{
   document: {
      aggregate_severity: {
         namespace: "https://access.redhat.com/security/updates/classification/",
         text: "Moderate",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright © Red Hat, Inc. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "An update for Red Hat JBoss Enterprise Application Platform 6.2.1 that\nfixes one security issue is now available from the Red Hat Customer Portal.\n\nThe Red Hat Security Response Team has rated this update as having Moderate\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available from the CVE link in\nthe References section.",
            title: "Topic",
         },
         {
            category: "general",
            text: "Red Hat JBoss Enterprise Application Platform 6 is a platform for Java\napplications based on JBoss Application Server 7.\n\nA denial of service flaw was found in the way Apache Commons FileUpload,\nwhich is embedded in the JBoss Web component of JBoss EAP, handled\nsmall-sized buffers used by MultipartStream. A remote attacker could use\nthis flaw to create a malformed Content-Type header for a multipart\nrequest, causing JBoss Web to enter an infinite loop when processing such\nan incoming request. (CVE-2014-0050)\n\nAll users of Red Hat JBoss Enterprise Application Platform 6.2.1 as\nprovided from the Red Hat Customer Portal are advised to apply this update.\nThe JBoss server process must be restarted for the update to take effect.",
            title: "Details",
         },
         {
            category: "legal_disclaimer",
            text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
            title: "Terms of Use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://access.redhat.com/security/team/contact/",
         issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
         name: "Red Hat Product Security",
         namespace: "https://www.redhat.com",
      },
      references: [
         {
            category: "self",
            summary: "https://access.redhat.com/errata/RHSA-2014:0252",
            url: "https://access.redhat.com/errata/RHSA-2014:0252",
         },
         {
            category: "external",
            summary: "https://access.redhat.com/security/updates/classification/#moderate",
            url: "https://access.redhat.com/security/updates/classification/#moderate",
         },
         {
            category: "external",
            summary: "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform&downloadType=securityPatches&version=6.2.0",
            url: "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform&downloadType=securityPatches&version=6.2.0",
         },
         {
            category: "external",
            summary: "https://access.redhat.com/site/solutions/625683",
            url: "https://access.redhat.com/site/solutions/625683",
         },
         {
            category: "external",
            summary: "1062337",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1062337",
         },
         {
            category: "self",
            summary: "Canonical URL",
            url: "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0252.json",
         },
      ],
      title: "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.2.1 security update",
      tracking: {
         current_release_date: "2024-11-22T07:51:09+00:00",
         generator: {
            date: "2024-11-22T07:51:09+00:00",
            engine: {
               name: "Red Hat SDEngine",
               version: "4.2.1",
            },
         },
         id: "RHSA-2014:0252",
         initial_release_date: "2014-03-05T19:05:35+00:00",
         revision_history: [
            {
               date: "2014-03-05T19:05:35+00:00",
               number: "1",
               summary: "Initial version",
            },
            {
               date: "2019-02-20T12:31:39+00:00",
               number: "2",
               summary: "Last updated version",
            },
            {
               date: "2024-11-22T07:51:09+00:00",
               number: "3",
               summary: "Last generated version",
            },
         ],
         status: "final",
         version: "3",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "Red Hat JBoss Enterprise Application Platform 6.2",
                        product: {
                           name: "Red Hat JBoss Enterprise Application Platform 6.2",
                           product_id: "Red Hat JBoss Enterprise Application Platform 6.2",
                           product_identification_helper: {
                              cpe: "cpe:/a:redhat:jboss_enterprise_application_platform:6.2",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "Red Hat JBoss Enterprise Application Platform",
               },
            ],
            category: "vendor",
            name: "Red Hat",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2014-0050",
         discovery_date: "2014-02-06T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1062337",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A denial of service flaw was found in the way Apache Commons FileUpload, which is embedded in Tomcat and JBoss Web, handled small-sized buffers used by MultipartStream. A remote attacker could use this flaw to create a malformed Content-Type header for a multipart request, causing Tomcat to enter an infinite loop when processing such an incoming request.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "Red Hat JBoss Enterprise Application Platform 6.2",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2014-0050",
            },
            {
               category: "external",
               summary: "RHBZ#1062337",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1062337",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2014-0050",
               url: "https://www.cve.org/CVERecord?id=CVE-2014-0050",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2014-0050",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2014-0050",
            },
         ],
         release_date: "2014-02-06T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2014-03-05T19:05:35+00:00",
               details: "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting Red Hat JBoss Enterprise Application Platform installation and\ndeployed applications.",
               product_ids: [
                  "Red Hat JBoss Enterprise Application Platform 6.2",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2014:0252",
            },
         ],
         scores: [
            {
               cvss_v2: {
                  accessComplexity: "LOW",
                  accessVector: "NETWORK",
                  authentication: "NONE",
                  availabilityImpact: "PARTIAL",
                  baseScore: 5,
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P",
                  version: "2.0",
               },
               products: [
                  "Red Hat JBoss Enterprise Application Platform 6.2",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream",
      },
   ],
}

{
   document: {
      aggregate_severity: {
         namespace: "https://access.redhat.com/security/updates/classification/",
         text: "Moderate",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright © Red Hat, Inc. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "An update for the Apache Commons Fileupload and JBoss Web components that\nfixes two security issues is now available from the Red Hat Customer Portal\nfor Red Hat JBoss BRMS 6.0.1 and Red Hat JBoss BPM Suite 6.0.1.\n\nThe Red Hat Security Response Team has rated this update as having Moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.",
            title: "Topic",
         },
         {
            category: "general",
            text: "JBoss Web Server is an enterprise ready web server designed for medium and\nlarge applications, and is based on Tomcat. JBoss Web Server provides\norganizations with a single deployment platform for Java Server Pages (JSP)\nand Java Servlet technologies, PHP, and CGI. It uses a genuine high\nperformance hybrid technology that incorporates the best of the most recent\nOS technologies for processing high volume data, while keeping all the\nreference Java specifications.\n\nApache Commons FileUpload package makes it easy to add robust,\nhigh-performance, file upload capability to servlets and web applications.\n\nIt was found that when JBoss Web processed a series of HTTP requests in\nwhich at least one request contained either multiple content-length\nheaders, or one content-length header with a chunked transfer-encoding\nheader, JBoss Web would incorrectly handle the request. A remote attacker\ncould use this flaw to poison a web cache, perform cross-site scripting\n(XSS) attacks, or obtain sensitive information from other requests.\n(CVE-2013-4286)\n\nA denial of service flaw was found in the way Apache Commons FileUpload,\nwhich is embedded in the JBoss Web component of JBoss EAP bundled with\nJBoss BRMS and BPM Suite, handled small-sized buffers used by\nMultipartStream. A remote attacker could use this flaw to create a\nmalformed Content-Type header for a multipart request, causing JBoss Web to\nenter an infinite loop when processing such an incoming request.\n(CVE-2014-0050)\n\nAll users of the affected products as provided from the Red Hat Customer\nPortal are advised to apply this update.",
            title: "Details",
         },
         {
            category: "legal_disclaimer",
            text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
            title: "Terms of Use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://access.redhat.com/security/team/contact/",
         issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
         name: "Red Hat Product Security",
         namespace: "https://www.redhat.com",
      },
      references: [
         {
            category: "self",
            summary: "https://access.redhat.com/errata/RHSA-2014:0373",
            url: "https://access.redhat.com/errata/RHSA-2014:0373",
         },
         {
            category: "external",
            summary: "https://access.redhat.com/security/updates/classification/#moderate",
            url: "https://access.redhat.com/security/updates/classification/#moderate",
         },
         {
            category: "external",
            summary: "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=brms&downloadType=securityPatches&version=6.0.1",
            url: "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=brms&downloadType=securityPatches&version=6.0.1",
         },
         {
            category: "external",
            summary: "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=bpm.suite&downloadType=securityPatches&version=6.0.1",
            url: "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=bpm.suite&downloadType=securityPatches&version=6.0.1",
         },
         {
            category: "external",
            summary: "1062337",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1062337",
         },
         {
            category: "external",
            summary: "1069921",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1069921",
         },
         {
            category: "self",
            summary: "Canonical URL",
            url: "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0373.json",
         },
      ],
      title: "Red Hat Security Advisory: Apache Commons Fileupload and JBoss Web security update",
      tracking: {
         current_release_date: "2025-02-02T19:39:58+00:00",
         generator: {
            date: "2025-02-02T19:39:58+00:00",
            engine: {
               name: "Red Hat SDEngine",
               version: "4.2.6",
            },
         },
         id: "RHSA-2014:0373",
         initial_release_date: "2014-04-03T21:19:48+00:00",
         revision_history: [
            {
               date: "2014-04-03T21:19:48+00:00",
               number: "1",
               summary: "Initial version",
            },
            {
               date: "2020-06-15T16:41:29+00:00",
               number: "2",
               summary: "Last updated version",
            },
            {
               date: "2025-02-02T19:39:58+00:00",
               number: "3",
               summary: "Last generated version",
            },
         ],
         status: "final",
         version: "3",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "Red Hat JBoss BPMS 6.0",
                        product: {
                           name: "Red Hat JBoss BPMS 6.0",
                           product_id: "Red Hat JBoss BPMS 6.0",
                           product_identification_helper: {
                              cpe: "cpe:/a:redhat:jboss_bpms:6.0",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "Red Hat JBoss BRMS 6.0",
                        product: {
                           name: "Red Hat JBoss BRMS 6.0",
                           product_id: "Red Hat JBoss BRMS 6.0",
                           product_identification_helper: {
                              cpe: "cpe:/a:redhat:jboss_brms:6.0",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "Red Hat JBoss Middleware",
               },
            ],
            category: "vendor",
            name: "Red Hat",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2013-4286",
         discovery_date: "2014-02-25T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1069921",
            },
         ],
         notes: [
            {
               category: "description",
               text: "It was found that when Tomcat / JBoss Web processed a series of HTTP requests in which at least one request contained either multiple content-length headers, or one content-length header with a chunked transfer-encoding header, Tomcat / JBoss Web would incorrectly handle the request. A remote attacker could use this flaw to poison a web cache, perform cross-site scripting (XSS) attacks, or obtain sensitive information from other requests.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "tomcat: multiple content-length header poisoning flaws",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "Red Hat JBoss BPMS 6.0",
               "Red Hat JBoss BRMS 6.0",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2013-4286",
            },
            {
               category: "external",
               summary: "RHBZ#1069921",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1069921",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2013-4286",
               url: "https://www.cve.org/CVERecord?id=CVE-2013-4286",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2013-4286",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2013-4286",
            },
         ],
         release_date: "2014-02-25T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2014-04-03T21:19:48+00:00",
               details: "The References section of this erratum contains download links (you must\nlog in to download the updates). Before applying the updates, back up\nyour existing installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
               product_ids: [
                  "Red Hat JBoss BPMS 6.0",
                  "Red Hat JBoss BRMS 6.0",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2014:0373",
            },
         ],
         scores: [
            {
               cvss_v2: {
                  accessComplexity: "MEDIUM",
                  accessVector: "NETWORK",
                  authentication: "NONE",
                  availabilityImpact: "NONE",
                  baseScore: 5.8,
                  confidentialityImpact: "PARTIAL",
                  integrityImpact: "PARTIAL",
                  vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:N",
                  version: "2.0",
               },
               products: [
                  "Red Hat JBoss BPMS 6.0",
                  "Red Hat JBoss BRMS 6.0",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "tomcat: multiple content-length header poisoning flaws",
      },
      {
         cve: "CVE-2014-0050",
         discovery_date: "2014-02-06T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1062337",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A denial of service flaw was found in the way Apache Commons FileUpload, which is embedded in Tomcat and JBoss Web, handled small-sized buffers used by MultipartStream. A remote attacker could use this flaw to create a malformed Content-Type header for a multipart request, causing Tomcat to enter an infinite loop when processing such an incoming request.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "Red Hat JBoss BPMS 6.0",
               "Red Hat JBoss BRMS 6.0",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2014-0050",
            },
            {
               category: "external",
               summary: "RHBZ#1062337",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1062337",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2014-0050",
               url: "https://www.cve.org/CVERecord?id=CVE-2014-0050",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2014-0050",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2014-0050",
            },
         ],
         release_date: "2014-02-06T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2014-04-03T21:19:48+00:00",
               details: "The References section of this erratum contains download links (you must\nlog in to download the updates). Before applying the updates, back up\nyour existing installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
               product_ids: [
                  "Red Hat JBoss BPMS 6.0",
                  "Red Hat JBoss BRMS 6.0",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2014:0373",
            },
         ],
         scores: [
            {
               cvss_v2: {
                  accessComplexity: "LOW",
                  accessVector: "NETWORK",
                  authentication: "NONE",
                  availabilityImpact: "PARTIAL",
                  baseScore: 5,
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P",
                  version: "2.0",
               },
               products: [
                  "Red Hat JBoss BPMS 6.0",
                  "Red Hat JBoss BRMS 6.0",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream",
      },
   ],
}

{
   document: {
      aggregate_severity: {
         namespace: "https://access.redhat.com/security/updates/classification/",
         text: "Moderate",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright © Red Hat, Inc. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Updated tomcat6 packages that fix three security issues are now available\nfor Red Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having Moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.",
            title: "Topic",
         },
         {
            category: "general",
            text: "Apache Tomcat is a servlet container for the Java Servlet and JavaServer\nPages (JSP) technologies.\n\nIt was found that when Tomcat processed a series of HTTP requests in which\nat least one request contained either multiple content-length headers, or\none content-length header with a chunked transfer-encoding header, Tomcat\nwould incorrectly handle the request. A remote attacker could use this flaw\nto poison a web cache, perform cross-site scripting (XSS) attacks, or\nobtain sensitive information from other requests. (CVE-2013-4286)\n\nIt was discovered that the fix for CVE-2012-3544 did not properly resolve a\ndenial of service flaw in the way Tomcat processed chunk extensions and\ntrailing headers in chunked requests. A remote attacker could use this flaw\nto send an excessively long request that, when processed by Tomcat, could\nconsume network bandwidth, CPU, and memory on the Tomcat server. Note that\nchunked transfer encoding is enabled by default. (CVE-2013-4322)\n\nA denial of service flaw was found in the way Apache Commons FileUpload\nhandled small-sized buffers used by MultipartStream. A remote attacker\ncould use this flaw to create a malformed Content-Type header for a\nmultipart request, causing JBoss Web to enter an infinite loop when\nprocessing such an incoming request. (CVE-2014-0050)\n\nAll Tomcat users are advised to upgrade to these updated packages, which\ncontain backported patches to correct these issues. Tomcat must be\nrestarted for this update to take effect.",
            title: "Details",
         },
         {
            category: "legal_disclaimer",
            text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
            title: "Terms of Use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://access.redhat.com/security/team/contact/",
         issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
         name: "Red Hat Product Security",
         namespace: "https://www.redhat.com",
      },
      references: [
         {
            category: "self",
            summary: "https://access.redhat.com/errata/RHSA-2014:0429",
            url: "https://access.redhat.com/errata/RHSA-2014:0429",
         },
         {
            category: "external",
            summary: "https://access.redhat.com/security/updates/classification/#moderate",
            url: "https://access.redhat.com/security/updates/classification/#moderate",
         },
         {
            category: "external",
            summary: "https://tomcat.apache.org/security-6.html",
            url: "https://tomcat.apache.org/security-6.html",
         },
         {
            category: "external",
            summary: "1062337",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1062337",
         },
         {
            category: "external",
            summary: "1069905",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1069905",
         },
         {
            category: "external",
            summary: "1069921",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1069921",
         },
         {
            category: "self",
            summary: "Canonical URL",
            url: "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0429.json",
         },
      ],
      title: "Red Hat Security Advisory: tomcat6 security update",
      tracking: {
         current_release_date: "2025-02-02T19:39:38+00:00",
         generator: {
            date: "2025-02-02T19:39:38+00:00",
            engine: {
               name: "Red Hat SDEngine",
               version: "4.2.6",
            },
         },
         id: "RHSA-2014:0429",
         initial_release_date: "2014-04-23T18:27:58+00:00",
         revision_history: [
            {
               date: "2014-04-23T18:27:58+00:00",
               number: "1",
               summary: "Initial version",
            },
            {
               date: "2014-04-23T18:27:58+00:00",
               number: "2",
               summary: "Last updated version",
            },
            {
               date: "2025-02-02T19:39:38+00:00",
               number: "3",
               summary: "Last generated version",
            },
         ],
         status: "final",
         version: "3",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "Red Hat Enterprise Linux Desktop Optional (v. 6)",
                        product: {
                           name: "Red Hat Enterprise Linux Desktop Optional (v. 6)",
                           product_id: "6Client-optional-6.5.z",
                           product_identification_helper: {
                              cpe: "cpe:/o:redhat:enterprise_linux:6::client",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
                        product: {
                           name: "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
                           product_id: "6ComputeNode-optional-6.5.z",
                           product_identification_helper: {
                              cpe: "cpe:/o:redhat:enterprise_linux:6::computenode",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "Red Hat Enterprise Linux Server (v. 6)",
                        product: {
                           name: "Red Hat Enterprise Linux Server (v. 6)",
                           product_id: "6Server-6.5.z",
                           product_identification_helper: {
                              cpe: "cpe:/o:redhat:enterprise_linux:6::server",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "Red Hat Enterprise Linux Server Optional (v. 6)",
                        product: {
                           name: "Red Hat Enterprise Linux Server Optional (v. 6)",
                           product_id: "6Server-optional-6.5.z",
                           product_identification_helper: {
                              cpe: "cpe:/o:redhat:enterprise_linux:6::server",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "Red Hat Enterprise Linux Workstation (v. 6)",
                        product: {
                           name: "Red Hat Enterprise Linux Workstation (v. 6)",
                           product_id: "6Workstation-6.5.z",
                           product_identification_helper: {
                              cpe: "cpe:/o:redhat:enterprise_linux:6::workstation",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "Red Hat Enterprise Linux Workstation Optional (v. 6)",
                        product: {
                           name: "Red Hat Enterprise Linux Workstation Optional (v. 6)",
                           product_id: "6Workstation-optional-6.5.z",
                           product_identification_helper: {
                              cpe: "cpe:/o:redhat:enterprise_linux:6::workstation",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "Red Hat Enterprise Linux",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                        product: {
                           name: "tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                           product_id: "tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat6-docs-webapp@6.0.24-64.el6_5?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
                        product: {
                           name: "tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
                           product_id: "tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat6-webapps@6.0.24-64.el6_5?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                        product: {
                           name: "tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                           product_id: "tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat6-javadoc@6.0.24-64.el6_5?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                        product: {
                           name: "tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                           product_id: "tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat6-admin-webapps@6.0.24-64.el6_5?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                        product: {
                           name: "tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                           product_id: "tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat6-jsp-2.1-api@6.0.24-64.el6_5?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                        product: {
                           name: "tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                           product_id: "tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat6-lib@6.0.24-64.el6_5?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                        product: {
                           name: "tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                           product_id: "tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat6-servlet-2.5-api@6.0.24-64.el6_5?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                        product: {
                           name: "tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                           product_id: "tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat6-el-2.1-api@6.0.24-64.el6_5?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat6-0:6.0.24-64.el6_5.noarch",
                        product: {
                           name: "tomcat6-0:6.0.24-64.el6_5.noarch",
                           product_id: "tomcat6-0:6.0.24-64.el6_5.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat6@6.0.24-64.el6_5?arch=noarch",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "noarch",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "tomcat6-0:6.0.24-64.el6_5.src",
                        product: {
                           name: "tomcat6-0:6.0.24-64.el6_5.src",
                           product_id: "tomcat6-0:6.0.24-64.el6_5.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat6@6.0.24-64.el6_5?arch=src",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "src",
               },
            ],
            category: "vendor",
            name: "Red Hat",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
               product_id: "6Client-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Client-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-0:6.0.24-64.el6_5.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
               product_id: "6Client-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
            },
            product_reference: "tomcat6-0:6.0.24-64.el6_5.src",
            relates_to_product_reference: "6Client-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
               product_id: "6Client-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Client-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
               product_id: "6Client-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Client-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
               product_id: "6Client-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Client-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-javadoc-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
               product_id: "6Client-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Client-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
               product_id: "6Client-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Client-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-lib-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
               product_id: "6Client-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-lib-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Client-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
               product_id: "6Client-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Client-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-webapps-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
               product_id: "6Client-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Client-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
               product_id: "6ComputeNode-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6ComputeNode-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-0:6.0.24-64.el6_5.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
               product_id: "6ComputeNode-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
            },
            product_reference: "tomcat6-0:6.0.24-64.el6_5.src",
            relates_to_product_reference: "6ComputeNode-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
               product_id: "6ComputeNode-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6ComputeNode-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
               product_id: "6ComputeNode-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6ComputeNode-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
               product_id: "6ComputeNode-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6ComputeNode-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-javadoc-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
               product_id: "6ComputeNode-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6ComputeNode-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
               product_id: "6ComputeNode-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6ComputeNode-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-lib-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
               product_id: "6ComputeNode-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-lib-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6ComputeNode-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
               product_id: "6ComputeNode-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6ComputeNode-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-webapps-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
               product_id: "6ComputeNode-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6ComputeNode-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Server (v. 6)",
               product_id: "6Server-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Server-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-0:6.0.24-64.el6_5.src as a component of Red Hat Enterprise Linux Server (v. 6)",
               product_id: "6Server-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
            },
            product_reference: "tomcat6-0:6.0.24-64.el6_5.src",
            relates_to_product_reference: "6Server-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Server (v. 6)",
               product_id: "6Server-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Server-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Server (v. 6)",
               product_id: "6Server-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Server-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Server (v. 6)",
               product_id: "6Server-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Server-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-javadoc-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Server (v. 6)",
               product_id: "6Server-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Server-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Server (v. 6)",
               product_id: "6Server-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Server-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-lib-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Server (v. 6)",
               product_id: "6Server-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-lib-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Server-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Server (v. 6)",
               product_id: "6Server-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Server-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-webapps-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Server (v. 6)",
               product_id: "6Server-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Server-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
               product_id: "6Server-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Server-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-0:6.0.24-64.el6_5.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
               product_id: "6Server-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
            },
            product_reference: "tomcat6-0:6.0.24-64.el6_5.src",
            relates_to_product_reference: "6Server-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
               product_id: "6Server-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Server-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
               product_id: "6Server-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Server-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
               product_id: "6Server-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Server-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-javadoc-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
               product_id: "6Server-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Server-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
               product_id: "6Server-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Server-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-lib-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
               product_id: "6Server-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-lib-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Server-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
               product_id: "6Server-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Server-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-webapps-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
               product_id: "6Server-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Server-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Workstation (v. 6)",
               product_id: "6Workstation-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Workstation-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-0:6.0.24-64.el6_5.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
               product_id: "6Workstation-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
            },
            product_reference: "tomcat6-0:6.0.24-64.el6_5.src",
            relates_to_product_reference: "6Workstation-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Workstation (v. 6)",
               product_id: "6Workstation-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Workstation-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Workstation (v. 6)",
               product_id: "6Workstation-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Workstation-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Workstation (v. 6)",
               product_id: "6Workstation-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Workstation-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-javadoc-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Workstation (v. 6)",
               product_id: "6Workstation-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Workstation-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Workstation (v. 6)",
               product_id: "6Workstation-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Workstation-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-lib-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Workstation (v. 6)",
               product_id: "6Workstation-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-lib-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Workstation-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Workstation (v. 6)",
               product_id: "6Workstation-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Workstation-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-webapps-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Workstation (v. 6)",
               product_id: "6Workstation-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Workstation-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
               product_id: "6Workstation-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Workstation-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-0:6.0.24-64.el6_5.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
               product_id: "6Workstation-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
            },
            product_reference: "tomcat6-0:6.0.24-64.el6_5.src",
            relates_to_product_reference: "6Workstation-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
               product_id: "6Workstation-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Workstation-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
               product_id: "6Workstation-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Workstation-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
               product_id: "6Workstation-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Workstation-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-javadoc-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
               product_id: "6Workstation-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Workstation-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
               product_id: "6Workstation-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Workstation-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-lib-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
               product_id: "6Workstation-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-lib-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Workstation-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
               product_id: "6Workstation-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Workstation-optional-6.5.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-webapps-0:6.0.24-64.el6_5.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
               product_id: "6Workstation-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
            },
            product_reference: "tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
            relates_to_product_reference: "6Workstation-optional-6.5.z",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2013-4286",
         discovery_date: "2014-02-25T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1069921",
            },
         ],
         notes: [
            {
               category: "description",
               text: "It was found that when Tomcat / JBoss Web processed a series of HTTP requests in which at least one request contained either multiple content-length headers, or one content-length header with a chunked transfer-encoding header, Tomcat / JBoss Web would incorrectly handle the request. A remote attacker could use this flaw to poison a web cache, perform cross-site scripting (XSS) attacks, or obtain sensitive information from other requests.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "tomcat: multiple content-length header poisoning flaws",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
               "6Client-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
               "6Client-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
               "6Client-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
               "6Client-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6Client-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
               "6Client-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6Client-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
               "6Client-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
               "6Client-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
               "6ComputeNode-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
               "6ComputeNode-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
               "6ComputeNode-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
               "6ComputeNode-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
               "6ComputeNode-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6ComputeNode-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
               "6ComputeNode-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6ComputeNode-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
               "6ComputeNode-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
               "6ComputeNode-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
               "6Server-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
               "6Server-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
               "6Server-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
               "6Server-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
               "6Server-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6Server-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
               "6Server-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6Server-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
               "6Server-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
               "6Server-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
               "6Server-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
               "6Server-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
               "6Server-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
               "6Server-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
               "6Server-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6Server-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
               "6Server-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6Server-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
               "6Server-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
               "6Server-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
               "6Workstation-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
               "6Workstation-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
               "6Workstation-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
               "6Workstation-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
               "6Workstation-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6Workstation-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
               "6Workstation-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6Workstation-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
               "6Workstation-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
               "6Workstation-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
               "6Workstation-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
               "6Workstation-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
               "6Workstation-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
               "6Workstation-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
               "6Workstation-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6Workstation-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
               "6Workstation-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6Workstation-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
               "6Workstation-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
               "6Workstation-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2013-4286",
            },
            {
               category: "external",
               summary: "RHBZ#1069921",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1069921",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2013-4286",
               url: "https://www.cve.org/CVERecord?id=CVE-2013-4286",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2013-4286",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2013-4286",
            },
         ],
         release_date: "2014-02-25T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2014-04-23T18:27:58+00:00",
               details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
               product_ids: [
                  "6Client-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6Client-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6ComputeNode-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6Server-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6Server-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6Workstation-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6Workstation-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2014:0429",
            },
         ],
         scores: [
            {
               cvss_v2: {
                  accessComplexity: "MEDIUM",
                  accessVector: "NETWORK",
                  authentication: "NONE",
                  availabilityImpact: "NONE",
                  baseScore: 5.8,
                  confidentialityImpact: "PARTIAL",
                  integrityImpact: "PARTIAL",
                  vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:N",
                  version: "2.0",
               },
               products: [
                  "6Client-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6Client-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6ComputeNode-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6Server-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6Server-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6Workstation-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6Workstation-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "tomcat: multiple content-length header poisoning flaws",
      },
      {
         cve: "CVE-2013-4322",
         discovery_date: "2014-02-25T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1069905",
            },
         ],
         notes: [
            {
               category: "description",
               text: "It was discovered that the fix for CVE-2012-3544 did not properly resolve a denial of service flaw in the way Tomcat and JBoss Web processed chunk extensions and trailing headers in chunked requests. A remote attacker could use this flaw to send an excessively long request that, when processed by Tomcat, could consume network bandwidth, CPU, and memory on the Tomcat server. Note that chunked transfer encoding is enabled by default.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "tomcat: incomplete fix for CVE-2012-3544",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
               "6Client-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
               "6Client-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
               "6Client-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
               "6Client-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6Client-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
               "6Client-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6Client-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
               "6Client-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
               "6Client-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
               "6ComputeNode-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
               "6ComputeNode-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
               "6ComputeNode-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
               "6ComputeNode-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
               "6ComputeNode-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6ComputeNode-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
               "6ComputeNode-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6ComputeNode-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
               "6ComputeNode-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
               "6ComputeNode-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
               "6Server-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
               "6Server-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
               "6Server-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
               "6Server-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
               "6Server-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6Server-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
               "6Server-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6Server-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
               "6Server-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
               "6Server-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
               "6Server-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
               "6Server-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
               "6Server-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
               "6Server-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
               "6Server-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6Server-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
               "6Server-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6Server-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
               "6Server-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
               "6Server-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
               "6Workstation-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
               "6Workstation-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
               "6Workstation-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
               "6Workstation-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
               "6Workstation-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6Workstation-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
               "6Workstation-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6Workstation-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
               "6Workstation-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
               "6Workstation-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
               "6Workstation-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
               "6Workstation-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
               "6Workstation-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
               "6Workstation-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
               "6Workstation-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6Workstation-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
               "6Workstation-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6Workstation-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
               "6Workstation-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
               "6Workstation-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2013-4322",
            },
            {
               category: "external",
               summary: "RHBZ#1069905",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1069905",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2013-4322",
               url: "https://www.cve.org/CVERecord?id=CVE-2013-4322",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2013-4322",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2013-4322",
            },
         ],
         release_date: "2014-02-25T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2014-04-23T18:27:58+00:00",
               details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
               product_ids: [
                  "6Client-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6Client-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6ComputeNode-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6Server-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6Server-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6Workstation-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6Workstation-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2014:0429",
            },
         ],
         scores: [
            {
               cvss_v2: {
                  accessComplexity: "MEDIUM",
                  accessVector: "NETWORK",
                  authentication: "NONE",
                  availabilityImpact: "PARTIAL",
                  baseScore: 4.3,
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  vectorString: "AV:N/AC:M/Au:N/C:N/I:N/A:P",
                  version: "2.0",
               },
               products: [
                  "6Client-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6Client-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6ComputeNode-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6Server-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6Server-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6Workstation-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6Workstation-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "tomcat: incomplete fix for CVE-2012-3544",
      },
      {
         cve: "CVE-2014-0050",
         discovery_date: "2014-02-06T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1062337",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A denial of service flaw was found in the way Apache Commons FileUpload, which is embedded in Tomcat and JBoss Web, handled small-sized buffers used by MultipartStream. A remote attacker could use this flaw to create a malformed Content-Type header for a multipart request, causing Tomcat to enter an infinite loop when processing such an incoming request.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
               "6Client-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
               "6Client-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
               "6Client-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
               "6Client-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6Client-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
               "6Client-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6Client-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
               "6Client-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
               "6Client-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
               "6ComputeNode-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
               "6ComputeNode-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
               "6ComputeNode-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
               "6ComputeNode-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
               "6ComputeNode-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6ComputeNode-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
               "6ComputeNode-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6ComputeNode-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
               "6ComputeNode-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
               "6ComputeNode-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
               "6Server-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
               "6Server-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
               "6Server-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
               "6Server-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
               "6Server-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6Server-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
               "6Server-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6Server-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
               "6Server-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
               "6Server-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
               "6Server-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
               "6Server-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
               "6Server-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
               "6Server-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
               "6Server-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6Server-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
               "6Server-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6Server-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
               "6Server-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
               "6Server-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
               "6Workstation-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
               "6Workstation-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
               "6Workstation-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
               "6Workstation-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
               "6Workstation-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6Workstation-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
               "6Workstation-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6Workstation-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
               "6Workstation-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
               "6Workstation-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
               "6Workstation-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
               "6Workstation-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
               "6Workstation-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
               "6Workstation-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
               "6Workstation-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6Workstation-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
               "6Workstation-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
               "6Workstation-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
               "6Workstation-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
               "6Workstation-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2014-0050",
            },
            {
               category: "external",
               summary: "RHBZ#1062337",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1062337",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2014-0050",
               url: "https://www.cve.org/CVERecord?id=CVE-2014-0050",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2014-0050",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2014-0050",
            },
         ],
         release_date: "2014-02-06T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2014-04-23T18:27:58+00:00",
               details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
               product_ids: [
                  "6Client-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6Client-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6ComputeNode-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6Server-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6Server-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6Workstation-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6Workstation-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2014:0429",
            },
         ],
         scores: [
            {
               cvss_v2: {
                  accessComplexity: "LOW",
                  accessVector: "NETWORK",
                  authentication: "NONE",
                  availabilityImpact: "PARTIAL",
                  baseScore: 5,
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P",
                  version: "2.0",
               },
               products: [
                  "6Client-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6Client-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6Client-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6ComputeNode-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6ComputeNode-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6Server-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6Server-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6Server-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6Workstation-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-0:6.0.24-64.el6_5.src",
                  "6Workstation-optional-6.5.z:tomcat6-admin-webapps-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-docs-webapp-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-el-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-javadoc-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-jsp-2.1-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-lib-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-servlet-2.5-api-0:6.0.24-64.el6_5.noarch",
                  "6Workstation-optional-6.5.z:tomcat6-webapps-0:6.0.24-64.el6_5.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream",
      },
   ],
}