3.9.1-3.9.3.x86_64",
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-puma-2.16.0-3.3.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2737",
"url": "https://www.suse.com/security/cve/CVE-2019-2737"
},
{
"category": "external",
"summary": "SUSE Bug 1132826 for CVE-2019-2737",
"url": "https://bugzilla.suse.com/1132826"
},
{
"category": "external",
"summary": "SUSE Bug 1141798 for CVE-2019-2737",
"url": "https://bugzilla.suse.com/1141798"
},
{
"category": "external",
"summary": "SUSE Bug 1156669 for CVE-2019-2737",
"url": "https://bugzilla.suse.com/1156669"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"HPE Helion OpenStack 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"HPE Helion OpenStack 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"HPE Helion OpenStack 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"HPE Helion OpenStack 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"HPE Helion OpenStack 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"HPE Helion OpenStack 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"HPE Helion OpenStack 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"HPE Helion OpenStack 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"HPE Helion OpenStack 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"HPE Helion OpenStack 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"HPE Helion OpenStack 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"HPE Helion OpenStack 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"HPE Helion OpenStack 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"HPE Helion OpenStack 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"HPE Helion OpenStack 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"HPE Helion OpenStack 8:keepalived-2.0.19-3.6.3.x86_64",
"HPE Helion OpenStack 8:mariadb-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-client-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"HPE Helion OpenStack 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"HPE Helion OpenStack 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"HPE Helion OpenStack 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"HPE Helion OpenStack 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"HPE Helion OpenStack 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-sahara-doc-7.0.5~dev4-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-sahara-engine-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:openstack-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-api-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-conductor-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-doc-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-guestagent-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:openstack-trove-taskmanager-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:python-cinder-11.2.3~dev23-3.24.4.noarch",
"HPE Helion OpenStack 8:python-cinderlm-0.0.2+git.1571845893.27f0b7b-3.9.3.noarch",
"HPE Helion OpenStack 8:python-congressclient-1.8.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-designateclient-doc-2.7.1-3.3.4.noarch",
"HPE Helion OpenStack 8:python-heat-9.0.8~dev22-3.27.4.noarch",
"HPE Helion OpenStack 8:python-horizon-12.0.5~dev2-3.23.4.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"HPE Helion OpenStack 8:python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"HPE Helion OpenStack 8:python-ironic-9.1.8~dev8-3.24.4.noarch",
"HPE Helion OpenStack 8:python-ironic-lib-2.10.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-keystone-12.0.4~dev5-5.30.4.noarch",
"HPE Helion OpenStack 8:python-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"HPE Helion OpenStack 8:python-networking-cisco-6.1.1~dev65-3.3.3.noarch",
"HPE Helion OpenStack 8:python-networking-vsphere-2.0.1~dev133-3.12.3.noarch",
"HPE Helion OpenStack 8:python-neutron-11.0.9~dev60-3.27.4.noarch",
"HPE Helion OpenStack 8:python-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"HPE Helion OpenStack 8:python-nova-16.1.9~dev49-3.32.4.noarch",
"HPE Helion OpenStack 8:python-octavia-1.0.6~dev3-4.21.3.noarch",
"HPE Helion OpenStack 8:python-osc-lib-1.7.1-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.context-2.17.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.rootwrap-5.9.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.serialization-2.20.3-3.3.3.noarch",
"HPE Helion OpenStack 8:python-oslo.service-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-sahara-7.0.5~dev4-3.12.4.noarch",
"HPE Helion OpenStack 8:python-stevedore-1.25.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-taskflow-2.14.2-3.3.3.noarch",
"HPE Helion OpenStack 8:python-trove-8.0.2~dev2-3.12.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-aodh-x86_64-5.1.1~dev7-12.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-cinder-x86_64-11.2.3~dev23-14.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-glance-x86_64-15.0.3~dev3-12.21.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-horizon-hpe-x86_64-12.0.5~dev2-14.28.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-ironic-x86_64-9.1.8~dev8-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-keystone-x86_64-12.0.4~dev5-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-manila-x86_64-5.1.1~dev2-12.25.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.20.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-murano-x86_64-4.0.2~dev2-12.18.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-neutron-x86_64-11.0.9~dev60-13.26.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-nova-x86_64-16.1.9~dev49-11.24.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.23.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.22.2.noarch",
"HPE Helion OpenStack 8:venv-openstack-swift-x86_64-2.15.2_2.15.2_2.15.2~dev32-11.16.3.noarch",
"HPE Helion OpenStack 8:venv-openstack-trove-x86_64-8.0.2~dev2-11.22.2.noarch",
"SUSE OpenStack Cloud 8:ardana-cinder-8.0+git.1579279939.ee7da88-3.39.3.noarch",
"SUSE OpenStack Cloud 8:ardana-cobbler-8.0+git.1575037115.0326803-3.41.3.noarch",
"SUSE OpenStack Cloud 8:ardana-designate-8.0+git.1573597788.15b7984-3.17.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-example-8.0+git.1534266307.db1ec28-3.3.3.noarch",
"SUSE OpenStack Cloud 8:ardana-extensions-nsx-8.0+git.1567529036.a41a037-3.6.4.noarch",
"SUSE OpenStack Cloud 8:ardana-glance-8.0+git.1571846045.ab9e3ea-3.20.3.noarch",
"SUSE OpenStack Cloud 8:ardana-heat-8.0+git.1571777596.14dce6a-3.15.3.noarch",
"SUSE OpenStack Cloud 8:ardana-input-model-8.0+git.1582147997.b9ed134-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-ironic-8.0+git.1571845225.006843d-3.9.3.noarch",
"SUSE OpenStack Cloud 8:ardana-keystone-8.0+git.1573147067.09e3ea0-3.27.3.noarch",
"SUSE OpenStack Cloud 8:ardana-logging-8.0+git.1572452293.e65d714-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-8.0+git.1572527728.9b34bdf-3.21.3.noarch",
"SUSE OpenStack Cloud 8:ardana-monasca-transform-8.0+git.1571845965.97714fb-3.12.3.noarch",
"SUSE OpenStack Cloud 8:ardana-mq-8.0+git.1581024906.fbf0be3-3.16.3.noarch",
"SUSE OpenStack Cloud 8:ardana-neutron-8.0+git.1573050365.ff6fa06-3.36.3.noarch",
"SUSE OpenStack Cloud 8:ardana-nova-8.0+git.1571846125.584d988-3.38.3.noarch",
"SUSE OpenStack Cloud 8:ardana-octavia-8.0+git.1575642049.1f321d0-3.23.3.noarch",
"SUSE OpenStack Cloud 8:ardana-osconfig-8.0+git.1581015942.2d21e63-3.42.3.noarch",
"SUSE OpenStack Cloud 8:ardana-tempest-8.0+git.1579261264.7dd213a-3.30.3.noarch",
"SUSE OpenStack Cloud 8:keepalived-2.0.19-3.6.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-client-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.31-4.17.3.noarch",
"SUSE OpenStack Cloud 8:mariadb-galera-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:mariadb-tools-10.2.31-4.17.3.x86_64",
"SUSE OpenStack Cloud 8:openstack-cinder-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-api-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-backup-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-doc-11.2.3~dev23-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-scheduler-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-cinder-volume-11.2.3~dev23-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-12.0.5~dev2-3.23.4.noarch",
"SUSE OpenStack Cloud 8:openstack-dashboard-theme-SUSE-2017.2+git.1573629528.6b21fa5-7.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cfn-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-doc-9.0.8~dev22-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-engine-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-templates-0.0.0+git.1560033670.e3b5a52-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-heat-test-9.0.8~dev22-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-designate-ui-5.0.3~dev2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev5-3.14.3.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-api-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-conductor-9.1.8~dev8-3.24.4.noarch",
"SUSE OpenStack Cloud 8:openstack-ironic-doc-9.1.8~dev8-3.24.3.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-12.0.4~dev5-5.30.4.noarch",
"SUSE OpenStack Cloud 8:openstack-keystone-doc-12.0.4~dev5-5.30.3.noarch",
"SUSE OpenStack Cloud 8:openstack-monasca-agent-2.2.5~dev5-3.15.2.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-dhcp-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-doc-11.0.9~dev60-3.27.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-gbp-7.3.1~dev72-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-ha-tool-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-l3-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-linuxbridge-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-macvtap-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metadata-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-metering-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-openvswitch-agent-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-server-11.0.9~dev60-3.27.4.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-doc-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-dvs-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev133-3.12.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-cells-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-compute-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-conductor-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-console-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-consoleauth-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-doc-16.1.9~dev49-3.32.3.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-novncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-placement-api-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-scheduler-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-serialproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-nova-vncproxy-16.1.9~dev49-3.32.4.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-agent-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-amphora-image-x86_64-0.1.2-3.9.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-api-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-health-manager-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-housekeeping-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-octavia-worker-1.0.6~dev3-4.21.3.noarch",
"SUSE OpenStack Cloud 8:openstack-resource-agents-1.0+git.1569436425.8b9c49f-3.3.3.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-7.0.5~dev4-3.12.4.noarch",
"SUSE OpenStack Cloud 8:openstack-sahara-api-7.0.5~dev4-3.12.4.noarch",