{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ryan_davis:ruby_parser:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B7CA2D4A-C5D5-4351-A3E6-94F0134ACDFE",
              "versionEndIncluding": "3.1.1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ryan_davis:ruby_parser:1.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "1997DD86-5A86-44EF-BFAB-5762036FDB52",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ryan_davis:ruby_parser:2.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "2EFFFD6C-CE5F-4CDA-9E21-C5092738E70D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ryan_davis:ruby_parser:2.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "AAD69017-946E-46AE-B8E0-CE88870C8474",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ryan_davis:ruby_parser:2.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "6072EC22-3327-4550-98A0-63A5547B8169",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ryan_davis:ruby_parser:2.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "4B31D7F1-3546-460B-8433-1F6C600EA5F0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ryan_davis:ruby_parser:2.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "ED3EF2CD-F764-4174-B4E8-18AA1E25B14F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ryan_davis:ruby_parser:2.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "B6C3FA28-CE20-4DF8-802A-135DCF2746F1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ryan_davis:ruby_parser:2.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "4589091B-CE69-4A11-9AF9-599A6BBE44BA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ryan_davis:ruby_parser:2.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "972AF9F2-8925-42F4-BCCB-94897C01158B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ryan_davis:ruby_parser:2.2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "A5DA9AEE-69C2-44F2-86F6-E267C0F94088",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ryan_davis:ruby_parser:2.3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "6AA7D179-6F94-44E4-888A-2CA793811FDE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ryan_davis:ruby_parser:2.3.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "33AB4A01-A64B-4084-893B-29463D5AAA08",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "037A5749-76E0-4633-8761-5AEE5BAA692A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a1:*:*:*:*:*:*:*",
              "matchCriteriaId": "E318EAB3-5E68-4512-A199-C962C1EE4114",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a2:*:*:*:*:*:*:*",
              "matchCriteriaId": "22611B29-93F3-4658-802D-69E58D49B918",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a3:*:*:*:*:*:*:*",
              "matchCriteriaId": "59214551-A32E-428D-AB09-29F136882DFB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a4:*:*:*:*:*:*:*",
              "matchCriteriaId": "51FF16A2-9376-44EF-928C-2246407D4A9C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a5:*:*:*:*:*:*:*",
              "matchCriteriaId": "26ECD531-FFC6-4F85-BD37-CB9C5065203A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a6:*:*:*:*:*:*:*",
              "matchCriteriaId": "71964D5D-3737-483C-8DF9-F953B2AE8668",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a7:*:*:*:*:*:*:*",
              "matchCriteriaId": "1B8B2ED9-7C48-420F-A824-8518BAAB71C2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a8:*:*:*:*:*:*:*",
              "matchCriteriaId": "9A74D9FE-8B0A-4141-8E4A-8E2362650272",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a9:*:*:*:*:*:*:*",
              "matchCriteriaId": "373A10DA-2151-445C-A83A-C433CCABD8AB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a10:*:*:*:*:*:*:*",
              "matchCriteriaId": "C3FF3C93-D13C-4462-8C10-DA2A7FFB70A5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "D9FB6A1F-6E32-4C5C-BE92-CBB99F9040B4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "9267296D-5A2B-47AE-A870-4E7977BD2156",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "6FDAD7BE-B981-464D-9FDF-EAAB64D5B841",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "E0DCAD18-B91F-494F-8121-F1B7198DF9E0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ryan_davis:ruby_parser:3.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "823D6F3C-1FC9-4DDC-8C13-C1F9FE54CC39",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp."
    },
    {
      "lang": "es",
      "value": "La funci\u00f3n diff_pp en lib/gauntlet_rubyparser.rb en ruby_parser gem v3.1.1 y anteriores para Ruby, permite a usuarios locales sobrescribir archivos arbitrarios a trav\u00e9s de un ataque de enlace simb\u00f3lico sobre un archivo temporal con un nombre predecible en /tmp."
    }
  ],
  "id": "CVE-2013-0162",
  "lastModified": "2026-04-29T01:13:23.040",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "LOW",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 2.1,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2013-03-01T05:40:16.987",
  "references": [
    {
      "source": "secalert@redhat.com",
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0544.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0548.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch"
      ],
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=892806"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0544.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0548.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=892806"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "affected": [
    {
      "package": {
        "ecosystem": "RubyGems",
        "name": "ruby_parser"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "2.0.2"
            },
            {
              "fixed": "3.1.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2013-0162"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-377"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2023-03-08T19:28:01Z",
    "nvd_published_at": "2013-03-01T05:40:00Z",
    "severity": "LOW"
  },
  "details": "The `diff_pp` function in `lib/gauntlet_rubyparser.rb` in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in `/tmp`.",
  "id": "GHSA-8mvw-22r7-w6fq",
  "modified": "2023-03-08T19:28:01Z",
  "published": "2022-05-05T02:48:30Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0162"
    },
    {
      "type": "WEB",
      "url": "https://github.com/seattlerb/ruby_parser/commit/506c7e13cff6f8715385fa8488b621028b4ad280"
    },
    {
      "type": "WEB",
      "url": "https://github.com/seattlerb/ruby_parser/commit/c35acd878d50a8e4ea35933e3fbdc493421d422c"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2013:0544"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2013:0582"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/security/cve/CVE-2013-0162"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=892806"
    },
    {
      "type": "WEB",
      "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ruby_parser/CVE-2013-0162.yml"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/seattlerb/ruby_parser"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0544.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0548.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [],
  "summary": "ruby_parser allows local users to overwrite arbitrary files via symlink attack on temporary file with predictable name"
}

{
  "GSD": {
    "alias": "CVE-2013-0162",
    "description": "The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.",
    "id": "GSD-2013-0162",
    "references": [
      "https://www.suse.com/security/cve/CVE-2013-0162.html",
      "https://access.redhat.com/errata/RHSA-2013:0582",
      "https://access.redhat.com/errata/RHSA-2013:0548",
      "https://access.redhat.com/errata/RHSA-2013:0544"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "affected": [
        {
          "package": {
            "ecosystem": "RubyGems",
            "name": "ruby_parser",
            "purl": "pkg:gem/ruby_parser"
          }
        }
      ],
      "aliases": [
        "CVE-2013-0162",
        "OSVDB-90561"
      ],
      "details": "The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.",
      "id": "GSD-2013-0162",
      "modified": "2013-02-21T00:00:00.000Z",
      "published": "2013-02-21T00:00:00.000Z",
      "references": [
        {
          "type": "WEB",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0162"
        }
      ],
      "schema_version": "1.4.0",
      "severity": [
        {
          "score": 2.1,
          "type": "CVSS_V2"
        }
      ],
      "summary": "CVE-2013-0162 rubygem-ruby_parser: incorrect temporary file usage"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert@redhat.com",
        "ID": "CVE-2013-0162",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://rhn.redhat.com/errata/RHSA-2013-0544.html",
            "refsource": "MISC",
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0544.html"
          },
          {
            "name": "http://rhn.redhat.com/errata/RHSA-2013-0548.html",
            "refsource": "MISC",
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0548.html"
          },
          {
            "name": "https://bugzilla.redhat.com/show_bug.cgi?id=892806",
            "refsource": "MISC",
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=892806"
          }
        ]
      }
    },
    "github.com/rubysec/ruby-advisory-db": {
      "cve": "2013-0162",
      "cvss_v2": 2.1,
      "date": "2013-02-21",
      "description": "The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.",
      "gem": "ruby_parser",
      "osvdb": 90561,
      "patched_versions": [
        "\u003e= 3.1.2"
      ],
      "title": "CVE-2013-0162 rubygem-ruby_parser: incorrect temporary file usage",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0162"
    },
    "gitlab.com": {
      "advisories": [
        {
          "affected_range": "\u003e=2.0.2 \u003c=3.1.1",
          "affected_versions": "All versions starting from 2.0.2 up to 3.1.1",
          "credit": "Michael Scherer",
          "cvss_v2": "AV:L/AC:L/Au:N/C:N/I:P/A:N",
          "cwe_ids": [
            "CWE-1035",
            "CWE-264",
            "CWE-937"
          ],
          "date": "2013-03-01",
          "description": "The ruby_parser Gem does not create temporary files securely. In the `diff_pp` function contained in `lib/gauntlet_rubyparser.rb` function, it creates files as `/tmp/a.[pid]` and `/tmp/b.[pid]` which can be predicted and used for either a denial of service (file cannot be overwritten), or to change the contents of files that are writable.",
          "fixed_versions": [
            "3.1.2"
          ],
          "identifier": "CVE-2013-0162",
          "identifiers": [
            "CVE-2013-0162"
          ],
          "package_slug": "gem/ruby_parser",
          "pubdate": "2013-03-01",
          "solution": "Patch available (see source)",
          "title": "Incorrect temporary file usage",
          "urls": [
            "https://bugzilla.redhat.com/show_bug.cgi?id=892806"
          ],
          "uuid": "16f6be81-a61c-4063-b732-c5bd303d5860"
        }
      ]
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:2.2.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:2.0.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:2.3.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:2.0.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:2.0.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:1.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a9:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:2.3.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "3.1.1",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:2.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:3.1.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:2.0.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:2.0.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:2.0.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ryan_davis:ruby_parser:2.1.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2013-0162"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-264"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2013:0544",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0544.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=892806",
              "refsource": "MISC",
              "tags": [
                "Patch"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=892806"
            },
            {
              "name": "RHSA-2013:0548",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0548.html"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 2.1,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "LOW",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2023-02-13T04:38Z",
      "publishedDate": "2013-03-01T05:40Z"
    }
  }
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat Subscription Asset Manager 1.2, which fixes several security\nissues, multiple bugs, and adds various enhancements, is now available.\n\nThe Red Hat Security Response Team has rated this update as having\nimportant security impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.\n\n[Updated 25th February 2013]\nThis erratum previously failed to include the updated rubygem-rack package.\nIt also previously incorrectly documented CVE-2012-5604 as being fixed,\nhowever that issue never affected Subscription Asset Manager and is no\nlonger listed. As well, CVE-2012-6496 was described as being fixed, however\nthat issue had previously been fixed in RHSA-2013:0154.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat Subscription Asset Manager acts as a proxy for handling\nsubscription information and software updates on client machines.\n\nIt was discovered that Katello did not properly check user permissions when\nhandling certain requests. An authenticated remote attacker could use this\nflaw to download consumer certificates or change settings of other users\u0027\nsystems if they knew the target system\u0027s UUID. (CVE-2012-5603)\n\nIt was found that the\n\"/usr/share/katello/script/katello-generate-passphrase\" utility, which is\nrun during the installation and configuration process, set world-readable\npermissions on the \"/etc/katello/secure/passphrase\" file. A local attacker\ncould use this flaw to obtain the passphrase for Katello, giving them\naccess to information they would otherwise not have access to.\n(CVE-2012-5561)\n\nNote: After installing this update, ensure the\n\"/etc/katello/secure/passphrase\" file is owned by the root user and group\nand mode 0750 permissions. Sites should also consider re-creating the\nKatello passphrase as this issue exposed it to local users.\n\nThree flaws were found in rubygem-rack. A remote attacker could use these\nflaws to perform a denial of service attack against applications using\nrubygem-rack. (CVE-2012-6109, CVE-2013-0183, CVE-2013-0184)\n\nIt was found that ruby_parser from rubygem-ruby_parser created a temporary\nfile in an insecure way. A local attacker could use this flaw to perform a\nsymbolic link attack, overwriting arbitrary files accessible to the\napplication using ruby_parser. (CVE-2013-0162)\n\nThe CVE-2012-5603 issue was discovered by Lukas Zapletal of Red Hat;\nCVE-2012-5561 was discovered by Aaron Weitekamp of the Red Hat Cloud\nQuality Engineering team; and CVE-2013-0162 was discovered by Michael\nScherer of the Red Hat Regional IT team.\n\nThese updated Subscription Asset Manager packages include a number of bug\nfixes and enhancements. Space precludes documenting all of these changes\nin this advisory. Refer to the Red Hat Subscription Asset Manager 1.2\nRelease Notes for information about these changes:\n\nhttps://access.redhat.com/knowledge/docs/en-US/Red_Hat_Subscription_Asset_Manager/1.2/html/Release_Notes/index.html\n\nAll users of Red Hat Subscription Asset Manager are advised to upgrade to\nthese updated packages, which fix these issues and add various\nenhancements.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2013:0544",
        "url": "https://access.redhat.com/errata/RHSA-2013:0544"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Subscription_Asset_Manager/1.2/html/Release_Notes/index.html",
        "url": "https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Subscription_Asset_Manager/1.2/html/Release_Notes/index.html"
      },
      {
        "category": "external",
        "summary": "760564",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=760564"
      },
      {
        "category": "external",
        "summary": "800145",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=800145"
      },
      {
        "category": "external",
        "summary": "809823",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=809823"
      },
      {
        "category": "external",
        "summary": "813291",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=813291"
      },
      {
        "category": "external",
        "summary": "817845",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=817845"
      },
      {
        "category": "external",
        "summary": "817946",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=817946"
      },
      {
        "category": "external",
        "summary": "818679",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=818679"
      },
      {
        "category": "external",
        "summary": "818903",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=818903"
      },
      {
        "category": "external",
        "summary": "819002",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=819002"
      },
      {
        "category": "external",
        "summary": "819611",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=819611"
      },
      {
        "category": "external",
        "summary": "822942",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=822942"
      },
      {
        "category": "external",
        "summary": "822943",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=822943"
      },
      {
        "category": "external",
        "summary": "822945",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=822945"
      },
      {
        "category": "external",
        "summary": "826099",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=826099"
      },
      {
        "category": "external",
        "summary": "829474",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829474"
      },
      {
        "category": "external",
        "summary": "832425",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=832425"
      },
      {
        "category": "external",
        "summary": "832462",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=832462"
      },
      {
        "category": "external",
        "summary": "840595",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=840595"
      },
      {
        "category": "external",
        "summary": "840600",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=840600"
      },
      {
        "category": "external",
        "summary": "840603",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=840603"
      },
      {
        "category": "external",
        "summary": "840609",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=840609"
      },
      {
        "category": "external",
        "summary": "840792",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=840792"
      },
      {
        "category": "external",
        "summary": "840969",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=840969"
      },
      {
        "category": "external",
        "summary": "841868",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=841868"
      },
      {
        "category": "external",
        "summary": "843625",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=843625"
      },
      {
        "category": "external",
        "summary": "843857",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=843857"
      },
      {
        "category": "external",
        "summary": "843861",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=843861"
      },
      {
        "category": "external",
        "summary": "843904",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=843904"
      },
      {
        "category": "external",
        "summary": "845501",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=845501"
      },
      {
        "category": "external",
        "summary": "845620",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=845620"
      },
      {
        "category": "external",
        "summary": "847024",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=847024"
      },
      {
        "category": "external",
        "summary": "847117",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=847117"
      },
      {
        "category": "external",
        "summary": "847598",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=847598"
      },
      {
        "category": "external",
        "summary": "850336",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=850336"
      },
      {
        "category": "external",
        "summary": "852508",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=852508"
      },
      {
        "category": "external",
        "summary": "854278",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=854278"
      },
      {
        "category": "external",
        "summary": "854283",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=854283"
      },
      {
        "category": "external",
        "summary": "854985",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=854985"
      },
      {
        "category": "external",
        "summary": "856303",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=856303"
      },
      {
        "category": "external",
        "summary": "856777",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=856777"
      },
      {
        "category": "external",
        "summary": "856795",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=856795"
      },
      {
        "category": "external",
        "summary": "857452",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=857452"
      },
      {
        "category": "external",
        "summary": "859128",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=859128"
      },
      {
        "category": "external",
        "summary": "863461",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=863461"
      },
      {
        "category": "external",
        "summary": "865571",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=865571"
      },
      {
        "category": "external",
        "summary": "866323",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=866323"
      },
      {
        "category": "external",
        "summary": "866972",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=866972"
      },
      {
        "category": "external",
        "summary": "866995",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=866995"
      },
      {
        "category": "external",
        "summary": "868290",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=868290"
      },
      {
        "category": "external",
        "summary": "869380",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=869380"
      },
      {
        "category": "external",
        "summary": "871622",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=871622"
      },
      {
        "category": "external",
        "summary": "872332",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=872332"
      },
      {
        "category": "external",
        "summary": "872334",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=872334"
      },
      {
        "category": "external",
        "summary": "872335",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=872335"
      },
      {
        "category": "external",
        "summary": "872602",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=872602"
      },
      {
        "category": "external",
        "summary": "872687",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=872687"
      },
      {
        "category": "external",
        "summary": "873038",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=873038"
      },
      {
        "category": "external",
        "summary": "873443",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=873443"
      },
      {
        "category": "external",
        "summary": "873803",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=873803"
      },
      {
        "category": "external",
        "summary": "873809",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=873809"
      },
      {
        "category": "external",
        "summary": "874182",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=874182"
      },
      {
        "category": "external",
        "summary": "874280",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=874280"
      },
      {
        "category": "external",
        "summary": "874502",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=874502"
      },
      {
        "category": "external",
        "summary": "874510",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=874510"
      },
      {
        "category": "external",
        "summary": "874583",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=874583"
      },
      {
        "category": "external",
        "summary": "874737",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=874737"
      },
      {
        "category": "external",
        "summary": "874744",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=874744"
      },
      {
        "category": "external",
        "summary": "875101",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=875101"
      },
      {
        "category": "external",
        "summary": "875609",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=875609"
      },
      {
        "category": "external",
        "summary": "875876",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=875876"
      },
      {
        "category": "external",
        "summary": "876869",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=876869"
      },
      {
        "category": "external",
        "summary": "876896",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=876896"
      },
      {
        "category": "external",
        "summary": "876911",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=876911"
      },
      {
        "category": "external",
        "summary": "877317",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=877317"
      },
      {
        "category": "external",
        "summary": "877473",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=877473"
      },
      {
        "category": "external",
        "summary": "877894",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=877894"
      },
      {
        "category": "external",
        "summary": "878191",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=878191"
      },
      {
        "category": "external",
        "summary": "878341",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=878341"
      },
      {
        "category": "external",
        "summary": "878355",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=878355"
      },
      {
        "category": "external",
        "summary": "878370",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=878370"
      },
      {
        "category": "external",
        "summary": "878377",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=878377"
      },
      {
        "category": "external",
        "summary": "878693",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=878693"
      },
      {
        "category": "external",
        "summary": "878750",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=878750"
      },
      {
        "category": "external",
        "summary": "879094",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=879094"
      },
      {
        "category": "external",
        "summary": "879170",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=879170"
      },
      {
        "category": "external",
        "summary": "879245",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=879245"
      },
      {
        "category": "external",
        "summary": "879320",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=879320"
      },
      {
        "category": "external",
        "summary": "880113",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=880113"
      },
      {
        "category": "external",
        "summary": "880116",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=880116"
      },
      {
        "category": "external",
        "summary": "880710",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=880710"
      },
      {
        "category": "external",
        "summary": "880848",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=880848"
      },
      {
        "category": "external",
        "summary": "880905",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=880905"
      },
      {
        "category": "external",
        "summary": "881616",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=881616"
      },
      {
        "category": "external",
        "summary": "882129",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=882129"
      },
      {
        "category": "external",
        "summary": "882957",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=882957"
      },
      {
        "category": "external",
        "summary": "885096",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=885096"
      },
      {
        "category": "external",
        "summary": "886137",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=886137"
      },
      {
        "category": "external",
        "summary": "886462",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=886462"
      },
      {
        "category": "external",
        "summary": "890000",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=890000"
      },
      {
        "category": "external",
        "summary": "892639",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=892639"
      },
      {
        "category": "external",
        "summary": "892806",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=892806"
      },
      {
        "category": "external",
        "summary": "895277",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=895277"
      },
      {
        "category": "external",
        "summary": "895282",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=895282"
      },
      {
        "category": "external",
        "summary": "895384",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=895384"
      },
      {
        "category": "external",
        "summary": "896550",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=896550"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0544.json"
      }
    ],
    "title": "Red Hat Security Advisory: Subscription Asset Manager 1.2 update",
    "tracking": {
      "current_release_date": "2026-03-27T09:17:01+00:00",
      "generator": {
        "date": "2026-03-27T09:17:01+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.4"
        }
      },
      "id": "RHSA-2013:0544",
      "initial_release_date": "2013-02-21T19:04:00+00:00",
      "revision_history": [
        {
          "date": "2013-02-21T19:04:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2013-02-25T23:08:04+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-03-27T09:17:01+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Subscription Asset Manager for RHEL 6 Server",
                "product": {
                  "name": "Red Hat Subscription Asset Manager for RHEL 6 Server",
                  "product_id": "6Server-SubscriptionAssetManager12",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:rhel_sam:1.2::el6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Subscription Asset Manager"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "quartz-0:2.1.5-4.el6_3.src",
                "product": {
                  "name": "quartz-0:2.1.5-4.el6_3.src",
                  "product_id": "quartz-0:2.1.5-4.el6_3.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/quartz@2.1.5-4.el6_3?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "katello-certs-tools-0:1.2.1-1h.el6_3.src",
                "product": {
                  "name": "katello-certs-tools-0:1.2.1-1h.el6_3.src",
                  "product_id": "katello-certs-tools-0:1.2.1-1h.el6_3.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/katello-certs-tools@1.2.1-1h.el6_3?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "elasticsearch-0:0.19.9-5.el6_3.src",
                "product": {
                  "name": "elasticsearch-0:0.19.9-5.el6_3.src",
                  "product_id": "elasticsearch-0:0.19.9-5.el6_3.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/elasticsearch@0.19.9-5.el6_3?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "lucene3-0:3.6.1-10h.el6_3.src",
                "product": {
                  "name": "lucene3-0:3.6.1-10h.el6_3.src",
                  "product_id": "lucene3-0:3.6.1-10h.el6_3.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/lucene3@3.6.1-10h.el6_3?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "candlepin-0:0.7.23-1.el6_3.src",
                "product": {
                  "name": "candlepin-0:0.7.23-1.el6_3.src",
                  "product_id": "candlepin-0:0.7.23-1.el6_3.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/candlepin@0.7.23-1.el6_3?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
                "product": {
                  "name": "apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
                  "product_id": "apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/apache-mime4j@0.6-4_redhat_1.ep6.el6.1?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thumbslug-0:0.0.28-1.el6_3.src",
                "product": {
                  "name": "thumbslug-0:0.0.28-1.el6_3.src",
                  "product_id": "thumbslug-0:0.0.28-1.el6_3.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thumbslug@0.0.28-1.el6_3?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "katello-selinux-0:1.2.1-2h.el6_3.src",
                "product": {
                  "name": "katello-selinux-0:1.2.1-2h.el6_3.src",
                  "product_id": "katello-selinux-0:1.2.1-2h.el6_3.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/katello-selinux@1.2.1-2h.el6_3?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "puppet-0:2.6.17-2.el6cf.src",
                "product": {
                  "name": "puppet-0:2.6.17-2.el6cf.src",
                  "product_id": "puppet-0:2.6.17-2.el6cf.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/puppet@2.6.17-2.el6cf?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-mail-0:2.3.0-3.el6cf.src",
                "product": {
                  "name": "rubygem-mail-0:2.3.0-3.el6cf.src",
                  "product_id": "rubygem-mail-0:2.3.0-3.el6cf.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-mail@2.3.0-3.el6cf?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "katello-cli-0:1.2.1-12h.el6_3.src",
                "product": {
                  "name": "katello-cli-0:1.2.1-12h.el6_3.src",
                  "product_id": "katello-cli-0:1.2.1-12h.el6_3.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/katello-cli@1.2.1-12h.el6_3?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
                "product": {
                  "name": "rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
                  "product_id": "rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-ruby_parser@2.0.4-6.el6cf?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
                "product": {
                  "name": "rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
                  "product_id": "rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-apipie-rails@0.0.12-2.el6cf?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
                "product": {
                  "name": "rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
                  "product_id": "rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-ldap_fluff@0.1.3-1.el6_3?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "snappy-java-0:1.0.4-2.el6_3.src",
                "product": {
                  "name": "snappy-java-0:1.0.4-2.el6_3.src",
                  "product_id": "snappy-java-0:1.0.4-2.el6_3.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/snappy-java@1.0.4-2.el6_3?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "apache-commons-codec-0:1.7-2.el6_3.src",
                "product": {
                  "name": "apache-commons-codec-0:1.7-2.el6_3.src",
                  "product_id": "apache-commons-codec-0:1.7-2.el6_3.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/apache-commons-codec@1.7-2.el6_3?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
                "product": {
                  "name": "sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
                  "product_id": "sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sigar@1.6.5-0.12.git58097d9h.el6_3?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "katello-configure-0:1.2.3-3h.el6_3.src",
                "product": {
                  "name": "katello-configure-0:1.2.3-3h.el6_3.src",
                  "product_id": "katello-configure-0:1.2.3-3h.el6_3.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/katello-configure@1.2.3-3h.el6_3?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "katello-0:1.2.1-15h.el6_3.src",
                "product": {
                  "name": "katello-0:1.2.1-15h.el6_3.src",
                  "product_id": "katello-0:1.2.1-15h.el6_3.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/katello@1.2.1-15h.el6_3?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-activesupport-1:3.0.10-10.el6cf.src",
                "product": {
                  "name": "rubygem-activesupport-1:3.0.10-10.el6cf.src",
                  "product_id": "rubygem-activesupport-1:3.0.10-10.el6cf.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-activesupport@3.0.10-10.el6cf?arch=src\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-rack-1:1.3.0-3.el6cf.src",
                "product": {
                  "name": "rubygem-rack-1:1.3.0-3.el6cf.src",
                  "product_id": "rubygem-rack-1:1.3.0-3.el6cf.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-rack@1.3.0-3.el6cf?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "quartz-0:2.1.5-4.el6_3.noarch",
                "product": {
                  "name": "quartz-0:2.1.5-4.el6_3.noarch",
                  "product_id": "quartz-0:2.1.5-4.el6_3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/quartz@2.1.5-4.el6_3?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
                "product": {
                  "name": "katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
                  "product_id": "katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/katello-certs-tools@1.2.1-1h.el6_3?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "elasticsearch-0:0.19.9-5.el6_3.noarch",
                "product": {
                  "name": "elasticsearch-0:0.19.9-5.el6_3.noarch",
                  "product_id": "elasticsearch-0:0.19.9-5.el6_3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/elasticsearch@0.19.9-5.el6_3?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "lucene3-0:3.6.1-10h.el6_3.noarch",
                "product": {
                  "name": "lucene3-0:3.6.1-10h.el6_3.noarch",
                  "product_id": "lucene3-0:3.6.1-10h.el6_3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/lucene3@3.6.1-10h.el6_3?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
                "product": {
                  "name": "lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
                  "product_id": "lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/lucene3-contrib@3.6.1-10h.el6_3?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "candlepin-0:0.7.23-1.el6_3.noarch",
                "product": {
                  "name": "candlepin-0:0.7.23-1.el6_3.noarch",
                  "product_id": "candlepin-0:0.7.23-1.el6_3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/candlepin@0.7.23-1.el6_3?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
                "product": {
                  "name": "candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
                  "product_id": "candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/candlepin-tomcat6@0.7.23-1.el6_3?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "candlepin-selinux-0:0.7.23-1.el6_3.noarch",
                "product": {
                  "name": "candlepin-selinux-0:0.7.23-1.el6_3.noarch",
                  "product_id": "candlepin-selinux-0:0.7.23-1.el6_3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/candlepin-selinux@0.7.23-1.el6_3?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "candlepin-devel-0:0.7.23-1.el6_3.noarch",
                "product": {
                  "name": "candlepin-devel-0:0.7.23-1.el6_3.noarch",
                  "product_id": "candlepin-devel-0:0.7.23-1.el6_3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/candlepin-devel@0.7.23-1.el6_3?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
                "product": {
                  "name": "apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
                  "product_id": "apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/apache-mime4j-javadoc@0.6-4_redhat_1.ep6.el6.1?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
                "product": {
                  "name": "apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
                  "product_id": "apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/apache-mime4j@0.6-4_redhat_1.ep6.el6.1?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thumbslug-selinux-0:0.0.28-1.el6_3.noarch",
                "product": {
                  "name": "thumbslug-selinux-0:0.0.28-1.el6_3.noarch",
                  "product_id": "thumbslug-selinux-0:0.0.28-1.el6_3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thumbslug-selinux@0.0.28-1.el6_3?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thumbslug-0:0.0.28-1.el6_3.noarch",
                "product": {
                  "name": "thumbslug-0:0.0.28-1.el6_3.noarch",
                  "product_id": "thumbslug-0:0.0.28-1.el6_3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thumbslug@0.0.28-1.el6_3?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "katello-selinux-0:1.2.1-2h.el6_3.noarch",
                "product": {
                  "name": "katello-selinux-0:1.2.1-2h.el6_3.noarch",
                  "product_id": "katello-selinux-0:1.2.1-2h.el6_3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/katello-selinux@1.2.1-2h.el6_3?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "puppet-server-0:2.6.17-2.el6cf.noarch",
                "product": {
                  "name": "puppet-server-0:2.6.17-2.el6cf.noarch",
                  "product_id": "puppet-server-0:2.6.17-2.el6cf.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/puppet-server@2.6.17-2.el6cf?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "puppet-0:2.6.17-2.el6cf.noarch",
                "product": {
                  "name": "puppet-0:2.6.17-2.el6cf.noarch",
                  "product_id": "puppet-0:2.6.17-2.el6cf.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/puppet@2.6.17-2.el6cf?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
                "product": {
                  "name": "rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
                  "product_id": "rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-mail-doc@2.3.0-3.el6cf?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-mail-0:2.3.0-3.el6cf.noarch",
                "product": {
                  "name": "rubygem-mail-0:2.3.0-3.el6cf.noarch",
                  "product_id": "rubygem-mail-0:2.3.0-3.el6cf.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-mail@2.3.0-3.el6cf?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "katello-cli-0:1.2.1-12h.el6_3.noarch",
                "product": {
                  "name": "katello-cli-0:1.2.1-12h.el6_3.noarch",
                  "product_id": "katello-cli-0:1.2.1-12h.el6_3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/katello-cli@1.2.1-12h.el6_3?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "katello-cli-common-0:1.2.1-12h.el6_3.noarch",
                "product": {
                  "name": "katello-cli-common-0:1.2.1-12h.el6_3.noarch",
                  "product_id": "katello-cli-common-0:1.2.1-12h.el6_3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/katello-cli-common@1.2.1-12h.el6_3?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
                "product": {
                  "name": "rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
                  "product_id": "rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-ruby_parser-doc@2.0.4-6.el6cf?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
                "product": {
                  "name": "rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
                  "product_id": "rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-ruby_parser@2.0.4-6.el6cf?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
                "product": {
                  "name": "rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
                  "product_id": "rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-apipie-rails@0.0.12-2.el6cf?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
                "product": {
                  "name": "rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
                  "product_id": "rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-ldap_fluff@0.1.3-1.el6_3?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "katello-configure-0:1.2.3-3h.el6_3.noarch",
                "product": {
                  "name": "katello-configure-0:1.2.3-3h.el6_3.noarch",
                  "product_id": "katello-configure-0:1.2.3-3h.el6_3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/katello-configure@1.2.3-3h.el6_3?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "katello-common-0:1.2.1-15h.el6_3.noarch",
                "product": {
                  "name": "katello-common-0:1.2.1-15h.el6_3.noarch",
                  "product_id": "katello-common-0:1.2.1-15h.el6_3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/katello-common@1.2.1-15h.el6_3?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
                "product": {
                  "name": "katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
                  "product_id": "katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/katello-glue-candlepin@1.2.1-15h.el6_3?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
                "product": {
                  "name": "katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
                  "product_id": "katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/katello-headpin-all@1.2.1-15h.el6_3?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "katello-headpin-0:1.2.1-15h.el6_3.noarch",
                "product": {
                  "name": "katello-headpin-0:1.2.1-15h.el6_3.noarch",
                  "product_id": "katello-headpin-0:1.2.1-15h.el6_3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/katello-headpin@1.2.1-15h.el6_3?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
                "product": {
                  "name": "rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
                  "product_id": "rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-activesupport@3.0.10-10.el6cf?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-rack-1:1.3.0-3.el6cf.noarch",
                "product": {
                  "name": "rubygem-rack-1:1.3.0-3.el6cf.noarch",
                  "product_id": "rubygem-rack-1:1.3.0-3.el6cf.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-rack@1.3.0-3.el6cf?arch=noarch\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
                "product": {
                  "name": "snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
                  "product_id": "snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/snappy-java-debuginfo@1.0.4-2.el6_3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "snappy-java-0:1.0.4-2.el6_3.x86_64",
                "product": {
                  "name": "snappy-java-0:1.0.4-2.el6_3.x86_64",
                  "product_id": "snappy-java-0:1.0.4-2.el6_3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/snappy-java@1.0.4-2.el6_3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "apache-commons-codec-0:1.7-2.el6_3.x86_64",
                "product": {
                  "name": "apache-commons-codec-0:1.7-2.el6_3.x86_64",
                  "product_id": "apache-commons-codec-0:1.7-2.el6_3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/apache-commons-codec@1.7-2.el6_3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
                "product": {
                  "name": "apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
                  "product_id": "apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/apache-commons-codec-debuginfo@1.7-2.el6_3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
                "product": {
                  "name": "sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
                  "product_id": "sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sigar-java@1.6.5-0.12.git58097d9h.el6_3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
                "product": {
                  "name": "sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
                  "product_id": "sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sigar-debuginfo@1.6.5-0.12.git58097d9h.el6_3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
                "product": {
                  "name": "sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
                  "product_id": "sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sigar@1.6.5-0.12.git58097d9h.el6_3?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-codec-0:1.7-2.el6_3.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src"
        },
        "product_reference": "apache-commons-codec-0:1.7-2.el6_3.src",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-codec-0:1.7-2.el6_3.x86_64 as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64"
        },
        "product_reference": "apache-commons-codec-0:1.7-2.el6_3.x86_64",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64 as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64"
        },
        "product_reference": "apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch"
        },
        "product_reference": "apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src"
        },
        "product_reference": "apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch"
        },
        "product_reference": "apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "candlepin-0:0.7.23-1.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch"
        },
        "product_reference": "candlepin-0:0.7.23-1.el6_3.noarch",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "candlepin-0:0.7.23-1.el6_3.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src"
        },
        "product_reference": "candlepin-0:0.7.23-1.el6_3.src",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "candlepin-devel-0:0.7.23-1.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch"
        },
        "product_reference": "candlepin-devel-0:0.7.23-1.el6_3.noarch",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "candlepin-selinux-0:0.7.23-1.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch"
        },
        "product_reference": "candlepin-selinux-0:0.7.23-1.el6_3.noarch",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "candlepin-tomcat6-0:0.7.23-1.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch"
        },
        "product_reference": "candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "elasticsearch-0:0.19.9-5.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch"
        },
        "product_reference": "elasticsearch-0:0.19.9-5.el6_3.noarch",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "elasticsearch-0:0.19.9-5.el6_3.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src"
        },
        "product_reference": "elasticsearch-0:0.19.9-5.el6_3.src",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "katello-0:1.2.1-15h.el6_3.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src"
        },
        "product_reference": "katello-0:1.2.1-15h.el6_3.src",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "katello-certs-tools-0:1.2.1-1h.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch"
        },
        "product_reference": "katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "katello-certs-tools-0:1.2.1-1h.el6_3.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src"
        },
        "product_reference": "katello-certs-tools-0:1.2.1-1h.el6_3.src",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "katello-cli-0:1.2.1-12h.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch"
        },
        "product_reference": "katello-cli-0:1.2.1-12h.el6_3.noarch",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "katello-cli-0:1.2.1-12h.el6_3.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src"
        },
        "product_reference": "katello-cli-0:1.2.1-12h.el6_3.src",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "katello-cli-common-0:1.2.1-12h.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch"
        },
        "product_reference": "katello-cli-common-0:1.2.1-12h.el6_3.noarch",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "katello-common-0:1.2.1-15h.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch"
        },
        "product_reference": "katello-common-0:1.2.1-15h.el6_3.noarch",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "katello-configure-0:1.2.3-3h.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch"
        },
        "product_reference": "katello-configure-0:1.2.3-3h.el6_3.noarch",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "katello-configure-0:1.2.3-3h.el6_3.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src"
        },
        "product_reference": "katello-configure-0:1.2.3-3h.el6_3.src",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch"
        },
        "product_reference": "katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "katello-headpin-0:1.2.1-15h.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch"
        },
        "product_reference": "katello-headpin-0:1.2.1-15h.el6_3.noarch",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "katello-headpin-all-0:1.2.1-15h.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch"
        },
        "product_reference": "katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "katello-selinux-0:1.2.1-2h.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch"
        },
        "product_reference": "katello-selinux-0:1.2.1-2h.el6_3.noarch",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "katello-selinux-0:1.2.1-2h.el6_3.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src"
        },
        "product_reference": "katello-selinux-0:1.2.1-2h.el6_3.src",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lucene3-0:3.6.1-10h.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch"
        },
        "product_reference": "lucene3-0:3.6.1-10h.el6_3.noarch",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lucene3-0:3.6.1-10h.el6_3.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src"
        },
        "product_reference": "lucene3-0:3.6.1-10h.el6_3.src",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lucene3-contrib-0:3.6.1-10h.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch"
        },
        "product_reference": "lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "puppet-0:2.6.17-2.el6cf.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch"
        },
        "product_reference": "puppet-0:2.6.17-2.el6cf.noarch",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "puppet-0:2.6.17-2.el6cf.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src"
        },
        "product_reference": "puppet-0:2.6.17-2.el6cf.src",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "puppet-server-0:2.6.17-2.el6cf.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch"
        },
        "product_reference": "puppet-server-0:2.6.17-2.el6cf.noarch",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quartz-0:2.1.5-4.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch"
        },
        "product_reference": "quartz-0:2.1.5-4.el6_3.noarch",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quartz-0:2.1.5-4.el6_3.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src"
        },
        "product_reference": "quartz-0:2.1.5-4.el6_3.src",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-activesupport-1:3.0.10-10.el6cf.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch"
        },
        "product_reference": "rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-activesupport-1:3.0.10-10.el6cf.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src"
        },
        "product_reference": "rubygem-activesupport-1:3.0.10-10.el6cf.src",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch"
        },
        "product_reference": "rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-apipie-rails-0:0.0.12-2.el6cf.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src"
        },
        "product_reference": "rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch"
        },
        "product_reference": "rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-ldap_fluff-0:0.1.3-1.el6_3.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src"
        },
        "product_reference": "rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-mail-0:2.3.0-3.el6cf.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch"
        },
        "product_reference": "rubygem-mail-0:2.3.0-3.el6cf.noarch",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-mail-0:2.3.0-3.el6cf.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src"
        },
        "product_reference": "rubygem-mail-0:2.3.0-3.el6cf.src",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-mail-doc-0:2.3.0-3.el6cf.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch"
        },
        "product_reference": "rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-rack-1:1.3.0-3.el6cf.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch"
        },
        "product_reference": "rubygem-rack-1:1.3.0-3.el6cf.noarch",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-rack-1:1.3.0-3.el6cf.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src"
        },
        "product_reference": "rubygem-rack-1:1.3.0-3.el6cf.src",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch"
        },
        "product_reference": "rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-ruby_parser-0:2.0.4-6.el6cf.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src"
        },
        "product_reference": "rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
        },
        "product_reference": "rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sigar-0:1.6.5-0.12.git58097d9h.el6_3.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src"
        },
        "product_reference": "sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64 as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64"
        },
        "product_reference": "sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64 as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64"
        },
        "product_reference": "sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64 as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64"
        },
        "product_reference": "sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "snappy-java-0:1.0.4-2.el6_3.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src"
        },
        "product_reference": "snappy-java-0:1.0.4-2.el6_3.src",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "snappy-java-0:1.0.4-2.el6_3.x86_64 as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64"
        },
        "product_reference": "snappy-java-0:1.0.4-2.el6_3.x86_64",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64 as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64"
        },
        "product_reference": "snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thumbslug-0:0.0.28-1.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch"
        },
        "product_reference": "thumbslug-0:0.0.28-1.el6_3.noarch",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thumbslug-0:0.0.28-1.el6_3.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src"
        },
        "product_reference": "thumbslug-0:0.0.28-1.el6_3.src",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thumbslug-selinux-0:0.0.28-1.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server",
          "product_id": "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
        },
        "product_reference": "thumbslug-selinux-0:0.0.28-1.el6_3.noarch",
        "relates_to_product_reference": "6Server-SubscriptionAssetManager12"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Aaron Weitekamp"
          ],
          "organization": "Red Hat Cloud Quality Engineering team",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2012-5561",
      "discovery_date": "2012-11-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "879094"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "script/katello-generate-passphrase in Katello 1.1 uses world-readable permissions for /etc/katello/secure/passphrase, which allows local users to obtain the passphrase by reading the file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Katello: /etc/katello/secure/passphrase is world readable",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
          "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
          "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
          "6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
          "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
          "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
          "6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
          "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
          "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
          "6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
          "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
          "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
          "6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
          "6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
          "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
          "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
          "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
          "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
          "6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
          "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
          "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
          "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
          "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
          "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-5561"
        },
        {
          "category": "external",
          "summary": "RHBZ#879094",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=879094"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-5561",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-5561"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-5561",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5561"
        }
      ],
      "release_date": "2013-01-03T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-02-21T19:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
            "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
            "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
            "6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
            "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
            "6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
            "6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
            "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
            "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
            "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0544"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 2.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
            "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
            "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
            "6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
            "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
            "6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
            "6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
            "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
            "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
            "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Katello: /etc/katello/secure/passphrase is world readable"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Lukas Zapletal"
          ],
          "organization": "Red Hat",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2012-5603",
      "discovery_date": "2012-05-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "882129"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "proxies_controller.rb in Katello in Red Hat CloudForms before 1.1 does not properly check permissions, which allows remote authenticated users to read consumer certificates or change arbitrary users\u0027 settings via unspecified vectors related to the \"consumer UUID\" of a system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Katello: lack of authorization in proxies_controller.rb",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
          "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
          "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
          "6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
          "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
          "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
          "6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
          "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
          "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
          "6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
          "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
          "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
          "6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
          "6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
          "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
          "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
          "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
          "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
          "6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
          "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
          "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
          "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
          "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
          "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-5603"
        },
        {
          "category": "external",
          "summary": "RHBZ#882129",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=882129"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-5603",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-5603"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-5603",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5603"
        }
      ],
      "release_date": "2012-12-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-02-21T19:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
            "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
            "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
            "6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
            "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
            "6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
            "6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
            "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
            "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
            "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0544"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "SINGLE",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
            "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
            "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
            "6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
            "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
            "6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
            "6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
            "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
            "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
            "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "Katello: lack of authorization in proxies_controller.rb"
    },
    {
      "cve": "CVE-2012-6109",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2013-01-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "895277"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "lib/rack/multipart.rb in Rack before 1.1.4, 1.2.x before 1.2.6, 1.3.x before 1.3.7, and 1.4.x before 1.4.2 uses an incorrect regular expression, which allows remote attackers to cause a denial of service (infinite loop) via a crafted Content-Disposion header.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "rubygem-rack: parsing Content-Disposition header DoS",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
          "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
          "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
          "6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
          "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
          "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
          "6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
          "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
          "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
          "6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
          "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
          "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
          "6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
          "6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
          "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
          "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
          "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
          "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
          "6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
          "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
          "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
          "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
          "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
          "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-6109"
        },
        {
          "category": "external",
          "summary": "RHBZ#895277",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=895277"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-6109",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-6109"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6109",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6109"
        }
      ],
      "release_date": "2012-05-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-02-21T19:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
            "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
            "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
            "6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
            "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
            "6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
            "6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
            "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
            "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
            "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0544"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
            "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
            "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
            "6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
            "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
            "6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
            "6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
            "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
            "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
            "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "rubygem-rack: parsing Content-Disposition header DoS"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Michael Scherer"
          ],
          "organization": "Red Hat Regional IT team",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2013-0162",
      "cwe": {
        "id": "CWE-377",
        "name": "Insecure Temporary File"
      },
      "discovery_date": "2013-01-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "892806"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "rubygem-ruby_parser: incorrect temporary file usage",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
          "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
          "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
          "6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
          "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
          "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
          "6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
          "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
          "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
          "6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
          "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
          "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
          "6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
          "6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
          "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
          "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
          "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
          "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
          "6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
          "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
          "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
          "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
          "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
          "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-0162"
        },
        {
          "category": "external",
          "summary": "RHBZ#892806",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=892806"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-0162",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-0162"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-0162",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0162"
        }
      ],
      "release_date": "2013-01-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-02-21T19:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
            "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
            "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
            "6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
            "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
            "6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
            "6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
            "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
            "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
            "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0544"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 2.1,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
            "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
            "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
            "6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
            "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
            "6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
            "6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
            "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
            "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
            "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "rubygem-ruby_parser: incorrect temporary file usage"
    },
    {
      "cve": "CVE-2013-0183",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2013-01-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "895282"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a long string in a Multipart HTTP packet.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "rubygem-rack: receiving excessively long lines triggers out-of-memory error",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
          "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
          "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
          "6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
          "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
          "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
          "6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
          "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
          "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
          "6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
          "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
          "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
          "6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
          "6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
          "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
          "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
          "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
          "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
          "6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
          "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
          "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
          "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
          "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
          "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-0183"
        },
        {
          "category": "external",
          "summary": "RHBZ#895282",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=895282"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-0183",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-0183"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-0183",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0183"
        }
      ],
      "release_date": "2013-01-07T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-02-21T19:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
            "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
            "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
            "6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
            "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
            "6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
            "6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
            "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
            "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
            "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0544"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
            "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
            "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
            "6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
            "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
            "6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
            "6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
            "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
            "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
            "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "rubygem-rack: receiving excessively long lines triggers out-of-memory error"
    },
    {
      "cve": "CVE-2013-0184",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2013-01-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "895384"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in Rack::Auth::AbstractRequest in Rack 1.1.x before 1.1.5, 1.2.x before 1.2.7, 1.3.x before 1.3.9, and 1.4.x before 1.4.4 allows remote attackers to cause a denial of service via unknown vectors related to \"symbolized arbitrary strings.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "rubygem-rack: Rack::Auth:: AbstractRequest DoS",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
          "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
          "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
          "6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
          "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
          "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
          "6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
          "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
          "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
          "6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
          "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
          "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
          "6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
          "6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
          "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
          "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
          "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
          "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
          "6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
          "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
          "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
          "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
          "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
          "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
          "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
          "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
          "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-0184"
        },
        {
          "category": "external",
          "summary": "RHBZ#895384",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=895384"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-0184",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-0184"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-0184",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0184"
        }
      ],
      "release_date": "2012-05-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-02-21T19:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
            "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
            "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
            "6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
            "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
            "6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
            "6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
            "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
            "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
            "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0544"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.src",
            "6Server-SubscriptionAssetManager12:apache-commons-codec-0:1.7-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:apache-commons-codec-debuginfo-0:1.7-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.noarch",
            "6Server-SubscriptionAssetManager12:apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1.src",
            "6Server-SubscriptionAssetManager12:apache-mime4j-javadoc-0:0.6-4_redhat_1.ep6.el6.1.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-0:0.7.23-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.23-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:elasticsearch-0:0.19.9-5.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-0:1.2.1-15h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-certs-tools-0:1.2.1-1h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-cli-0:1.2.1-12h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-cli-common-0:1.2.1-12h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3-3h.el6_3.src",
            "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1-15h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:katello-selinux-0:1.2.1-2h.el6_3.src",
            "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:lucene3-0:3.6.1-10h.el6_3.src",
            "6Server-SubscriptionAssetManager12:lucene3-contrib-0:3.6.1-10h.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:puppet-0:2.6.17-2.el6cf.src",
            "6Server-SubscriptionAssetManager12:puppet-server-0:2.6.17-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:quartz-0:2.1.5-4.el6_3.src",
            "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-activesupport-1:3.0.10-10.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-apipie-rails-0:0.0.12-2.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-ldap_fluff-0:0.1.3-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-mail-0:2.3.0-3.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-mail-doc-0:2.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-3.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
            "6Server-SubscriptionAssetManager12:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
            "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.src",
            "6Server-SubscriptionAssetManager12:sigar-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:sigar-debuginfo-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:sigar-java-0:1.6.5-0.12.git58097d9h.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.src",
            "6Server-SubscriptionAssetManager12:snappy-java-0:1.0.4-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:snappy-java-debuginfo-0:1.0.4-2.el6_3.x86_64",
            "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.noarch",
            "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28-1.el6_3.src",
            "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28-1.el6_3.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "rubygem-rack: Rack::Auth:: AbstractRequest DoS"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "CloudForms Common 1.1.2 is now available.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat CloudForms is an on-premise hybrid cloud\nInfrastructure-as-a-Service (IaaS) product that lets you create and manage\nprivate and public clouds. It provides self-service computing resources to\nusers in a managed, governed, and secure way.\n\nThree flaws were found in rubygem-rack. A remote attacker could use these\nflaws to perform a denial of service attack against applications using\nrubygem-rack. (CVE-2012-6109, CVE-2013-0183, CVE-2013-0184)\n\nIt was found that documentation created by rubygem-rdoc was vulnerable to\na cross-site scripting (XSS) attack. If such documentation was accessible\nover a network, and a remote attacker could trick a user into visiting a\nspecially-crafted URL, it would lead to arbitrary web script execution in\nthe context of the user\u0027s session. As rubygem-rdoc is used for creating\ndocumentation for Ruby source files (such as classes, modules, and so on),\nit is not a common scenario to make such documentation accessible over the\nnetwork. (CVE-2013-0256)\n\nIt was found that ruby_parser from rubygem-ruby_parser created a temporary\nfile in an insecure way. A local attacker could use this flaw to perform a\nsymbolic link attack, overwriting arbitrary files accessible to the\napplication using ruby_parser. (CVE-2013-0162)\n\nRed Hat would like to thank Eric Hodel of RDoc upstream for reporting\nCVE-2013-0256. Upstream acknowledges Evgeny Ermakov as the original\nreporter of CVE-2013-0256. The CVE-2013-0162 issue was discovered by\nMichael Scherer of the Red Hat Regional IT team.\n\nRefer to the CloudForms 1.1.2 Release Notes for further information about\nthis release. The Release Notes will be available shortly from\nhttps://access.redhat.com/knowledge/docs/\n\nUsers of CloudForms Common are advised to upgrade to these updated\npackages.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2013:0548",
        "url": "https://access.redhat.com/errata/RHSA-2013:0548"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/knowledge/docs/",
        "url": "https://access.redhat.com/knowledge/docs/"
      },
      {
        "category": "external",
        "summary": "892806",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=892806"
      },
      {
        "category": "external",
        "summary": "895277",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=895277"
      },
      {
        "category": "external",
        "summary": "895282",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=895282"
      },
      {
        "category": "external",
        "summary": "895384",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=895384"
      },
      {
        "category": "external",
        "summary": "907820",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=907820"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0548.json"
      }
    ],
    "title": "Red Hat Security Advisory: CloudForms Common 1.1.2 update",
    "tracking": {
      "current_release_date": "2026-03-27T09:17:04+00:00",
      "generator": {
        "date": "2026-03-27T09:17:04+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.4"
        }
      },
      "id": "RHSA-2013:0548",
      "initial_release_date": "2013-02-21T18:56:00+00:00",
      "revision_history": [
        {
          "date": "2013-02-21T18:56:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2013-02-21T19:00:32+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-03-27T09:17:04+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "CloudForms Cloud Engine for RHEL 6 Server",
                "product": {
                  "name": "CloudForms Cloud Engine for RHEL 6 Server",
                  "product_id": "6Server-CloudEngine",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:cloudforms_cloudengine:1::el6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "CloudForms System Engine for RHEL 6 Server",
                "product": {
                  "name": "CloudForms System Engine for RHEL 6 Server",
                  "product_id": "6Server-SystemEngine",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:cloudforms_systemengine:1::el6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat CloudForms"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
                "product": {
                  "name": "rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
                  "product_id": "rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-ruby_parser@2.0.4-6.el6cf?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
                "product": {
                  "name": "rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
                  "product_id": "rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-ruby_parser-doc@2.0.4-6.el6cf?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-rack-1:1.3.0-3.el6cf.noarch",
                "product": {
                  "name": "rubygem-rack-1:1.3.0-3.el6cf.noarch",
                  "product_id": "rubygem-rack-1:1.3.0-3.el6cf.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-rack@1.3.0-3.el6cf?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
                "product": {
                  "name": "rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
                  "product_id": "rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-rdoc-doc@3.8-6.el6cf?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-rdoc-0:3.8-6.el6cf.noarch",
                "product": {
                  "name": "rubygem-rdoc-0:3.8-6.el6cf.noarch",
                  "product_id": "rubygem-rdoc-0:3.8-6.el6cf.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-rdoc@3.8-6.el6cf?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
                "product": {
                  "name": "rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
                  "product_id": "rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-shoulda-doc@2.11.3-5.el6cf?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
                "product": {
                  "name": "rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
                  "product_id": "rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-shoulda@2.11.3-5.el6cf?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
                "product": {
                  "name": "rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
                  "product_id": "rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-rspec-rails@2.6.1-7.el6cf?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
                "product": {
                  "name": "rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
                  "product_id": "rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-rspec-rails-doc@2.6.1-7.el6cf?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
                "product": {
                  "name": "rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
                  "product_id": "rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-rails_warden-doc@0.5.5-2.el6cf?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
                "product": {
                  "name": "rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
                  "product_id": "rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-rails_warden@0.5.5-2.el6cf?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
                "product": {
                  "name": "rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
                  "product_id": "rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-delayed_job@2.1.4-3.el6cf?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
                "product": {
                  "name": "rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
                  "product_id": "rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-delayed_job-doc@2.1.4-3.el6cf?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
                "product": {
                  "name": "rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
                  "product_id": "rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-nokogiri-doc@1.5.0-0.9.beta4.el6cf?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
                "product": {
                  "name": "rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
                  "product_id": "rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-activesupport@3.0.10-10.el6cf?arch=noarch\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
                "product": {
                  "name": "rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
                  "product_id": "rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-ruby_parser@2.0.4-6.el6cf?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-rack-1:1.3.0-3.el6cf.src",
                "product": {
                  "name": "rubygem-rack-1:1.3.0-3.el6cf.src",
                  "product_id": "rubygem-rack-1:1.3.0-3.el6cf.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-rack@1.3.0-3.el6cf?arch=src\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-rdoc-0:3.8-6.el6cf.src",
                "product": {
                  "name": "rubygem-rdoc-0:3.8-6.el6cf.src",
                  "product_id": "rubygem-rdoc-0:3.8-6.el6cf.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-rdoc@3.8-6.el6cf?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-shoulda-0:2.11.3-5.el6cf.src",
                "product": {
                  "name": "rubygem-shoulda-0:2.11.3-5.el6cf.src",
                  "product_id": "rubygem-shoulda-0:2.11.3-5.el6cf.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-shoulda@2.11.3-5.el6cf?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
                "product": {
                  "name": "rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
                  "product_id": "rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-rspec-rails@2.6.1-7.el6cf?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-rails_warden-0:0.5.5-2.el6cf.src",
                "product": {
                  "name": "rubygem-rails_warden-0:0.5.5-2.el6cf.src",
                  "product_id": "rubygem-rails_warden-0:0.5.5-2.el6cf.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-rails_warden@0.5.5-2.el6cf?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-delayed_job-0:2.1.4-3.el6cf.src",
                "product": {
                  "name": "rubygem-delayed_job-0:2.1.4-3.el6cf.src",
                  "product_id": "rubygem-delayed_job-0:2.1.4-3.el6cf.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-delayed_job@2.1.4-3.el6cf?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
                "product": {
                  "name": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
                  "product_id": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-nokogiri@1.5.0-0.9.beta4.el6cf?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-activesupport-1:3.0.10-10.el6cf.src",
                "product": {
                  "name": "rubygem-activesupport-1:3.0.10-10.el6cf.src",
                  "product_id": "rubygem-activesupport-1:3.0.10-10.el6cf.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-activesupport@3.0.10-10.el6cf?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
                "product": {
                  "name": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
                  "product_id": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-nokogiri@1.5.0-0.9.beta4.el6cf?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
                "product": {
                  "name": "ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
                  "product_id": "ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ruby-nokogiri@1.5.0-0.9.beta4.el6cf?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
                "product": {
                  "name": "rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
                  "product_id": "rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem-nokogiri-debuginfo@1.5.0-0.9.beta4.el6cf?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64 as a component of CloudForms Cloud Engine for RHEL 6 Server",
          "product_id": "6Server-CloudEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64"
        },
        "product_reference": "ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
        "relates_to_product_reference": "6Server-CloudEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-activesupport-1:3.0.10-10.el6cf.noarch as a component of CloudForms Cloud Engine for RHEL 6 Server",
          "product_id": "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch"
        },
        "product_reference": "rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
        "relates_to_product_reference": "6Server-CloudEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-activesupport-1:3.0.10-10.el6cf.src as a component of CloudForms Cloud Engine for RHEL 6 Server",
          "product_id": "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src"
        },
        "product_reference": "rubygem-activesupport-1:3.0.10-10.el6cf.src",
        "relates_to_product_reference": "6Server-CloudEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-delayed_job-0:2.1.4-3.el6cf.noarch as a component of CloudForms Cloud Engine for RHEL 6 Server",
          "product_id": "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch"
        },
        "product_reference": "rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
        "relates_to_product_reference": "6Server-CloudEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-delayed_job-0:2.1.4-3.el6cf.src as a component of CloudForms Cloud Engine for RHEL 6 Server",
          "product_id": "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src"
        },
        "product_reference": "rubygem-delayed_job-0:2.1.4-3.el6cf.src",
        "relates_to_product_reference": "6Server-CloudEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch as a component of CloudForms Cloud Engine for RHEL 6 Server",
          "product_id": "6Server-CloudEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch"
        },
        "product_reference": "rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
        "relates_to_product_reference": "6Server-CloudEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src as a component of CloudForms Cloud Engine for RHEL 6 Server",
          "product_id": "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src"
        },
        "product_reference": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
        "relates_to_product_reference": "6Server-CloudEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64 as a component of CloudForms Cloud Engine for RHEL 6 Server",
          "product_id": "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64"
        },
        "product_reference": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
        "relates_to_product_reference": "6Server-CloudEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64 as a component of CloudForms Cloud Engine for RHEL 6 Server",
          "product_id": "6Server-CloudEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64"
        },
        "product_reference": "rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
        "relates_to_product_reference": "6Server-CloudEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch as a component of CloudForms Cloud Engine for RHEL 6 Server",
          "product_id": "6Server-CloudEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch"
        },
        "product_reference": "rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
        "relates_to_product_reference": "6Server-CloudEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-rack-1:1.3.0-3.el6cf.noarch as a component of CloudForms Cloud Engine for RHEL 6 Server",
          "product_id": "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch"
        },
        "product_reference": "rubygem-rack-1:1.3.0-3.el6cf.noarch",
        "relates_to_product_reference": "6Server-CloudEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-rack-1:1.3.0-3.el6cf.src as a component of CloudForms Cloud Engine for RHEL 6 Server",
          "product_id": "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.src"
        },
        "product_reference": "rubygem-rack-1:1.3.0-3.el6cf.src",
        "relates_to_product_reference": "6Server-CloudEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-rails_warden-0:0.5.5-2.el6cf.noarch as a component of CloudForms Cloud Engine for RHEL 6 Server",
          "product_id": "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch"
        },
        "product_reference": "rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
        "relates_to_product_reference": "6Server-CloudEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-rails_warden-0:0.5.5-2.el6cf.src as a component of CloudForms Cloud Engine for RHEL 6 Server",
          "product_id": "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src"
        },
        "product_reference": "rubygem-rails_warden-0:0.5.5-2.el6cf.src",
        "relates_to_product_reference": "6Server-CloudEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch as a component of CloudForms Cloud Engine for RHEL 6 Server",
          "product_id": "6Server-CloudEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch"
        },
        "product_reference": "rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
        "relates_to_product_reference": "6Server-CloudEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-rdoc-0:3.8-6.el6cf.noarch as a component of CloudForms Cloud Engine for RHEL 6 Server",
          "product_id": "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch"
        },
        "product_reference": "rubygem-rdoc-0:3.8-6.el6cf.noarch",
        "relates_to_product_reference": "6Server-CloudEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-rdoc-0:3.8-6.el6cf.src as a component of CloudForms Cloud Engine for RHEL 6 Server",
          "product_id": "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.src"
        },
        "product_reference": "rubygem-rdoc-0:3.8-6.el6cf.src",
        "relates_to_product_reference": "6Server-CloudEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-rdoc-doc-0:3.8-6.el6cf.noarch as a component of CloudForms Cloud Engine for RHEL 6 Server",
          "product_id": "6Server-CloudEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch"
        },
        "product_reference": "rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
        "relates_to_product_reference": "6Server-CloudEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch as a component of CloudForms Cloud Engine for RHEL 6 Server",
          "product_id": "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch"
        },
        "product_reference": "rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
        "relates_to_product_reference": "6Server-CloudEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-rspec-rails-0:2.6.1-7.el6cf.src as a component of CloudForms Cloud Engine for RHEL 6 Server",
          "product_id": "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.src"
        },
        "product_reference": "rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
        "relates_to_product_reference": "6Server-CloudEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch as a component of CloudForms Cloud Engine for RHEL 6 Server",
          "product_id": "6Server-CloudEngine:rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch"
        },
        "product_reference": "rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
        "relates_to_product_reference": "6Server-CloudEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch as a component of CloudForms Cloud Engine for RHEL 6 Server",
          "product_id": "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch"
        },
        "product_reference": "rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
        "relates_to_product_reference": "6Server-CloudEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-ruby_parser-0:2.0.4-6.el6cf.src as a component of CloudForms Cloud Engine for RHEL 6 Server",
          "product_id": "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src"
        },
        "product_reference": "rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
        "relates_to_product_reference": "6Server-CloudEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch as a component of CloudForms Cloud Engine for RHEL 6 Server",
          "product_id": "6Server-CloudEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
        },
        "product_reference": "rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
        "relates_to_product_reference": "6Server-CloudEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-shoulda-0:2.11.3-5.el6cf.noarch as a component of CloudForms Cloud Engine for RHEL 6 Server",
          "product_id": "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.noarch"
        },
        "product_reference": "rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
        "relates_to_product_reference": "6Server-CloudEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-shoulda-0:2.11.3-5.el6cf.src as a component of CloudForms Cloud Engine for RHEL 6 Server",
          "product_id": "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.src"
        },
        "product_reference": "rubygem-shoulda-0:2.11.3-5.el6cf.src",
        "relates_to_product_reference": "6Server-CloudEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch as a component of CloudForms Cloud Engine for RHEL 6 Server",
          "product_id": "6Server-CloudEngine:rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch"
        },
        "product_reference": "rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
        "relates_to_product_reference": "6Server-CloudEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64 as a component of CloudForms System Engine for RHEL 6 Server",
          "product_id": "6Server-SystemEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64"
        },
        "product_reference": "ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
        "relates_to_product_reference": "6Server-SystemEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-activesupport-1:3.0.10-10.el6cf.noarch as a component of CloudForms System Engine for RHEL 6 Server",
          "product_id": "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch"
        },
        "product_reference": "rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
        "relates_to_product_reference": "6Server-SystemEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-activesupport-1:3.0.10-10.el6cf.src as a component of CloudForms System Engine for RHEL 6 Server",
          "product_id": "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src"
        },
        "product_reference": "rubygem-activesupport-1:3.0.10-10.el6cf.src",
        "relates_to_product_reference": "6Server-SystemEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-delayed_job-0:2.1.4-3.el6cf.noarch as a component of CloudForms System Engine for RHEL 6 Server",
          "product_id": "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch"
        },
        "product_reference": "rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
        "relates_to_product_reference": "6Server-SystemEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-delayed_job-0:2.1.4-3.el6cf.src as a component of CloudForms System Engine for RHEL 6 Server",
          "product_id": "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src"
        },
        "product_reference": "rubygem-delayed_job-0:2.1.4-3.el6cf.src",
        "relates_to_product_reference": "6Server-SystemEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch as a component of CloudForms System Engine for RHEL 6 Server",
          "product_id": "6Server-SystemEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch"
        },
        "product_reference": "rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
        "relates_to_product_reference": "6Server-SystemEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src as a component of CloudForms System Engine for RHEL 6 Server",
          "product_id": "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src"
        },
        "product_reference": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
        "relates_to_product_reference": "6Server-SystemEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64 as a component of CloudForms System Engine for RHEL 6 Server",
          "product_id": "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64"
        },
        "product_reference": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
        "relates_to_product_reference": "6Server-SystemEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64 as a component of CloudForms System Engine for RHEL 6 Server",
          "product_id": "6Server-SystemEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64"
        },
        "product_reference": "rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
        "relates_to_product_reference": "6Server-SystemEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch as a component of CloudForms System Engine for RHEL 6 Server",
          "product_id": "6Server-SystemEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch"
        },
        "product_reference": "rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
        "relates_to_product_reference": "6Server-SystemEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-rack-1:1.3.0-3.el6cf.noarch as a component of CloudForms System Engine for RHEL 6 Server",
          "product_id": "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch"
        },
        "product_reference": "rubygem-rack-1:1.3.0-3.el6cf.noarch",
        "relates_to_product_reference": "6Server-SystemEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-rack-1:1.3.0-3.el6cf.src as a component of CloudForms System Engine for RHEL 6 Server",
          "product_id": "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.src"
        },
        "product_reference": "rubygem-rack-1:1.3.0-3.el6cf.src",
        "relates_to_product_reference": "6Server-SystemEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-rails_warden-0:0.5.5-2.el6cf.noarch as a component of CloudForms System Engine for RHEL 6 Server",
          "product_id": "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch"
        },
        "product_reference": "rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
        "relates_to_product_reference": "6Server-SystemEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-rails_warden-0:0.5.5-2.el6cf.src as a component of CloudForms System Engine for RHEL 6 Server",
          "product_id": "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src"
        },
        "product_reference": "rubygem-rails_warden-0:0.5.5-2.el6cf.src",
        "relates_to_product_reference": "6Server-SystemEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch as a component of CloudForms System Engine for RHEL 6 Server",
          "product_id": "6Server-SystemEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch"
        },
        "product_reference": "rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
        "relates_to_product_reference": "6Server-SystemEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-rdoc-0:3.8-6.el6cf.noarch as a component of CloudForms System Engine for RHEL 6 Server",
          "product_id": "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch"
        },
        "product_reference": "rubygem-rdoc-0:3.8-6.el6cf.noarch",
        "relates_to_product_reference": "6Server-SystemEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-rdoc-0:3.8-6.el6cf.src as a component of CloudForms System Engine for RHEL 6 Server",
          "product_id": "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.src"
        },
        "product_reference": "rubygem-rdoc-0:3.8-6.el6cf.src",
        "relates_to_product_reference": "6Server-SystemEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-rdoc-doc-0:3.8-6.el6cf.noarch as a component of CloudForms System Engine for RHEL 6 Server",
          "product_id": "6Server-SystemEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch"
        },
        "product_reference": "rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
        "relates_to_product_reference": "6Server-SystemEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch as a component of CloudForms System Engine for RHEL 6 Server",
          "product_id": "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch"
        },
        "product_reference": "rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
        "relates_to_product_reference": "6Server-SystemEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-ruby_parser-0:2.0.4-6.el6cf.src as a component of CloudForms System Engine for RHEL 6 Server",
          "product_id": "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src"
        },
        "product_reference": "rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
        "relates_to_product_reference": "6Server-SystemEngine"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch as a component of CloudForms System Engine for RHEL 6 Server",
          "product_id": "6Server-SystemEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
        },
        "product_reference": "rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
        "relates_to_product_reference": "6Server-SystemEngine"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2012-6109",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2013-01-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "895277"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "lib/rack/multipart.rb in Rack before 1.1.4, 1.2.x before 1.2.6, 1.3.x before 1.3.7, and 1.4.x before 1.4.2 uses an incorrect regular expression, which allows remote attackers to cause a denial of service (infinite loop) via a crafted Content-Disposion header.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "rubygem-rack: parsing Content-Disposition header DoS",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-CloudEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
          "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
          "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
          "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
          "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
          "6Server-CloudEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
          "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
          "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
          "6Server-CloudEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
          "6Server-CloudEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
          "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
          "6Server-CloudEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
          "6Server-CloudEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
          "6Server-CloudEngine:rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
          "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
          "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
          "6Server-CloudEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
          "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
          "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.src",
          "6Server-CloudEngine:rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
          "6Server-SystemEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
          "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
          "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
          "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
          "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
          "6Server-SystemEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
          "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
          "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
          "6Server-SystemEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
          "6Server-SystemEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
          "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
          "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
          "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
          "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
          "6Server-SystemEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
          "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
          "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
          "6Server-SystemEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
          "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
          "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
          "6Server-SystemEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-6109"
        },
        {
          "category": "external",
          "summary": "RHBZ#895277",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=895277"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-6109",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-6109"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6109",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6109"
        }
      ],
      "release_date": "2012-05-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-02-21T18:56:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "6Server-CloudEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
            "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
            "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
            "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
            "6Server-CloudEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
            "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
            "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-CloudEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-CloudEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
            "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
            "6Server-CloudEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
            "6Server-CloudEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
            "6Server-CloudEngine:rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
            "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
            "6Server-CloudEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
            "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.src",
            "6Server-CloudEngine:rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
            "6Server-SystemEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
            "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
            "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
            "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
            "6Server-SystemEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
            "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
            "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-SystemEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-SystemEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
            "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
            "6Server-SystemEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
            "6Server-SystemEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
            "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
            "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
            "6Server-SystemEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0548"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "6Server-CloudEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
            "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
            "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
            "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
            "6Server-CloudEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
            "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
            "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-CloudEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-CloudEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
            "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
            "6Server-CloudEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
            "6Server-CloudEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
            "6Server-CloudEngine:rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
            "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
            "6Server-CloudEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
            "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.src",
            "6Server-CloudEngine:rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
            "6Server-SystemEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
            "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
            "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
            "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
            "6Server-SystemEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
            "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
            "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-SystemEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-SystemEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
            "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
            "6Server-SystemEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
            "6Server-SystemEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
            "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
            "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
            "6Server-SystemEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "rubygem-rack: parsing Content-Disposition header DoS"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Michael Scherer"
          ],
          "organization": "Red Hat Regional IT team",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2013-0162",
      "cwe": {
        "id": "CWE-377",
        "name": "Insecure Temporary File"
      },
      "discovery_date": "2013-01-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "892806"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "rubygem-ruby_parser: incorrect temporary file usage",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-CloudEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
          "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
          "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
          "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
          "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
          "6Server-CloudEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
          "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
          "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
          "6Server-CloudEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
          "6Server-CloudEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
          "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
          "6Server-CloudEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
          "6Server-CloudEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
          "6Server-CloudEngine:rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
          "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
          "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
          "6Server-CloudEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
          "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
          "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.src",
          "6Server-CloudEngine:rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
          "6Server-SystemEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
          "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
          "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
          "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
          "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
          "6Server-SystemEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
          "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
          "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
          "6Server-SystemEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
          "6Server-SystemEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
          "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
          "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
          "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
          "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
          "6Server-SystemEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
          "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
          "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
          "6Server-SystemEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
          "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
          "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
          "6Server-SystemEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-0162"
        },
        {
          "category": "external",
          "summary": "RHBZ#892806",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=892806"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-0162",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-0162"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-0162",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0162"
        }
      ],
      "release_date": "2013-01-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-02-21T18:56:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "6Server-CloudEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
            "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
            "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
            "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
            "6Server-CloudEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
            "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
            "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-CloudEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-CloudEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
            "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
            "6Server-CloudEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
            "6Server-CloudEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
            "6Server-CloudEngine:rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
            "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
            "6Server-CloudEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
            "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.src",
            "6Server-CloudEngine:rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
            "6Server-SystemEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
            "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
            "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
            "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
            "6Server-SystemEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
            "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
            "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-SystemEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-SystemEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
            "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
            "6Server-SystemEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
            "6Server-SystemEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
            "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
            "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
            "6Server-SystemEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0548"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 2.1,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "6Server-CloudEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
            "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
            "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
            "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
            "6Server-CloudEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
            "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
            "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-CloudEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-CloudEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
            "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
            "6Server-CloudEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
            "6Server-CloudEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
            "6Server-CloudEngine:rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
            "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
            "6Server-CloudEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
            "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.src",
            "6Server-CloudEngine:rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
            "6Server-SystemEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
            "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
            "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
            "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
            "6Server-SystemEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
            "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
            "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-SystemEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-SystemEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
            "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
            "6Server-SystemEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
            "6Server-SystemEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
            "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
            "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
            "6Server-SystemEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "rubygem-ruby_parser: incorrect temporary file usage"
    },
    {
      "cve": "CVE-2013-0183",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2013-01-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "895282"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a long string in a Multipart HTTP packet.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "rubygem-rack: receiving excessively long lines triggers out-of-memory error",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-CloudEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
          "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
          "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
          "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
          "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
          "6Server-CloudEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
          "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
          "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
          "6Server-CloudEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
          "6Server-CloudEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
          "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
          "6Server-CloudEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
          "6Server-CloudEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
          "6Server-CloudEngine:rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
          "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
          "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
          "6Server-CloudEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
          "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
          "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.src",
          "6Server-CloudEngine:rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
          "6Server-SystemEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
          "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
          "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
          "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
          "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
          "6Server-SystemEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
          "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
          "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
          "6Server-SystemEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
          "6Server-SystemEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
          "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
          "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
          "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
          "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
          "6Server-SystemEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
          "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
          "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
          "6Server-SystemEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
          "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
          "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
          "6Server-SystemEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-0183"
        },
        {
          "category": "external",
          "summary": "RHBZ#895282",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=895282"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-0183",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-0183"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-0183",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0183"
        }
      ],
      "release_date": "2013-01-07T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-02-21T18:56:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "6Server-CloudEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
            "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
            "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
            "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
            "6Server-CloudEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
            "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
            "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-CloudEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-CloudEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
            "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
            "6Server-CloudEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
            "6Server-CloudEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
            "6Server-CloudEngine:rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
            "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
            "6Server-CloudEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
            "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.src",
            "6Server-CloudEngine:rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
            "6Server-SystemEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
            "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
            "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
            "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
            "6Server-SystemEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
            "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
            "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-SystemEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-SystemEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
            "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
            "6Server-SystemEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
            "6Server-SystemEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
            "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
            "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
            "6Server-SystemEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0548"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "6Server-CloudEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
            "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
            "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
            "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
            "6Server-CloudEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
            "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
            "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-CloudEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-CloudEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
            "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
            "6Server-CloudEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
            "6Server-CloudEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
            "6Server-CloudEngine:rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
            "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
            "6Server-CloudEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
            "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.src",
            "6Server-CloudEngine:rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
            "6Server-SystemEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
            "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
            "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
            "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
            "6Server-SystemEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
            "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
            "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-SystemEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-SystemEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
            "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
            "6Server-SystemEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
            "6Server-SystemEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
            "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
            "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
            "6Server-SystemEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "rubygem-rack: receiving excessively long lines triggers out-of-memory error"
    },
    {
      "cve": "CVE-2013-0184",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2013-01-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "895384"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in Rack::Auth::AbstractRequest in Rack 1.1.x before 1.1.5, 1.2.x before 1.2.7, 1.3.x before 1.3.9, and 1.4.x before 1.4.4 allows remote attackers to cause a denial of service via unknown vectors related to \"symbolized arbitrary strings.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "rubygem-rack: Rack::Auth:: AbstractRequest DoS",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-CloudEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
          "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
          "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
          "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
          "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
          "6Server-CloudEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
          "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
          "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
          "6Server-CloudEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
          "6Server-CloudEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
          "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
          "6Server-CloudEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
          "6Server-CloudEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
          "6Server-CloudEngine:rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
          "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
          "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
          "6Server-CloudEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
          "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
          "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.src",
          "6Server-CloudEngine:rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
          "6Server-SystemEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
          "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
          "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
          "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
          "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
          "6Server-SystemEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
          "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
          "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
          "6Server-SystemEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
          "6Server-SystemEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
          "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
          "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
          "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
          "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
          "6Server-SystemEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
          "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
          "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
          "6Server-SystemEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
          "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
          "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
          "6Server-SystemEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-0184"
        },
        {
          "category": "external",
          "summary": "RHBZ#895384",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=895384"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-0184",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-0184"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-0184",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0184"
        }
      ],
      "release_date": "2012-05-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-02-21T18:56:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "6Server-CloudEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
            "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
            "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
            "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
            "6Server-CloudEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
            "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
            "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-CloudEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-CloudEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
            "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
            "6Server-CloudEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
            "6Server-CloudEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
            "6Server-CloudEngine:rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
            "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
            "6Server-CloudEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
            "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.src",
            "6Server-CloudEngine:rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
            "6Server-SystemEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
            "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
            "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
            "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
            "6Server-SystemEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
            "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
            "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-SystemEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-SystemEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
            "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
            "6Server-SystemEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
            "6Server-SystemEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
            "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
            "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
            "6Server-SystemEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0548"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "6Server-CloudEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
            "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
            "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
            "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
            "6Server-CloudEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
            "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
            "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-CloudEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-CloudEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
            "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
            "6Server-CloudEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
            "6Server-CloudEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
            "6Server-CloudEngine:rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
            "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
            "6Server-CloudEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
            "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.src",
            "6Server-CloudEngine:rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
            "6Server-SystemEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
            "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
            "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
            "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
            "6Server-SystemEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
            "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
            "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-SystemEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-SystemEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
            "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
            "6Server-SystemEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
            "6Server-SystemEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
            "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
            "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
            "6Server-SystemEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "rubygem-rack: Rack::Auth:: AbstractRequest DoS"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Eric Hodel"
          ],
          "organization": "RDoc upstream"
        },
        {
          "names": [
            "Evgeny Ermakov"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2013-0256",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2013-02-05T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "907820"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "rubygem-rdoc: Cross-site scripting in the documentation created by Darkfish Rdoc HTML generator / template",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-CloudEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
          "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
          "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
          "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
          "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
          "6Server-CloudEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
          "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
          "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
          "6Server-CloudEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
          "6Server-CloudEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
          "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
          "6Server-CloudEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
          "6Server-CloudEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
          "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
          "6Server-CloudEngine:rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
          "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
          "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
          "6Server-CloudEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
          "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
          "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.src",
          "6Server-CloudEngine:rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
          "6Server-SystemEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
          "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
          "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
          "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
          "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
          "6Server-SystemEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
          "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
          "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
          "6Server-SystemEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
          "6Server-SystemEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
          "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
          "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
          "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
          "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
          "6Server-SystemEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
          "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
          "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
          "6Server-SystemEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
          "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
          "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
          "6Server-SystemEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-0256"
        },
        {
          "category": "external",
          "summary": "RHBZ#907820",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=907820"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-0256",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-0256"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-0256",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0256"
        },
        {
          "category": "external",
          "summary": "http://www.ruby-lang.org/en/news/2013/02/06/rdoc-xss-cve-2013-0256/",
          "url": "http://www.ruby-lang.org/en/news/2013/02/06/rdoc-xss-cve-2013-0256/"
        }
      ],
      "release_date": "2013-02-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-02-21T18:56:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "6Server-CloudEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
            "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
            "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
            "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
            "6Server-CloudEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
            "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
            "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-CloudEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-CloudEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
            "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
            "6Server-CloudEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
            "6Server-CloudEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
            "6Server-CloudEngine:rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
            "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
            "6Server-CloudEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
            "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.src",
            "6Server-CloudEngine:rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
            "6Server-SystemEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
            "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
            "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
            "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
            "6Server-SystemEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
            "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
            "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-SystemEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-SystemEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
            "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
            "6Server-SystemEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
            "6Server-SystemEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
            "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
            "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
            "6Server-SystemEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0548"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "6Server-CloudEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
            "6Server-CloudEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
            "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
            "6Server-CloudEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
            "6Server-CloudEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
            "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
            "6Server-CloudEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-CloudEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-CloudEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
            "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
            "6Server-CloudEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
            "6Server-CloudEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.noarch",
            "6Server-CloudEngine:rubygem-rspec-rails-0:2.6.1-7.el6cf.src",
            "6Server-CloudEngine:rubygem-rspec-rails-doc-0:2.6.1-7.el6cf.noarch",
            "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
            "6Server-CloudEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch",
            "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.noarch",
            "6Server-CloudEngine:rubygem-shoulda-0:2.11.3-5.el6cf.src",
            "6Server-CloudEngine:rubygem-shoulda-doc-0:2.11.3-5.el6cf.noarch",
            "6Server-SystemEngine:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.noarch",
            "6Server-SystemEngine:rubygem-activesupport-1:3.0.10-10.el6cf.src",
            "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch",
            "6Server-SystemEngine:rubygem-delayed_job-0:2.1.4-3.el6cf.src",
            "6Server-SystemEngine:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch",
            "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src",
            "6Server-SystemEngine:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-SystemEngine:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64",
            "6Server-SystemEngine:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rack-1:1.3.0-3.el6cf.src",
            "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rails_warden-0:0.5.5-2.el6cf.src",
            "6Server-SystemEngine:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.noarch",
            "6Server-SystemEngine:rubygem-rdoc-0:3.8-6.el6cf.src",
            "6Server-SystemEngine:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch",
            "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.noarch",
            "6Server-SystemEngine:rubygem-ruby_parser-0:2.0.4-6.el6cf.src",
            "6Server-SystemEngine:rubygem-ruby_parser-doc-0:2.0.4-6.el6cf.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "rubygem-rdoc: Cross-site scripting in the documentation created by Darkfish Rdoc HTML generator / template"
    }
  ]
}