From 8592019ab1eed20b0e008667d12edd07ee4fe0ee Mon Sep 17 00:00:00 2001 From: Vulnerability Bot Date: Thu, 12 Nov 2026 01:06:59 +0000 Subject: [PATCH] Update vuln-rocky 2026-11-12T01:06:59Z --- data/advisories/2019/RLSA-2019-0975.json | 1 + data/advisories/2019/RLSA-2019-0981.json | 1 + data/advisories/2019/RLSA-2019-0984.json | 1 + data/advisories/2019/RLSA-2019-1152.json | 1 + data/advisories/2019/RLSA-2019-1529.json | 1 + data/advisories/2019/RLSA-2019-1972.json | 1 + data/advisories/2019/RLSA-2019-2002.json | 1 + data/advisories/2019/RLSA-2019-2511.json | 1 + data/advisories/2019/RLSA-2019-2512.json | 1 + data/advisories/2019/RLSA-2019-2593.json | 1 + data/advisories/2019/RLSA-2019-2720.json | 1 + data/advisories/2019/RLSA-2019-2722.json | 1 + data/advisories/2019/RLSA-2019-2799.json | 1 + data/advisories/2019/RLSA-2019-2925.json | 1 + data/advisories/2019/RLSA-2019-3335.json | 1 + data/advisories/2019/RLSA-2019-3345.json | 1 + data/advisories/2019/RLSA-2019-3403.json | 1 + data/advisories/2019/RLSA-2019-3476.json | 1 + data/advisories/2019/RLSA-2019-3494.json | 1 + data/advisories/2019/RLSA-2019-3553.json | 1 + data/advisories/2019/RLSA-2019-3643.json | 1 + data/advisories/2019/RLSA-2019-3673.json | 1 + data/advisories/2019/RLSA-2019-3703.json | 1 + data/advisories/2019/RLSA-2019-3704.json | 1 + data/advisories/2019/RLSA-2019-3705.json | 1 + data/advisories/2019/RLSA-2019-3706.json | 1 + data/advisories/2019/RLSA-2019-3708.json | 1 + data/advisories/2019/RLSA-2019-3735.json | 1 + data/advisories/2019/RLSA-2019-3736.json | 1 + data/advisories/2019/RLSA-2019-4269.json | 1 + data/advisories/2019/RLSA-2019-4273.json | 1 + data/advisories/2020/RLSA-2020-0279.json | 1 + data/advisories/2020/RLSA-2020-0348.json | 1 + data/advisories/2020/RLSA-2020-0579.json | 1 + data/advisories/2020/RLSA-2020-0598.json | 1 + data/advisories/2020/RLSA-2020-0633.json | 1 + data/advisories/2020/RLSA-2020-0902.json | 1 + data/advisories/2020/RLSA-2020-0903.json | 1 + data/advisories/2020/RLSA-2020-1293.json | 1 + data/advisories/2020/RLSA-2020-1317.json | 1 + data/advisories/2020/RLSA-2020-1358.json | 1 + data/advisories/2020/RLSA-2020-1360.json | 1 + data/advisories/2020/RLSA-2020-1379.json | 1 + data/advisories/2020/RLSA-2020-1577.json | 1 + data/advisories/2020/RLSA-2020-1581.json | 1 + data/advisories/2020/RLSA-2020-1605.json | 1 + data/advisories/2020/RLSA-2020-1616.json | 1 + data/advisories/2020/RLSA-2020-1624.json | 1 + data/advisories/2020/RLSA-2020-1631.json | 1 + data/advisories/2020/RLSA-2020-1636.json | 1 + data/advisories/2020/RLSA-2020-1644.json | 1 + data/advisories/2020/RLSA-2020-1650.json | 1 + data/advisories/2020/RLSA-2020-1653.json | 1 + data/advisories/2020/RLSA-2020-1665.json | 1 + data/advisories/2020/RLSA-2020-1686.json | 1 + data/advisories/2020/RLSA-2020-1708.json | 1 + data/advisories/2020/RLSA-2020-1766.json | 1 + data/advisories/2020/RLSA-2020-1852.json | 1 + data/advisories/2020/RLSA-2020-1926.json | 1 + data/advisories/2020/RLSA-2020-1931.json | 1 + data/advisories/2020/RLSA-2020-1932.json | 1 + data/advisories/2020/RLSA-2020-2041.json | 1 + data/advisories/2020/RLSA-2020-2231.json | 1 + data/advisories/2020/RLSA-2020-2755.json | 1 + data/advisories/2020/RLSA-2020-2774.json | 1 + data/advisories/2020/RLSA-2020-2848.json | 1 + data/advisories/2020/RLSA-2020-2852.json | 1 + data/advisories/2020/RLSA-2020-3032.json | 1 + data/advisories/2020/RLSA-2020-3053.json | 1 + data/advisories/2020/RLSA-2020-3176.json | 1 + data/advisories/2020/RLSA-2020-3185.json | 1 + data/advisories/2020/RLSA-2020-3280.json | 1 + data/advisories/2020/RLSA-2020-3623.json | 1 + data/advisories/2020/RLSA-2020-3654.json | 1 + data/advisories/2020/RLSA-2020-3662.json | 1 + data/advisories/2020/RLSA-2020-3732.json | 1 + data/advisories/2020/RLSA-2020-4059.json | 1 + data/advisories/2020/RLSA-2020-4272.json | 1 + data/advisories/2020/RLSA-2020-4436.json | 1 + data/advisories/2020/RLSA-2020-4451.json | 1 + data/advisories/2020/RLSA-2020-4453.json | 1 + data/advisories/2020/RLSA-2020-4469.json | 1 + data/advisories/2020/RLSA-2020-4482.json | 1 + data/advisories/2020/RLSA-2020-4484.json | 1 + data/advisories/2020/RLSA-2020-4490.json | 1 + data/advisories/2020/RLSA-2020-4497.json | 1 + data/advisories/2020/RLSA-2020-4539.json | 1 + data/advisories/2020/RLSA-2020-4545.json | 1 + data/advisories/2020/RLSA-2020-4628.json | 1 + data/advisories/2020/RLSA-2020-4629.json | 1 + data/advisories/2020/RLSA-2020-4634.json | 1 + data/advisories/2020/RLSA-2020-4638.json | 1 + data/advisories/2020/RLSA-2020-4641.json | 1 + data/advisories/2020/RLSA-2020-4647.json | 1 + data/advisories/2020/RLSA-2020-4649.json | 1 + data/advisories/2020/RLSA-2020-4654.json | 1 + data/advisories/2020/RLSA-2020-4659.json | 1 + data/advisories/2020/RLSA-2020-4670.json | 1 + data/advisories/2020/RLSA-2020-4676.json | 1 + data/advisories/2020/RLSA-2020-4689.json | 1 + data/advisories/2020/RLSA-2020-4690.json | 1 + data/advisories/2020/RLSA-2020-4694.json | 1 + data/advisories/2020/RLSA-2020-4709.json | 1 + data/advisories/2020/RLSA-2020-4712.json | 1 + data/advisories/2020/RLSA-2020-4743.json | 1 + data/advisories/2020/RLSA-2020-4751.json | 1 + data/advisories/2020/RLSA-2020-4756.json | 1 + data/advisories/2020/RLSA-2020-4760.json | 1 + data/advisories/2020/RLSA-2020-4799.json | 1 + data/advisories/2020/RLSA-2020-4807.json | 1 + data/advisories/2020/RLSA-2020-4820.json | 1 + data/advisories/2020/RLSA-2020-4827.json | 1 + data/advisories/2020/RLSA-2020-4847.json | 1 + data/advisories/2020/RLSA-2020-4952.json | 1 + data/advisories/2020/RLSA-2020-5393.json | 1 + data/advisories/2020/RLSA-2020-5499.json | 1 + data/advisories/2020/RLSA-2020-5500.json | 1 + data/advisories/2020/RLSA-2020-5503.json | 1 + data/advisories/2020/RLSA-2020-5620.json | 1 + data/advisories/2021/RLSA-2021-0507.json | 1 + data/advisories/2021/RLSA-2021-0531.json | 1 + data/advisories/2021/RLSA-2021-0538.json | 1 + data/advisories/2021/RLSA-2021-0548.json | 1 + data/advisories/2021/RLSA-2021-0549.json | 1 + data/advisories/2021/RLSA-2021-0551.json | 1 + data/advisories/2021/RLSA-2021-0611.json | 1 + data/advisories/2021/RLSA-2021-0618.json | 1 + data/advisories/2021/RLSA-2021-0705.json | 1 + data/advisories/2021/RLSA-2021-0706.json | 1 + data/advisories/2021/RLSA-2021-0711.json | 1 + data/advisories/2021/RLSA-2021-0734.json | 1 + data/advisories/2021/RLSA-2021-0735.json | 1 + data/advisories/2021/RLSA-2021-0744.json | 1 + data/advisories/2021/RLSA-2021-0966.json | 1 + data/advisories/2021/RLSA-2021-1024.json | 1 + data/advisories/2021/RLSA-2021-1064.json | 1 + data/advisories/2021/RLSA-2021-1206.json | 1 + data/advisories/2021/RLSA-2021-1242.json | 1 + data/advisories/2021/RLSA-2021-1574.json | 1 + data/advisories/2021/RLSA-2021-1581.json | 1 + data/advisories/2021/RLSA-2021-1582.json | 1 + data/advisories/2021/RLSA-2021-1585.json | 1 + data/advisories/2021/RLSA-2021-1586.json | 1 + data/advisories/2021/RLSA-2021-1593.json | 1 + data/advisories/2021/RLSA-2021-1597.json | 1 + data/advisories/2021/RLSA-2021-1598.json | 1 + data/advisories/2021/RLSA-2021-1600.json | 1 + data/advisories/2021/RLSA-2021-1608.json | 1 + data/advisories/2021/RLSA-2021-1609.json | 1 + data/advisories/2021/RLSA-2021-1610.json | 1 + data/advisories/2021/RLSA-2021-1611.json | 1 + data/advisories/2021/RLSA-2021-1620.json | 1 + data/advisories/2021/RLSA-2021-1627.json | 1 + data/advisories/2021/RLSA-2021-1631.json | 1 + data/advisories/2021/RLSA-2021-1647.json | 1 + data/advisories/2021/RLSA-2021-1675.json | 1 + data/advisories/2021/RLSA-2021-1678.json | 1 + data/advisories/2021/RLSA-2021-1686.json | 1 + data/advisories/2021/RLSA-2021-1702.json | 1 + data/advisories/2021/RLSA-2021-1723.json | 1 + data/advisories/2021/RLSA-2021-1734.json | 1 + data/advisories/2021/RLSA-2021-1744.json | 1 + data/advisories/2021/RLSA-2021-1746.json | 1 + data/advisories/2021/RLSA-2021-1751.json | 1 + data/advisories/2021/RLSA-2021-1752.json | 1 + data/advisories/2021/RLSA-2021-1758.json | 1 + data/advisories/2021/RLSA-2021-1761.json | 1 + data/advisories/2021/RLSA-2021-1762.json | 1 + data/advisories/2021/RLSA-2021-1775.json | 1 + data/advisories/2021/RLSA-2021-1783.json | 1 + data/advisories/2021/RLSA-2021-1789.json | 1 + data/advisories/2021/RLSA-2021-1791.json | 1 + data/advisories/2021/RLSA-2021-1796.json | 1 + data/advisories/2021/RLSA-2021-1804.json | 1 + data/advisories/2021/RLSA-2021-1809.json | 1 + data/advisories/2021/RLSA-2021-1811.json | 1 + data/advisories/2021/RLSA-2021-1842.json | 1 + data/advisories/2021/RLSA-2021-1846.json | 1 + data/advisories/2021/RLSA-2021-1849.json | 1 + data/advisories/2021/RLSA-2021-1852.json | 1 + data/advisories/2021/RLSA-2021-1853.json | 1 + data/advisories/2021/RLSA-2021-1859.json | 1 + data/advisories/2021/RLSA-2021-1879.json | 1 + data/advisories/2021/RLSA-2021-1881.json | 1 + data/advisories/2021/RLSA-2021-1898.json | 1 + data/advisories/2021/RLSA-2021-1924.json | 1 + data/advisories/2021/RLSA-2021-1935.json | 1 + data/advisories/2021/RLSA-2021-1979.json | 1 + data/advisories/2021/RLSA-2021-1983.json | 1 + data/advisories/2021/RLSA-2021-1989.json | 1 + data/advisories/2021/RLSA-2021-2034.json | 1 + data/advisories/2021/RLSA-2021-2168.json | 1 + data/advisories/2021/RLSA-2021-2170.json | 1 + data/advisories/2021/RLSA-2021-2233.json | 1 + data/advisories/2021/RLSA-2021-2235.json | 1 + data/advisories/2021/RLSA-2021-2238.json | 1 + data/advisories/2021/RLSA-2021-2259.json | 1 + data/advisories/2021/RLSA-2021-2264.json | 1 + data/advisories/2021/RLSA-2021-2290.json | 1 + data/advisories/2021/RLSA-2021-2291.json | 1 + data/advisories/2021/RLSA-2021-2308.json | 1 + data/advisories/2021/RLSA-2021-2354.json | 1 + data/advisories/2021/RLSA-2021-2359.json | 1 + data/advisories/2021/RLSA-2021-2360.json | 1 + data/advisories/2021/RLSA-2021-2361.json | 1 + data/advisories/2021/RLSA-2021-2363.json | 1 + data/advisories/2021/RLSA-2021-2370.json | 1 + data/advisories/2021/RLSA-2021-2371.json | 1 + data/advisories/2021/RLSA-2021-2372.json | 1 + data/advisories/2021/RLSA-2021-2375.json | 1 + data/advisories/2021/RLSA-2021-2566.json | 1 + data/advisories/2021/RLSA-2021-2569.json | 1 + data/advisories/2021/RLSA-2021-2570.json | 1 + data/advisories/2021/RLSA-2021-2574.json | 1 + data/advisories/2021/RLSA-2021-2575.json | 1 + data/advisories/2021/RLSA-2021-2583.json | 1 + data/advisories/2021/RLSA-2021-2584.json | 1 + data/advisories/2021/RLSA-2021-2587.json | 1 + data/advisories/2021/RLSA-2021-2588.json | 1 + data/advisories/2021/RLSA-2021-2591.json | 1 + data/advisories/2021/RLSA-2021-2595.json | 1 + data/advisories/2021/RLSA-2021-2660.json | 1 + data/advisories/2021/RLSA-2021-2714.json | 1 + data/advisories/2021/RLSA-2021-2717.json | 1 + data/advisories/2021/RLSA-2021-2743.json | 1 + data/advisories/2021/RLSA-2021-2776.json | 1 + data/advisories/2021/RLSA-2021-2781.json | 1 + data/advisories/2021/RLSA-2021-2883.json | 1 + data/advisories/2021/RLSA-2021-2988.json | 1 + data/advisories/2021/RLSA-2021-3020.json | 1 + data/advisories/2021/RLSA-2021-3027.json | 1 + data/advisories/2021/RLSA-2021-3057.json | 1 + data/advisories/2021/RLSA-2021-3058.json | 1 + data/advisories/2021/RLSA-2021-3061.json | 1 + data/advisories/2021/RLSA-2021-3063.json | 1 + data/advisories/2021/RLSA-2021-3066.json | 1 + data/advisories/2021/RLSA-2021-3073.json | 1 + data/advisories/2021/RLSA-2021-3074.json | 1 + data/advisories/2021/RLSA-2021-3075.json | 1 + data/advisories/2021/RLSA-2021-3076.json | 1 + data/advisories/2021/RLSA-2021-3079.json | 1 + data/advisories/2021/RLSA-2021-3081.json | 1 + data/advisories/2021/RLSA-2021-3088.json | 1 + data/advisories/2021/RLSA-2021-3151.json | 1 + data/advisories/2021/RLSA-2021-3152.json | 1 + data/advisories/2021/RLSA-2021-3153.json | 1 + data/advisories/2021/RLSA-2021-3155.json | 1 + data/advisories/2021/RLSA-2021-3157.json | 1 + data/advisories/2021/RLSA-2021-3253.json | 1 + data/advisories/2021/RLSA-2021-3440.json | 1 + data/advisories/2021/RLSA-2021-3447.json | 1 + data/advisories/2021/RLSA-2021-3492.json | 1 + data/advisories/2021/RLSA-2021-3497.json | 1 + data/advisories/2021/RLSA-2021-3499.json | 1 + data/advisories/2021/RLSA-2021-3547.json | 1 + data/advisories/2021/RLSA-2021-3548.json | 1 + data/advisories/2021/RLSA-2021-3572.json | 1 + data/advisories/2021/RLSA-2021-3576.json | 1 + data/advisories/2021/RLSA-2021-3582.json | 1 + data/advisories/2021/RLSA-2021-3585.json | 1 + data/advisories/2021/RLSA-2021-3590.json | 1 + data/advisories/2021/RLSA-2021-3623.json | 1 + data/advisories/2021/RLSA-2021-3666.json | 1 + data/advisories/2021/RLSA-2021-3755.json | 1 + data/advisories/2021/RLSA-2021-3771.json | 1 + data/advisories/2021/RLSA-2021-3816.json | 1 + data/advisories/2021/RLSA-2021-3838.json | 1 + data/advisories/2021/RLSA-2021-3891.json | 1 + data/advisories/2021/RLSA-2021-3893.json | 1 + data/advisories/2021/RLSA-2021-3918.json | 1 + data/advisories/2021/RLSA-2021-3945.json | 1 + data/advisories/2021/RLSA-2021-4042.json | 1 + data/advisories/2021/RLSA-2021-4056.json | 1 + data/advisories/2021/RLSA-2021-4058.json | 1 + data/advisories/2021/RLSA-2021-4059.json | 1 + data/advisories/2021/RLSA-2021-4060.json | 1 + data/advisories/2021/RLSA-2021-4088.json | 1 + data/advisories/2021/RLSA-2021-4097.json | 1 + data/advisories/2021/RLSA-2021-4123.json | 1 + data/advisories/2021/RLSA-2021-4130.json | 1 + data/advisories/2021/RLSA-2021-4135.json | 1 + data/advisories/2021/RLSA-2021-4139.json | 1 + data/advisories/2021/RLSA-2021-4142.json | 1 + data/advisories/2021/RLSA-2021-4149.json | 1 + data/advisories/2021/RLSA-2021-4150.json | 1 + data/advisories/2021/RLSA-2021-4151.json | 1 + data/advisories/2021/RLSA-2021-4153.json | 1 + data/advisories/2021/RLSA-2021-4154.json | 1 + data/advisories/2021/RLSA-2021-4156.json | 1 + data/advisories/2021/RLSA-2021-4158.json | 1 + data/advisories/2021/RLSA-2021-4160.json | 1 + data/advisories/2021/RLSA-2021-4161.json | 1 + data/advisories/2021/RLSA-2021-4162.json | 1 + data/advisories/2021/RLSA-2021-4172.json | 1 + data/advisories/2021/RLSA-2021-4173.json | 1 + data/advisories/2021/RLSA-2021-4179.json | 1 + data/advisories/2021/RLSA-2021-4181.json | 1 + data/advisories/2021/RLSA-2021-4191.json | 1 + data/advisories/2021/RLSA-2021-4198.json | 1 + data/advisories/2021/RLSA-2021-4201.json | 1 + data/advisories/2021/RLSA-2021-4213.json | 1 + data/advisories/2021/RLSA-2021-4221.json | 1 + data/advisories/2021/RLSA-2021-4222.json | 1 + data/advisories/2021/RLSA-2021-4226.json | 1 + data/advisories/2021/RLSA-2021-4231.json | 1 + data/advisories/2021/RLSA-2021-4235.json | 1 + data/advisories/2021/RLSA-2021-4236.json | 1 + data/advisories/2021/RLSA-2021-4241.json | 1 + data/advisories/2021/RLSA-2021-4251.json | 1 + data/advisories/2021/RLSA-2021-4256.json | 1 + data/advisories/2021/RLSA-2021-4257.json | 1 + data/advisories/2021/RLSA-2021-4270.json | 1 + data/advisories/2021/RLSA-2021-4288.json | 1 + data/advisories/2021/RLSA-2021-4292.json | 1 + data/advisories/2021/RLSA-2021-4315.json | 1 + data/advisories/2021/RLSA-2021-4316.json | 1 + data/advisories/2021/RLSA-2021-4319.json | 1 + data/advisories/2021/RLSA-2021-4321.json | 1 + data/advisories/2021/RLSA-2021-4324.json | 1 + data/advisories/2021/RLSA-2021-4325.json | 1 + data/advisories/2021/RLSA-2021-4326.json | 1 + data/advisories/2021/RLSA-2021-4339.json | 1 + data/advisories/2021/RLSA-2021-4358.json | 1 + data/advisories/2021/RLSA-2021-4361.json | 1 + data/advisories/2021/RLSA-2021-4364.json | 1 + data/advisories/2021/RLSA-2021-4368.json | 1 + data/advisories/2021/RLSA-2021-4373.json | 1 + data/advisories/2021/RLSA-2021-4374.json | 1 + data/advisories/2021/RLSA-2021-4381.json | 1 + data/advisories/2021/RLSA-2021-4382.json | 1 + data/advisories/2021/RLSA-2021-4384.json | 1 + data/advisories/2021/RLSA-2021-4385.json | 1 + data/advisories/2021/RLSA-2021-4386.json | 1 + data/advisories/2021/RLSA-2021-4387.json | 1 + data/advisories/2021/RLSA-2021-4393.json | 1 + data/advisories/2021/RLSA-2021-4396.json | 1 + data/advisories/2021/RLSA-2021-4404.json | 1 + data/advisories/2021/RLSA-2021-4408.json | 1 + data/advisories/2021/RLSA-2021-4409.json | 1 + data/advisories/2021/RLSA-2021-4413.json | 1 + data/advisories/2021/RLSA-2021-4424.json | 1 + data/advisories/2021/RLSA-2021-4426.json | 1 + data/advisories/2021/RLSA-2021-4451.json | 1 + data/advisories/2021/RLSA-2021-4464.json | 1 + data/advisories/2021/RLSA-2021-4489.json | 1 + data/advisories/2021/RLSA-2021-4510.json | 1 + data/advisories/2021/RLSA-2021-4511.json | 1 + data/advisories/2021/RLSA-2021-4513.json | 1 + data/advisories/2021/RLSA-2021-4517.json | 1 + data/advisories/2021/RLSA-2021-4537.json | 1 + data/advisories/2021/RLSA-2021-4585.json | 1 + data/advisories/2021/RLSA-2021-4586.json | 1 + data/advisories/2021/RLSA-2021-4587.json | 1 + data/advisories/2021/RLSA-2021-4590.json | 1 + data/advisories/2021/RLSA-2021-4591.json | 1 + data/advisories/2021/RLSA-2021-4592.json | 1 + data/advisories/2021/RLSA-2021-4593.json | 1 + data/advisories/2021/RLSA-2021-4594.json | 1 + data/advisories/2021/RLSA-2021-4595.json | 1 + data/advisories/2021/RLSA-2021-4622.json | 1 + data/advisories/2021/RLSA-2021-4646.json | 1 + data/advisories/2021/RLSA-2021-4647.json | 1 + data/advisories/2021/RLSA-2021-4649.json | 1 + data/advisories/2021/RLSA-2021-4743.json | 1 + data/advisories/2021/RLSA-2021-4826.json | 1 + data/advisories/2021/RLSA-2021-4903.json | 1 + data/advisories/2021/RLSA-2021-4916.json | 1 + data/advisories/2021/RLSA-2021-5013.json | 1 + data/advisories/2021/RLSA-2021-5045.json | 1 + data/advisories/2021/RLSA-2021-5082.json | 1 + data/advisories/2021/RLSA-2021-5142.json | 1 + data/advisories/2021/RLSA-2021-5160.json | 1 + data/advisories/2021/RLSA-2021-5171.json | 1 + data/advisories/2021/RLSA-2021-5226.json | 1 + data/advisories/2021/RLSA-2021-5227.json | 1 + data/advisories/2021/RLSA-2021-5235.json | 1 + data/advisories/2021/RLSA-2021-5236.json | 1 + data/advisories/2021/RLSA-2021-5238.json | 1 + data/advisories/2021/RLSA-2021-5241.json | 1 + data/advisories/2022/RLSA-2022-0001.json | 1 + data/advisories/2022/RLSA-2022-0129.json | 1 + data/advisories/2022/RLSA-2022-0130.json | 1 + data/advisories/2022/RLSA-2022-0161.json | 1 + data/advisories/2022/RLSA-2022-0176.json | 1 + data/advisories/2022/RLSA-2022-0177.json | 1 + data/advisories/2022/RLSA-2022-0185.json | 1 + data/advisories/2022/RLSA-2022-0188.json | 1 + data/advisories/2022/RLSA-2022-0199.json | 1 + data/advisories/2022/RLSA-2022-0258.json | 1 + data/advisories/2022/RLSA-2022-0267.json | 1 + data/advisories/2022/RLSA-2022-0290.json | 1 + data/advisories/2022/RLSA-2022-0307.json | 1 + data/advisories/2022/RLSA-2022-0323.json | 1 + data/advisories/2022/RLSA-2022-0332.json | 1 + data/advisories/2022/RLSA-2022-0350.json | 1 + data/advisories/2022/RLSA-2022-0366.json | 1 + data/advisories/2022/RLSA-2022-0368.json | 1 + data/advisories/2022/RLSA-2022-0370.json | 1 + data/advisories/2022/RLSA-2022-0418.json | 1 + data/advisories/2022/RLSA-2022-0441.json | 1 + data/advisories/2022/RLSA-2022-0495.json | 1 + data/advisories/2022/RLSA-2022-0496.json | 1 + data/advisories/2022/RLSA-2022-0510.json | 1 + data/advisories/2022/RLSA-2022-0535.json | 1 + data/advisories/2022/RLSA-2022-0543.json | 1 + data/advisories/2022/RLSA-2022-0545.json | 1 + data/advisories/2022/RLSA-2022-0643.json | 1 + data/advisories/2022/RLSA-2022-0658.json | 1 + data/advisories/2022/RLSA-2022-0672.json | 1 + data/advisories/2022/RLSA-2022-0818.json | 1 + data/advisories/2022/RLSA-2022-0819.json | 1 + data/advisories/2022/RLSA-2022-0825.json | 1 + data/advisories/2022/RLSA-2022-0826.json | 1 + data/advisories/2022/RLSA-2022-0827.json | 1 + data/advisories/2022/RLSA-2022-0830.json | 1 + data/advisories/2022/RLSA-2022-0845.json | 1 + data/advisories/2022/RLSA-2022-0886.json | 1 + data/advisories/2022/RLSA-2022-0889.json | 1 + data/advisories/2022/RLSA-2022-0891.json | 1 + data/advisories/2022/RLSA-2022-0892.json | 1 + data/advisories/2022/RLSA-2022-0894.json | 1 + data/advisories/2022/RLSA-2022-0896.json | 1 + data/advisories/2022/RLSA-2022-0899.json | 1 + data/advisories/2022/RLSA-2022-0951.json | 1 + data/advisories/2022/RLSA-2022-1049.json | 1 + data/advisories/2022/RLSA-2022-1065.json | 1 + data/advisories/2022/RLSA-2022-1287.json | 1 + data/advisories/2022/RLSA-2022-1301.json | 1 + data/advisories/2022/RLSA-2022-1442.json | 1 + data/advisories/2022/RLSA-2022-1445.json | 1 + data/advisories/2022/RLSA-2022-1491.json | 1 + data/advisories/2022/RLSA-2022-1537.json | 1 + data/advisories/2022/RLSA-2022-1546.json | 1 + data/advisories/2022/RLSA-2022-1550.json | 1 + data/advisories/2022/RLSA-2022-1552.json | 1 + data/advisories/2022/RLSA-2022-1555.json | 1 + data/advisories/2022/RLSA-2022-1556.json | 1 + data/advisories/2022/RLSA-2022-1557.json | 1 + data/advisories/2022/RLSA-2022-1565.json | 1 + data/advisories/2022/RLSA-2022-1566.json | 1 + data/advisories/2022/RLSA-2022-1642.json | 1 + data/advisories/2022/RLSA-2022-1643.json | 1 + data/advisories/2022/RLSA-2022-1705.json | 1 + data/advisories/2022/RLSA-2022-1730.json | 1 + data/advisories/2022/RLSA-2022-1759.json | 1 + data/advisories/2022/RLSA-2022-1762.json | 1 + data/advisories/2022/RLSA-2022-1763.json | 1 + data/advisories/2022/RLSA-2022-1764.json | 1 + data/advisories/2022/RLSA-2022-1766.json | 1 + data/advisories/2022/RLSA-2022-1777.json | 1 + data/advisories/2022/RLSA-2022-1781.json | 1 + data/advisories/2022/RLSA-2022-1792.json | 1 + data/advisories/2022/RLSA-2022-1793.json | 1 + data/advisories/2022/RLSA-2022-1796.json | 1 + data/advisories/2022/RLSA-2022-1797.json | 1 + data/advisories/2022/RLSA-2022-1801.json | 1 + data/advisories/2022/RLSA-2022-1808.json | 1 + data/advisories/2022/RLSA-2022-1810.json | 1 + data/advisories/2022/RLSA-2022-1814.json | 1 + data/advisories/2022/RLSA-2022-1819.json | 1 + data/advisories/2022/RLSA-2022-1820.json | 1 + data/advisories/2022/RLSA-2022-1821.json | 1 + data/advisories/2022/RLSA-2022-1823.json | 1 + data/advisories/2022/RLSA-2022-1830.json | 1 + data/advisories/2022/RLSA-2022-1842.json | 1 + data/advisories/2022/RLSA-2022-1851.json | 1 + data/advisories/2022/RLSA-2022-1860.json | 1 + data/advisories/2022/RLSA-2022-1861.json | 1 + data/advisories/2022/RLSA-2022-1891.json | 1 + data/advisories/2022/RLSA-2022-1894.json | 1 + data/advisories/2022/RLSA-2022-1898.json | 1 + data/advisories/2022/RLSA-2022-1915.json | 1 + data/advisories/2022/RLSA-2022-1917.json | 1 + data/advisories/2022/RLSA-2022-1930.json | 1 + data/advisories/2022/RLSA-2022-1932.json | 1 + data/advisories/2022/RLSA-2022-1934.json | 1 + data/advisories/2022/RLSA-2022-1935.json | 1 + data/advisories/2022/RLSA-2022-1939.json | 1 + data/advisories/2022/RLSA-2022-1950.json | 1 + data/advisories/2022/RLSA-2022-1961.json | 1 + data/advisories/2022/RLSA-2022-1964.json | 1 + data/advisories/2022/RLSA-2022-1968.json | 1 + data/advisories/2022/RLSA-2022-1975.json | 1 + data/advisories/2022/RLSA-2022-1988.json | 1 + data/advisories/2022/RLSA-2022-1991.json | 1 + data/advisories/2022/RLSA-2022-2008.json | 1 + data/advisories/2022/RLSA-2022-2013.json | 1 + data/advisories/2022/RLSA-2022-2031.json | 1 + data/advisories/2022/RLSA-2022-2043.json | 1 + data/advisories/2022/RLSA-2022-2074.json | 1 + data/advisories/2022/RLSA-2022-2081.json | 1 + data/advisories/2022/RLSA-2022-2092.json | 1 + data/advisories/2022/RLSA-2022-2110.json | 1 + data/advisories/2022/RLSA-2022-2120.json | 1 + data/advisories/2022/RLSA-2022-2143.json | 1 + data/advisories/2022/RLSA-2022-2199.json | 1 + data/advisories/2022/RLSA-2022-2200.json | 1 + data/advisories/2022/RLSA-2022-2201.json | 1 + data/advisories/2022/RLSA-2022-2202.json | 1 + data/advisories/2022/RLSA-2022-2234.json | 1 + data/advisories/2022/RLSA-2022-4582.json | 1 + data/advisories/2022/RLSA-2022-4591.json | 1 + data/advisories/2022/RLSA-2022-4661.json | 1 + data/advisories/2022/RLSA-2022-4769.json | 1 + data/advisories/2022/RLSA-2022-4771.json | 1 + data/advisories/2022/RLSA-2022-4776.json | 1 + data/advisories/2022/RLSA-2022-4795.json | 1 + data/advisories/2022/RLSA-2022-4796.json | 1 + data/advisories/2022/RLSA-2022-4797.json | 1 + data/advisories/2022/RLSA-2022-4798.json | 1 + data/advisories/2022/RLSA-2022-4799.json | 1 + data/advisories/2022/RLSA-2022-4805.json | 1 + data/advisories/2022/RLSA-2022-4807.json | 1 + data/advisories/2022/RLSA-2022-4855.json | 1 + data/advisories/2022/RLSA-2022-4872.json | 1 + data/advisories/2022/RLSA-2022-4887.json | 1 + data/advisories/2022/RLSA-2022-4899.json | 1 + data/advisories/2022/RLSA-2022-4940.json | 1 + data/advisories/2022/RLSA-2022-4941.json | 1 + data/advisories/2022/RLSA-2022-4990.json | 1 + data/advisories/2022/RLSA-2022-4991.json | 1 + data/advisories/2022/RLSA-2022-5046.json | 1 + data/advisories/2022/RLSA-2022-5056.json | 1 + data/advisories/2022/RLSA-2022-5061.json | 1 + data/advisories/2022/RLSA-2022-5095.json | 1 + data/advisories/2022/RLSA-2022-5099.json | 1 + data/advisories/2022/RLSA-2022-5163.json | 1 + data/advisories/2022/RLSA-2022-5250.json | 1 + data/advisories/2022/RLSA-2022-5251.json | 1 + data/advisories/2022/RLSA-2022-5252.json | 1 + data/advisories/2022/RLSA-2022-5257.json | 1 + data/advisories/2022/RLSA-2022-5311.json | 1 + data/advisories/2022/RLSA-2022-5313.json | 1 + data/advisories/2022/RLSA-2022-5314.json | 1 + data/advisories/2022/RLSA-2022-5316.json | 1 + data/advisories/2022/RLSA-2022-5317.json | 1 + data/advisories/2022/RLSA-2022-5319.json | 1 + data/advisories/2022/RLSA-2022-5326.json | 1 + data/advisories/2022/RLSA-2022-5331.json | 1 + data/advisories/2022/RLSA-2022-5337.json | 1 + data/advisories/2022/RLSA-2022-5338.json | 1 + data/advisories/2022/RLSA-2022-5344.json | 1 + data/advisories/2022/RLSA-2022-5467.json | 1 + data/advisories/2022/RLSA-2022-5468.json | 1 + data/advisories/2022/RLSA-2022-5469.json | 1 + data/advisories/2022/RLSA-2022-5470.json | 1 + data/advisories/2022/RLSA-2022-5498.json | 1 + data/advisories/2022/RLSA-2022-5526.json | 1 + data/advisories/2022/RLSA-2022-5564.json | 1 + data/advisories/2022/RLSA-2022-5565.json | 1 + data/advisories/2022/RLSA-2022-5683.json | 1 + data/advisories/2022/RLSA-2022-5696.json | 1 + data/advisories/2022/RLSA-2022-5716.json | 1 + data/advisories/2022/RLSA-2022-5717.json | 1 + data/advisories/2022/RLSA-2022-5726.json | 1 + data/advisories/2022/RLSA-2022-5774.json | 1 + data/advisories/2022/RLSA-2022-5775.json | 1 + data/advisories/2022/RLSA-2022-5777.json | 1 + data/advisories/2022/RLSA-2022-5779.json | 1 + data/advisories/2022/RLSA-2022-5799.json | 1 + data/advisories/2022/RLSA-2022-5809.json | 1 + data/advisories/2022/RLSA-2022-5813.json | 1 + data/advisories/2022/RLSA-2022-5818.json | 1 + data/advisories/2022/RLSA-2022-5819.json | 1 + data/advisories/2022/RLSA-2022-5821.json | 1 + data/advisories/2022/RLSA-2022-5823.json | 1 + data/advisories/2022/RLSA-2022-5826.json | 1 + data/advisories/2022/RLSA-2022-5834.json | 1 + data/advisories/2022/RLSA-2022-5904.json | 1 + data/advisories/2022/RLSA-2022-5942.json | 1 + data/advisories/2022/RLSA-2022-5948.json | 1 + data/advisories/2022/RLSA-2022-6057.json | 1 + data/advisories/2022/RLSA-2022-6058.json | 1 + data/advisories/2022/RLSA-2022-6157.json | 1 + data/advisories/2022/RLSA-2022-6158.json | 1 + data/advisories/2022/RLSA-2022-6159.json | 1 + data/advisories/2022/RLSA-2022-6164.json | 1 + data/advisories/2022/RLSA-2022-6175.json | 1 + data/advisories/2022/RLSA-2022-6180.json | 1 + data/advisories/2022/RLSA-2022-6181.json | 1 + data/advisories/2022/RLSA-2022-6206.json | 1 + data/advisories/2022/RLSA-2022-6313.json | 1 + data/advisories/2022/RLSA-2022-6314.json | 1 + data/advisories/2022/RLSA-2022-6357.json | 1 + data/advisories/2022/RLSA-2022-6358.json | 1 + data/advisories/2022/RLSA-2022-6437.json | 1 + data/advisories/2022/RLSA-2022-6439.json | 1 + data/advisories/2022/RLSA-2022-6443.json | 1 + data/advisories/2022/RLSA-2022-6447.json | 1 + data/advisories/2022/RLSA-2022-6448.json | 1 + data/advisories/2022/RLSA-2022-6449.json | 1 + data/advisories/2022/RLSA-2022-6450.json | 1 + data/advisories/2022/RLSA-2022-6460.json | 1 + data/advisories/2022/RLSA-2022-6463.json | 1 + data/advisories/2022/RLSA-2022-6523.json | 1 + data/advisories/2022/RLSA-2022-6539.json | 1 + data/advisories/2022/RLSA-2022-6540.json | 1 + data/advisories/2022/RLSA-2022-6542.json | 1 + data/advisories/2022/RLSA-2022-6585.json | 1 + data/advisories/2022/RLSA-2022-6590.json | 1 + data/advisories/2022/RLSA-2022-6595.json | 1 + data/advisories/2022/RLSA-2022-6602.json | 1 + data/advisories/2022/RLSA-2022-6608.json | 1 + data/advisories/2022/RLSA-2022-6634.json | 1 + data/advisories/2022/RLSA-2022-6702.json | 1 + data/advisories/2022/RLSA-2022-6708.json | 1 + data/advisories/2022/RLSA-2022-6763.json | 1 + data/advisories/2022/RLSA-2022-6775.json | 1 + data/advisories/2022/RLSA-2022-6778.json | 1 + data/advisories/2022/RLSA-2022-6781.json | 1 + data/advisories/2022/RLSA-2022-6820.json | 1 + data/advisories/2022/RLSA-2022-6838.json | 1 + data/advisories/2022/RLSA-2022-6839.json | 1 + data/advisories/2022/RLSA-2022-6854.json | 1 + data/advisories/2022/RLSA-2022-6878.json | 1 + data/advisories/2022/RLSA-2022-6911.json | 1 + data/advisories/2022/RLSA-2022-6912.json | 1 + data/advisories/2022/RLSA-2022-6913.json | 1 + data/advisories/2022/RLSA-2022-6963.json | 1 + data/advisories/2022/RLSA-2022-6964.json | 1 + data/advisories/2022/RLSA-2022-6999.json | 1 + data/advisories/2022/RLSA-2022-7000.json | 1 + data/advisories/2022/RLSA-2022-7006.json | 1 + data/advisories/2022/RLSA-2022-7007.json | 1 + data/advisories/2022/RLSA-2022-7012.json | 1 + data/advisories/2022/RLSA-2022-7013.json | 1 + data/advisories/2022/RLSA-2022-7023.json | 1 + data/advisories/2022/RLSA-2022-7024.json | 1 + data/advisories/2022/RLSA-2022-7070.json | 1 + data/advisories/2022/RLSA-2022-7089.json | 1 + data/advisories/2022/RLSA-2022-7090.json | 1 + data/advisories/2022/RLSA-2022-7105.json | 1 + data/advisories/2022/RLSA-2022-7106.json | 1 + data/advisories/2022/RLSA-2022-7108.json | 1 + data/advisories/2022/RLSA-2022-7110.json | 1 + data/advisories/2022/RLSA-2022-7111.json | 1 + data/advisories/2022/RLSA-2022-7119.json | 1 + data/advisories/2022/RLSA-2022-7128.json | 1 + data/advisories/2022/RLSA-2022-7129.json | 1 + data/advisories/2022/RLSA-2022-7133.json | 1 + data/advisories/2022/RLSA-2022-7134.json | 1 + data/advisories/2022/RLSA-2022-7185.json | 1 + data/advisories/2022/RLSA-2022-7190.json | 1 + data/advisories/2022/RLSA-2022-7192.json | 1 + data/advisories/2022/RLSA-2022-7288.json | 1 + data/advisories/2022/RLSA-2022-7314.json | 1 + data/advisories/2022/RLSA-2022-7318.json | 1 + data/advisories/2022/RLSA-2022-7319.json | 1 + data/advisories/2022/RLSA-2022-7323.json | 1 + data/advisories/2022/RLSA-2022-7326.json | 1 + data/advisories/2022/RLSA-2022-7329.json | 1 + data/advisories/2022/RLSA-2022-7444.json | 1 + data/advisories/2022/RLSA-2022-7447.json | 1 + data/advisories/2022/RLSA-2022-7457.json | 1 + data/advisories/2022/RLSA-2022-7458.json | 1 + data/advisories/2022/RLSA-2022-7461.json | 1 + data/advisories/2022/RLSA-2022-7464.json | 1 + data/advisories/2022/RLSA-2022-7469.json | 1 + data/advisories/2022/RLSA-2022-7470.json | 1 + data/advisories/2022/RLSA-2022-7472.json | 1 + data/advisories/2022/RLSA-2022-7482.json | 1 + data/advisories/2022/RLSA-2022-7514.json | 1 + data/advisories/2022/RLSA-2022-7519.json | 1 + data/advisories/2022/RLSA-2022-7524.json | 1 + data/advisories/2022/RLSA-2022-7529.json | 1 + data/advisories/2022/RLSA-2022-7541.json | 1 + data/advisories/2022/RLSA-2022-7548.json | 1 + data/advisories/2022/RLSA-2022-7558.json | 1 + data/advisories/2022/RLSA-2022-7581.json | 1 + data/advisories/2022/RLSA-2022-7583.json | 1 + data/advisories/2022/RLSA-2022-7585.json | 1 + data/advisories/2022/RLSA-2022-7592.json | 1 + data/advisories/2022/RLSA-2022-7593.json | 1 + data/advisories/2022/RLSA-2022-7594.json | 1 + data/advisories/2022/RLSA-2022-7618.json | 1 + data/advisories/2022/RLSA-2022-7622.json | 1 + data/advisories/2022/RLSA-2022-7623.json | 1 + data/advisories/2022/RLSA-2022-7624.json | 1 + data/advisories/2022/RLSA-2022-7628.json | 1 + data/advisories/2022/RLSA-2022-7633.json | 1 + data/advisories/2022/RLSA-2022-7639.json | 1 + data/advisories/2022/RLSA-2022-7640.json | 1 + data/advisories/2022/RLSA-2022-7643.json | 1 + data/advisories/2022/RLSA-2022-7645.json | 1 + data/advisories/2022/RLSA-2022-7647.json | 1 + data/advisories/2022/RLSA-2022-7648.json | 1 + data/advisories/2022/RLSA-2022-7683.json | 1 + data/advisories/2022/RLSA-2022-7692.json | 1 + data/advisories/2022/RLSA-2022-7700.json | 1 + data/advisories/2022/RLSA-2022-7704.json | 1 + data/advisories/2022/RLSA-2022-7715.json | 1 + data/advisories/2022/RLSA-2022-7720.json | 1 + data/advisories/2022/RLSA-2022-7730.json | 1 + data/advisories/2022/RLSA-2022-7745.json | 1 + data/advisories/2022/RLSA-2022-7790.json | 1 + data/advisories/2022/RLSA-2022-7793.json | 1 + data/advisories/2022/RLSA-2022-7821.json | 1 + data/advisories/2022/RLSA-2022-7822.json | 1 + data/advisories/2022/RLSA-2022-7830.json | 1 + data/advisories/2022/RLSA-2022-7928.json | 1 + data/advisories/2022/RLSA-2022-7935.json | 1 + data/advisories/2022/RLSA-2022-7950.json | 1 + data/advisories/2022/RLSA-2022-7958.json | 1 + data/advisories/2022/RLSA-2022-7959.json | 1 + data/advisories/2022/RLSA-2022-7967.json | 1 + data/advisories/2022/RLSA-2022-7968.json | 1 + data/advisories/2022/RLSA-2022-7970.json | 1 + data/advisories/2022/RLSA-2022-7978.json | 1 + data/advisories/2022/RLSA-2022-7979.json | 1 + data/advisories/2022/RLSA-2022-8003.json | 1 + data/advisories/2022/RLSA-2022-8011.json | 1 + data/advisories/2022/RLSA-2022-8022.json | 1 + data/advisories/2022/RLSA-2022-8054.json | 1 + data/advisories/2022/RLSA-2022-8057.json | 1 + data/advisories/2022/RLSA-2022-8062.json | 1 + data/advisories/2022/RLSA-2022-8067.json | 1 + data/advisories/2022/RLSA-2022-8068.json | 1 + data/advisories/2022/RLSA-2022-8070.json | 1 + data/advisories/2022/RLSA-2022-8078.json | 1 + data/advisories/2022/RLSA-2022-8090.json | 1 + data/advisories/2022/RLSA-2022-8096.json | 1 + data/advisories/2022/RLSA-2022-8098.json | 1 + data/advisories/2022/RLSA-2022-8112.json | 1 + data/advisories/2022/RLSA-2022-8126.json | 1 + data/advisories/2022/RLSA-2022-8139.json | 1 + data/advisories/2022/RLSA-2022-8151.json | 1 + data/advisories/2022/RLSA-2022-8162.json | 1 + data/advisories/2022/RLSA-2022-8197.json | 1 + data/advisories/2022/RLSA-2022-8207.json | 1 + data/advisories/2022/RLSA-2022-8208.json | 1 + data/advisories/2022/RLSA-2022-8219.json | 1 + data/advisories/2022/RLSA-2022-8221.json | 1 + data/advisories/2022/RLSA-2022-8222.json | 1 + data/advisories/2022/RLSA-2022-8226.json | 1 + data/advisories/2022/RLSA-2022-8250.json | 1 + data/advisories/2022/RLSA-2022-8252.json | 1 + data/advisories/2022/RLSA-2022-8263.json | 1 + data/advisories/2022/RLSA-2022-8291.json | 1 + data/advisories/2022/RLSA-2022-8299.json | 1 + data/advisories/2022/RLSA-2022-8317.json | 1 + data/advisories/2022/RLSA-2022-8318.json | 1 + data/advisories/2022/RLSA-2022-8340.json | 1 + data/advisories/2022/RLSA-2022-8353.json | 1 + data/advisories/2022/RLSA-2022-8361.json | 1 + data/advisories/2022/RLSA-2022-8384.json | 1 + data/advisories/2022/RLSA-2022-8385.json | 1 + data/advisories/2022/RLSA-2022-8393.json | 1 + data/advisories/2022/RLSA-2022-8400.json | 1 + data/advisories/2022/RLSA-2022-8444.json | 1 + data/advisories/2022/RLSA-2022-8453.json | 1 + data/advisories/2022/RLSA-2022-8492.json | 1 + data/advisories/2022/RLSA-2022-8493.json | 1 + data/advisories/2022/RLSA-2022-8506.json | 1 + data/advisories/2022/RLSA-2022-8547.json | 1 + data/advisories/2022/RLSA-2022-8554.json | 1 + data/advisories/2022/RLSA-2022-8637.json | 1 + data/advisories/2022/RLSA-2022-8638.json | 1 + data/advisories/2022/RLSA-2022-8643.json | 1 + data/advisories/2022/RLSA-2022-8649.json | 1 + data/advisories/2022/RLSA-2022-8832.json | 1 + data/advisories/2022/RLSA-2022-8833.json | 1 + data/advisories/2022/RLSA-2022-9058.json | 1 + data/advisories/2022/RLSA-2022-9067.json | 1 + data/advisories/2022/RLSA-2022-9073.json | 1 + data/advisories/2023/RLSA-2023-0005.json | 1 + data/advisories/2023/RLSA-2023-0016.json | 1 + data/advisories/2023/RLSA-2023-0021.json | 1 + data/advisories/2023/RLSA-2023-0049.json | 1 + data/advisories/2023/RLSA-2023-0050.json | 1 + data/advisories/2023/RLSA-2023-0077.json | 1 + data/advisories/2023/RLSA-2023-0079.json | 1 + data/advisories/2023/RLSA-2023-0087.json | 1 + data/advisories/2023/RLSA-2023-0089.json | 1 + data/advisories/2023/RLSA-2023-0095.json | 1 + data/advisories/2023/RLSA-2023-0096.json | 1 + data/advisories/2023/RLSA-2023-0099.json | 1 + data/advisories/2023/RLSA-2023-0101.json | 1 + data/advisories/2023/RLSA-2023-0103.json | 1 + data/advisories/2023/RLSA-2023-0110.json | 1 + data/advisories/2023/RLSA-2023-0113.json | 1 + data/advisories/2023/RLSA-2023-0114.json | 1 + data/advisories/2023/RLSA-2023-0116.json | 1 + data/advisories/2023/RLSA-2023-0171.json | 1 + data/advisories/2023/RLSA-2023-0173.json | 1 + data/advisories/2023/RLSA-2023-0192.json | 1 + data/advisories/2023/RLSA-2023-0194.json | 1 + data/advisories/2023/RLSA-2023-0200.json | 1 + data/advisories/2023/RLSA-2023-0202.json | 1 + data/advisories/2023/RLSA-2023-0208.json | 1 + data/advisories/2023/RLSA-2023-0210.json | 1 + data/advisories/2023/RLSA-2023-0282.json | 1 + data/advisories/2023/RLSA-2023-0284.json | 1 + data/advisories/2023/RLSA-2023-0285.json | 1 + data/advisories/2023/RLSA-2023-0288.json | 1 + data/advisories/2023/RLSA-2023-0300.json | 1 + data/advisories/2023/RLSA-2023-0302.json | 1 + data/advisories/2023/RLSA-2023-0303.json | 1 + data/advisories/2023/RLSA-2023-0304.json | 1 + data/advisories/2023/RLSA-2023-0318.json | 1 + data/advisories/2023/RLSA-2023-0321.json | 1 + data/advisories/2023/RLSA-2023-0328.json | 1 + data/advisories/2023/RLSA-2023-0333.json | 1 + data/advisories/2023/RLSA-2023-0334.json | 1 + data/advisories/2023/RLSA-2023-0335.json | 1 + data/advisories/2023/RLSA-2023-0336.json | 1 + data/advisories/2023/RLSA-2023-0337.json | 1 + data/advisories/2023/RLSA-2023-0338.json | 1 + data/advisories/2023/RLSA-2023-0339.json | 1 + data/advisories/2023/RLSA-2023-0340.json | 1 + data/advisories/2023/RLSA-2023-0343.json | 1 + data/advisories/2023/RLSA-2023-0379.json | 1 + data/advisories/2023/RLSA-2023-0383.json | 1 + data/advisories/2023/RLSA-2023-0446.json | 1 + data/advisories/2023/RLSA-2023-0463.json | 1 + data/advisories/2023/RLSA-2023-0476.json | 1 + data/advisories/2023/RLSA-2023-0606.json | 1 + data/advisories/2023/RLSA-2023-0608.json | 1 + data/advisories/2023/RLSA-2023-0610.json | 1 + data/advisories/2023/RLSA-2023-0611.json | 1 + data/advisories/2023/RLSA-2023-0622.json | 1 + data/advisories/2023/RLSA-2023-0625.json | 1 + data/advisories/2023/RLSA-2023-0626.json | 1 + data/advisories/2023/RLSA-2023-0662.json | 1 + data/advisories/2023/RLSA-2023-0752.json | 1 + data/advisories/2023/RLSA-2023-0808.json | 1 + data/advisories/2023/RLSA-2023-0810.json | 1 + data/advisories/2023/RLSA-2023-0821.json | 1 + data/advisories/2023/RLSA-2023-0824.json | 1 + data/advisories/2023/RLSA-2023-0832.json | 1 + data/advisories/2023/RLSA-2023-0833.json | 1 + data/advisories/2023/RLSA-2023-0835.json | 1 + data/advisories/2023/RLSA-2023-0837.json | 1 + data/advisories/2023/RLSA-2023-0838.json | 1 + data/advisories/2023/RLSA-2023-0842.json | 1 + data/advisories/2023/RLSA-2023-0848.json | 1 + data/advisories/2023/RLSA-2023-0852.json | 1 + data/advisories/2023/RLSA-2023-0854.json | 1 + data/advisories/2023/RLSA-2023-0855.json | 1 + data/advisories/2023/RLSA-2023-0902.json | 1 + data/advisories/2023/RLSA-2023-0903.json | 1 + data/advisories/2023/RLSA-2023-0946.json | 1 + data/advisories/2023/RLSA-2023-0952.json | 1 + data/advisories/2023/RLSA-2023-0953.json | 1 + data/advisories/2023/RLSA-2023-0954.json | 1 + data/advisories/2023/RLSA-2023-0957.json | 1 + data/advisories/2023/RLSA-2023-0958.json | 1 + data/advisories/2023/RLSA-2023-0959.json | 1 + data/advisories/2023/RLSA-2023-0965.json | 1 + data/advisories/2023/RLSA-2023-0970.json | 1 + data/advisories/2023/RLSA-2023-0979.json | 1 + data/advisories/2023/RLSA-2023-1067.json | 1 + data/advisories/2023/RLSA-2023-1068.json | 1 + data/advisories/2023/RLSA-2023-1140.json | 1 + data/advisories/2023/RLSA-2023-1141.json | 1 + data/advisories/2023/RLSA-2023-1252.json | 1 + data/advisories/2023/RLSA-2023-1336.json | 1 + data/advisories/2023/RLSA-2023-1337.json | 1 + data/advisories/2023/RLSA-2023-1368.json | 1 + data/advisories/2023/RLSA-2023-1403.json | 1 + data/advisories/2023/RLSA-2023-1405.json | 1 + data/advisories/2023/RLSA-2023-1407.json | 1 + data/advisories/2023/RLSA-2023-1469.json | 1 + data/advisories/2023/RLSA-2023-1470.json | 1 + data/advisories/2023/RLSA-2023-1566.json | 1 + data/advisories/2023/RLSA-2023-1569.json | 1 + data/advisories/2023/RLSA-2023-1572.json | 1 + data/advisories/2023/RLSA-2023-1576.json | 1 + data/advisories/2023/RLSA-2023-1582.json | 1 + data/advisories/2023/RLSA-2023-1583.json | 1 + data/advisories/2023/RLSA-2023-1584.json | 1 + data/advisories/2023/RLSA-2023-1591.json | 1 + data/advisories/2023/RLSA-2023-1592.json | 1 + data/advisories/2023/RLSA-2023-1670.json | 1 + data/advisories/2023/RLSA-2023-1673.json | 1 + data/advisories/2023/RLSA-2023-1743.json | 1 + data/advisories/2023/RLSA-2023-1802.json | 1 + data/advisories/2023/RLSA-2023-1809.json | 1 + data/advisories/2023/RLSA-2023-1879.json | 1 + data/advisories/2023/RLSA-2023-1880.json | 1 + data/advisories/2023/RLSA-2023-1895.json | 1 + data/advisories/2023/RLSA-2023-1898.json | 1 + data/advisories/2023/RLSA-2023-1909.json | 1 + data/advisories/2023/RLSA-2023-1918.json | 1 + data/advisories/2023/RLSA-2023-1919.json | 1 + data/advisories/2023/RLSA-2023-1930.json | 1 + data/advisories/2023/RLSA-2023-2074.json | 1 + data/advisories/2023/RLSA-2023-2076.json | 1 + data/advisories/2023/RLSA-2023-2078.json | 1 + data/advisories/2023/RLSA-2023-2097.json | 1 + data/advisories/2023/RLSA-2023-2127.json | 1 + data/advisories/2023/RLSA-2023-2652.json | 1 + data/advisories/2023/RLSA-2023-2655.json | 1 + data/advisories/2023/RLSA-2023-2810.json | 1 + data/advisories/2023/RLSA-2023-3082.json | 1 + data/advisories/2023/RLSA-2023-3083.json | 1 + data/advisories/2023/RLSA-2023-3106.json | 1 + data/advisories/2023/RLSA-2023-3107.json | 1 + data/advisories/2023/RLSA-2023-3108.json | 1 + data/advisories/2023/RLSA-2023-3109.json | 1 + data/advisories/2023/RLSA-2023-3147.json | 1 + data/advisories/2023/RLSA-2023-3220.json | 1 + data/advisories/2023/RLSA-2023-3221.json | 1 + data/advisories/2023/RLSA-2023-3246.json | 1 + data/advisories/2023/RLSA-2023-3319.json | 1 + data/advisories/2023/RLSA-2023-3350.json | 1 + data/advisories/2023/RLSA-2023-3423.json | 1 + data/advisories/2023/RLSA-2023-3425.json | 1 + data/advisories/2023/RLSA-2023-3432.json | 1 + data/advisories/2023/RLSA-2023-3433.json | 1 + data/advisories/2023/RLSA-2023-3559.json | 1 + data/advisories/2023/RLSA-2023-3577.json | 1 + data/advisories/2023/RLSA-2023-3582.json | 1 + data/advisories/2023/RLSA-2023-3584.json | 1 + data/advisories/2023/RLSA-2023-3585.json | 1 + data/advisories/2023/RLSA-2023-3587.json | 1 + data/advisories/2023/RLSA-2023-3588.json | 1 + data/advisories/2023/RLSA-2023-3590.json | 1 + data/advisories/2023/RLSA-2023-3591.json | 1 + data/advisories/2023/RLSA-2023-3593.json | 1 + data/advisories/2023/RLSA-2023-3594.json | 1 + data/advisories/2023/RLSA-2023-3595.json | 1 + data/advisories/2023/RLSA-2023-3661.json | 1 + data/advisories/2023/RLSA-2023-3711.json | 1 + data/advisories/2023/RLSA-2023-3714.json | 1 + data/advisories/2023/RLSA-2023-3715.json | 1 + data/advisories/2023/RLSA-2023-3725.json | 1 + data/advisories/2023/RLSA-2023-3780.json | 1 + data/advisories/2023/RLSA-2023-3781.json | 1 + data/advisories/2023/RLSA-2023-3811.json | 1 + data/advisories/2023/RLSA-2023-3819.json | 1 + data/advisories/2023/RLSA-2023-3821.json | 1 + data/advisories/2023/RLSA-2023-3822.json | 1 + data/advisories/2023/RLSA-2023-3827.json | 1 + data/advisories/2023/RLSA-2023-3837.json | 1 + data/advisories/2023/RLSA-2023-3839.json | 1 + data/advisories/2023/RLSA-2023-3840.json | 1 + data/advisories/2023/RLSA-2023-3847.json | 1 + data/advisories/2023/RLSA-2023-3923.json | 1 + data/advisories/2023/RLSA-2023-3948.json | 1 + data/advisories/2023/RLSA-2023-3949.json | 1 + data/advisories/2023/RLSA-2023-4030.json | 1 + data/advisories/2023/RLSA-2023-4034.json | 1 + data/advisories/2023/RLSA-2023-4035.json | 1 + data/advisories/2023/RLSA-2023-4058.json | 1 + data/advisories/2023/RLSA-2023-4059.json | 1 + data/advisories/2023/RLSA-2023-4063.json | 1 + data/advisories/2023/RLSA-2023-4071.json | 1 + data/advisories/2023/RLSA-2023-4076.json | 1 + data/advisories/2023/RLSA-2023-4099.json | 1 + data/advisories/2023/RLSA-2023-4100.json | 1 + data/advisories/2023/RLSA-2023-4102.json | 1 + data/advisories/2023/RLSA-2023-4176.json | 1 + data/advisories/2023/RLSA-2023-4178.json | 1 + data/advisories/2023/RLSA-2023-4201.json | 1 + data/advisories/2023/RLSA-2023-4202.json | 1 + data/advisories/2023/RLSA-2023-4327.json | 1 + data/advisories/2023/RLSA-2023-4347.json | 1 + data/advisories/2023/RLSA-2023-4378.json | 1 + data/advisories/2023/RLSA-2023-4418.json | 1 + data/advisories/2023/RLSA-2023-4419.json | 1 + data/advisories/2023/RLSA-2023-4462.json | 1 + data/advisories/2023/RLSA-2023-4468.json | 1 + data/advisories/2023/RLSA-2023-4497.json | 1 + data/advisories/2023/RLSA-2023-4498.json | 1 + data/advisories/2023/RLSA-2023-4499.json | 1 + data/advisories/2023/RLSA-2023-4517.json | 1 + data/advisories/2023/RLSA-2023-4520.json | 1 + data/advisories/2023/RLSA-2023-4523.json | 1 + data/advisories/2023/RLSA-2023-4524.json | 1 + data/advisories/2023/RLSA-2023-4527.json | 1 + data/advisories/2023/RLSA-2023-4529.json | 1 + data/advisories/2023/RLSA-2023-4535.json | 1 + data/advisories/2023/RLSA-2023-4536.json | 1 + data/advisories/2023/RLSA-2023-4537.json | 1 + data/advisories/2023/RLSA-2023-4539.json | 1 + data/advisories/2023/RLSA-2023-4541.json | 1 + data/advisories/2023/RLSA-2023-4569.json | 1 + data/advisories/2023/RLSA-2023-4570.json | 1 + data/advisories/2023/RLSA-2023-4571.json | 1 + data/advisories/2023/RLSA-2023-4634.json | 1 + data/advisories/2023/RLSA-2023-4635.json | 1 + data/advisories/2023/RLSA-2023-4643.json | 1 + data/advisories/2023/RLSA-2023-4645.json | 1 + data/advisories/2023/RLSA-2023-4706.json | 1 + data/advisories/2023/RLSA-2023-4708.json | 1 + data/advisories/2023/RLSA-2023-4838.json | 1 + data/advisories/2023/RLSA-2023-4864.json | 1 + data/advisories/2023/RLSA-2023-4952.json | 1 + data/advisories/2023/RLSA-2023-4954.json | 1 + data/advisories/2023/RLSA-2023-5050.json | 1 + data/advisories/2023/RLSA-2023-5061.json | 1 + data/advisories/2023/RLSA-2023-5091.json | 1 + data/advisories/2023/RLSA-2023-5144.json | 1 + data/advisories/2023/RLSA-2023-5184.json | 1 + data/advisories/2023/RLSA-2023-5201.json | 1 + data/advisories/2023/RLSA-2023-5214.json | 1 + data/advisories/2023/RLSA-2023-5244.json | 1 + data/advisories/2023/RLSA-2023-5309.json | 1 + data/advisories/2023/RLSA-2023-5312.json | 1 + data/advisories/2023/RLSA-2023-5313.json | 1 + data/advisories/2023/RLSA-2023-5353.json | 1 + data/advisories/2023/RLSA-2023-5363.json | 1 + data/advisories/2023/RLSA-2023-5428.json | 1 + data/advisories/2023/RLSA-2023-5435.json | 1 + data/advisories/2023/RLSA-2023-5455.json | 1 + data/advisories/2023/RLSA-2023-5459.json | 1 + data/advisories/2023/RLSA-2023-5463.json | 1 + data/advisories/2023/RLSA-2023-5532.json | 1 + data/advisories/2023/RLSA-2023-5683.json | 1 + data/advisories/2023/RLSA-2023-5689.json | 1 + data/advisories/2023/RLSA-2023-5708.json | 1 + data/advisories/2023/RLSA-2023-5721.json | 1 + data/advisories/2023/RLSA-2023-5738.json | 1 + data/advisories/2023/RLSA-2023-5742.json | 1 + data/advisories/2023/RLSA-2023-5749.json | 1 + data/advisories/2023/RLSA-2023-5763.json | 1 + data/advisories/2023/RLSA-2023-5765.json | 1 + data/advisories/2023/RLSA-2023-5838.json | 1 + data/advisories/2023/RLSA-2023-5850.json | 1 + data/advisories/2023/RLSA-2023-5863.json | 1 + data/advisories/2023/RLSA-2023-5924.json | 1 + data/advisories/2023/RLSA-2023-5926.json | 1 + data/advisories/2023/RLSA-2023-5927.json | 1 + data/advisories/2023/RLSA-2023-5928.json | 1 + data/advisories/2023/RLSA-2023-5989.json | 1 + data/advisories/2023/RLSA-2023-5997.json | 1 + data/advisories/2023/RLSA-2023-6077.json | 1 + data/advisories/2023/RLSA-2023-6120.json | 1 + data/advisories/2023/RLSA-2023-6188.json | 1 + data/advisories/2023/RLSA-2023-6236.json | 1 + data/advisories/2023/RLSA-2023-6242.json | 1 + data/advisories/2023/RLSA-2023-6245.json | 1 + data/advisories/2023/RLSA-2023-6266.json | 1 + data/advisories/2023/RLSA-2023-6267.json | 1 + data/advisories/2023/RLSA-2023-6518.json | 1 + data/advisories/2023/RLSA-2023-6539.json | 1 + data/advisories/2023/RLSA-2023-6551.json | 1 + data/advisories/2023/RLSA-2023-6746.json | 1 + data/advisories/2023/RLSA-2023-6818.json | 1 + data/advisories/2023/RLSA-2023-7057.json | 1 + data/advisories/2023/RLSA-2023-7187.json | 1 + data/advisories/2023/RLSA-2023-7189.json | 1 + data/advisories/2023/RLSA-2023-7190.json | 1 + data/advisories/2023/RLSA-2023-7202.json | 1 + data/advisories/2023/RLSA-2023-7205.json | 1 + data/advisories/2023/RLSA-2023-7207.json | 1 + data/advisories/2023/RLSA-2023-7213.json | 1 + data/advisories/2023/RLSA-2023-7256.json | 1 + data/advisories/2023/RLSA-2023-7258.json | 1 + data/advisories/2023/RLSA-2023-7265.json | 1 + data/advisories/2023/RLSA-2023-7500.json | 1 + data/advisories/2023/RLSA-2023-7548.json | 1 + data/advisories/2023/RLSA-2023-7549.json | 1 + data/advisories/2023/RLSA-2023-7581.json | 1 + data/advisories/2023/RLSA-2023-7668.json | 1 + data/advisories/2023/RLSA-2023-7711.json | 1 + data/advisories/2023/RLSA-2023-7712.json | 1 + data/advisories/2023/RLSA-2023-7714.json | 1 + data/advisories/2023/RLSA-2023-7716.json | 1 + data/advisories/2023/RLSA-2023-7732.json | 1 + data/advisories/2023/RLSA-2023-7785.json | 1 + data/advisories/2023/RLSA-2023-7790.json | 1 + data/advisories/2023/RLSA-2023-7836.json | 1 + data/advisories/2023/RLSA-2023-7841.json | 1 + data/advisories/2023/RXSA-2023-0101.json | 1 + data/advisories/2023/RXSA-2023-0334.json | 1 + data/advisories/2023/RXSA-2023-0832.json | 1 + data/advisories/2023/RXSA-2023-0951.json | 1 + data/advisories/2023/RXSA-2023-1566.json | 1 + data/advisories/2023/RXSA-2023-5244.json | 1 + data/advisories/2023/RXSA-2023-7549.json | 1 + data/advisories/2023/RXSA-2023-7749.json | 1 + data/advisories/2024/RLSA-2024-0003.json | 1 + data/advisories/2024/RLSA-2024-0012.json | 1 + data/advisories/2024/RLSA-2024-0046.json | 1 + data/advisories/2024/RLSA-2024-0105.json | 1 + data/advisories/2024/RLSA-2024-0119.json | 1 + data/advisories/2024/RLSA-2024-0121.json | 1 + data/advisories/2024/RLSA-2024-0130.json | 1 + data/advisories/2024/RLSA-2024-0134.json | 1 + data/advisories/2024/RLSA-2024-0135.json | 1 + data/advisories/2024/RLSA-2024-0143.json | 1 + data/advisories/2024/RLSA-2024-0150.json | 1 + data/advisories/2024/RLSA-2024-0155.json | 1 + data/advisories/2024/RLSA-2024-0157.json | 1 + data/advisories/2024/RLSA-2024-0158.json | 1 + data/advisories/2024/RLSA-2024-0253.json | 1 + data/advisories/2024/RLSA-2024-0256.json | 1 + data/advisories/2024/RLSA-2024-0387.json | 1 + data/advisories/2024/RLSA-2024-0465.json | 1 + data/advisories/2024/RLSA-2024-0539.json | 1 + data/advisories/2024/RLSA-2024-0606.json | 1 + data/advisories/2024/RLSA-2024-0607.json | 1 + data/advisories/2024/RLSA-2024-0608.json | 1 + data/advisories/2024/RLSA-2024-0609.json | 1 + data/advisories/2024/RLSA-2024-0627.json | 1 + data/advisories/2024/RLSA-2024-0628.json | 1 + data/advisories/2024/RLSA-2024-0647.json | 1 + data/advisories/2024/RLSA-2024-0675.json | 1 + data/advisories/2024/RLSA-2024-0748.json | 1 + data/advisories/2024/RLSA-2024-0752.json | 1 + data/advisories/2024/RLSA-2024-0768.json | 1 + data/advisories/2024/RLSA-2024-0769.json | 1 + data/advisories/2024/RLSA-2024-0786.json | 1 + data/advisories/2024/RLSA-2024-0806.json | 1 + data/advisories/2024/RLSA-2024-0827.json | 1 + data/advisories/2024/RLSA-2024-0861.json | 1 + data/advisories/2024/RLSA-2024-0894.json | 1 + data/advisories/2024/RLSA-2024-0950.json | 1 + data/advisories/2024/RLSA-2024-0951.json | 1 + data/advisories/2024/RLSA-2024-0955.json | 1 + data/advisories/2024/RLSA-2024-0956.json | 1 + data/advisories/2024/RLSA-2024-0966.json | 1 + data/advisories/2024/RLSA-2024-0967.json | 1 + data/advisories/2024/RLSA-2024-0973.json | 1 + data/advisories/2024/RLSA-2024-0974.json | 1 + data/advisories/2024/RLSA-2024-0975.json | 1 + data/advisories/2024/RLSA-2024-10090.json | 1 + data/advisories/2024/RLSA-2024-10218.json | 1 + data/advisories/2024/RLSA-2024-10219.json | 1 + data/advisories/2024/RLSA-2024-10244.json | 1 + data/advisories/2024/RLSA-2024-10281.json | 1 + data/advisories/2024/RLSA-2024-10282.json | 1 + data/advisories/2024/RLSA-2024-10289.json | 1 + data/advisories/2024/RLSA-2024-10379.json | 1 + data/advisories/2024/RLSA-2024-10384.json | 1 + data/advisories/2024/RLSA-2024-10481.json | 1 + data/advisories/2024/RLSA-2024-10590.json | 1 + data/advisories/2024/RLSA-2024-10591.json | 1 + data/advisories/2024/RLSA-2024-1063.json | 1 + data/advisories/2024/RLSA-2024-10752.json | 1 + data/advisories/2024/RLSA-2024-10779.json | 1 + data/advisories/2024/RLSA-2024-10785.json | 1 + data/advisories/2024/RLSA-2024-10787.json | 1 + data/advisories/2024/RLSA-2024-10788.json | 1 + data/advisories/2024/RLSA-2024-10830.json | 1 + data/advisories/2024/RLSA-2024-10831.json | 1 + data/advisories/2024/RLSA-2024-10832.json | 1 + data/advisories/2024/RLSA-2024-10834.json | 1 + data/advisories/2024/RLSA-2024-10850.json | 1 + data/advisories/2024/RLSA-2024-10858.json | 1 + data/advisories/2024/RLSA-2024-10860.json | 1 + data/advisories/2024/RLSA-2024-10943.json | 1 + data/advisories/2024/RLSA-2024-10944.json | 1 + data/advisories/2024/RLSA-2024-10949.json | 1 + data/advisories/2024/RLSA-2024-10950.json | 1 + data/advisories/2024/RLSA-2024-10951.json | 1 + data/advisories/2024/RLSA-2024-10952.json | 1 + data/advisories/2024/RLSA-2024-10953.json | 1 + data/advisories/2024/RLSA-2024-10978.json | 1 + data/advisories/2024/RLSA-2024-10979.json | 1 + data/advisories/2024/RLSA-2024-10980.json | 1 + data/advisories/2024/RLSA-2024-10983.json | 1 + data/advisories/2024/RLSA-2024-10987.json | 1 + data/advisories/2024/RLSA-2024-11111.json | 1 + data/advisories/2024/RLSA-2024-11122.json | 1 + data/advisories/2024/RLSA-2024-11123.json | 1 + data/advisories/2024/RLSA-2024-11161.json | 1 + data/advisories/2024/RLSA-2024-11185.json | 1 + data/advisories/2024/RLSA-2024-11189.json | 1 + data/advisories/2024/RLSA-2024-11192.json | 1 + data/advisories/2024/RLSA-2024-11193.json | 1 + data/advisories/2024/RLSA-2024-11216.json | 1 + data/advisories/2024/RLSA-2024-11217.json | 1 + data/advisories/2024/RLSA-2024-11219.json | 1 + data/advisories/2024/RLSA-2024-11232.json | 1 + data/advisories/2024/RLSA-2024-11237.json | 1 + data/advisories/2024/RLSA-2024-11238.json | 1 + data/advisories/2024/RLSA-2024-11242.json | 1 + data/advisories/2024/RLSA-2024-11299.json | 1 + data/advisories/2024/RLSA-2024-11345.json | 1 + data/advisories/2024/RLSA-2024-1139.json | 1 + data/advisories/2024/RLSA-2024-1308.json | 1 + data/advisories/2024/RLSA-2024-1311.json | 1 + data/advisories/2024/RLSA-2024-1335.json | 1 + data/advisories/2024/RLSA-2024-1375.json | 1 + data/advisories/2024/RLSA-2024-1427.json | 1 + data/advisories/2024/RLSA-2024-1431.json | 1 + data/advisories/2024/RLSA-2024-1435.json | 1 + data/advisories/2024/RLSA-2024-1436.json | 1 + data/advisories/2024/RLSA-2024-1438.json | 1 + data/advisories/2024/RLSA-2024-1444.json | 1 + data/advisories/2024/RLSA-2024-1472.json | 1 + data/advisories/2024/RLSA-2024-1484.json | 1 + data/advisories/2024/RLSA-2024-1494.json | 1 + data/advisories/2024/RLSA-2024-1502.json | 1 + data/advisories/2024/RLSA-2024-1503.json | 1 + data/advisories/2024/RLSA-2024-1510.json | 1 + data/advisories/2024/RLSA-2024-1514.json | 1 + data/advisories/2024/RLSA-2024-1576.json | 1 + data/advisories/2024/RLSA-2024-1601.json | 1 + data/advisories/2024/RLSA-2024-1607.json | 1 + data/advisories/2024/RLSA-2024-1608.json | 1 + data/advisories/2024/RLSA-2024-1610.json | 1 + data/advisories/2024/RLSA-2024-1614.json | 1 + data/advisories/2024/RLSA-2024-1615.json | 1 + data/advisories/2024/RLSA-2024-1644.json | 1 + data/advisories/2024/RLSA-2024-1646.json | 1 + data/advisories/2024/RLSA-2024-1687.json | 1 + data/advisories/2024/RLSA-2024-1688.json | 1 + data/advisories/2024/RLSA-2024-1690.json | 1 + data/advisories/2024/RLSA-2024-1691.json | 1 + data/advisories/2024/RLSA-2024-1692.json | 1 + data/advisories/2024/RLSA-2024-1719.json | 1 + data/advisories/2024/RLSA-2024-1750.json | 1 + data/advisories/2024/RLSA-2024-1751.json | 1 + data/advisories/2024/RLSA-2024-1781.json | 1 + data/advisories/2024/RLSA-2024-1782.json | 1 + data/advisories/2024/RLSA-2024-1784.json | 1 + data/advisories/2024/RLSA-2024-1786.json | 1 + data/advisories/2024/RLSA-2024-1818.json | 1 + data/advisories/2024/RLSA-2024-1822.json | 1 + data/advisories/2024/RLSA-2024-1825.json | 1 + data/advisories/2024/RLSA-2024-1828.json | 1 + data/advisories/2024/RLSA-2024-1908.json | 1 + data/advisories/2024/RLSA-2024-1912.json | 1 + data/advisories/2024/RLSA-2024-1939.json | 1 + data/advisories/2024/RLSA-2024-1940.json | 1 + data/advisories/2024/RLSA-2024-1962.json | 1 + data/advisories/2024/RLSA-2024-1998.json | 1 + data/advisories/2024/RLSA-2024-2037.json | 1 + data/advisories/2024/RLSA-2024-2084.json | 1 + data/advisories/2024/RLSA-2024-2098.json | 1 + data/advisories/2024/RLSA-2024-2135.json | 1 + data/advisories/2024/RLSA-2024-2137.json | 1 + data/advisories/2024/RLSA-2024-2145.json | 1 + data/advisories/2024/RLSA-2024-2146.json | 1 + data/advisories/2024/RLSA-2024-2199.json | 1 + data/advisories/2024/RLSA-2024-2211.json | 1 + data/advisories/2024/RLSA-2024-2217.json | 1 + data/advisories/2024/RLSA-2024-2228.json | 1 + data/advisories/2024/RLSA-2024-2264.json | 1 + data/advisories/2024/RLSA-2024-2278.json | 1 + data/advisories/2024/RLSA-2024-2287.json | 1 + data/advisories/2024/RLSA-2024-2290.json | 1 + data/advisories/2024/RLSA-2024-2295.json | 1 + data/advisories/2024/RLSA-2024-2302.json | 1 + data/advisories/2024/RLSA-2024-2337.json | 1 + data/advisories/2024/RLSA-2024-2353.json | 1 + data/advisories/2024/RLSA-2024-2366.json | 1 + data/advisories/2024/RLSA-2024-2377.json | 1 + data/advisories/2024/RLSA-2024-2396.json | 1 + data/advisories/2024/RLSA-2024-2410.json | 1 + data/advisories/2024/RLSA-2024-2437.json | 1 + data/advisories/2024/RLSA-2024-2463.json | 1 + data/advisories/2024/RLSA-2024-2483.json | 1 + data/advisories/2024/RLSA-2024-2504.json | 1 + data/advisories/2024/RLSA-2024-2512.json | 1 + data/advisories/2024/RLSA-2024-2517.json | 1 + data/advisories/2024/RLSA-2024-2525.json | 1 + data/advisories/2024/RLSA-2024-2548.json | 1 + data/advisories/2024/RLSA-2024-2549.json | 1 + data/advisories/2024/RLSA-2024-2550.json | 1 + data/advisories/2024/RLSA-2024-2551.json | 1 + data/advisories/2024/RLSA-2024-2559.json | 1 + data/advisories/2024/RLSA-2024-2560.json | 1 + data/advisories/2024/RLSA-2024-2562.json | 1 + data/advisories/2024/RLSA-2024-2564.json | 1 + data/advisories/2024/RLSA-2024-2565.json | 1 + data/advisories/2024/RLSA-2024-2566.json | 1 + data/advisories/2024/RLSA-2024-2568.json | 1 + data/advisories/2024/RLSA-2024-2569.json | 1 + data/advisories/2024/RLSA-2024-2570.json | 1 + data/advisories/2024/RLSA-2024-2571.json | 1 + data/advisories/2024/RLSA-2024-2616.json | 1 + data/advisories/2024/RLSA-2024-2679.json | 1 + data/advisories/2024/RLSA-2024-2699.json | 1 + data/advisories/2024/RLSA-2024-2722.json | 1 + data/advisories/2024/RLSA-2024-2724.json | 1 + data/advisories/2024/RLSA-2024-2758.json | 1 + data/advisories/2024/RLSA-2024-2778.json | 1 + data/advisories/2024/RLSA-2024-2779.json | 1 + data/advisories/2024/RLSA-2024-2780.json | 1 + data/advisories/2024/RLSA-2024-2842.json | 1 + data/advisories/2024/RLSA-2024-2843.json | 1 + data/advisories/2024/RLSA-2024-2853.json | 1 + data/advisories/2024/RLSA-2024-2888.json | 1 + data/advisories/2024/RLSA-2024-2910.json | 1 + data/advisories/2024/RLSA-2024-2950.json | 1 + data/advisories/2024/RLSA-2024-2952.json | 1 + data/advisories/2024/RLSA-2024-2953.json | 1 + data/advisories/2024/RLSA-2024-2961.json | 1 + data/advisories/2024/RLSA-2024-2962.json | 1 + data/advisories/2024/RLSA-2024-2966.json | 1 + data/advisories/2024/RLSA-2024-2968.json | 1 + data/advisories/2024/RLSA-2024-2973.json | 1 + data/advisories/2024/RLSA-2024-2974.json | 1 + data/advisories/2024/RLSA-2024-2979.json | 1 + data/advisories/2024/RLSA-2024-2980.json | 1 + data/advisories/2024/RLSA-2024-2981.json | 1 + data/advisories/2024/RLSA-2024-2982.json | 1 + data/advisories/2024/RLSA-2024-2985.json | 1 + data/advisories/2024/RLSA-2024-2986.json | 1 + data/advisories/2024/RLSA-2024-2987.json | 1 + data/advisories/2024/RLSA-2024-2988.json | 1 + data/advisories/2024/RLSA-2024-2994.json | 1 + data/advisories/2024/RLSA-2024-3005.json | 1 + data/advisories/2024/RLSA-2024-3008.json | 1 + data/advisories/2024/RLSA-2024-3017.json | 1 + data/advisories/2024/RLSA-2024-3022.json | 1 + data/advisories/2024/RLSA-2024-3030.json | 1 + data/advisories/2024/RLSA-2024-3043.json | 1 + data/advisories/2024/RLSA-2024-3044.json | 1 + data/advisories/2024/RLSA-2024-3047.json | 1 + data/advisories/2024/RLSA-2024-3049.json | 1 + data/advisories/2024/RLSA-2024-3056.json | 1 + data/advisories/2024/RLSA-2024-3058.json | 1 + data/advisories/2024/RLSA-2024-3059.json | 1 + data/advisories/2024/RLSA-2024-3060.json | 1 + data/advisories/2024/RLSA-2024-3061.json | 1 + data/advisories/2024/RLSA-2024-3062.json | 1 + data/advisories/2024/RLSA-2024-3066.json | 1 + data/advisories/2024/RLSA-2024-3088.json | 1 + data/advisories/2024/RLSA-2024-3089.json | 1 + data/advisories/2024/RLSA-2024-3094.json | 1 + data/advisories/2024/RLSA-2024-3095.json | 1 + data/advisories/2024/RLSA-2024-3102.json | 1 + data/advisories/2024/RLSA-2024-3105.json | 1 + data/advisories/2024/RLSA-2024-3120.json | 1 + data/advisories/2024/RLSA-2024-3121.json | 1 + data/advisories/2024/RLSA-2024-3127.json | 1 + data/advisories/2024/RLSA-2024-3128.json | 1 + data/advisories/2024/RLSA-2024-3138.json | 1 + data/advisories/2024/RLSA-2024-3139.json | 1 + data/advisories/2024/RLSA-2024-3163.json | 1 + data/advisories/2024/RLSA-2024-3166.json | 1 + data/advisories/2024/RLSA-2024-3178.json | 1 + data/advisories/2024/RLSA-2024-3184.json | 1 + data/advisories/2024/RLSA-2024-3203.json | 1 + data/advisories/2024/RLSA-2024-3211.json | 1 + data/advisories/2024/RLSA-2024-3233.json | 1 + data/advisories/2024/RLSA-2024-3253.json | 1 + data/advisories/2024/RLSA-2024-3254.json | 1 + data/advisories/2024/RLSA-2024-3258.json | 1 + data/advisories/2024/RLSA-2024-3259.json | 1 + data/advisories/2024/RLSA-2024-3261.json | 1 + data/advisories/2024/RLSA-2024-3264.json | 1 + data/advisories/2024/RLSA-2024-3265.json | 1 + data/advisories/2024/RLSA-2024-3267.json | 1 + data/advisories/2024/RLSA-2024-3268.json | 1 + data/advisories/2024/RLSA-2024-3269.json | 1 + data/advisories/2024/RLSA-2024-3270.json | 1 + data/advisories/2024/RLSA-2024-3271.json | 1 + data/advisories/2024/RLSA-2024-3275.json | 1 + data/advisories/2024/RLSA-2024-3307.json | 1 + data/advisories/2024/RLSA-2024-3339.json | 1 + data/advisories/2024/RLSA-2024-3340.json | 1 + data/advisories/2024/RLSA-2024-3341.json | 1 + data/advisories/2024/RLSA-2024-3343.json | 1 + data/advisories/2024/RLSA-2024-3344.json | 1 + data/advisories/2024/RLSA-2024-3345.json | 1 + data/advisories/2024/RLSA-2024-3346.json | 1 + data/advisories/2024/RLSA-2024-3347.json | 1 + data/advisories/2024/RLSA-2024-3466.json | 1 + data/advisories/2024/RLSA-2024-3500.json | 1 + data/advisories/2024/RLSA-2024-3501.json | 1 + data/advisories/2024/RLSA-2024-3513.json | 1 + data/advisories/2024/RLSA-2024-3546.json | 1 + data/advisories/2024/RLSA-2024-3618.json | 1 + data/advisories/2024/RLSA-2024-3619.json | 1 + data/advisories/2024/RLSA-2024-3626.json | 1 + data/advisories/2024/RLSA-2024-3627.json | 1 + data/advisories/2024/RLSA-2024-3659.json | 1 + data/advisories/2024/RLSA-2024-3661.json | 1 + data/advisories/2024/RLSA-2024-3666.json | 1 + data/advisories/2024/RLSA-2024-3667.json | 1 + data/advisories/2024/RLSA-2024-3668.json | 1 + data/advisories/2024/RLSA-2024-3670.json | 1 + data/advisories/2024/RLSA-2024-3671.json | 1 + data/advisories/2024/RLSA-2024-3754.json | 1 + data/advisories/2024/RLSA-2024-3755.json | 1 + data/advisories/2024/RLSA-2024-3783.json | 1 + data/advisories/2024/RLSA-2024-3784.json | 1 + data/advisories/2024/RLSA-2024-3820.json | 1 + data/advisories/2024/RLSA-2024-3826.json | 1 + data/advisories/2024/RLSA-2024-3827.json | 1 + data/advisories/2024/RLSA-2024-3830.json | 1 + data/advisories/2024/RLSA-2024-3834.json | 1 + data/advisories/2024/RLSA-2024-3835.json | 1 + data/advisories/2024/RLSA-2024-3837.json | 1 + data/advisories/2024/RLSA-2024-3842.json | 1 + data/advisories/2024/RLSA-2024-3846.json | 1 + data/advisories/2024/RLSA-2024-3954.json | 1 + data/advisories/2024/RLSA-2024-3955.json | 1 + data/advisories/2024/RLSA-2024-3959.json | 1 + data/advisories/2024/RLSA-2024-3961.json | 1 + data/advisories/2024/RLSA-2024-3968.json | 1 + data/advisories/2024/RLSA-2024-3999.json | 1 + data/advisories/2024/RLSA-2024-4000.json | 1 + data/advisories/2024/RLSA-2024-4002.json | 1 + data/advisories/2024/RLSA-2024-4036.json | 1 + data/advisories/2024/RLSA-2024-4050.json | 1 + data/advisories/2024/RLSA-2024-4077.json | 1 + data/advisories/2024/RLSA-2024-4078.json | 1 + data/advisories/2024/RLSA-2024-4083.json | 1 + data/advisories/2024/RLSA-2024-4084.json | 1 + data/advisories/2024/RLSA-2024-4165.json | 1 + data/advisories/2024/RLSA-2024-4197.json | 1 + data/advisories/2024/RLSA-2024-4211.json | 1 + data/advisories/2024/RLSA-2024-4212.json | 1 + data/advisories/2024/RLSA-2024-4227.json | 1 + data/advisories/2024/RLSA-2024-4231.json | 1 + data/advisories/2024/RLSA-2024-4235.json | 1 + data/advisories/2024/RLSA-2024-4237.json | 1 + data/advisories/2024/RLSA-2024-4241.json | 1 + data/advisories/2024/RLSA-2024-4242.json | 1 + data/advisories/2024/RLSA-2024-4243.json | 1 + data/advisories/2024/RLSA-2024-4244.json | 1 + data/advisories/2024/RLSA-2024-4245.json | 1 + data/advisories/2024/RLSA-2024-4246.json | 1 + data/advisories/2024/RLSA-2024-4247.json | 1 + data/advisories/2024/RLSA-2024-4249.json | 1 + data/advisories/2024/RLSA-2024-4252.json | 1 + data/advisories/2024/RLSA-2024-4256.json | 1 + data/advisories/2024/RLSA-2024-4259.json | 1 + data/advisories/2024/RLSA-2024-4260.json | 1 + data/advisories/2024/RLSA-2024-4262.json | 1 + data/advisories/2024/RLSA-2024-4264.json | 1 + data/advisories/2024/RLSA-2024-4265.json | 1 + data/advisories/2024/RLSA-2024-4267.json | 1 + data/advisories/2024/RLSA-2024-4349.json | 1 + data/advisories/2024/RLSA-2024-4351.json | 1 + data/advisories/2024/RLSA-2024-4352.json | 1 + data/advisories/2024/RLSA-2024-4367.json | 1 + data/advisories/2024/RLSA-2024-4376.json | 1 + data/advisories/2024/RLSA-2024-4420.json | 1 + data/advisories/2024/RLSA-2024-4438.json | 1 + data/advisories/2024/RLSA-2024-4450.json | 1 + data/advisories/2024/RLSA-2024-4451.json | 1 + data/advisories/2024/RLSA-2024-4457.json | 1 + data/advisories/2024/RLSA-2024-4499.json | 1 + data/advisories/2024/RLSA-2024-4500.json | 1 + data/advisories/2024/RLSA-2024-4502.json | 1 + data/advisories/2024/RLSA-2024-4517.json | 1 + data/advisories/2024/RLSA-2024-4563.json | 1 + data/advisories/2024/RLSA-2024-4567.json | 1 + data/advisories/2024/RLSA-2024-4568.json | 1 + data/advisories/2024/RLSA-2024-4573.json | 1 + data/advisories/2024/RLSA-2024-4583.json | 1 + data/advisories/2024/RLSA-2024-4617.json | 1 + data/advisories/2024/RLSA-2024-4620.json | 1 + data/advisories/2024/RLSA-2024-4623.json | 1 + data/advisories/2024/RLSA-2024-4624.json | 1 + data/advisories/2024/RLSA-2024-4635.json | 1 + data/advisories/2024/RLSA-2024-4636.json | 1 + data/advisories/2024/RLSA-2024-4720.json | 1 + data/advisories/2024/RLSA-2024-4726.json | 1 + data/advisories/2024/RLSA-2024-4756.json | 1 + data/advisories/2024/RLSA-2024-4861.json | 1 + data/advisories/2024/RLSA-2024-4928.json | 1 + data/advisories/2024/RLSA-2024-4935.json | 1 + data/advisories/2024/RLSA-2024-4936.json | 1 + data/advisories/2024/RLSA-2024-5079.json | 1 + data/advisories/2024/RLSA-2024-5101.json | 1 + data/advisories/2024/RLSA-2024-5102.json | 1 + data/advisories/2024/RLSA-2024-5138.json | 1 + data/advisories/2024/RLSA-2024-5192.json | 1 + data/advisories/2024/RLSA-2024-5193.json | 1 + data/advisories/2024/RLSA-2024-5231.json | 1 + data/advisories/2024/RLSA-2024-5258.json | 1 + data/advisories/2024/RLSA-2024-5279.json | 1 + data/advisories/2024/RLSA-2024-5289.json | 1 + data/advisories/2024/RLSA-2024-5291.json | 1 + data/advisories/2024/RLSA-2024-5294.json | 1 + data/advisories/2024/RLSA-2024-5297.json | 1 + data/advisories/2024/RLSA-2024-5298.json | 1 + data/advisories/2024/RLSA-2024-5299.json | 1 + data/advisories/2024/RLSA-2024-5305.json | 1 + data/advisories/2024/RLSA-2024-5306.json | 1 + data/advisories/2024/RLSA-2024-5309.json | 1 + data/advisories/2024/RLSA-2024-5312.json | 1 + data/advisories/2024/RLSA-2024-5337.json | 1 + data/advisories/2024/RLSA-2024-5338.json | 1 + data/advisories/2024/RLSA-2024-5363.json | 1 + data/advisories/2024/RLSA-2024-5390.json | 1 + data/advisories/2024/RLSA-2024-5391.json | 1 + data/advisories/2024/RLSA-2024-5402.json | 1 + data/advisories/2024/RLSA-2024-5524.json | 1 + data/advisories/2024/RLSA-2024-5530.json | 1 + data/advisories/2024/RLSA-2024-5531.json | 1 + data/advisories/2024/RLSA-2024-5532.json | 1 + data/advisories/2024/RLSA-2024-5533.json | 1 + data/advisories/2024/RLSA-2024-5598.json | 1 + data/advisories/2024/RLSA-2024-5654.json | 1 + data/advisories/2024/RLSA-2024-5693.json | 1 + data/advisories/2024/RLSA-2024-5694.json | 1 + data/advisories/2024/RLSA-2024-5814.json | 1 + data/advisories/2024/RLSA-2024-5815.json | 1 + data/advisories/2024/RLSA-2024-5927.json | 1 + data/advisories/2024/RLSA-2024-5929.json | 1 + data/advisories/2024/RLSA-2024-5941.json | 1 + data/advisories/2024/RLSA-2024-5962.json | 1 + data/advisories/2024/RLSA-2024-5999.json | 1 + data/advisories/2024/RLSA-2024-6000.json | 1 + data/advisories/2024/RLSA-2024-6001.json | 1 + data/advisories/2024/RLSA-2024-6018.json | 1 + data/advisories/2024/RLSA-2024-6020.json | 1 + data/advisories/2024/RLSA-2024-6146.json | 1 + data/advisories/2024/RLSA-2024-6147.json | 1 + data/advisories/2024/RLSA-2024-6148.json | 1 + data/advisories/2024/RLSA-2024-6192.json | 1 + data/advisories/2024/RLSA-2024-6197.json | 1 + data/advisories/2024/RLSA-2024-6309.json | 1 + data/advisories/2024/RLSA-2024-6311.json | 1 + data/advisories/2024/RLSA-2024-6356.json | 1 + data/advisories/2024/RLSA-2024-6422.json | 1 + data/advisories/2024/RLSA-2024-6464.json | 1 + data/advisories/2024/RLSA-2024-6529.json | 1 + data/advisories/2024/RLSA-2024-6567.json | 1 + data/advisories/2024/RLSA-2024-6569.json | 1 + data/advisories/2024/RLSA-2024-6670.json | 1 + data/advisories/2024/RLSA-2024-6681.json | 1 + data/advisories/2024/RLSA-2024-6682.json | 1 + data/advisories/2024/RLSA-2024-6683.json | 1 + data/advisories/2024/RLSA-2024-6684.json | 1 + data/advisories/2024/RLSA-2024-6726.json | 1 + data/advisories/2024/RLSA-2024-6754.json | 1 + data/advisories/2024/RLSA-2024-6757.json | 1 + data/advisories/2024/RLSA-2024-6783.json | 1 + data/advisories/2024/RLSA-2024-6784.json | 1 + data/advisories/2024/RLSA-2024-6785.json | 1 + data/advisories/2024/RLSA-2024-6837.json | 1 + data/advisories/2024/RLSA-2024-6848.json | 1 + data/advisories/2024/RLSA-2024-6908.json | 1 + data/advisories/2024/RLSA-2024-6913.json | 1 + data/advisories/2024/RLSA-2024-6946.json | 1 + data/advisories/2024/RLSA-2024-6947.json | 1 + data/advisories/2024/RLSA-2024-6961.json | 1 + data/advisories/2024/RLSA-2024-6962.json | 1 + data/advisories/2024/RLSA-2024-6963.json | 1 + data/advisories/2024/RLSA-2024-6964.json | 1 + data/advisories/2024/RLSA-2024-6969.json | 1 + data/advisories/2024/RLSA-2024-6973.json | 1 + data/advisories/2024/RLSA-2024-6975.json | 1 + data/advisories/2024/RLSA-2024-6986.json | 1 + data/advisories/2024/RLSA-2024-6987.json | 1 + data/advisories/2024/RLSA-2024-6989.json | 1 + data/advisories/2024/RLSA-2024-7000.json | 1 + data/advisories/2024/RLSA-2024-7001.json | 1 + data/advisories/2024/RLSA-2024-7135.json | 1 + data/advisories/2024/RLSA-2024-7136.json | 1 + data/advisories/2024/RLSA-2024-7204.json | 1 + data/advisories/2024/RLSA-2024-7260.json | 1 + data/advisories/2024/RLSA-2024-7262.json | 1 + data/advisories/2024/RLSA-2024-7346.json | 1 + data/advisories/2024/RLSA-2024-7349.json | 1 + data/advisories/2024/RLSA-2024-7457.json | 1 + data/advisories/2024/RLSA-2024-7463.json | 1 + data/advisories/2024/RLSA-2024-7481.json | 1 + data/advisories/2024/RLSA-2024-7502.json | 1 + data/advisories/2024/RLSA-2024-7550.json | 1 + data/advisories/2024/RLSA-2024-7699.json | 1 + data/advisories/2024/RLSA-2024-7700.json | 1 + data/advisories/2024/RLSA-2024-7848.json | 1 + data/advisories/2024/RLSA-2024-7851.json | 1 + data/advisories/2024/RLSA-2024-7867.json | 1 + data/advisories/2024/RLSA-2024-7868.json | 1 + data/advisories/2024/RLSA-2024-7869.json | 1 + data/advisories/2024/RLSA-2024-7958.json | 1 + data/advisories/2024/RLSA-2024-7977.json | 1 + data/advisories/2024/RLSA-2024-8024.json | 1 + data/advisories/2024/RLSA-2024-8025.json | 1 + data/advisories/2024/RLSA-2024-8037.json | 1 + data/advisories/2024/RLSA-2024-8038.json | 1 + data/advisories/2024/RLSA-2024-8039.json | 1 + data/advisories/2024/RLSA-2024-8110.json | 1 + data/advisories/2024/RLSA-2024-8111.json | 1 + data/advisories/2024/RLSA-2024-8117.json | 1 + data/advisories/2024/RLSA-2024-8121.json | 1 + data/advisories/2024/RLSA-2024-8124.json | 1 + data/advisories/2024/RLSA-2024-8127.json | 1 + data/advisories/2024/RLSA-2024-8162.json | 1 + data/advisories/2024/RLSA-2024-8180.json | 1 + data/advisories/2024/RLSA-2024-8327.json | 1 + data/advisories/2024/RLSA-2024-8353.json | 1 + data/advisories/2024/RLSA-2024-8359.json | 1 + data/advisories/2024/RLSA-2024-8374.json | 1 + data/advisories/2024/RLSA-2024-8446.json | 1 + data/advisories/2024/RLSA-2024-8447.json | 1 + data/advisories/2024/RLSA-2024-8563.json | 1 + data/advisories/2024/RLSA-2024-8617.json | 1 + data/advisories/2024/RLSA-2024-8678.json | 1 + data/advisories/2024/RLSA-2024-8680.json | 1 + data/advisories/2024/RLSA-2024-8726.json | 1 + data/advisories/2024/RLSA-2024-8729.json | 1 + data/advisories/2024/RLSA-2024-8790.json | 1 + data/advisories/2024/RLSA-2024-8793.json | 1 + data/advisories/2024/RLSA-2024-8798.json | 1 + data/advisories/2024/RLSA-2024-8800.json | 1 + data/advisories/2024/RLSA-2024-8830.json | 1 + data/advisories/2024/RLSA-2024-8831.json | 1 + data/advisories/2024/RLSA-2024-8833.json | 1 + data/advisories/2024/RLSA-2024-8836.json | 1 + data/advisories/2024/RLSA-2024-8838.json | 1 + data/advisories/2024/RLSA-2024-8842.json | 1 + data/advisories/2024/RLSA-2024-8843.json | 1 + data/advisories/2024/RLSA-2024-8846.json | 1 + data/advisories/2024/RLSA-2024-8847.json | 1 + data/advisories/2024/RLSA-2024-8849.json | 1 + data/advisories/2024/RLSA-2024-8856.json | 1 + data/advisories/2024/RLSA-2024-8859.json | 1 + data/advisories/2024/RLSA-2024-8860.json | 1 + data/advisories/2024/RLSA-2024-8870.json | 1 + data/advisories/2024/RLSA-2024-8876.json | 1 + data/advisories/2024/RLSA-2024-8914.json | 1 + data/advisories/2024/RLSA-2024-8922.json | 1 + data/advisories/2024/RLSA-2024-8935.json | 1 + data/advisories/2024/RLSA-2024-9051.json | 1 + data/advisories/2024/RLSA-2024-9056.json | 1 + data/advisories/2024/RLSA-2024-9088.json | 1 + data/advisories/2024/RLSA-2024-9092.json | 1 + data/advisories/2024/RLSA-2024-9093.json | 1 + data/advisories/2024/RLSA-2024-9102.json | 1 + data/advisories/2024/RLSA-2024-9114.json | 1 + data/advisories/2024/RLSA-2024-9122.json | 1 + data/advisories/2024/RLSA-2024-9128.json | 1 + data/advisories/2024/RLSA-2024-9135.json | 1 + data/advisories/2024/RLSA-2024-9136.json | 1 + data/advisories/2024/RLSA-2024-9150.json | 1 + data/advisories/2024/RLSA-2024-9158.json | 1 + data/advisories/2024/RLSA-2024-9167.json | 1 + data/advisories/2024/RLSA-2024-9180.json | 1 + data/advisories/2024/RLSA-2024-9181.json | 1 + data/advisories/2024/RLSA-2024-9184.json | 1 + data/advisories/2024/RLSA-2024-9185.json | 1 + data/advisories/2024/RLSA-2024-9188.json | 1 + data/advisories/2024/RLSA-2024-9190.json | 1 + data/advisories/2024/RLSA-2024-9192.json | 1 + data/advisories/2024/RLSA-2024-9193.json | 1 + data/advisories/2024/RLSA-2024-9194.json | 1 + data/advisories/2024/RLSA-2024-9195.json | 1 + data/advisories/2024/RLSA-2024-9200.json | 1 + data/advisories/2024/RLSA-2024-9243.json | 1 + data/advisories/2024/RLSA-2024-9277.json | 1 + data/advisories/2024/RLSA-2024-9281.json | 1 + data/advisories/2024/RLSA-2024-9302.json | 1 + data/advisories/2024/RLSA-2024-9306.json | 1 + data/advisories/2024/RLSA-2024-9325.json | 1 + data/advisories/2024/RLSA-2024-9333.json | 1 + data/advisories/2024/RLSA-2024-9401.json | 1 + data/advisories/2024/RLSA-2024-9404.json | 1 + data/advisories/2024/RLSA-2024-9405.json | 1 + data/advisories/2024/RLSA-2024-9413.json | 1 + data/advisories/2024/RLSA-2024-9423.json | 1 + data/advisories/2024/RLSA-2024-9424.json | 1 + data/advisories/2024/RLSA-2024-9430.json | 1 + data/advisories/2024/RLSA-2024-9439.json | 1 + data/advisories/2024/RLSA-2024-9449.json | 1 + data/advisories/2024/RLSA-2024-9452.json | 1 + data/advisories/2024/RLSA-2024-9456.json | 1 + data/advisories/2024/RLSA-2024-9457.json | 1 + data/advisories/2024/RLSA-2024-9470.json | 1 + data/advisories/2024/RLSA-2024-9472.json | 1 + data/advisories/2024/RLSA-2024-9473.json | 1 + data/advisories/2024/RLSA-2024-9474.json | 1 + data/advisories/2024/RLSA-2024-9502.json | 1 + data/advisories/2024/RLSA-2024-9540.json | 1 + data/advisories/2024/RLSA-2024-9548.json | 1 + data/advisories/2024/RLSA-2024-9555.json | 1 + data/advisories/2024/RLSA-2024-9559.json | 1 + data/advisories/2024/RLSA-2024-9573.json | 1 + data/advisories/2024/RLSA-2024-9625.json | 1 + data/advisories/2024/RLSA-2024-9636.json | 1 + data/advisories/2024/RLSA-2024-9644.json | 1 + data/advisories/2024/RLSA-2024-9689.json | 1 + data/advisories/2024/RLSA-2024-9827.json | 1 + data/advisories/2024/RXSA-2024-1248.json | 1 + data/advisories/2024/RXSA-2024-1607.json | 1 + data/advisories/2024/RXSA-2024-4211.json | 1 + data/advisories/2024/RXSA-2024-4349.json | 1 + data/advisories/2024/RXSA-2024-4928.json | 1 + data/advisories/2024/RXSA-2024-5101.json | 1 + data/advisories/2024/RXSA-2024-6567.json | 1 + data/advisories/2025/RLSA-2025-0012.json | 1 + data/advisories/2025/RLSA-2025-0065.json | 1 + data/advisories/2025/RLSA-2025-0066.json | 1 + data/advisories/2025/RLSA-2025-0083.json | 1 + data/advisories/2025/RLSA-2025-0144.json | 1 + data/advisories/2025/RLSA-2025-0145.json | 1 + data/advisories/2025/RLSA-2025-0161.json | 1 + data/advisories/2025/RLSA-2025-0168.json | 1 + data/advisories/2025/RLSA-2025-0210.json | 1 + data/advisories/2025/RLSA-2025-0222.json | 1 + data/advisories/2025/RLSA-2025-0281.json | 1 + data/advisories/2025/RLSA-2025-0288.json | 1 + data/advisories/2025/RLSA-2025-0308.json | 1 + data/advisories/2025/RLSA-2025-0312.json | 1 + data/advisories/2025/RLSA-2025-0314.json | 1 + data/advisories/2025/RLSA-2025-0324.json | 1 + data/advisories/2025/RLSA-2025-0325.json | 1 + data/advisories/2025/RLSA-2025-0377.json | 1 + data/advisories/2025/RLSA-2025-0381.json | 1 + data/advisories/2025/RLSA-2025-0382.json | 1 + data/advisories/2025/RLSA-2025-0401.json | 1 + data/advisories/2025/RLSA-2025-0422.json | 1 + data/advisories/2025/RLSA-2025-0426.json | 1 + data/advisories/2025/RLSA-2025-0595.json | 1 + data/advisories/2025/RLSA-2025-0667.json | 1 + data/advisories/2025/RLSA-2025-0673.json | 1 + data/advisories/2025/RLSA-2025-0692.json | 1 + data/advisories/2025/RLSA-2025-0693.json | 1 + data/advisories/2025/RLSA-2025-0711.json | 1 + data/advisories/2025/RLSA-2025-0733.json | 1 + data/advisories/2025/RLSA-2025-0737.json | 1 + data/advisories/2025/RLSA-2025-0739.json | 1 + data/advisories/2025/RLSA-2025-0743.json | 1 + data/advisories/2025/RLSA-2025-0746.json | 1 + data/advisories/2025/RLSA-2025-0791.json | 1 + data/advisories/2025/RLSA-2025-0837.json | 1 + data/advisories/2025/RLSA-2025-0838.json | 1 + data/advisories/2025/RLSA-2025-0845.json | 1 + data/advisories/2025/RLSA-2025-0912.json | 1 + data/advisories/2025/RLSA-2025-0914.json | 1 + data/advisories/2025/RLSA-2025-0917.json | 1 + data/advisories/2025/RLSA-2025-0922.json | 1 + data/advisories/2025/RLSA-2025-0923.json | 1 + data/advisories/2025/RLSA-2025-0925.json | 1 + data/advisories/2025/RLSA-2025-0936.json | 1 + data/advisories/2025/RLSA-2025-10027.json | 1 + data/advisories/2025/RLSA-2025-10110.json | 1 + data/advisories/2025/RLSA-2025-1067.json | 1 + data/advisories/2025/RLSA-2025-1068.json | 1 + data/advisories/2025/RLSA-2025-10698.json | 1 + data/advisories/2025/RLSA-2025-10991.json | 1 + data/advisories/2025/RLSA-2025-11030.json | 1 + data/advisories/2025/RLSA-2025-11035.json | 1 + data/advisories/2025/RLSA-2025-11036.json | 1 + data/advisories/2025/RLSA-2025-11298.json | 1 + data/advisories/2025/RLSA-2025-11327.json | 1 + data/advisories/2025/RLSA-2025-11455.json | 1 + data/advisories/2025/RLSA-2025-11805.json | 1 + data/advisories/2025/RLSA-2025-12010.json | 1 + data/advisories/2025/RLSA-2025-1210.json | 1 + data/advisories/2025/RLSA-2025-1215.json | 1 + data/advisories/2025/RLSA-2025-1230.json | 1 + data/advisories/2025/RLSA-2025-1266.json | 1 + data/advisories/2025/RLSA-2025-1283.json | 1 + data/advisories/2025/RLSA-2025-1292.json | 1 + data/advisories/2025/RLSA-2025-1300.json | 1 + data/advisories/2025/RLSA-2025-1301.json | 1 + data/advisories/2025/RLSA-2025-1306.json | 1 + data/advisories/2025/RLSA-2025-1309.json | 1 + data/advisories/2025/RLSA-2025-1314.json | 1 + data/advisories/2025/RLSA-2025-1329.json | 1 + data/advisories/2025/RLSA-2025-1330.json | 1 + data/advisories/2025/RLSA-2025-1338.json | 1 + data/advisories/2025/RLSA-2025-1346.json | 1 + data/advisories/2025/RLSA-2025-1351.json | 1 + data/advisories/2025/RLSA-2025-1372.json | 1 + data/advisories/2025/RLSA-2025-1443.json | 1 + data/advisories/2025/RLSA-2025-1446.json | 1 + data/advisories/2025/RLSA-2025-1517.json | 1 + data/advisories/2025/RLSA-2025-1582.json | 1 + data/advisories/2025/RLSA-2025-1611.json | 1 + data/advisories/2025/RLSA-2025-1613.json | 1 + data/advisories/2025/RLSA-2025-1670.json | 1 + data/advisories/2025/RLSA-2025-1671.json | 1 + data/advisories/2025/RLSA-2025-1673.json | 1 + data/advisories/2025/RLSA-2025-1675.json | 1 + data/advisories/2025/RLSA-2025-1676.json | 1 + data/advisories/2025/RLSA-2025-1681.json | 1 + data/advisories/2025/RLSA-2025-1736.json | 1 + data/advisories/2025/RLSA-2025-1737.json | 1 + data/advisories/2025/RLSA-2025-1738.json | 1 + data/advisories/2025/RLSA-2025-1739.json | 1 + data/advisories/2025/RLSA-2025-1740.json | 1 + data/advisories/2025/RLSA-2025-1741.json | 1 + data/advisories/2025/RLSA-2025-1742.json | 1 + data/advisories/2025/RLSA-2025-1743.json | 1 + data/advisories/2025/RLSA-2025-1915.json | 1 + data/advisories/2025/RLSA-2025-1917.json | 1 + data/advisories/2025/RLSA-2025-2034.json | 1 + data/advisories/2025/RLSA-2025-2452.json | 1 + data/advisories/2025/RLSA-2025-2473.json | 1 + data/advisories/2025/RLSA-2025-2500.json | 1 + data/advisories/2025/RLSA-2025-2502.json | 1 + data/advisories/2025/RLSA-2025-2600.json | 1 + data/advisories/2025/RLSA-2025-2667.json | 1 + data/advisories/2025/RLSA-2025-2670.json | 1 + data/advisories/2025/RLSA-2025-2686.json | 1 + data/advisories/2025/RLSA-2025-2722.json | 1 + data/advisories/2025/RLSA-2025-2863.json | 1 + data/advisories/2025/RLSA-2025-2867.json | 1 + data/advisories/2025/RLSA-2025-2868.json | 1 + data/advisories/2025/RLSA-2025-2872.json | 1 + data/advisories/2025/RLSA-2025-2900.json | 1 + data/advisories/2025/RLSA-2025-3026.json | 1 + data/advisories/2025/RLSA-2025-3082.json | 1 + data/advisories/2025/RLSA-2025-3210.json | 1 + data/advisories/2025/RLSA-2025-3260.json | 1 + data/advisories/2025/RLSA-2025-3388.json | 1 + data/advisories/2025/RLSA-2025-3421.json | 1 + data/advisories/2025/RLSA-2025-3582.json | 1 + data/advisories/2025/RLSA-2025-3615.json | 1 + data/advisories/2025/RLSA-2025-3683.json | 1 + data/advisories/2025/RLSA-2025-3772.json | 1 + data/advisories/2025/RLSA-2025-3828.json | 1 + data/advisories/2025/RLSA-2025-3845.json | 1 + data/advisories/2025/RLSA-2025-3852.json | 1 + data/advisories/2025/RLSA-2025-3855.json | 1 + data/advisories/2025/RLSA-2025-3893.json | 1 + data/advisories/2025/RLSA-2025-3913.json | 1 + data/advisories/2025/RLSA-2025-3974.json | 1 + data/advisories/2025/RLSA-2025-3997.json | 1 + data/advisories/2025/RLSA-2025-4043.json | 1 + data/advisories/2025/RLSA-2025-4048.json | 1 + data/advisories/2025/RLSA-2025-4049.json | 1 + data/advisories/2025/RLSA-2025-4051.json | 1 + data/advisories/2025/RLSA-2025-4063.json | 1 + data/advisories/2025/RLSA-2025-4170.json | 1 + data/advisories/2025/RLSA-2025-4362.json | 1 + data/advisories/2025/RLSA-2025-4458.json | 1 + data/advisories/2025/RLSA-2025-4459.json | 1 + data/advisories/2025/RLSA-2025-4461.json | 1 + data/advisories/2025/RLSA-2025-4560.json | 1 + data/advisories/2025/RLSA-2025-4597.json | 1 + data/advisories/2025/RLSA-2025-4658.json | 1 + data/advisories/2025/RLSA-2025-4791.json | 1 + data/advisories/2025/RLSA-2025-4797.json | 1 + data/advisories/2025/RLSA-2025-7540.json | 1 + data/advisories/2025/RLSA-2025-7569.json | 1 + data/advisories/2025/RLSA-2025-7571.json | 1 + data/advisories/2025/RLSA-2025-7589.json | 1 + data/advisories/2025/RLSA-2025-7686.json | 1 + data/advisories/2025/RLSA-2025-7894.json | 1 + data/advisories/2025/RLSA-2025-7895.json | 1 + data/advisories/2025/RLSA-2025-8046.json | 1 + data/advisories/2025/RLSA-2025-8056.json | 1 + data/advisories/2025/RLSA-2025-8060.json | 1 + data/advisories/2025/RLSA-2025-8132.json | 1 + data/advisories/2025/RLSA-2025-8201.json | 1 + data/advisories/2025/RLSA-2025-8246.json | 1 + data/advisories/2025/RLSA-2025-8292.json | 1 + data/advisories/2025/RLSA-2025-8308.json | 1 + data/advisories/2025/RLSA-2025-8336.json | 1 + data/advisories/2025/RLSA-2025-8395.json | 1 + data/advisories/2025/RLSA-2025-8411.json | 1 + data/advisories/2025/RLSA-2025-8414.json | 1 + data/advisories/2025/RLSA-2025-8419.json | 1 + data/advisories/2025/RLSA-2025-8421.json | 1 + data/advisories/2025/RLSA-2025-8432.json | 1 + data/advisories/2025/RLSA-2025-8478.json | 1 + data/advisories/2025/RLSA-2025-8506.json | 1 + data/advisories/2025/RLSA-2025-8514.json | 1 + data/advisories/2025/RLSA-2025-8667.json | 1 + data/advisories/2025/RLSA-2025-8676.json | 1 + data/advisories/2025/RLSA-2025-8686.json | 1 + data/advisories/2025/RLSA-2025-8696.json | 1 + data/advisories/2025/RLSA-2025-8743.json | 1 + data/advisories/2025/RLSA-2025-8756.json | 1 + data/advisories/2025/RLSA-2025-8812.json | 1 + data/advisories/2025/RLSA-2025-8815.json | 1 + data/advisories/2025/RLSA-2025-8844.json | 1 + data/advisories/2025/RLSA-2025-8918.json | 1 + data/advisories/2025/RLSA-2025-8958.json | 1 + data/advisories/2025/RLSA-2025-9060.json | 1 + data/advisories/2025/RLSA-2025-9119.json | 1 + data/advisories/2025/RLSA-2025-9142.json | 1 + data/advisories/2025/RLSA-2025-9165.json | 1 + data/advisories/2025/RLSA-2025-9188.json | 1 + data/advisories/2025/RLSA-2025-9305.json | 1 + data/advisories/2025/RLSA-2025-9318.json | 1 + data/advisories/2025/RLSA-2025-9580.json | 1 + data/advisories/2025/RXSA-2025-1262.json | 1 + state/sync.json | 6 +++--- 1865 files changed, 1867 insertions(+), 3 deletions(-) create mode 100644 data/advisories/2019/RLSA-2019-0975.json create mode 100644 data/advisories/2019/RLSA-2019-0981.json create mode 100644 data/advisories/2019/RLSA-2019-0984.json create mode 100644 data/advisories/2019/RLSA-2019-1152.json create mode 100644 data/advisories/2019/RLSA-2019-1529.json create mode 100644 data/advisories/2019/RLSA-2019-1972.json create mode 100644 data/advisories/2019/RLSA-2019-2002.json create mode 100644 data/advisories/2019/RLSA-2019-2511.json create mode 100644 data/advisories/2019/RLSA-2019-2512.json create mode 100644 data/advisories/2019/RLSA-2019-2593.json create mode 100644 data/advisories/2019/RLSA-2019-2720.json create mode 100644 data/advisories/2019/RLSA-2019-2722.json create mode 100644 data/advisories/2019/RLSA-2019-2799.json create mode 100644 data/advisories/2019/RLSA-2019-2925.json create mode 100644 data/advisories/2019/RLSA-2019-3335.json create mode 100644 data/advisories/2019/RLSA-2019-3345.json create mode 100644 data/advisories/2019/RLSA-2019-3403.json create mode 100644 data/advisories/2019/RLSA-2019-3476.json create mode 100644 data/advisories/2019/RLSA-2019-3494.json create mode 100644 data/advisories/2019/RLSA-2019-3553.json create mode 100644 data/advisories/2019/RLSA-2019-3643.json create mode 100644 data/advisories/2019/RLSA-2019-3673.json create mode 100644 data/advisories/2019/RLSA-2019-3703.json create mode 100644 data/advisories/2019/RLSA-2019-3704.json create mode 100644 data/advisories/2019/RLSA-2019-3705.json create mode 100644 data/advisories/2019/RLSA-2019-3706.json create mode 100644 data/advisories/2019/RLSA-2019-3708.json create mode 100644 data/advisories/2019/RLSA-2019-3735.json create mode 100644 data/advisories/2019/RLSA-2019-3736.json create mode 100644 data/advisories/2019/RLSA-2019-4269.json create mode 100644 data/advisories/2019/RLSA-2019-4273.json create mode 100644 data/advisories/2020/RLSA-2020-0279.json create mode 100644 data/advisories/2020/RLSA-2020-0348.json create mode 100644 data/advisories/2020/RLSA-2020-0579.json create mode 100644 data/advisories/2020/RLSA-2020-0598.json create mode 100644 data/advisories/2020/RLSA-2020-0633.json create mode 100644 data/advisories/2020/RLSA-2020-0902.json create mode 100644 data/advisories/2020/RLSA-2020-0903.json create mode 100644 data/advisories/2020/RLSA-2020-1293.json create mode 100644 data/advisories/2020/RLSA-2020-1317.json create mode 100644 data/advisories/2020/RLSA-2020-1358.json create mode 100644 data/advisories/2020/RLSA-2020-1360.json create mode 100644 data/advisories/2020/RLSA-2020-1379.json create mode 100644 data/advisories/2020/RLSA-2020-1577.json create mode 100644 data/advisories/2020/RLSA-2020-1581.json create mode 100644 data/advisories/2020/RLSA-2020-1605.json create mode 100644 data/advisories/2020/RLSA-2020-1616.json create mode 100644 data/advisories/2020/RLSA-2020-1624.json create mode 100644 data/advisories/2020/RLSA-2020-1631.json create mode 100644 data/advisories/2020/RLSA-2020-1636.json create mode 100644 data/advisories/2020/RLSA-2020-1644.json create mode 100644 data/advisories/2020/RLSA-2020-1650.json create mode 100644 data/advisories/2020/RLSA-2020-1653.json create mode 100644 data/advisories/2020/RLSA-2020-1665.json create mode 100644 data/advisories/2020/RLSA-2020-1686.json create mode 100644 data/advisories/2020/RLSA-2020-1708.json create mode 100644 data/advisories/2020/RLSA-2020-1766.json create mode 100644 data/advisories/2020/RLSA-2020-1852.json create mode 100644 data/advisories/2020/RLSA-2020-1926.json create mode 100644 data/advisories/2020/RLSA-2020-1931.json create mode 100644 data/advisories/2020/RLSA-2020-1932.json create mode 100644 data/advisories/2020/RLSA-2020-2041.json create mode 100644 data/advisories/2020/RLSA-2020-2231.json create mode 100644 data/advisories/2020/RLSA-2020-2755.json create mode 100644 data/advisories/2020/RLSA-2020-2774.json create mode 100644 data/advisories/2020/RLSA-2020-2848.json create mode 100644 data/advisories/2020/RLSA-2020-2852.json create mode 100644 data/advisories/2020/RLSA-2020-3032.json create mode 100644 data/advisories/2020/RLSA-2020-3053.json create mode 100644 data/advisories/2020/RLSA-2020-3176.json create mode 100644 data/advisories/2020/RLSA-2020-3185.json create mode 100644 data/advisories/2020/RLSA-2020-3280.json create mode 100644 data/advisories/2020/RLSA-2020-3623.json create mode 100644 data/advisories/2020/RLSA-2020-3654.json create mode 100644 data/advisories/2020/RLSA-2020-3662.json create mode 100644 data/advisories/2020/RLSA-2020-3732.json create mode 100644 data/advisories/2020/RLSA-2020-4059.json create mode 100644 data/advisories/2020/RLSA-2020-4272.json create mode 100644 data/advisories/2020/RLSA-2020-4436.json create mode 100644 data/advisories/2020/RLSA-2020-4451.json create mode 100644 data/advisories/2020/RLSA-2020-4453.json create mode 100644 data/advisories/2020/RLSA-2020-4469.json create mode 100644 data/advisories/2020/RLSA-2020-4482.json create mode 100644 data/advisories/2020/RLSA-2020-4484.json create mode 100644 data/advisories/2020/RLSA-2020-4490.json create mode 100644 data/advisories/2020/RLSA-2020-4497.json create mode 100644 data/advisories/2020/RLSA-2020-4539.json create mode 100644 data/advisories/2020/RLSA-2020-4545.json create mode 100644 data/advisories/2020/RLSA-2020-4628.json create mode 100644 data/advisories/2020/RLSA-2020-4629.json create mode 100644 data/advisories/2020/RLSA-2020-4634.json create mode 100644 data/advisories/2020/RLSA-2020-4638.json create mode 100644 data/advisories/2020/RLSA-2020-4641.json create mode 100644 data/advisories/2020/RLSA-2020-4647.json create mode 100644 data/advisories/2020/RLSA-2020-4649.json create mode 100644 data/advisories/2020/RLSA-2020-4654.json create mode 100644 data/advisories/2020/RLSA-2020-4659.json create mode 100644 data/advisories/2020/RLSA-2020-4670.json create mode 100644 data/advisories/2020/RLSA-2020-4676.json create mode 100644 data/advisories/2020/RLSA-2020-4689.json create mode 100644 data/advisories/2020/RLSA-2020-4690.json create mode 100644 data/advisories/2020/RLSA-2020-4694.json create mode 100644 data/advisories/2020/RLSA-2020-4709.json create mode 100644 data/advisories/2020/RLSA-2020-4712.json create mode 100644 data/advisories/2020/RLSA-2020-4743.json create mode 100644 data/advisories/2020/RLSA-2020-4751.json create mode 100644 data/advisories/2020/RLSA-2020-4756.json create mode 100644 data/advisories/2020/RLSA-2020-4760.json create mode 100644 data/advisories/2020/RLSA-2020-4799.json create mode 100644 data/advisories/2020/RLSA-2020-4807.json create mode 100644 data/advisories/2020/RLSA-2020-4820.json create mode 100644 data/advisories/2020/RLSA-2020-4827.json create mode 100644 data/advisories/2020/RLSA-2020-4847.json create mode 100644 data/advisories/2020/RLSA-2020-4952.json create mode 100644 data/advisories/2020/RLSA-2020-5393.json create mode 100644 data/advisories/2020/RLSA-2020-5499.json create mode 100644 data/advisories/2020/RLSA-2020-5500.json create mode 100644 data/advisories/2020/RLSA-2020-5503.json create mode 100644 data/advisories/2020/RLSA-2020-5620.json create mode 100644 data/advisories/2021/RLSA-2021-0507.json create mode 100644 data/advisories/2021/RLSA-2021-0531.json create mode 100644 data/advisories/2021/RLSA-2021-0538.json create mode 100644 data/advisories/2021/RLSA-2021-0548.json create mode 100644 data/advisories/2021/RLSA-2021-0549.json create mode 100644 data/advisories/2021/RLSA-2021-0551.json create mode 100644 data/advisories/2021/RLSA-2021-0611.json create mode 100644 data/advisories/2021/RLSA-2021-0618.json create mode 100644 data/advisories/2021/RLSA-2021-0705.json create mode 100644 data/advisories/2021/RLSA-2021-0706.json create mode 100644 data/advisories/2021/RLSA-2021-0711.json create mode 100644 data/advisories/2021/RLSA-2021-0734.json create mode 100644 data/advisories/2021/RLSA-2021-0735.json create mode 100644 data/advisories/2021/RLSA-2021-0744.json create mode 100644 data/advisories/2021/RLSA-2021-0966.json create mode 100644 data/advisories/2021/RLSA-2021-1024.json create mode 100644 data/advisories/2021/RLSA-2021-1064.json create mode 100644 data/advisories/2021/RLSA-2021-1206.json create mode 100644 data/advisories/2021/RLSA-2021-1242.json create mode 100644 data/advisories/2021/RLSA-2021-1574.json create mode 100644 data/advisories/2021/RLSA-2021-1581.json create mode 100644 data/advisories/2021/RLSA-2021-1582.json create mode 100644 data/advisories/2021/RLSA-2021-1585.json create mode 100644 data/advisories/2021/RLSA-2021-1586.json create mode 100644 data/advisories/2021/RLSA-2021-1593.json create mode 100644 data/advisories/2021/RLSA-2021-1597.json create mode 100644 data/advisories/2021/RLSA-2021-1598.json create mode 100644 data/advisories/2021/RLSA-2021-1600.json create mode 100644 data/advisories/2021/RLSA-2021-1608.json create mode 100644 data/advisories/2021/RLSA-2021-1609.json create mode 100644 data/advisories/2021/RLSA-2021-1610.json create mode 100644 data/advisories/2021/RLSA-2021-1611.json create mode 100644 data/advisories/2021/RLSA-2021-1620.json create mode 100644 data/advisories/2021/RLSA-2021-1627.json create mode 100644 data/advisories/2021/RLSA-2021-1631.json create mode 100644 data/advisories/2021/RLSA-2021-1647.json create mode 100644 data/advisories/2021/RLSA-2021-1675.json create mode 100644 data/advisories/2021/RLSA-2021-1678.json create mode 100644 data/advisories/2021/RLSA-2021-1686.json create mode 100644 data/advisories/2021/RLSA-2021-1702.json create mode 100644 data/advisories/2021/RLSA-2021-1723.json create mode 100644 data/advisories/2021/RLSA-2021-1734.json create mode 100644 data/advisories/2021/RLSA-2021-1744.json create mode 100644 data/advisories/2021/RLSA-2021-1746.json create mode 100644 data/advisories/2021/RLSA-2021-1751.json create mode 100644 data/advisories/2021/RLSA-2021-1752.json create mode 100644 data/advisories/2021/RLSA-2021-1758.json create mode 100644 data/advisories/2021/RLSA-2021-1761.json create mode 100644 data/advisories/2021/RLSA-2021-1762.json create mode 100644 data/advisories/2021/RLSA-2021-1775.json create mode 100644 data/advisories/2021/RLSA-2021-1783.json create mode 100644 data/advisories/2021/RLSA-2021-1789.json create mode 100644 data/advisories/2021/RLSA-2021-1791.json create mode 100644 data/advisories/2021/RLSA-2021-1796.json create mode 100644 data/advisories/2021/RLSA-2021-1804.json create mode 100644 data/advisories/2021/RLSA-2021-1809.json create mode 100644 data/advisories/2021/RLSA-2021-1811.json create mode 100644 data/advisories/2021/RLSA-2021-1842.json create mode 100644 data/advisories/2021/RLSA-2021-1846.json create mode 100644 data/advisories/2021/RLSA-2021-1849.json create mode 100644 data/advisories/2021/RLSA-2021-1852.json create mode 100644 data/advisories/2021/RLSA-2021-1853.json create mode 100644 data/advisories/2021/RLSA-2021-1859.json create mode 100644 data/advisories/2021/RLSA-2021-1879.json create mode 100644 data/advisories/2021/RLSA-2021-1881.json create mode 100644 data/advisories/2021/RLSA-2021-1898.json create mode 100644 data/advisories/2021/RLSA-2021-1924.json create mode 100644 data/advisories/2021/RLSA-2021-1935.json create mode 100644 data/advisories/2021/RLSA-2021-1979.json create mode 100644 data/advisories/2021/RLSA-2021-1983.json create mode 100644 data/advisories/2021/RLSA-2021-1989.json create mode 100644 data/advisories/2021/RLSA-2021-2034.json create mode 100644 data/advisories/2021/RLSA-2021-2168.json create mode 100644 data/advisories/2021/RLSA-2021-2170.json create mode 100644 data/advisories/2021/RLSA-2021-2233.json create mode 100644 data/advisories/2021/RLSA-2021-2235.json create mode 100644 data/advisories/2021/RLSA-2021-2238.json create mode 100644 data/advisories/2021/RLSA-2021-2259.json create mode 100644 data/advisories/2021/RLSA-2021-2264.json create mode 100644 data/advisories/2021/RLSA-2021-2290.json create mode 100644 data/advisories/2021/RLSA-2021-2291.json create mode 100644 data/advisories/2021/RLSA-2021-2308.json create mode 100644 data/advisories/2021/RLSA-2021-2354.json create mode 100644 data/advisories/2021/RLSA-2021-2359.json create mode 100644 data/advisories/2021/RLSA-2021-2360.json create mode 100644 data/advisories/2021/RLSA-2021-2361.json create mode 100644 data/advisories/2021/RLSA-2021-2363.json create mode 100644 data/advisories/2021/RLSA-2021-2370.json create mode 100644 data/advisories/2021/RLSA-2021-2371.json create mode 100644 data/advisories/2021/RLSA-2021-2372.json create mode 100644 data/advisories/2021/RLSA-2021-2375.json create mode 100644 data/advisories/2021/RLSA-2021-2566.json create mode 100644 data/advisories/2021/RLSA-2021-2569.json create mode 100644 data/advisories/2021/RLSA-2021-2570.json create mode 100644 data/advisories/2021/RLSA-2021-2574.json create mode 100644 data/advisories/2021/RLSA-2021-2575.json create mode 100644 data/advisories/2021/RLSA-2021-2583.json create mode 100644 data/advisories/2021/RLSA-2021-2584.json create mode 100644 data/advisories/2021/RLSA-2021-2587.json create mode 100644 data/advisories/2021/RLSA-2021-2588.json create mode 100644 data/advisories/2021/RLSA-2021-2591.json create mode 100644 data/advisories/2021/RLSA-2021-2595.json create mode 100644 data/advisories/2021/RLSA-2021-2660.json create mode 100644 data/advisories/2021/RLSA-2021-2714.json create mode 100644 data/advisories/2021/RLSA-2021-2717.json create mode 100644 data/advisories/2021/RLSA-2021-2743.json create mode 100644 data/advisories/2021/RLSA-2021-2776.json create mode 100644 data/advisories/2021/RLSA-2021-2781.json create mode 100644 data/advisories/2021/RLSA-2021-2883.json create mode 100644 data/advisories/2021/RLSA-2021-2988.json create mode 100644 data/advisories/2021/RLSA-2021-3020.json create mode 100644 data/advisories/2021/RLSA-2021-3027.json create mode 100644 data/advisories/2021/RLSA-2021-3057.json create mode 100644 data/advisories/2021/RLSA-2021-3058.json create mode 100644 data/advisories/2021/RLSA-2021-3061.json create mode 100644 data/advisories/2021/RLSA-2021-3063.json create mode 100644 data/advisories/2021/RLSA-2021-3066.json create mode 100644 data/advisories/2021/RLSA-2021-3073.json create mode 100644 data/advisories/2021/RLSA-2021-3074.json create mode 100644 data/advisories/2021/RLSA-2021-3075.json create mode 100644 data/advisories/2021/RLSA-2021-3076.json create mode 100644 data/advisories/2021/RLSA-2021-3079.json create mode 100644 data/advisories/2021/RLSA-2021-3081.json create mode 100644 data/advisories/2021/RLSA-2021-3088.json create mode 100644 data/advisories/2021/RLSA-2021-3151.json create mode 100644 data/advisories/2021/RLSA-2021-3152.json create mode 100644 data/advisories/2021/RLSA-2021-3153.json create mode 100644 data/advisories/2021/RLSA-2021-3155.json create mode 100644 data/advisories/2021/RLSA-2021-3157.json create mode 100644 data/advisories/2021/RLSA-2021-3253.json create mode 100644 data/advisories/2021/RLSA-2021-3440.json create mode 100644 data/advisories/2021/RLSA-2021-3447.json create mode 100644 data/advisories/2021/RLSA-2021-3492.json create mode 100644 data/advisories/2021/RLSA-2021-3497.json create mode 100644 data/advisories/2021/RLSA-2021-3499.json create mode 100644 data/advisories/2021/RLSA-2021-3547.json create mode 100644 data/advisories/2021/RLSA-2021-3548.json create mode 100644 data/advisories/2021/RLSA-2021-3572.json create mode 100644 data/advisories/2021/RLSA-2021-3576.json create mode 100644 data/advisories/2021/RLSA-2021-3582.json create mode 100644 data/advisories/2021/RLSA-2021-3585.json create mode 100644 data/advisories/2021/RLSA-2021-3590.json create mode 100644 data/advisories/2021/RLSA-2021-3623.json create mode 100644 data/advisories/2021/RLSA-2021-3666.json create mode 100644 data/advisories/2021/RLSA-2021-3755.json create mode 100644 data/advisories/2021/RLSA-2021-3771.json create mode 100644 data/advisories/2021/RLSA-2021-3816.json create mode 100644 data/advisories/2021/RLSA-2021-3838.json create mode 100644 data/advisories/2021/RLSA-2021-3891.json create mode 100644 data/advisories/2021/RLSA-2021-3893.json create mode 100644 data/advisories/2021/RLSA-2021-3918.json create mode 100644 data/advisories/2021/RLSA-2021-3945.json create mode 100644 data/advisories/2021/RLSA-2021-4042.json create mode 100644 data/advisories/2021/RLSA-2021-4056.json create mode 100644 data/advisories/2021/RLSA-2021-4058.json create mode 100644 data/advisories/2021/RLSA-2021-4059.json create mode 100644 data/advisories/2021/RLSA-2021-4060.json create mode 100644 data/advisories/2021/RLSA-2021-4088.json create mode 100644 data/advisories/2021/RLSA-2021-4097.json create mode 100644 data/advisories/2021/RLSA-2021-4123.json create mode 100644 data/advisories/2021/RLSA-2021-4130.json create mode 100644 data/advisories/2021/RLSA-2021-4135.json create mode 100644 data/advisories/2021/RLSA-2021-4139.json create mode 100644 data/advisories/2021/RLSA-2021-4142.json create mode 100644 data/advisories/2021/RLSA-2021-4149.json create mode 100644 data/advisories/2021/RLSA-2021-4150.json create mode 100644 data/advisories/2021/RLSA-2021-4151.json create mode 100644 data/advisories/2021/RLSA-2021-4153.json create mode 100644 data/advisories/2021/RLSA-2021-4154.json create mode 100644 data/advisories/2021/RLSA-2021-4156.json create mode 100644 data/advisories/2021/RLSA-2021-4158.json create mode 100644 data/advisories/2021/RLSA-2021-4160.json create mode 100644 data/advisories/2021/RLSA-2021-4161.json create mode 100644 data/advisories/2021/RLSA-2021-4162.json create mode 100644 data/advisories/2021/RLSA-2021-4172.json create mode 100644 data/advisories/2021/RLSA-2021-4173.json create mode 100644 data/advisories/2021/RLSA-2021-4179.json create mode 100644 data/advisories/2021/RLSA-2021-4181.json create mode 100644 data/advisories/2021/RLSA-2021-4191.json create mode 100644 data/advisories/2021/RLSA-2021-4198.json create mode 100644 data/advisories/2021/RLSA-2021-4201.json create mode 100644 data/advisories/2021/RLSA-2021-4213.json create mode 100644 data/advisories/2021/RLSA-2021-4221.json create mode 100644 data/advisories/2021/RLSA-2021-4222.json create mode 100644 data/advisories/2021/RLSA-2021-4226.json create mode 100644 data/advisories/2021/RLSA-2021-4231.json create mode 100644 data/advisories/2021/RLSA-2021-4235.json create mode 100644 data/advisories/2021/RLSA-2021-4236.json create mode 100644 data/advisories/2021/RLSA-2021-4241.json create mode 100644 data/advisories/2021/RLSA-2021-4251.json create mode 100644 data/advisories/2021/RLSA-2021-4256.json create mode 100644 data/advisories/2021/RLSA-2021-4257.json create mode 100644 data/advisories/2021/RLSA-2021-4270.json create mode 100644 data/advisories/2021/RLSA-2021-4288.json create mode 100644 data/advisories/2021/RLSA-2021-4292.json create mode 100644 data/advisories/2021/RLSA-2021-4315.json create mode 100644 data/advisories/2021/RLSA-2021-4316.json create mode 100644 data/advisories/2021/RLSA-2021-4319.json create mode 100644 data/advisories/2021/RLSA-2021-4321.json create mode 100644 data/advisories/2021/RLSA-2021-4324.json create mode 100644 data/advisories/2021/RLSA-2021-4325.json create mode 100644 data/advisories/2021/RLSA-2021-4326.json create mode 100644 data/advisories/2021/RLSA-2021-4339.json create mode 100644 data/advisories/2021/RLSA-2021-4358.json create mode 100644 data/advisories/2021/RLSA-2021-4361.json create mode 100644 data/advisories/2021/RLSA-2021-4364.json create mode 100644 data/advisories/2021/RLSA-2021-4368.json create mode 100644 data/advisories/2021/RLSA-2021-4373.json create mode 100644 data/advisories/2021/RLSA-2021-4374.json create mode 100644 data/advisories/2021/RLSA-2021-4381.json create mode 100644 data/advisories/2021/RLSA-2021-4382.json create mode 100644 data/advisories/2021/RLSA-2021-4384.json create mode 100644 data/advisories/2021/RLSA-2021-4385.json create mode 100644 data/advisories/2021/RLSA-2021-4386.json create mode 100644 data/advisories/2021/RLSA-2021-4387.json create mode 100644 data/advisories/2021/RLSA-2021-4393.json create mode 100644 data/advisories/2021/RLSA-2021-4396.json create mode 100644 data/advisories/2021/RLSA-2021-4404.json create mode 100644 data/advisories/2021/RLSA-2021-4408.json create mode 100644 data/advisories/2021/RLSA-2021-4409.json create mode 100644 data/advisories/2021/RLSA-2021-4413.json create mode 100644 data/advisories/2021/RLSA-2021-4424.json create mode 100644 data/advisories/2021/RLSA-2021-4426.json create mode 100644 data/advisories/2021/RLSA-2021-4451.json create mode 100644 data/advisories/2021/RLSA-2021-4464.json create mode 100644 data/advisories/2021/RLSA-2021-4489.json create mode 100644 data/advisories/2021/RLSA-2021-4510.json create mode 100644 data/advisories/2021/RLSA-2021-4511.json create mode 100644 data/advisories/2021/RLSA-2021-4513.json create mode 100644 data/advisories/2021/RLSA-2021-4517.json create mode 100644 data/advisories/2021/RLSA-2021-4537.json create mode 100644 data/advisories/2021/RLSA-2021-4585.json create mode 100644 data/advisories/2021/RLSA-2021-4586.json create mode 100644 data/advisories/2021/RLSA-2021-4587.json create mode 100644 data/advisories/2021/RLSA-2021-4590.json create mode 100644 data/advisories/2021/RLSA-2021-4591.json create mode 100644 data/advisories/2021/RLSA-2021-4592.json create mode 100644 data/advisories/2021/RLSA-2021-4593.json create mode 100644 data/advisories/2021/RLSA-2021-4594.json create mode 100644 data/advisories/2021/RLSA-2021-4595.json create mode 100644 data/advisories/2021/RLSA-2021-4622.json create mode 100644 data/advisories/2021/RLSA-2021-4646.json create mode 100644 data/advisories/2021/RLSA-2021-4647.json create mode 100644 data/advisories/2021/RLSA-2021-4649.json create mode 100644 data/advisories/2021/RLSA-2021-4743.json create mode 100644 data/advisories/2021/RLSA-2021-4826.json create mode 100644 data/advisories/2021/RLSA-2021-4903.json create mode 100644 data/advisories/2021/RLSA-2021-4916.json create mode 100644 data/advisories/2021/RLSA-2021-5013.json create mode 100644 data/advisories/2021/RLSA-2021-5045.json create mode 100644 data/advisories/2021/RLSA-2021-5082.json create mode 100644 data/advisories/2021/RLSA-2021-5142.json create mode 100644 data/advisories/2021/RLSA-2021-5160.json create mode 100644 data/advisories/2021/RLSA-2021-5171.json create mode 100644 data/advisories/2021/RLSA-2021-5226.json create mode 100644 data/advisories/2021/RLSA-2021-5227.json create mode 100644 data/advisories/2021/RLSA-2021-5235.json create mode 100644 data/advisories/2021/RLSA-2021-5236.json create mode 100644 data/advisories/2021/RLSA-2021-5238.json create mode 100644 data/advisories/2021/RLSA-2021-5241.json create mode 100644 data/advisories/2022/RLSA-2022-0001.json create mode 100644 data/advisories/2022/RLSA-2022-0129.json create mode 100644 data/advisories/2022/RLSA-2022-0130.json create mode 100644 data/advisories/2022/RLSA-2022-0161.json create mode 100644 data/advisories/2022/RLSA-2022-0176.json create mode 100644 data/advisories/2022/RLSA-2022-0177.json create mode 100644 data/advisories/2022/RLSA-2022-0185.json create mode 100644 data/advisories/2022/RLSA-2022-0188.json create mode 100644 data/advisories/2022/RLSA-2022-0199.json create mode 100644 data/advisories/2022/RLSA-2022-0258.json create mode 100644 data/advisories/2022/RLSA-2022-0267.json create mode 100644 data/advisories/2022/RLSA-2022-0290.json create mode 100644 data/advisories/2022/RLSA-2022-0307.json create mode 100644 data/advisories/2022/RLSA-2022-0323.json create mode 100644 data/advisories/2022/RLSA-2022-0332.json create mode 100644 data/advisories/2022/RLSA-2022-0350.json create mode 100644 data/advisories/2022/RLSA-2022-0366.json create mode 100644 data/advisories/2022/RLSA-2022-0368.json create mode 100644 data/advisories/2022/RLSA-2022-0370.json create mode 100644 data/advisories/2022/RLSA-2022-0418.json create mode 100644 data/advisories/2022/RLSA-2022-0441.json create mode 100644 data/advisories/2022/RLSA-2022-0495.json create mode 100644 data/advisories/2022/RLSA-2022-0496.json create mode 100644 data/advisories/2022/RLSA-2022-0510.json create mode 100644 data/advisories/2022/RLSA-2022-0535.json create mode 100644 data/advisories/2022/RLSA-2022-0543.json create mode 100644 data/advisories/2022/RLSA-2022-0545.json create mode 100644 data/advisories/2022/RLSA-2022-0643.json create mode 100644 data/advisories/2022/RLSA-2022-0658.json create mode 100644 data/advisories/2022/RLSA-2022-0672.json create mode 100644 data/advisories/2022/RLSA-2022-0818.json create mode 100644 data/advisories/2022/RLSA-2022-0819.json create mode 100644 data/advisories/2022/RLSA-2022-0825.json create mode 100644 data/advisories/2022/RLSA-2022-0826.json create mode 100644 data/advisories/2022/RLSA-2022-0827.json create mode 100644 data/advisories/2022/RLSA-2022-0830.json create mode 100644 data/advisories/2022/RLSA-2022-0845.json create mode 100644 data/advisories/2022/RLSA-2022-0886.json create mode 100644 data/advisories/2022/RLSA-2022-0889.json create mode 100644 data/advisories/2022/RLSA-2022-0891.json create mode 100644 data/advisories/2022/RLSA-2022-0892.json create mode 100644 data/advisories/2022/RLSA-2022-0894.json create mode 100644 data/advisories/2022/RLSA-2022-0896.json create mode 100644 data/advisories/2022/RLSA-2022-0899.json create mode 100644 data/advisories/2022/RLSA-2022-0951.json create mode 100644 data/advisories/2022/RLSA-2022-1049.json create mode 100644 data/advisories/2022/RLSA-2022-1065.json create mode 100644 data/advisories/2022/RLSA-2022-1287.json create mode 100644 data/advisories/2022/RLSA-2022-1301.json create mode 100644 data/advisories/2022/RLSA-2022-1442.json create mode 100644 data/advisories/2022/RLSA-2022-1445.json create mode 100644 data/advisories/2022/RLSA-2022-1491.json create mode 100644 data/advisories/2022/RLSA-2022-1537.json create mode 100644 data/advisories/2022/RLSA-2022-1546.json create mode 100644 data/advisories/2022/RLSA-2022-1550.json create mode 100644 data/advisories/2022/RLSA-2022-1552.json create mode 100644 data/advisories/2022/RLSA-2022-1555.json create mode 100644 data/advisories/2022/RLSA-2022-1556.json create mode 100644 data/advisories/2022/RLSA-2022-1557.json create mode 100644 data/advisories/2022/RLSA-2022-1565.json create mode 100644 data/advisories/2022/RLSA-2022-1566.json create mode 100644 data/advisories/2022/RLSA-2022-1642.json create mode 100644 data/advisories/2022/RLSA-2022-1643.json create mode 100644 data/advisories/2022/RLSA-2022-1705.json create mode 100644 data/advisories/2022/RLSA-2022-1730.json create mode 100644 data/advisories/2022/RLSA-2022-1759.json create mode 100644 data/advisories/2022/RLSA-2022-1762.json create mode 100644 data/advisories/2022/RLSA-2022-1763.json create mode 100644 data/advisories/2022/RLSA-2022-1764.json create mode 100644 data/advisories/2022/RLSA-2022-1766.json create mode 100644 data/advisories/2022/RLSA-2022-1777.json create mode 100644 data/advisories/2022/RLSA-2022-1781.json create mode 100644 data/advisories/2022/RLSA-2022-1792.json create mode 100644 data/advisories/2022/RLSA-2022-1793.json create mode 100644 data/advisories/2022/RLSA-2022-1796.json create mode 100644 data/advisories/2022/RLSA-2022-1797.json create mode 100644 data/advisories/2022/RLSA-2022-1801.json create mode 100644 data/advisories/2022/RLSA-2022-1808.json create mode 100644 data/advisories/2022/RLSA-2022-1810.json create mode 100644 data/advisories/2022/RLSA-2022-1814.json create mode 100644 data/advisories/2022/RLSA-2022-1819.json create mode 100644 data/advisories/2022/RLSA-2022-1820.json create mode 100644 data/advisories/2022/RLSA-2022-1821.json create mode 100644 data/advisories/2022/RLSA-2022-1823.json create mode 100644 data/advisories/2022/RLSA-2022-1830.json create mode 100644 data/advisories/2022/RLSA-2022-1842.json create mode 100644 data/advisories/2022/RLSA-2022-1851.json create mode 100644 data/advisories/2022/RLSA-2022-1860.json create mode 100644 data/advisories/2022/RLSA-2022-1861.json create mode 100644 data/advisories/2022/RLSA-2022-1891.json create mode 100644 data/advisories/2022/RLSA-2022-1894.json create mode 100644 data/advisories/2022/RLSA-2022-1898.json create mode 100644 data/advisories/2022/RLSA-2022-1915.json create mode 100644 data/advisories/2022/RLSA-2022-1917.json create mode 100644 data/advisories/2022/RLSA-2022-1930.json create mode 100644 data/advisories/2022/RLSA-2022-1932.json create mode 100644 data/advisories/2022/RLSA-2022-1934.json create mode 100644 data/advisories/2022/RLSA-2022-1935.json create mode 100644 data/advisories/2022/RLSA-2022-1939.json create mode 100644 data/advisories/2022/RLSA-2022-1950.json create mode 100644 data/advisories/2022/RLSA-2022-1961.json create mode 100644 data/advisories/2022/RLSA-2022-1964.json create mode 100644 data/advisories/2022/RLSA-2022-1968.json create mode 100644 data/advisories/2022/RLSA-2022-1975.json create mode 100644 data/advisories/2022/RLSA-2022-1988.json create mode 100644 data/advisories/2022/RLSA-2022-1991.json create mode 100644 data/advisories/2022/RLSA-2022-2008.json create mode 100644 data/advisories/2022/RLSA-2022-2013.json create mode 100644 data/advisories/2022/RLSA-2022-2031.json create mode 100644 data/advisories/2022/RLSA-2022-2043.json create mode 100644 data/advisories/2022/RLSA-2022-2074.json create mode 100644 data/advisories/2022/RLSA-2022-2081.json create mode 100644 data/advisories/2022/RLSA-2022-2092.json create mode 100644 data/advisories/2022/RLSA-2022-2110.json create mode 100644 data/advisories/2022/RLSA-2022-2120.json create mode 100644 data/advisories/2022/RLSA-2022-2143.json create mode 100644 data/advisories/2022/RLSA-2022-2199.json create mode 100644 data/advisories/2022/RLSA-2022-2200.json create mode 100644 data/advisories/2022/RLSA-2022-2201.json create mode 100644 data/advisories/2022/RLSA-2022-2202.json create mode 100644 data/advisories/2022/RLSA-2022-2234.json create mode 100644 data/advisories/2022/RLSA-2022-4582.json create mode 100644 data/advisories/2022/RLSA-2022-4591.json create mode 100644 data/advisories/2022/RLSA-2022-4661.json create mode 100644 data/advisories/2022/RLSA-2022-4769.json create mode 100644 data/advisories/2022/RLSA-2022-4771.json create mode 100644 data/advisories/2022/RLSA-2022-4776.json create mode 100644 data/advisories/2022/RLSA-2022-4795.json create mode 100644 data/advisories/2022/RLSA-2022-4796.json create mode 100644 data/advisories/2022/RLSA-2022-4797.json create mode 100644 data/advisories/2022/RLSA-2022-4798.json create mode 100644 data/advisories/2022/RLSA-2022-4799.json create mode 100644 data/advisories/2022/RLSA-2022-4805.json create mode 100644 data/advisories/2022/RLSA-2022-4807.json create mode 100644 data/advisories/2022/RLSA-2022-4855.json create mode 100644 data/advisories/2022/RLSA-2022-4872.json create mode 100644 data/advisories/2022/RLSA-2022-4887.json create mode 100644 data/advisories/2022/RLSA-2022-4899.json create mode 100644 data/advisories/2022/RLSA-2022-4940.json create mode 100644 data/advisories/2022/RLSA-2022-4941.json create mode 100644 data/advisories/2022/RLSA-2022-4990.json create mode 100644 data/advisories/2022/RLSA-2022-4991.json create mode 100644 data/advisories/2022/RLSA-2022-5046.json create mode 100644 data/advisories/2022/RLSA-2022-5056.json create mode 100644 data/advisories/2022/RLSA-2022-5061.json create mode 100644 data/advisories/2022/RLSA-2022-5095.json create mode 100644 data/advisories/2022/RLSA-2022-5099.json create mode 100644 data/advisories/2022/RLSA-2022-5163.json create mode 100644 data/advisories/2022/RLSA-2022-5250.json create mode 100644 data/advisories/2022/RLSA-2022-5251.json create mode 100644 data/advisories/2022/RLSA-2022-5252.json create mode 100644 data/advisories/2022/RLSA-2022-5257.json create mode 100644 data/advisories/2022/RLSA-2022-5311.json create mode 100644 data/advisories/2022/RLSA-2022-5313.json create mode 100644 data/advisories/2022/RLSA-2022-5314.json create mode 100644 data/advisories/2022/RLSA-2022-5316.json create mode 100644 data/advisories/2022/RLSA-2022-5317.json create mode 100644 data/advisories/2022/RLSA-2022-5319.json create mode 100644 data/advisories/2022/RLSA-2022-5326.json create mode 100644 data/advisories/2022/RLSA-2022-5331.json create mode 100644 data/advisories/2022/RLSA-2022-5337.json create mode 100644 data/advisories/2022/RLSA-2022-5338.json create mode 100644 data/advisories/2022/RLSA-2022-5344.json create mode 100644 data/advisories/2022/RLSA-2022-5467.json create mode 100644 data/advisories/2022/RLSA-2022-5468.json create mode 100644 data/advisories/2022/RLSA-2022-5469.json create mode 100644 data/advisories/2022/RLSA-2022-5470.json create mode 100644 data/advisories/2022/RLSA-2022-5498.json create mode 100644 data/advisories/2022/RLSA-2022-5526.json create mode 100644 data/advisories/2022/RLSA-2022-5564.json create mode 100644 data/advisories/2022/RLSA-2022-5565.json create mode 100644 data/advisories/2022/RLSA-2022-5683.json create mode 100644 data/advisories/2022/RLSA-2022-5696.json create mode 100644 data/advisories/2022/RLSA-2022-5716.json create mode 100644 data/advisories/2022/RLSA-2022-5717.json create mode 100644 data/advisories/2022/RLSA-2022-5726.json create mode 100644 data/advisories/2022/RLSA-2022-5774.json create mode 100644 data/advisories/2022/RLSA-2022-5775.json create mode 100644 data/advisories/2022/RLSA-2022-5777.json create mode 100644 data/advisories/2022/RLSA-2022-5779.json create mode 100644 data/advisories/2022/RLSA-2022-5799.json create mode 100644 data/advisories/2022/RLSA-2022-5809.json create mode 100644 data/advisories/2022/RLSA-2022-5813.json create mode 100644 data/advisories/2022/RLSA-2022-5818.json create mode 100644 data/advisories/2022/RLSA-2022-5819.json create mode 100644 data/advisories/2022/RLSA-2022-5821.json create mode 100644 data/advisories/2022/RLSA-2022-5823.json create mode 100644 data/advisories/2022/RLSA-2022-5826.json create mode 100644 data/advisories/2022/RLSA-2022-5834.json create mode 100644 data/advisories/2022/RLSA-2022-5904.json create mode 100644 data/advisories/2022/RLSA-2022-5942.json create mode 100644 data/advisories/2022/RLSA-2022-5948.json create mode 100644 data/advisories/2022/RLSA-2022-6057.json create mode 100644 data/advisories/2022/RLSA-2022-6058.json create mode 100644 data/advisories/2022/RLSA-2022-6157.json create mode 100644 data/advisories/2022/RLSA-2022-6158.json create mode 100644 data/advisories/2022/RLSA-2022-6159.json create mode 100644 data/advisories/2022/RLSA-2022-6164.json create mode 100644 data/advisories/2022/RLSA-2022-6175.json create mode 100644 data/advisories/2022/RLSA-2022-6180.json create mode 100644 data/advisories/2022/RLSA-2022-6181.json create mode 100644 data/advisories/2022/RLSA-2022-6206.json create mode 100644 data/advisories/2022/RLSA-2022-6313.json create mode 100644 data/advisories/2022/RLSA-2022-6314.json create mode 100644 data/advisories/2022/RLSA-2022-6357.json create mode 100644 data/advisories/2022/RLSA-2022-6358.json create mode 100644 data/advisories/2022/RLSA-2022-6437.json create mode 100644 data/advisories/2022/RLSA-2022-6439.json create mode 100644 data/advisories/2022/RLSA-2022-6443.json create mode 100644 data/advisories/2022/RLSA-2022-6447.json create mode 100644 data/advisories/2022/RLSA-2022-6448.json create mode 100644 data/advisories/2022/RLSA-2022-6449.json create mode 100644 data/advisories/2022/RLSA-2022-6450.json create mode 100644 data/advisories/2022/RLSA-2022-6460.json create mode 100644 data/advisories/2022/RLSA-2022-6463.json create mode 100644 data/advisories/2022/RLSA-2022-6523.json create mode 100644 data/advisories/2022/RLSA-2022-6539.json create mode 100644 data/advisories/2022/RLSA-2022-6540.json create mode 100644 data/advisories/2022/RLSA-2022-6542.json create mode 100644 data/advisories/2022/RLSA-2022-6585.json create mode 100644 data/advisories/2022/RLSA-2022-6590.json create mode 100644 data/advisories/2022/RLSA-2022-6595.json create mode 100644 data/advisories/2022/RLSA-2022-6602.json create mode 100644 data/advisories/2022/RLSA-2022-6608.json create mode 100644 data/advisories/2022/RLSA-2022-6634.json create mode 100644 data/advisories/2022/RLSA-2022-6702.json create mode 100644 data/advisories/2022/RLSA-2022-6708.json create mode 100644 data/advisories/2022/RLSA-2022-6763.json create mode 100644 data/advisories/2022/RLSA-2022-6775.json create mode 100644 data/advisories/2022/RLSA-2022-6778.json create mode 100644 data/advisories/2022/RLSA-2022-6781.json create mode 100644 data/advisories/2022/RLSA-2022-6820.json create mode 100644 data/advisories/2022/RLSA-2022-6838.json create mode 100644 data/advisories/2022/RLSA-2022-6839.json create mode 100644 data/advisories/2022/RLSA-2022-6854.json create mode 100644 data/advisories/2022/RLSA-2022-6878.json create mode 100644 data/advisories/2022/RLSA-2022-6911.json create mode 100644 data/advisories/2022/RLSA-2022-6912.json create mode 100644 data/advisories/2022/RLSA-2022-6913.json create mode 100644 data/advisories/2022/RLSA-2022-6963.json create mode 100644 data/advisories/2022/RLSA-2022-6964.json create mode 100644 data/advisories/2022/RLSA-2022-6999.json create mode 100644 data/advisories/2022/RLSA-2022-7000.json create mode 100644 data/advisories/2022/RLSA-2022-7006.json create mode 100644 data/advisories/2022/RLSA-2022-7007.json create mode 100644 data/advisories/2022/RLSA-2022-7012.json create mode 100644 data/advisories/2022/RLSA-2022-7013.json create mode 100644 data/advisories/2022/RLSA-2022-7023.json create mode 100644 data/advisories/2022/RLSA-2022-7024.json create mode 100644 data/advisories/2022/RLSA-2022-7070.json create mode 100644 data/advisories/2022/RLSA-2022-7089.json create mode 100644 data/advisories/2022/RLSA-2022-7090.json create mode 100644 data/advisories/2022/RLSA-2022-7105.json create mode 100644 data/advisories/2022/RLSA-2022-7106.json create mode 100644 data/advisories/2022/RLSA-2022-7108.json create mode 100644 data/advisories/2022/RLSA-2022-7110.json create mode 100644 data/advisories/2022/RLSA-2022-7111.json create mode 100644 data/advisories/2022/RLSA-2022-7119.json create mode 100644 data/advisories/2022/RLSA-2022-7128.json create mode 100644 data/advisories/2022/RLSA-2022-7129.json create mode 100644 data/advisories/2022/RLSA-2022-7133.json create mode 100644 data/advisories/2022/RLSA-2022-7134.json create mode 100644 data/advisories/2022/RLSA-2022-7185.json create mode 100644 data/advisories/2022/RLSA-2022-7190.json create mode 100644 data/advisories/2022/RLSA-2022-7192.json create mode 100644 data/advisories/2022/RLSA-2022-7288.json create mode 100644 data/advisories/2022/RLSA-2022-7314.json create mode 100644 data/advisories/2022/RLSA-2022-7318.json create mode 100644 data/advisories/2022/RLSA-2022-7319.json create mode 100644 data/advisories/2022/RLSA-2022-7323.json create mode 100644 data/advisories/2022/RLSA-2022-7326.json create mode 100644 data/advisories/2022/RLSA-2022-7329.json create mode 100644 data/advisories/2022/RLSA-2022-7444.json create mode 100644 data/advisories/2022/RLSA-2022-7447.json create mode 100644 data/advisories/2022/RLSA-2022-7457.json create mode 100644 data/advisories/2022/RLSA-2022-7458.json create mode 100644 data/advisories/2022/RLSA-2022-7461.json create mode 100644 data/advisories/2022/RLSA-2022-7464.json create mode 100644 data/advisories/2022/RLSA-2022-7469.json create mode 100644 data/advisories/2022/RLSA-2022-7470.json create mode 100644 data/advisories/2022/RLSA-2022-7472.json create mode 100644 data/advisories/2022/RLSA-2022-7482.json create mode 100644 data/advisories/2022/RLSA-2022-7514.json create mode 100644 data/advisories/2022/RLSA-2022-7519.json create mode 100644 data/advisories/2022/RLSA-2022-7524.json create mode 100644 data/advisories/2022/RLSA-2022-7529.json create mode 100644 data/advisories/2022/RLSA-2022-7541.json create mode 100644 data/advisories/2022/RLSA-2022-7548.json create mode 100644 data/advisories/2022/RLSA-2022-7558.json create mode 100644 data/advisories/2022/RLSA-2022-7581.json create mode 100644 data/advisories/2022/RLSA-2022-7583.json create mode 100644 data/advisories/2022/RLSA-2022-7585.json create mode 100644 data/advisories/2022/RLSA-2022-7592.json create mode 100644 data/advisories/2022/RLSA-2022-7593.json create mode 100644 data/advisories/2022/RLSA-2022-7594.json create mode 100644 data/advisories/2022/RLSA-2022-7618.json create mode 100644 data/advisories/2022/RLSA-2022-7622.json create mode 100644 data/advisories/2022/RLSA-2022-7623.json create mode 100644 data/advisories/2022/RLSA-2022-7624.json create mode 100644 data/advisories/2022/RLSA-2022-7628.json create mode 100644 data/advisories/2022/RLSA-2022-7633.json create mode 100644 data/advisories/2022/RLSA-2022-7639.json create mode 100644 data/advisories/2022/RLSA-2022-7640.json create mode 100644 data/advisories/2022/RLSA-2022-7643.json create mode 100644 data/advisories/2022/RLSA-2022-7645.json create mode 100644 data/advisories/2022/RLSA-2022-7647.json create mode 100644 data/advisories/2022/RLSA-2022-7648.json create mode 100644 data/advisories/2022/RLSA-2022-7683.json create mode 100644 data/advisories/2022/RLSA-2022-7692.json create mode 100644 data/advisories/2022/RLSA-2022-7700.json create mode 100644 data/advisories/2022/RLSA-2022-7704.json create mode 100644 data/advisories/2022/RLSA-2022-7715.json create mode 100644 data/advisories/2022/RLSA-2022-7720.json create mode 100644 data/advisories/2022/RLSA-2022-7730.json create mode 100644 data/advisories/2022/RLSA-2022-7745.json create mode 100644 data/advisories/2022/RLSA-2022-7790.json create mode 100644 data/advisories/2022/RLSA-2022-7793.json create mode 100644 data/advisories/2022/RLSA-2022-7821.json create mode 100644 data/advisories/2022/RLSA-2022-7822.json create mode 100644 data/advisories/2022/RLSA-2022-7830.json create mode 100644 data/advisories/2022/RLSA-2022-7928.json create mode 100644 data/advisories/2022/RLSA-2022-7935.json create mode 100644 data/advisories/2022/RLSA-2022-7950.json create mode 100644 data/advisories/2022/RLSA-2022-7958.json create mode 100644 data/advisories/2022/RLSA-2022-7959.json create mode 100644 data/advisories/2022/RLSA-2022-7967.json create mode 100644 data/advisories/2022/RLSA-2022-7968.json create mode 100644 data/advisories/2022/RLSA-2022-7970.json create mode 100644 data/advisories/2022/RLSA-2022-7978.json create mode 100644 data/advisories/2022/RLSA-2022-7979.json create mode 100644 data/advisories/2022/RLSA-2022-8003.json create mode 100644 data/advisories/2022/RLSA-2022-8011.json create mode 100644 data/advisories/2022/RLSA-2022-8022.json create mode 100644 data/advisories/2022/RLSA-2022-8054.json create mode 100644 data/advisories/2022/RLSA-2022-8057.json create mode 100644 data/advisories/2022/RLSA-2022-8062.json create mode 100644 data/advisories/2022/RLSA-2022-8067.json create mode 100644 data/advisories/2022/RLSA-2022-8068.json create mode 100644 data/advisories/2022/RLSA-2022-8070.json create mode 100644 data/advisories/2022/RLSA-2022-8078.json create mode 100644 data/advisories/2022/RLSA-2022-8090.json create mode 100644 data/advisories/2022/RLSA-2022-8096.json create mode 100644 data/advisories/2022/RLSA-2022-8098.json create mode 100644 data/advisories/2022/RLSA-2022-8112.json create mode 100644 data/advisories/2022/RLSA-2022-8126.json create mode 100644 data/advisories/2022/RLSA-2022-8139.json create mode 100644 data/advisories/2022/RLSA-2022-8151.json create mode 100644 data/advisories/2022/RLSA-2022-8162.json create mode 100644 data/advisories/2022/RLSA-2022-8197.json create mode 100644 data/advisories/2022/RLSA-2022-8207.json create mode 100644 data/advisories/2022/RLSA-2022-8208.json create mode 100644 data/advisories/2022/RLSA-2022-8219.json create mode 100644 data/advisories/2022/RLSA-2022-8221.json create mode 100644 data/advisories/2022/RLSA-2022-8222.json create mode 100644 data/advisories/2022/RLSA-2022-8226.json create mode 100644 data/advisories/2022/RLSA-2022-8250.json create mode 100644 data/advisories/2022/RLSA-2022-8252.json create mode 100644 data/advisories/2022/RLSA-2022-8263.json create mode 100644 data/advisories/2022/RLSA-2022-8291.json create mode 100644 data/advisories/2022/RLSA-2022-8299.json create mode 100644 data/advisories/2022/RLSA-2022-8317.json create mode 100644 data/advisories/2022/RLSA-2022-8318.json create mode 100644 data/advisories/2022/RLSA-2022-8340.json create mode 100644 data/advisories/2022/RLSA-2022-8353.json create mode 100644 data/advisories/2022/RLSA-2022-8361.json create mode 100644 data/advisories/2022/RLSA-2022-8384.json create mode 100644 data/advisories/2022/RLSA-2022-8385.json create mode 100644 data/advisories/2022/RLSA-2022-8393.json create mode 100644 data/advisories/2022/RLSA-2022-8400.json create mode 100644 data/advisories/2022/RLSA-2022-8444.json create mode 100644 data/advisories/2022/RLSA-2022-8453.json create mode 100644 data/advisories/2022/RLSA-2022-8492.json create mode 100644 data/advisories/2022/RLSA-2022-8493.json create mode 100644 data/advisories/2022/RLSA-2022-8506.json create mode 100644 data/advisories/2022/RLSA-2022-8547.json create mode 100644 data/advisories/2022/RLSA-2022-8554.json create mode 100644 data/advisories/2022/RLSA-2022-8637.json create mode 100644 data/advisories/2022/RLSA-2022-8638.json create mode 100644 data/advisories/2022/RLSA-2022-8643.json create mode 100644 data/advisories/2022/RLSA-2022-8649.json create mode 100644 data/advisories/2022/RLSA-2022-8832.json create mode 100644 data/advisories/2022/RLSA-2022-8833.json create mode 100644 data/advisories/2022/RLSA-2022-9058.json create mode 100644 data/advisories/2022/RLSA-2022-9067.json create mode 100644 data/advisories/2022/RLSA-2022-9073.json create mode 100644 data/advisories/2023/RLSA-2023-0005.json create mode 100644 data/advisories/2023/RLSA-2023-0016.json create mode 100644 data/advisories/2023/RLSA-2023-0021.json create mode 100644 data/advisories/2023/RLSA-2023-0049.json create mode 100644 data/advisories/2023/RLSA-2023-0050.json create mode 100644 data/advisories/2023/RLSA-2023-0077.json create mode 100644 data/advisories/2023/RLSA-2023-0079.json create mode 100644 data/advisories/2023/RLSA-2023-0087.json create mode 100644 data/advisories/2023/RLSA-2023-0089.json create mode 100644 data/advisories/2023/RLSA-2023-0095.json create mode 100644 data/advisories/2023/RLSA-2023-0096.json create mode 100644 data/advisories/2023/RLSA-2023-0099.json create mode 100644 data/advisories/2023/RLSA-2023-0101.json create mode 100644 data/advisories/2023/RLSA-2023-0103.json create mode 100644 data/advisories/2023/RLSA-2023-0110.json create mode 100644 data/advisories/2023/RLSA-2023-0113.json create mode 100644 data/advisories/2023/RLSA-2023-0114.json create mode 100644 data/advisories/2023/RLSA-2023-0116.json create mode 100644 data/advisories/2023/RLSA-2023-0171.json create mode 100644 data/advisories/2023/RLSA-2023-0173.json create mode 100644 data/advisories/2023/RLSA-2023-0192.json create mode 100644 data/advisories/2023/RLSA-2023-0194.json create mode 100644 data/advisories/2023/RLSA-2023-0200.json create mode 100644 data/advisories/2023/RLSA-2023-0202.json create mode 100644 data/advisories/2023/RLSA-2023-0208.json create mode 100644 data/advisories/2023/RLSA-2023-0210.json create mode 100644 data/advisories/2023/RLSA-2023-0282.json create mode 100644 data/advisories/2023/RLSA-2023-0284.json create mode 100644 data/advisories/2023/RLSA-2023-0285.json create mode 100644 data/advisories/2023/RLSA-2023-0288.json create mode 100644 data/advisories/2023/RLSA-2023-0300.json create mode 100644 data/advisories/2023/RLSA-2023-0302.json create mode 100644 data/advisories/2023/RLSA-2023-0303.json create mode 100644 data/advisories/2023/RLSA-2023-0304.json create mode 100644 data/advisories/2023/RLSA-2023-0318.json create mode 100644 data/advisories/2023/RLSA-2023-0321.json create mode 100644 data/advisories/2023/RLSA-2023-0328.json create mode 100644 data/advisories/2023/RLSA-2023-0333.json create mode 100644 data/advisories/2023/RLSA-2023-0334.json create mode 100644 data/advisories/2023/RLSA-2023-0335.json create mode 100644 data/advisories/2023/RLSA-2023-0336.json create mode 100644 data/advisories/2023/RLSA-2023-0337.json create mode 100644 data/advisories/2023/RLSA-2023-0338.json create mode 100644 data/advisories/2023/RLSA-2023-0339.json create mode 100644 data/advisories/2023/RLSA-2023-0340.json create mode 100644 data/advisories/2023/RLSA-2023-0343.json create mode 100644 data/advisories/2023/RLSA-2023-0379.json create mode 100644 data/advisories/2023/RLSA-2023-0383.json create mode 100644 data/advisories/2023/RLSA-2023-0446.json create mode 100644 data/advisories/2023/RLSA-2023-0463.json create mode 100644 data/advisories/2023/RLSA-2023-0476.json create mode 100644 data/advisories/2023/RLSA-2023-0606.json create mode 100644 data/advisories/2023/RLSA-2023-0608.json create mode 100644 data/advisories/2023/RLSA-2023-0610.json create mode 100644 data/advisories/2023/RLSA-2023-0611.json create mode 100644 data/advisories/2023/RLSA-2023-0622.json create mode 100644 data/advisories/2023/RLSA-2023-0625.json create mode 100644 data/advisories/2023/RLSA-2023-0626.json create mode 100644 data/advisories/2023/RLSA-2023-0662.json create mode 100644 data/advisories/2023/RLSA-2023-0752.json create mode 100644 data/advisories/2023/RLSA-2023-0808.json create mode 100644 data/advisories/2023/RLSA-2023-0810.json create mode 100644 data/advisories/2023/RLSA-2023-0821.json create mode 100644 data/advisories/2023/RLSA-2023-0824.json create mode 100644 data/advisories/2023/RLSA-2023-0832.json create mode 100644 data/advisories/2023/RLSA-2023-0833.json create mode 100644 data/advisories/2023/RLSA-2023-0835.json create mode 100644 data/advisories/2023/RLSA-2023-0837.json create mode 100644 data/advisories/2023/RLSA-2023-0838.json create mode 100644 data/advisories/2023/RLSA-2023-0842.json create mode 100644 data/advisories/2023/RLSA-2023-0848.json create mode 100644 data/advisories/2023/RLSA-2023-0852.json create mode 100644 data/advisories/2023/RLSA-2023-0854.json create mode 100644 data/advisories/2023/RLSA-2023-0855.json create mode 100644 data/advisories/2023/RLSA-2023-0902.json create mode 100644 data/advisories/2023/RLSA-2023-0903.json create mode 100644 data/advisories/2023/RLSA-2023-0946.json create mode 100644 data/advisories/2023/RLSA-2023-0952.json create mode 100644 data/advisories/2023/RLSA-2023-0953.json create mode 100644 data/advisories/2023/RLSA-2023-0954.json create mode 100644 data/advisories/2023/RLSA-2023-0957.json create mode 100644 data/advisories/2023/RLSA-2023-0958.json create mode 100644 data/advisories/2023/RLSA-2023-0959.json create mode 100644 data/advisories/2023/RLSA-2023-0965.json create mode 100644 data/advisories/2023/RLSA-2023-0970.json create mode 100644 data/advisories/2023/RLSA-2023-0979.json create mode 100644 data/advisories/2023/RLSA-2023-1067.json create mode 100644 data/advisories/2023/RLSA-2023-1068.json create mode 100644 data/advisories/2023/RLSA-2023-1140.json create mode 100644 data/advisories/2023/RLSA-2023-1141.json create mode 100644 data/advisories/2023/RLSA-2023-1252.json create mode 100644 data/advisories/2023/RLSA-2023-1336.json create mode 100644 data/advisories/2023/RLSA-2023-1337.json create mode 100644 data/advisories/2023/RLSA-2023-1368.json create mode 100644 data/advisories/2023/RLSA-2023-1403.json create mode 100644 data/advisories/2023/RLSA-2023-1405.json create mode 100644 data/advisories/2023/RLSA-2023-1407.json create mode 100644 data/advisories/2023/RLSA-2023-1469.json create mode 100644 data/advisories/2023/RLSA-2023-1470.json create mode 100644 data/advisories/2023/RLSA-2023-1566.json create mode 100644 data/advisories/2023/RLSA-2023-1569.json create mode 100644 data/advisories/2023/RLSA-2023-1572.json create mode 100644 data/advisories/2023/RLSA-2023-1576.json create mode 100644 data/advisories/2023/RLSA-2023-1582.json create mode 100644 data/advisories/2023/RLSA-2023-1583.json create mode 100644 data/advisories/2023/RLSA-2023-1584.json create mode 100644 data/advisories/2023/RLSA-2023-1591.json create mode 100644 data/advisories/2023/RLSA-2023-1592.json create mode 100644 data/advisories/2023/RLSA-2023-1670.json create mode 100644 data/advisories/2023/RLSA-2023-1673.json create mode 100644 data/advisories/2023/RLSA-2023-1743.json create mode 100644 data/advisories/2023/RLSA-2023-1802.json create mode 100644 data/advisories/2023/RLSA-2023-1809.json create mode 100644 data/advisories/2023/RLSA-2023-1879.json create mode 100644 data/advisories/2023/RLSA-2023-1880.json create mode 100644 data/advisories/2023/RLSA-2023-1895.json create mode 100644 data/advisories/2023/RLSA-2023-1898.json create mode 100644 data/advisories/2023/RLSA-2023-1909.json create mode 100644 data/advisories/2023/RLSA-2023-1918.json create mode 100644 data/advisories/2023/RLSA-2023-1919.json create mode 100644 data/advisories/2023/RLSA-2023-1930.json create mode 100644 data/advisories/2023/RLSA-2023-2074.json create mode 100644 data/advisories/2023/RLSA-2023-2076.json create mode 100644 data/advisories/2023/RLSA-2023-2078.json create mode 100644 data/advisories/2023/RLSA-2023-2097.json create mode 100644 data/advisories/2023/RLSA-2023-2127.json create mode 100644 data/advisories/2023/RLSA-2023-2652.json create mode 100644 data/advisories/2023/RLSA-2023-2655.json create mode 100644 data/advisories/2023/RLSA-2023-2810.json create mode 100644 data/advisories/2023/RLSA-2023-3082.json create mode 100644 data/advisories/2023/RLSA-2023-3083.json create mode 100644 data/advisories/2023/RLSA-2023-3106.json create mode 100644 data/advisories/2023/RLSA-2023-3107.json create mode 100644 data/advisories/2023/RLSA-2023-3108.json create mode 100644 data/advisories/2023/RLSA-2023-3109.json create mode 100644 data/advisories/2023/RLSA-2023-3147.json create mode 100644 data/advisories/2023/RLSA-2023-3220.json create mode 100644 data/advisories/2023/RLSA-2023-3221.json create mode 100644 data/advisories/2023/RLSA-2023-3246.json create mode 100644 data/advisories/2023/RLSA-2023-3319.json create mode 100644 data/advisories/2023/RLSA-2023-3350.json create mode 100644 data/advisories/2023/RLSA-2023-3423.json create mode 100644 data/advisories/2023/RLSA-2023-3425.json create mode 100644 data/advisories/2023/RLSA-2023-3432.json create mode 100644 data/advisories/2023/RLSA-2023-3433.json create mode 100644 data/advisories/2023/RLSA-2023-3559.json create mode 100644 data/advisories/2023/RLSA-2023-3577.json create mode 100644 data/advisories/2023/RLSA-2023-3582.json create mode 100644 data/advisories/2023/RLSA-2023-3584.json create mode 100644 data/advisories/2023/RLSA-2023-3585.json create mode 100644 data/advisories/2023/RLSA-2023-3587.json create mode 100644 data/advisories/2023/RLSA-2023-3588.json create mode 100644 data/advisories/2023/RLSA-2023-3590.json create mode 100644 data/advisories/2023/RLSA-2023-3591.json create mode 100644 data/advisories/2023/RLSA-2023-3593.json create mode 100644 data/advisories/2023/RLSA-2023-3594.json create mode 100644 data/advisories/2023/RLSA-2023-3595.json create mode 100644 data/advisories/2023/RLSA-2023-3661.json create mode 100644 data/advisories/2023/RLSA-2023-3711.json create mode 100644 data/advisories/2023/RLSA-2023-3714.json create mode 100644 data/advisories/2023/RLSA-2023-3715.json create mode 100644 data/advisories/2023/RLSA-2023-3725.json create mode 100644 data/advisories/2023/RLSA-2023-3780.json create mode 100644 data/advisories/2023/RLSA-2023-3781.json create mode 100644 data/advisories/2023/RLSA-2023-3811.json create mode 100644 data/advisories/2023/RLSA-2023-3819.json create mode 100644 data/advisories/2023/RLSA-2023-3821.json create mode 100644 data/advisories/2023/RLSA-2023-3822.json create mode 100644 data/advisories/2023/RLSA-2023-3827.json create mode 100644 data/advisories/2023/RLSA-2023-3837.json create mode 100644 data/advisories/2023/RLSA-2023-3839.json create mode 100644 data/advisories/2023/RLSA-2023-3840.json create mode 100644 data/advisories/2023/RLSA-2023-3847.json create mode 100644 data/advisories/2023/RLSA-2023-3923.json create mode 100644 data/advisories/2023/RLSA-2023-3948.json create mode 100644 data/advisories/2023/RLSA-2023-3949.json create mode 100644 data/advisories/2023/RLSA-2023-4030.json create mode 100644 data/advisories/2023/RLSA-2023-4034.json create mode 100644 data/advisories/2023/RLSA-2023-4035.json create mode 100644 data/advisories/2023/RLSA-2023-4058.json create mode 100644 data/advisories/2023/RLSA-2023-4059.json create mode 100644 data/advisories/2023/RLSA-2023-4063.json create mode 100644 data/advisories/2023/RLSA-2023-4071.json create mode 100644 data/advisories/2023/RLSA-2023-4076.json create mode 100644 data/advisories/2023/RLSA-2023-4099.json create mode 100644 data/advisories/2023/RLSA-2023-4100.json create mode 100644 data/advisories/2023/RLSA-2023-4102.json create mode 100644 data/advisories/2023/RLSA-2023-4176.json create mode 100644 data/advisories/2023/RLSA-2023-4178.json create mode 100644 data/advisories/2023/RLSA-2023-4201.json create mode 100644 data/advisories/2023/RLSA-2023-4202.json create mode 100644 data/advisories/2023/RLSA-2023-4327.json create mode 100644 data/advisories/2023/RLSA-2023-4347.json create mode 100644 data/advisories/2023/RLSA-2023-4378.json create mode 100644 data/advisories/2023/RLSA-2023-4418.json create mode 100644 data/advisories/2023/RLSA-2023-4419.json create mode 100644 data/advisories/2023/RLSA-2023-4462.json create mode 100644 data/advisories/2023/RLSA-2023-4468.json create mode 100644 data/advisories/2023/RLSA-2023-4497.json create mode 100644 data/advisories/2023/RLSA-2023-4498.json create mode 100644 data/advisories/2023/RLSA-2023-4499.json create mode 100644 data/advisories/2023/RLSA-2023-4517.json create mode 100644 data/advisories/2023/RLSA-2023-4520.json create mode 100644 data/advisories/2023/RLSA-2023-4523.json create mode 100644 data/advisories/2023/RLSA-2023-4524.json create mode 100644 data/advisories/2023/RLSA-2023-4527.json create mode 100644 data/advisories/2023/RLSA-2023-4529.json create mode 100644 data/advisories/2023/RLSA-2023-4535.json create mode 100644 data/advisories/2023/RLSA-2023-4536.json create mode 100644 data/advisories/2023/RLSA-2023-4537.json create mode 100644 data/advisories/2023/RLSA-2023-4539.json create mode 100644 data/advisories/2023/RLSA-2023-4541.json create mode 100644 data/advisories/2023/RLSA-2023-4569.json create mode 100644 data/advisories/2023/RLSA-2023-4570.json create mode 100644 data/advisories/2023/RLSA-2023-4571.json create mode 100644 data/advisories/2023/RLSA-2023-4634.json create mode 100644 data/advisories/2023/RLSA-2023-4635.json create mode 100644 data/advisories/2023/RLSA-2023-4643.json create mode 100644 data/advisories/2023/RLSA-2023-4645.json create mode 100644 data/advisories/2023/RLSA-2023-4706.json create mode 100644 data/advisories/2023/RLSA-2023-4708.json create mode 100644 data/advisories/2023/RLSA-2023-4838.json create mode 100644 data/advisories/2023/RLSA-2023-4864.json create mode 100644 data/advisories/2023/RLSA-2023-4952.json create mode 100644 data/advisories/2023/RLSA-2023-4954.json create mode 100644 data/advisories/2023/RLSA-2023-5050.json create mode 100644 data/advisories/2023/RLSA-2023-5061.json create mode 100644 data/advisories/2023/RLSA-2023-5091.json create mode 100644 data/advisories/2023/RLSA-2023-5144.json create mode 100644 data/advisories/2023/RLSA-2023-5184.json create mode 100644 data/advisories/2023/RLSA-2023-5201.json create mode 100644 data/advisories/2023/RLSA-2023-5214.json create mode 100644 data/advisories/2023/RLSA-2023-5244.json create mode 100644 data/advisories/2023/RLSA-2023-5309.json create mode 100644 data/advisories/2023/RLSA-2023-5312.json create mode 100644 data/advisories/2023/RLSA-2023-5313.json create mode 100644 data/advisories/2023/RLSA-2023-5353.json create mode 100644 data/advisories/2023/RLSA-2023-5363.json create mode 100644 data/advisories/2023/RLSA-2023-5428.json create mode 100644 data/advisories/2023/RLSA-2023-5435.json create mode 100644 data/advisories/2023/RLSA-2023-5455.json create mode 100644 data/advisories/2023/RLSA-2023-5459.json create mode 100644 data/advisories/2023/RLSA-2023-5463.json create mode 100644 data/advisories/2023/RLSA-2023-5532.json create mode 100644 data/advisories/2023/RLSA-2023-5683.json create mode 100644 data/advisories/2023/RLSA-2023-5689.json create mode 100644 data/advisories/2023/RLSA-2023-5708.json create mode 100644 data/advisories/2023/RLSA-2023-5721.json create mode 100644 data/advisories/2023/RLSA-2023-5738.json create mode 100644 data/advisories/2023/RLSA-2023-5742.json create mode 100644 data/advisories/2023/RLSA-2023-5749.json create mode 100644 data/advisories/2023/RLSA-2023-5763.json create mode 100644 data/advisories/2023/RLSA-2023-5765.json create mode 100644 data/advisories/2023/RLSA-2023-5838.json create mode 100644 data/advisories/2023/RLSA-2023-5850.json create mode 100644 data/advisories/2023/RLSA-2023-5863.json create mode 100644 data/advisories/2023/RLSA-2023-5924.json create mode 100644 data/advisories/2023/RLSA-2023-5926.json create mode 100644 data/advisories/2023/RLSA-2023-5927.json create mode 100644 data/advisories/2023/RLSA-2023-5928.json create mode 100644 data/advisories/2023/RLSA-2023-5989.json create mode 100644 data/advisories/2023/RLSA-2023-5997.json create mode 100644 data/advisories/2023/RLSA-2023-6077.json create mode 100644 data/advisories/2023/RLSA-2023-6120.json create mode 100644 data/advisories/2023/RLSA-2023-6188.json create mode 100644 data/advisories/2023/RLSA-2023-6236.json create mode 100644 data/advisories/2023/RLSA-2023-6242.json create mode 100644 data/advisories/2023/RLSA-2023-6245.json create mode 100644 data/advisories/2023/RLSA-2023-6266.json create mode 100644 data/advisories/2023/RLSA-2023-6267.json create mode 100644 data/advisories/2023/RLSA-2023-6518.json create mode 100644 data/advisories/2023/RLSA-2023-6539.json create mode 100644 data/advisories/2023/RLSA-2023-6551.json create mode 100644 data/advisories/2023/RLSA-2023-6746.json create mode 100644 data/advisories/2023/RLSA-2023-6818.json create mode 100644 data/advisories/2023/RLSA-2023-7057.json create mode 100644 data/advisories/2023/RLSA-2023-7187.json create mode 100644 data/advisories/2023/RLSA-2023-7189.json create mode 100644 data/advisories/2023/RLSA-2023-7190.json create mode 100644 data/advisories/2023/RLSA-2023-7202.json create mode 100644 data/advisories/2023/RLSA-2023-7205.json create mode 100644 data/advisories/2023/RLSA-2023-7207.json create mode 100644 data/advisories/2023/RLSA-2023-7213.json create mode 100644 data/advisories/2023/RLSA-2023-7256.json create mode 100644 data/advisories/2023/RLSA-2023-7258.json create mode 100644 data/advisories/2023/RLSA-2023-7265.json create mode 100644 data/advisories/2023/RLSA-2023-7500.json create mode 100644 data/advisories/2023/RLSA-2023-7548.json create mode 100644 data/advisories/2023/RLSA-2023-7549.json create mode 100644 data/advisories/2023/RLSA-2023-7581.json create mode 100644 data/advisories/2023/RLSA-2023-7668.json create mode 100644 data/advisories/2023/RLSA-2023-7711.json create mode 100644 data/advisories/2023/RLSA-2023-7712.json create mode 100644 data/advisories/2023/RLSA-2023-7714.json create mode 100644 data/advisories/2023/RLSA-2023-7716.json create mode 100644 data/advisories/2023/RLSA-2023-7732.json create mode 100644 data/advisories/2023/RLSA-2023-7785.json create mode 100644 data/advisories/2023/RLSA-2023-7790.json create mode 100644 data/advisories/2023/RLSA-2023-7836.json create mode 100644 data/advisories/2023/RLSA-2023-7841.json create mode 100644 data/advisories/2023/RXSA-2023-0101.json create mode 100644 data/advisories/2023/RXSA-2023-0334.json create mode 100644 data/advisories/2023/RXSA-2023-0832.json create mode 100644 data/advisories/2023/RXSA-2023-0951.json create mode 100644 data/advisories/2023/RXSA-2023-1566.json create mode 100644 data/advisories/2023/RXSA-2023-5244.json create mode 100644 data/advisories/2023/RXSA-2023-7549.json create mode 100644 data/advisories/2023/RXSA-2023-7749.json create mode 100644 data/advisories/2024/RLSA-2024-0003.json create mode 100644 data/advisories/2024/RLSA-2024-0012.json create mode 100644 data/advisories/2024/RLSA-2024-0046.json create mode 100644 data/advisories/2024/RLSA-2024-0105.json create mode 100644 data/advisories/2024/RLSA-2024-0119.json create mode 100644 data/advisories/2024/RLSA-2024-0121.json create mode 100644 data/advisories/2024/RLSA-2024-0130.json create mode 100644 data/advisories/2024/RLSA-2024-0134.json create mode 100644 data/advisories/2024/RLSA-2024-0135.json create mode 100644 data/advisories/2024/RLSA-2024-0143.json create mode 100644 data/advisories/2024/RLSA-2024-0150.json create mode 100644 data/advisories/2024/RLSA-2024-0155.json create mode 100644 data/advisories/2024/RLSA-2024-0157.json create mode 100644 data/advisories/2024/RLSA-2024-0158.json create mode 100644 data/advisories/2024/RLSA-2024-0253.json create mode 100644 data/advisories/2024/RLSA-2024-0256.json create mode 100644 data/advisories/2024/RLSA-2024-0387.json create mode 100644 data/advisories/2024/RLSA-2024-0465.json create mode 100644 data/advisories/2024/RLSA-2024-0539.json create mode 100644 data/advisories/2024/RLSA-2024-0606.json create mode 100644 data/advisories/2024/RLSA-2024-0607.json create mode 100644 data/advisories/2024/RLSA-2024-0608.json create mode 100644 data/advisories/2024/RLSA-2024-0609.json create mode 100644 data/advisories/2024/RLSA-2024-0627.json create mode 100644 data/advisories/2024/RLSA-2024-0628.json create mode 100644 data/advisories/2024/RLSA-2024-0647.json create mode 100644 data/advisories/2024/RLSA-2024-0675.json create mode 100644 data/advisories/2024/RLSA-2024-0748.json create mode 100644 data/advisories/2024/RLSA-2024-0752.json create mode 100644 data/advisories/2024/RLSA-2024-0768.json create mode 100644 data/advisories/2024/RLSA-2024-0769.json create mode 100644 data/advisories/2024/RLSA-2024-0786.json create mode 100644 data/advisories/2024/RLSA-2024-0806.json create mode 100644 data/advisories/2024/RLSA-2024-0827.json create mode 100644 data/advisories/2024/RLSA-2024-0861.json create mode 100644 data/advisories/2024/RLSA-2024-0894.json create mode 100644 data/advisories/2024/RLSA-2024-0950.json create mode 100644 data/advisories/2024/RLSA-2024-0951.json create mode 100644 data/advisories/2024/RLSA-2024-0955.json create mode 100644 data/advisories/2024/RLSA-2024-0956.json create mode 100644 data/advisories/2024/RLSA-2024-0966.json create mode 100644 data/advisories/2024/RLSA-2024-0967.json create mode 100644 data/advisories/2024/RLSA-2024-0973.json create mode 100644 data/advisories/2024/RLSA-2024-0974.json create mode 100644 data/advisories/2024/RLSA-2024-0975.json create mode 100644 data/advisories/2024/RLSA-2024-10090.json create mode 100644 data/advisories/2024/RLSA-2024-10218.json create mode 100644 data/advisories/2024/RLSA-2024-10219.json create mode 100644 data/advisories/2024/RLSA-2024-10244.json create mode 100644 data/advisories/2024/RLSA-2024-10281.json create mode 100644 data/advisories/2024/RLSA-2024-10282.json create mode 100644 data/advisories/2024/RLSA-2024-10289.json create mode 100644 data/advisories/2024/RLSA-2024-10379.json create mode 100644 data/advisories/2024/RLSA-2024-10384.json create mode 100644 data/advisories/2024/RLSA-2024-10481.json create mode 100644 data/advisories/2024/RLSA-2024-10590.json create mode 100644 data/advisories/2024/RLSA-2024-10591.json create mode 100644 data/advisories/2024/RLSA-2024-1063.json create mode 100644 data/advisories/2024/RLSA-2024-10752.json create mode 100644 data/advisories/2024/RLSA-2024-10779.json create mode 100644 data/advisories/2024/RLSA-2024-10785.json create mode 100644 data/advisories/2024/RLSA-2024-10787.json create mode 100644 data/advisories/2024/RLSA-2024-10788.json create mode 100644 data/advisories/2024/RLSA-2024-10830.json create mode 100644 data/advisories/2024/RLSA-2024-10831.json create mode 100644 data/advisories/2024/RLSA-2024-10832.json create mode 100644 data/advisories/2024/RLSA-2024-10834.json create mode 100644 data/advisories/2024/RLSA-2024-10850.json create mode 100644 data/advisories/2024/RLSA-2024-10858.json create mode 100644 data/advisories/2024/RLSA-2024-10860.json create mode 100644 data/advisories/2024/RLSA-2024-10943.json create mode 100644 data/advisories/2024/RLSA-2024-10944.json create mode 100644 data/advisories/2024/RLSA-2024-10949.json create mode 100644 data/advisories/2024/RLSA-2024-10950.json create mode 100644 data/advisories/2024/RLSA-2024-10951.json create mode 100644 data/advisories/2024/RLSA-2024-10952.json create mode 100644 data/advisories/2024/RLSA-2024-10953.json create mode 100644 data/advisories/2024/RLSA-2024-10978.json create mode 100644 data/advisories/2024/RLSA-2024-10979.json create mode 100644 data/advisories/2024/RLSA-2024-10980.json create mode 100644 data/advisories/2024/RLSA-2024-10983.json create mode 100644 data/advisories/2024/RLSA-2024-10987.json create mode 100644 data/advisories/2024/RLSA-2024-11111.json create mode 100644 data/advisories/2024/RLSA-2024-11122.json create mode 100644 data/advisories/2024/RLSA-2024-11123.json create mode 100644 data/advisories/2024/RLSA-2024-11161.json create mode 100644 data/advisories/2024/RLSA-2024-11185.json create mode 100644 data/advisories/2024/RLSA-2024-11189.json create mode 100644 data/advisories/2024/RLSA-2024-11192.json create mode 100644 data/advisories/2024/RLSA-2024-11193.json create mode 100644 data/advisories/2024/RLSA-2024-11216.json create mode 100644 data/advisories/2024/RLSA-2024-11217.json create mode 100644 data/advisories/2024/RLSA-2024-11219.json create mode 100644 data/advisories/2024/RLSA-2024-11232.json create mode 100644 data/advisories/2024/RLSA-2024-11237.json create mode 100644 data/advisories/2024/RLSA-2024-11238.json create mode 100644 data/advisories/2024/RLSA-2024-11242.json create mode 100644 data/advisories/2024/RLSA-2024-11299.json create mode 100644 data/advisories/2024/RLSA-2024-11345.json create mode 100644 data/advisories/2024/RLSA-2024-1139.json create mode 100644 data/advisories/2024/RLSA-2024-1308.json create mode 100644 data/advisories/2024/RLSA-2024-1311.json create mode 100644 data/advisories/2024/RLSA-2024-1335.json create mode 100644 data/advisories/2024/RLSA-2024-1375.json create mode 100644 data/advisories/2024/RLSA-2024-1427.json create mode 100644 data/advisories/2024/RLSA-2024-1431.json create mode 100644 data/advisories/2024/RLSA-2024-1435.json create mode 100644 data/advisories/2024/RLSA-2024-1436.json create mode 100644 data/advisories/2024/RLSA-2024-1438.json create mode 100644 data/advisories/2024/RLSA-2024-1444.json create mode 100644 data/advisories/2024/RLSA-2024-1472.json create mode 100644 data/advisories/2024/RLSA-2024-1484.json create mode 100644 data/advisories/2024/RLSA-2024-1494.json create mode 100644 data/advisories/2024/RLSA-2024-1502.json create mode 100644 data/advisories/2024/RLSA-2024-1503.json create mode 100644 data/advisories/2024/RLSA-2024-1510.json create mode 100644 data/advisories/2024/RLSA-2024-1514.json create mode 100644 data/advisories/2024/RLSA-2024-1576.json create mode 100644 data/advisories/2024/RLSA-2024-1601.json create mode 100644 data/advisories/2024/RLSA-2024-1607.json create mode 100644 data/advisories/2024/RLSA-2024-1608.json create mode 100644 data/advisories/2024/RLSA-2024-1610.json create mode 100644 data/advisories/2024/RLSA-2024-1614.json create mode 100644 data/advisories/2024/RLSA-2024-1615.json create mode 100644 data/advisories/2024/RLSA-2024-1644.json create mode 100644 data/advisories/2024/RLSA-2024-1646.json create mode 100644 data/advisories/2024/RLSA-2024-1687.json create mode 100644 data/advisories/2024/RLSA-2024-1688.json create mode 100644 data/advisories/2024/RLSA-2024-1690.json create mode 100644 data/advisories/2024/RLSA-2024-1691.json create mode 100644 data/advisories/2024/RLSA-2024-1692.json create mode 100644 data/advisories/2024/RLSA-2024-1719.json create mode 100644 data/advisories/2024/RLSA-2024-1750.json create mode 100644 data/advisories/2024/RLSA-2024-1751.json create mode 100644 data/advisories/2024/RLSA-2024-1781.json create mode 100644 data/advisories/2024/RLSA-2024-1782.json create mode 100644 data/advisories/2024/RLSA-2024-1784.json create mode 100644 data/advisories/2024/RLSA-2024-1786.json create mode 100644 data/advisories/2024/RLSA-2024-1818.json create mode 100644 data/advisories/2024/RLSA-2024-1822.json create mode 100644 data/advisories/2024/RLSA-2024-1825.json create mode 100644 data/advisories/2024/RLSA-2024-1828.json create mode 100644 data/advisories/2024/RLSA-2024-1908.json create mode 100644 data/advisories/2024/RLSA-2024-1912.json create mode 100644 data/advisories/2024/RLSA-2024-1939.json create mode 100644 data/advisories/2024/RLSA-2024-1940.json create mode 100644 data/advisories/2024/RLSA-2024-1962.json create mode 100644 data/advisories/2024/RLSA-2024-1998.json create mode 100644 data/advisories/2024/RLSA-2024-2037.json create mode 100644 data/advisories/2024/RLSA-2024-2084.json create mode 100644 data/advisories/2024/RLSA-2024-2098.json create mode 100644 data/advisories/2024/RLSA-2024-2135.json create mode 100644 data/advisories/2024/RLSA-2024-2137.json create mode 100644 data/advisories/2024/RLSA-2024-2145.json create mode 100644 data/advisories/2024/RLSA-2024-2146.json create mode 100644 data/advisories/2024/RLSA-2024-2199.json create mode 100644 data/advisories/2024/RLSA-2024-2211.json create mode 100644 data/advisories/2024/RLSA-2024-2217.json create mode 100644 data/advisories/2024/RLSA-2024-2228.json create mode 100644 data/advisories/2024/RLSA-2024-2264.json create mode 100644 data/advisories/2024/RLSA-2024-2278.json create mode 100644 data/advisories/2024/RLSA-2024-2287.json create mode 100644 data/advisories/2024/RLSA-2024-2290.json create mode 100644 data/advisories/2024/RLSA-2024-2295.json create mode 100644 data/advisories/2024/RLSA-2024-2302.json create mode 100644 data/advisories/2024/RLSA-2024-2337.json create mode 100644 data/advisories/2024/RLSA-2024-2353.json create mode 100644 data/advisories/2024/RLSA-2024-2366.json create mode 100644 data/advisories/2024/RLSA-2024-2377.json create mode 100644 data/advisories/2024/RLSA-2024-2396.json create mode 100644 data/advisories/2024/RLSA-2024-2410.json create mode 100644 data/advisories/2024/RLSA-2024-2437.json create mode 100644 data/advisories/2024/RLSA-2024-2463.json create mode 100644 data/advisories/2024/RLSA-2024-2483.json create mode 100644 data/advisories/2024/RLSA-2024-2504.json create mode 100644 data/advisories/2024/RLSA-2024-2512.json create mode 100644 data/advisories/2024/RLSA-2024-2517.json create mode 100644 data/advisories/2024/RLSA-2024-2525.json create mode 100644 data/advisories/2024/RLSA-2024-2548.json create mode 100644 data/advisories/2024/RLSA-2024-2549.json create mode 100644 data/advisories/2024/RLSA-2024-2550.json create mode 100644 data/advisories/2024/RLSA-2024-2551.json create mode 100644 data/advisories/2024/RLSA-2024-2559.json create mode 100644 data/advisories/2024/RLSA-2024-2560.json create mode 100644 data/advisories/2024/RLSA-2024-2562.json create mode 100644 data/advisories/2024/RLSA-2024-2564.json create mode 100644 data/advisories/2024/RLSA-2024-2565.json create mode 100644 data/advisories/2024/RLSA-2024-2566.json create mode 100644 data/advisories/2024/RLSA-2024-2568.json create mode 100644 data/advisories/2024/RLSA-2024-2569.json create mode 100644 data/advisories/2024/RLSA-2024-2570.json create mode 100644 data/advisories/2024/RLSA-2024-2571.json create mode 100644 data/advisories/2024/RLSA-2024-2616.json create mode 100644 data/advisories/2024/RLSA-2024-2679.json create mode 100644 data/advisories/2024/RLSA-2024-2699.json create mode 100644 data/advisories/2024/RLSA-2024-2722.json create mode 100644 data/advisories/2024/RLSA-2024-2724.json create mode 100644 data/advisories/2024/RLSA-2024-2758.json create mode 100644 data/advisories/2024/RLSA-2024-2778.json create mode 100644 data/advisories/2024/RLSA-2024-2779.json create mode 100644 data/advisories/2024/RLSA-2024-2780.json create mode 100644 data/advisories/2024/RLSA-2024-2842.json create mode 100644 data/advisories/2024/RLSA-2024-2843.json create mode 100644 data/advisories/2024/RLSA-2024-2853.json create mode 100644 data/advisories/2024/RLSA-2024-2888.json create mode 100644 data/advisories/2024/RLSA-2024-2910.json create mode 100644 data/advisories/2024/RLSA-2024-2950.json create mode 100644 data/advisories/2024/RLSA-2024-2952.json create mode 100644 data/advisories/2024/RLSA-2024-2953.json create mode 100644 data/advisories/2024/RLSA-2024-2961.json create mode 100644 data/advisories/2024/RLSA-2024-2962.json create mode 100644 data/advisories/2024/RLSA-2024-2966.json create mode 100644 data/advisories/2024/RLSA-2024-2968.json create mode 100644 data/advisories/2024/RLSA-2024-2973.json create mode 100644 data/advisories/2024/RLSA-2024-2974.json create mode 100644 data/advisories/2024/RLSA-2024-2979.json create mode 100644 data/advisories/2024/RLSA-2024-2980.json create mode 100644 data/advisories/2024/RLSA-2024-2981.json create mode 100644 data/advisories/2024/RLSA-2024-2982.json create mode 100644 data/advisories/2024/RLSA-2024-2985.json create mode 100644 data/advisories/2024/RLSA-2024-2986.json create mode 100644 data/advisories/2024/RLSA-2024-2987.json create mode 100644 data/advisories/2024/RLSA-2024-2988.json create mode 100644 data/advisories/2024/RLSA-2024-2994.json create mode 100644 data/advisories/2024/RLSA-2024-3005.json create mode 100644 data/advisories/2024/RLSA-2024-3008.json create mode 100644 data/advisories/2024/RLSA-2024-3017.json create mode 100644 data/advisories/2024/RLSA-2024-3022.json create mode 100644 data/advisories/2024/RLSA-2024-3030.json create mode 100644 data/advisories/2024/RLSA-2024-3043.json create mode 100644 data/advisories/2024/RLSA-2024-3044.json create mode 100644 data/advisories/2024/RLSA-2024-3047.json create mode 100644 data/advisories/2024/RLSA-2024-3049.json create mode 100644 data/advisories/2024/RLSA-2024-3056.json create mode 100644 data/advisories/2024/RLSA-2024-3058.json create mode 100644 data/advisories/2024/RLSA-2024-3059.json create mode 100644 data/advisories/2024/RLSA-2024-3060.json create mode 100644 data/advisories/2024/RLSA-2024-3061.json create mode 100644 data/advisories/2024/RLSA-2024-3062.json create mode 100644 data/advisories/2024/RLSA-2024-3066.json create mode 100644 data/advisories/2024/RLSA-2024-3088.json create mode 100644 data/advisories/2024/RLSA-2024-3089.json create mode 100644 data/advisories/2024/RLSA-2024-3094.json create mode 100644 data/advisories/2024/RLSA-2024-3095.json create mode 100644 data/advisories/2024/RLSA-2024-3102.json create mode 100644 data/advisories/2024/RLSA-2024-3105.json create mode 100644 data/advisories/2024/RLSA-2024-3120.json create mode 100644 data/advisories/2024/RLSA-2024-3121.json create mode 100644 data/advisories/2024/RLSA-2024-3127.json create mode 100644 data/advisories/2024/RLSA-2024-3128.json create mode 100644 data/advisories/2024/RLSA-2024-3138.json create mode 100644 data/advisories/2024/RLSA-2024-3139.json create mode 100644 data/advisories/2024/RLSA-2024-3163.json create mode 100644 data/advisories/2024/RLSA-2024-3166.json create mode 100644 data/advisories/2024/RLSA-2024-3178.json create mode 100644 data/advisories/2024/RLSA-2024-3184.json create mode 100644 data/advisories/2024/RLSA-2024-3203.json create mode 100644 data/advisories/2024/RLSA-2024-3211.json create mode 100644 data/advisories/2024/RLSA-2024-3233.json create mode 100644 data/advisories/2024/RLSA-2024-3253.json create mode 100644 data/advisories/2024/RLSA-2024-3254.json create mode 100644 data/advisories/2024/RLSA-2024-3258.json create mode 100644 data/advisories/2024/RLSA-2024-3259.json create mode 100644 data/advisories/2024/RLSA-2024-3261.json create mode 100644 data/advisories/2024/RLSA-2024-3264.json create mode 100644 data/advisories/2024/RLSA-2024-3265.json create mode 100644 data/advisories/2024/RLSA-2024-3267.json create mode 100644 data/advisories/2024/RLSA-2024-3268.json create mode 100644 data/advisories/2024/RLSA-2024-3269.json create mode 100644 data/advisories/2024/RLSA-2024-3270.json create mode 100644 data/advisories/2024/RLSA-2024-3271.json create mode 100644 data/advisories/2024/RLSA-2024-3275.json create mode 100644 data/advisories/2024/RLSA-2024-3307.json create mode 100644 data/advisories/2024/RLSA-2024-3339.json create mode 100644 data/advisories/2024/RLSA-2024-3340.json create mode 100644 data/advisories/2024/RLSA-2024-3341.json create mode 100644 data/advisories/2024/RLSA-2024-3343.json create mode 100644 data/advisories/2024/RLSA-2024-3344.json create mode 100644 data/advisories/2024/RLSA-2024-3345.json create mode 100644 data/advisories/2024/RLSA-2024-3346.json create mode 100644 data/advisories/2024/RLSA-2024-3347.json create mode 100644 data/advisories/2024/RLSA-2024-3466.json create mode 100644 data/advisories/2024/RLSA-2024-3500.json create mode 100644 data/advisories/2024/RLSA-2024-3501.json create mode 100644 data/advisories/2024/RLSA-2024-3513.json create mode 100644 data/advisories/2024/RLSA-2024-3546.json create mode 100644 data/advisories/2024/RLSA-2024-3618.json create mode 100644 data/advisories/2024/RLSA-2024-3619.json create mode 100644 data/advisories/2024/RLSA-2024-3626.json create mode 100644 data/advisories/2024/RLSA-2024-3627.json create mode 100644 data/advisories/2024/RLSA-2024-3659.json create mode 100644 data/advisories/2024/RLSA-2024-3661.json create mode 100644 data/advisories/2024/RLSA-2024-3666.json create mode 100644 data/advisories/2024/RLSA-2024-3667.json create mode 100644 data/advisories/2024/RLSA-2024-3668.json create mode 100644 data/advisories/2024/RLSA-2024-3670.json create mode 100644 data/advisories/2024/RLSA-2024-3671.json create mode 100644 data/advisories/2024/RLSA-2024-3754.json create mode 100644 data/advisories/2024/RLSA-2024-3755.json create mode 100644 data/advisories/2024/RLSA-2024-3783.json create mode 100644 data/advisories/2024/RLSA-2024-3784.json create mode 100644 data/advisories/2024/RLSA-2024-3820.json create mode 100644 data/advisories/2024/RLSA-2024-3826.json create mode 100644 data/advisories/2024/RLSA-2024-3827.json create mode 100644 data/advisories/2024/RLSA-2024-3830.json create mode 100644 data/advisories/2024/RLSA-2024-3834.json create mode 100644 data/advisories/2024/RLSA-2024-3835.json create mode 100644 data/advisories/2024/RLSA-2024-3837.json create mode 100644 data/advisories/2024/RLSA-2024-3842.json create mode 100644 data/advisories/2024/RLSA-2024-3846.json create mode 100644 data/advisories/2024/RLSA-2024-3954.json create mode 100644 data/advisories/2024/RLSA-2024-3955.json create mode 100644 data/advisories/2024/RLSA-2024-3959.json create mode 100644 data/advisories/2024/RLSA-2024-3961.json create mode 100644 data/advisories/2024/RLSA-2024-3968.json create mode 100644 data/advisories/2024/RLSA-2024-3999.json create mode 100644 data/advisories/2024/RLSA-2024-4000.json create mode 100644 data/advisories/2024/RLSA-2024-4002.json create mode 100644 data/advisories/2024/RLSA-2024-4036.json create mode 100644 data/advisories/2024/RLSA-2024-4050.json create mode 100644 data/advisories/2024/RLSA-2024-4077.json create mode 100644 data/advisories/2024/RLSA-2024-4078.json create mode 100644 data/advisories/2024/RLSA-2024-4083.json create mode 100644 data/advisories/2024/RLSA-2024-4084.json create mode 100644 data/advisories/2024/RLSA-2024-4165.json create mode 100644 data/advisories/2024/RLSA-2024-4197.json create mode 100644 data/advisories/2024/RLSA-2024-4211.json create mode 100644 data/advisories/2024/RLSA-2024-4212.json create mode 100644 data/advisories/2024/RLSA-2024-4227.json create mode 100644 data/advisories/2024/RLSA-2024-4231.json create mode 100644 data/advisories/2024/RLSA-2024-4235.json create mode 100644 data/advisories/2024/RLSA-2024-4237.json create mode 100644 data/advisories/2024/RLSA-2024-4241.json create mode 100644 data/advisories/2024/RLSA-2024-4242.json create mode 100644 data/advisories/2024/RLSA-2024-4243.json create mode 100644 data/advisories/2024/RLSA-2024-4244.json create mode 100644 data/advisories/2024/RLSA-2024-4245.json create mode 100644 data/advisories/2024/RLSA-2024-4246.json create mode 100644 data/advisories/2024/RLSA-2024-4247.json create mode 100644 data/advisories/2024/RLSA-2024-4249.json create mode 100644 data/advisories/2024/RLSA-2024-4252.json create mode 100644 data/advisories/2024/RLSA-2024-4256.json create mode 100644 data/advisories/2024/RLSA-2024-4259.json create mode 100644 data/advisories/2024/RLSA-2024-4260.json create mode 100644 data/advisories/2024/RLSA-2024-4262.json create mode 100644 data/advisories/2024/RLSA-2024-4264.json create mode 100644 data/advisories/2024/RLSA-2024-4265.json create mode 100644 data/advisories/2024/RLSA-2024-4267.json create mode 100644 data/advisories/2024/RLSA-2024-4349.json create mode 100644 data/advisories/2024/RLSA-2024-4351.json create mode 100644 data/advisories/2024/RLSA-2024-4352.json create mode 100644 data/advisories/2024/RLSA-2024-4367.json create mode 100644 data/advisories/2024/RLSA-2024-4376.json create mode 100644 data/advisories/2024/RLSA-2024-4420.json create mode 100644 data/advisories/2024/RLSA-2024-4438.json create mode 100644 data/advisories/2024/RLSA-2024-4450.json create mode 100644 data/advisories/2024/RLSA-2024-4451.json create mode 100644 data/advisories/2024/RLSA-2024-4457.json create mode 100644 data/advisories/2024/RLSA-2024-4499.json create mode 100644 data/advisories/2024/RLSA-2024-4500.json create mode 100644 data/advisories/2024/RLSA-2024-4502.json create mode 100644 data/advisories/2024/RLSA-2024-4517.json create mode 100644 data/advisories/2024/RLSA-2024-4563.json create mode 100644 data/advisories/2024/RLSA-2024-4567.json create mode 100644 data/advisories/2024/RLSA-2024-4568.json create mode 100644 data/advisories/2024/RLSA-2024-4573.json create mode 100644 data/advisories/2024/RLSA-2024-4583.json create mode 100644 data/advisories/2024/RLSA-2024-4617.json create mode 100644 data/advisories/2024/RLSA-2024-4620.json create mode 100644 data/advisories/2024/RLSA-2024-4623.json create mode 100644 data/advisories/2024/RLSA-2024-4624.json create mode 100644 data/advisories/2024/RLSA-2024-4635.json create mode 100644 data/advisories/2024/RLSA-2024-4636.json create mode 100644 data/advisories/2024/RLSA-2024-4720.json create mode 100644 data/advisories/2024/RLSA-2024-4726.json create mode 100644 data/advisories/2024/RLSA-2024-4756.json create mode 100644 data/advisories/2024/RLSA-2024-4861.json create mode 100644 data/advisories/2024/RLSA-2024-4928.json create mode 100644 data/advisories/2024/RLSA-2024-4935.json create mode 100644 data/advisories/2024/RLSA-2024-4936.json create mode 100644 data/advisories/2024/RLSA-2024-5079.json create mode 100644 data/advisories/2024/RLSA-2024-5101.json create mode 100644 data/advisories/2024/RLSA-2024-5102.json create mode 100644 data/advisories/2024/RLSA-2024-5138.json create mode 100644 data/advisories/2024/RLSA-2024-5192.json create mode 100644 data/advisories/2024/RLSA-2024-5193.json create mode 100644 data/advisories/2024/RLSA-2024-5231.json create mode 100644 data/advisories/2024/RLSA-2024-5258.json create mode 100644 data/advisories/2024/RLSA-2024-5279.json create mode 100644 data/advisories/2024/RLSA-2024-5289.json create mode 100644 data/advisories/2024/RLSA-2024-5291.json create mode 100644 data/advisories/2024/RLSA-2024-5294.json create mode 100644 data/advisories/2024/RLSA-2024-5297.json create mode 100644 data/advisories/2024/RLSA-2024-5298.json create mode 100644 data/advisories/2024/RLSA-2024-5299.json create mode 100644 data/advisories/2024/RLSA-2024-5305.json create mode 100644 data/advisories/2024/RLSA-2024-5306.json create mode 100644 data/advisories/2024/RLSA-2024-5309.json create mode 100644 data/advisories/2024/RLSA-2024-5312.json create mode 100644 data/advisories/2024/RLSA-2024-5337.json create mode 100644 data/advisories/2024/RLSA-2024-5338.json create mode 100644 data/advisories/2024/RLSA-2024-5363.json create mode 100644 data/advisories/2024/RLSA-2024-5390.json create mode 100644 data/advisories/2024/RLSA-2024-5391.json create mode 100644 data/advisories/2024/RLSA-2024-5402.json create mode 100644 data/advisories/2024/RLSA-2024-5524.json create mode 100644 data/advisories/2024/RLSA-2024-5530.json create mode 100644 data/advisories/2024/RLSA-2024-5531.json create mode 100644 data/advisories/2024/RLSA-2024-5532.json create mode 100644 data/advisories/2024/RLSA-2024-5533.json create mode 100644 data/advisories/2024/RLSA-2024-5598.json create mode 100644 data/advisories/2024/RLSA-2024-5654.json create mode 100644 data/advisories/2024/RLSA-2024-5693.json create mode 100644 data/advisories/2024/RLSA-2024-5694.json create mode 100644 data/advisories/2024/RLSA-2024-5814.json create mode 100644 data/advisories/2024/RLSA-2024-5815.json create mode 100644 data/advisories/2024/RLSA-2024-5927.json create mode 100644 data/advisories/2024/RLSA-2024-5929.json create mode 100644 data/advisories/2024/RLSA-2024-5941.json create mode 100644 data/advisories/2024/RLSA-2024-5962.json create mode 100644 data/advisories/2024/RLSA-2024-5999.json create mode 100644 data/advisories/2024/RLSA-2024-6000.json create mode 100644 data/advisories/2024/RLSA-2024-6001.json create mode 100644 data/advisories/2024/RLSA-2024-6018.json create mode 100644 data/advisories/2024/RLSA-2024-6020.json create mode 100644 data/advisories/2024/RLSA-2024-6146.json create mode 100644 data/advisories/2024/RLSA-2024-6147.json create mode 100644 data/advisories/2024/RLSA-2024-6148.json create mode 100644 data/advisories/2024/RLSA-2024-6192.json create mode 100644 data/advisories/2024/RLSA-2024-6197.json create mode 100644 data/advisories/2024/RLSA-2024-6309.json create mode 100644 data/advisories/2024/RLSA-2024-6311.json create mode 100644 data/advisories/2024/RLSA-2024-6356.json create mode 100644 data/advisories/2024/RLSA-2024-6422.json create mode 100644 data/advisories/2024/RLSA-2024-6464.json create mode 100644 data/advisories/2024/RLSA-2024-6529.json create mode 100644 data/advisories/2024/RLSA-2024-6567.json create mode 100644 data/advisories/2024/RLSA-2024-6569.json create mode 100644 data/advisories/2024/RLSA-2024-6670.json create mode 100644 data/advisories/2024/RLSA-2024-6681.json create mode 100644 data/advisories/2024/RLSA-2024-6682.json create mode 100644 data/advisories/2024/RLSA-2024-6683.json create mode 100644 data/advisories/2024/RLSA-2024-6684.json create mode 100644 data/advisories/2024/RLSA-2024-6726.json create mode 100644 data/advisories/2024/RLSA-2024-6754.json create mode 100644 data/advisories/2024/RLSA-2024-6757.json create mode 100644 data/advisories/2024/RLSA-2024-6783.json create mode 100644 data/advisories/2024/RLSA-2024-6784.json create mode 100644 data/advisories/2024/RLSA-2024-6785.json create mode 100644 data/advisories/2024/RLSA-2024-6837.json create mode 100644 data/advisories/2024/RLSA-2024-6848.json create mode 100644 data/advisories/2024/RLSA-2024-6908.json create mode 100644 data/advisories/2024/RLSA-2024-6913.json create mode 100644 data/advisories/2024/RLSA-2024-6946.json create mode 100644 data/advisories/2024/RLSA-2024-6947.json create mode 100644 data/advisories/2024/RLSA-2024-6961.json create mode 100644 data/advisories/2024/RLSA-2024-6962.json create mode 100644 data/advisories/2024/RLSA-2024-6963.json create mode 100644 data/advisories/2024/RLSA-2024-6964.json create mode 100644 data/advisories/2024/RLSA-2024-6969.json create mode 100644 data/advisories/2024/RLSA-2024-6973.json create mode 100644 data/advisories/2024/RLSA-2024-6975.json create mode 100644 data/advisories/2024/RLSA-2024-6986.json create mode 100644 data/advisories/2024/RLSA-2024-6987.json create mode 100644 data/advisories/2024/RLSA-2024-6989.json create mode 100644 data/advisories/2024/RLSA-2024-7000.json create mode 100644 data/advisories/2024/RLSA-2024-7001.json create mode 100644 data/advisories/2024/RLSA-2024-7135.json create mode 100644 data/advisories/2024/RLSA-2024-7136.json create mode 100644 data/advisories/2024/RLSA-2024-7204.json create mode 100644 data/advisories/2024/RLSA-2024-7260.json create mode 100644 data/advisories/2024/RLSA-2024-7262.json create mode 100644 data/advisories/2024/RLSA-2024-7346.json create mode 100644 data/advisories/2024/RLSA-2024-7349.json create mode 100644 data/advisories/2024/RLSA-2024-7457.json create mode 100644 data/advisories/2024/RLSA-2024-7463.json create mode 100644 data/advisories/2024/RLSA-2024-7481.json create mode 100644 data/advisories/2024/RLSA-2024-7502.json create mode 100644 data/advisories/2024/RLSA-2024-7550.json create mode 100644 data/advisories/2024/RLSA-2024-7699.json create mode 100644 data/advisories/2024/RLSA-2024-7700.json create mode 100644 data/advisories/2024/RLSA-2024-7848.json create mode 100644 data/advisories/2024/RLSA-2024-7851.json create mode 100644 data/advisories/2024/RLSA-2024-7867.json create mode 100644 data/advisories/2024/RLSA-2024-7868.json create mode 100644 data/advisories/2024/RLSA-2024-7869.json create mode 100644 data/advisories/2024/RLSA-2024-7958.json create mode 100644 data/advisories/2024/RLSA-2024-7977.json create mode 100644 data/advisories/2024/RLSA-2024-8024.json create mode 100644 data/advisories/2024/RLSA-2024-8025.json create mode 100644 data/advisories/2024/RLSA-2024-8037.json create mode 100644 data/advisories/2024/RLSA-2024-8038.json create mode 100644 data/advisories/2024/RLSA-2024-8039.json create mode 100644 data/advisories/2024/RLSA-2024-8110.json create mode 100644 data/advisories/2024/RLSA-2024-8111.json create mode 100644 data/advisories/2024/RLSA-2024-8117.json create mode 100644 data/advisories/2024/RLSA-2024-8121.json create mode 100644 data/advisories/2024/RLSA-2024-8124.json create mode 100644 data/advisories/2024/RLSA-2024-8127.json create mode 100644 data/advisories/2024/RLSA-2024-8162.json create mode 100644 data/advisories/2024/RLSA-2024-8180.json create mode 100644 data/advisories/2024/RLSA-2024-8327.json create mode 100644 data/advisories/2024/RLSA-2024-8353.json create mode 100644 data/advisories/2024/RLSA-2024-8359.json create mode 100644 data/advisories/2024/RLSA-2024-8374.json create mode 100644 data/advisories/2024/RLSA-2024-8446.json create mode 100644 data/advisories/2024/RLSA-2024-8447.json create mode 100644 data/advisories/2024/RLSA-2024-8563.json create mode 100644 data/advisories/2024/RLSA-2024-8617.json create mode 100644 data/advisories/2024/RLSA-2024-8678.json create mode 100644 data/advisories/2024/RLSA-2024-8680.json create mode 100644 data/advisories/2024/RLSA-2024-8726.json create mode 100644 data/advisories/2024/RLSA-2024-8729.json create mode 100644 data/advisories/2024/RLSA-2024-8790.json create mode 100644 data/advisories/2024/RLSA-2024-8793.json create mode 100644 data/advisories/2024/RLSA-2024-8798.json create mode 100644 data/advisories/2024/RLSA-2024-8800.json create mode 100644 data/advisories/2024/RLSA-2024-8830.json create mode 100644 data/advisories/2024/RLSA-2024-8831.json create mode 100644 data/advisories/2024/RLSA-2024-8833.json create mode 100644 data/advisories/2024/RLSA-2024-8836.json create mode 100644 data/advisories/2024/RLSA-2024-8838.json create mode 100644 data/advisories/2024/RLSA-2024-8842.json create mode 100644 data/advisories/2024/RLSA-2024-8843.json create mode 100644 data/advisories/2024/RLSA-2024-8846.json create mode 100644 data/advisories/2024/RLSA-2024-8847.json create mode 100644 data/advisories/2024/RLSA-2024-8849.json create mode 100644 data/advisories/2024/RLSA-2024-8856.json create mode 100644 data/advisories/2024/RLSA-2024-8859.json create mode 100644 data/advisories/2024/RLSA-2024-8860.json create mode 100644 data/advisories/2024/RLSA-2024-8870.json create mode 100644 data/advisories/2024/RLSA-2024-8876.json create mode 100644 data/advisories/2024/RLSA-2024-8914.json create mode 100644 data/advisories/2024/RLSA-2024-8922.json create mode 100644 data/advisories/2024/RLSA-2024-8935.json create mode 100644 data/advisories/2024/RLSA-2024-9051.json create mode 100644 data/advisories/2024/RLSA-2024-9056.json create mode 100644 data/advisories/2024/RLSA-2024-9088.json create mode 100644 data/advisories/2024/RLSA-2024-9092.json create mode 100644 data/advisories/2024/RLSA-2024-9093.json create mode 100644 data/advisories/2024/RLSA-2024-9102.json create mode 100644 data/advisories/2024/RLSA-2024-9114.json create mode 100644 data/advisories/2024/RLSA-2024-9122.json create mode 100644 data/advisories/2024/RLSA-2024-9128.json create mode 100644 data/advisories/2024/RLSA-2024-9135.json create mode 100644 data/advisories/2024/RLSA-2024-9136.json create mode 100644 data/advisories/2024/RLSA-2024-9150.json create mode 100644 data/advisories/2024/RLSA-2024-9158.json create mode 100644 data/advisories/2024/RLSA-2024-9167.json create mode 100644 data/advisories/2024/RLSA-2024-9180.json create mode 100644 data/advisories/2024/RLSA-2024-9181.json create mode 100644 data/advisories/2024/RLSA-2024-9184.json create mode 100644 data/advisories/2024/RLSA-2024-9185.json create mode 100644 data/advisories/2024/RLSA-2024-9188.json create mode 100644 data/advisories/2024/RLSA-2024-9190.json create mode 100644 data/advisories/2024/RLSA-2024-9192.json create mode 100644 data/advisories/2024/RLSA-2024-9193.json create mode 100644 data/advisories/2024/RLSA-2024-9194.json create mode 100644 data/advisories/2024/RLSA-2024-9195.json create mode 100644 data/advisories/2024/RLSA-2024-9200.json create mode 100644 data/advisories/2024/RLSA-2024-9243.json create mode 100644 data/advisories/2024/RLSA-2024-9277.json create mode 100644 data/advisories/2024/RLSA-2024-9281.json create mode 100644 data/advisories/2024/RLSA-2024-9302.json create mode 100644 data/advisories/2024/RLSA-2024-9306.json create mode 100644 data/advisories/2024/RLSA-2024-9325.json create mode 100644 data/advisories/2024/RLSA-2024-9333.json create mode 100644 data/advisories/2024/RLSA-2024-9401.json create mode 100644 data/advisories/2024/RLSA-2024-9404.json create mode 100644 data/advisories/2024/RLSA-2024-9405.json create mode 100644 data/advisories/2024/RLSA-2024-9413.json create mode 100644 data/advisories/2024/RLSA-2024-9423.json create mode 100644 data/advisories/2024/RLSA-2024-9424.json create mode 100644 data/advisories/2024/RLSA-2024-9430.json create mode 100644 data/advisories/2024/RLSA-2024-9439.json create mode 100644 data/advisories/2024/RLSA-2024-9449.json create mode 100644 data/advisories/2024/RLSA-2024-9452.json create mode 100644 data/advisories/2024/RLSA-2024-9456.json create mode 100644 data/advisories/2024/RLSA-2024-9457.json create mode 100644 data/advisories/2024/RLSA-2024-9470.json create mode 100644 data/advisories/2024/RLSA-2024-9472.json create mode 100644 data/advisories/2024/RLSA-2024-9473.json create mode 100644 data/advisories/2024/RLSA-2024-9474.json create mode 100644 data/advisories/2024/RLSA-2024-9502.json create mode 100644 data/advisories/2024/RLSA-2024-9540.json create mode 100644 data/advisories/2024/RLSA-2024-9548.json create mode 100644 data/advisories/2024/RLSA-2024-9555.json create mode 100644 data/advisories/2024/RLSA-2024-9559.json create mode 100644 data/advisories/2024/RLSA-2024-9573.json create mode 100644 data/advisories/2024/RLSA-2024-9625.json create mode 100644 data/advisories/2024/RLSA-2024-9636.json create mode 100644 data/advisories/2024/RLSA-2024-9644.json create mode 100644 data/advisories/2024/RLSA-2024-9689.json create mode 100644 data/advisories/2024/RLSA-2024-9827.json create mode 100644 data/advisories/2024/RXSA-2024-1248.json create mode 100644 data/advisories/2024/RXSA-2024-1607.json create mode 100644 data/advisories/2024/RXSA-2024-4211.json create mode 100644 data/advisories/2024/RXSA-2024-4349.json create mode 100644 data/advisories/2024/RXSA-2024-4928.json create mode 100644 data/advisories/2024/RXSA-2024-5101.json create mode 100644 data/advisories/2024/RXSA-2024-6567.json create mode 100644 data/advisories/2025/RLSA-2025-0012.json create mode 100644 data/advisories/2025/RLSA-2025-0065.json create mode 100644 data/advisories/2025/RLSA-2025-0066.json create mode 100644 data/advisories/2025/RLSA-2025-0083.json create mode 100644 data/advisories/2025/RLSA-2025-0144.json create mode 100644 data/advisories/2025/RLSA-2025-0145.json create mode 100644 data/advisories/2025/RLSA-2025-0161.json create mode 100644 data/advisories/2025/RLSA-2025-0168.json create mode 100644 data/advisories/2025/RLSA-2025-0210.json create mode 100644 data/advisories/2025/RLSA-2025-0222.json create mode 100644 data/advisories/2025/RLSA-2025-0281.json create mode 100644 data/advisories/2025/RLSA-2025-0288.json create mode 100644 data/advisories/2025/RLSA-2025-0308.json create mode 100644 data/advisories/2025/RLSA-2025-0312.json create mode 100644 data/advisories/2025/RLSA-2025-0314.json create mode 100644 data/advisories/2025/RLSA-2025-0324.json create mode 100644 data/advisories/2025/RLSA-2025-0325.json create mode 100644 data/advisories/2025/RLSA-2025-0377.json create mode 100644 data/advisories/2025/RLSA-2025-0381.json create mode 100644 data/advisories/2025/RLSA-2025-0382.json create mode 100644 data/advisories/2025/RLSA-2025-0401.json create mode 100644 data/advisories/2025/RLSA-2025-0422.json create mode 100644 data/advisories/2025/RLSA-2025-0426.json create mode 100644 data/advisories/2025/RLSA-2025-0595.json create mode 100644 data/advisories/2025/RLSA-2025-0667.json create mode 100644 data/advisories/2025/RLSA-2025-0673.json create mode 100644 data/advisories/2025/RLSA-2025-0692.json create mode 100644 data/advisories/2025/RLSA-2025-0693.json create mode 100644 data/advisories/2025/RLSA-2025-0711.json create mode 100644 data/advisories/2025/RLSA-2025-0733.json create mode 100644 data/advisories/2025/RLSA-2025-0737.json create mode 100644 data/advisories/2025/RLSA-2025-0739.json create mode 100644 data/advisories/2025/RLSA-2025-0743.json create mode 100644 data/advisories/2025/RLSA-2025-0746.json create mode 100644 data/advisories/2025/RLSA-2025-0791.json create mode 100644 data/advisories/2025/RLSA-2025-0837.json create mode 100644 data/advisories/2025/RLSA-2025-0838.json create mode 100644 data/advisories/2025/RLSA-2025-0845.json create mode 100644 data/advisories/2025/RLSA-2025-0912.json create mode 100644 data/advisories/2025/RLSA-2025-0914.json create mode 100644 data/advisories/2025/RLSA-2025-0917.json create mode 100644 data/advisories/2025/RLSA-2025-0922.json create mode 100644 data/advisories/2025/RLSA-2025-0923.json create mode 100644 data/advisories/2025/RLSA-2025-0925.json create mode 100644 data/advisories/2025/RLSA-2025-0936.json create mode 100644 data/advisories/2025/RLSA-2025-10027.json create mode 100644 data/advisories/2025/RLSA-2025-10110.json create mode 100644 data/advisories/2025/RLSA-2025-1067.json create mode 100644 data/advisories/2025/RLSA-2025-1068.json create mode 100644 data/advisories/2025/RLSA-2025-10698.json create mode 100644 data/advisories/2025/RLSA-2025-10991.json create mode 100644 data/advisories/2025/RLSA-2025-11030.json create mode 100644 data/advisories/2025/RLSA-2025-11035.json create mode 100644 data/advisories/2025/RLSA-2025-11036.json create mode 100644 data/advisories/2025/RLSA-2025-11298.json create mode 100644 data/advisories/2025/RLSA-2025-11327.json create mode 100644 data/advisories/2025/RLSA-2025-11455.json create mode 100644 data/advisories/2025/RLSA-2025-11805.json create mode 100644 data/advisories/2025/RLSA-2025-12010.json create mode 100644 data/advisories/2025/RLSA-2025-1210.json create mode 100644 data/advisories/2025/RLSA-2025-1215.json create mode 100644 data/advisories/2025/RLSA-2025-1230.json create mode 100644 data/advisories/2025/RLSA-2025-1266.json create mode 100644 data/advisories/2025/RLSA-2025-1283.json create mode 100644 data/advisories/2025/RLSA-2025-1292.json create mode 100644 data/advisories/2025/RLSA-2025-1300.json create mode 100644 data/advisories/2025/RLSA-2025-1301.json create mode 100644 data/advisories/2025/RLSA-2025-1306.json create mode 100644 data/advisories/2025/RLSA-2025-1309.json create mode 100644 data/advisories/2025/RLSA-2025-1314.json create mode 100644 data/advisories/2025/RLSA-2025-1329.json create mode 100644 data/advisories/2025/RLSA-2025-1330.json create mode 100644 data/advisories/2025/RLSA-2025-1338.json create mode 100644 data/advisories/2025/RLSA-2025-1346.json create mode 100644 data/advisories/2025/RLSA-2025-1351.json create mode 100644 data/advisories/2025/RLSA-2025-1372.json create mode 100644 data/advisories/2025/RLSA-2025-1443.json create mode 100644 data/advisories/2025/RLSA-2025-1446.json create mode 100644 data/advisories/2025/RLSA-2025-1517.json create mode 100644 data/advisories/2025/RLSA-2025-1582.json create mode 100644 data/advisories/2025/RLSA-2025-1611.json create mode 100644 data/advisories/2025/RLSA-2025-1613.json create mode 100644 data/advisories/2025/RLSA-2025-1670.json create mode 100644 data/advisories/2025/RLSA-2025-1671.json create mode 100644 data/advisories/2025/RLSA-2025-1673.json create mode 100644 data/advisories/2025/RLSA-2025-1675.json create mode 100644 data/advisories/2025/RLSA-2025-1676.json create mode 100644 data/advisories/2025/RLSA-2025-1681.json create mode 100644 data/advisories/2025/RLSA-2025-1736.json create mode 100644 data/advisories/2025/RLSA-2025-1737.json create mode 100644 data/advisories/2025/RLSA-2025-1738.json create mode 100644 data/advisories/2025/RLSA-2025-1739.json create mode 100644 data/advisories/2025/RLSA-2025-1740.json create mode 100644 data/advisories/2025/RLSA-2025-1741.json create mode 100644 data/advisories/2025/RLSA-2025-1742.json create mode 100644 data/advisories/2025/RLSA-2025-1743.json create mode 100644 data/advisories/2025/RLSA-2025-1915.json create mode 100644 data/advisories/2025/RLSA-2025-1917.json create mode 100644 data/advisories/2025/RLSA-2025-2034.json create mode 100644 data/advisories/2025/RLSA-2025-2452.json create mode 100644 data/advisories/2025/RLSA-2025-2473.json create mode 100644 data/advisories/2025/RLSA-2025-2500.json create mode 100644 data/advisories/2025/RLSA-2025-2502.json create mode 100644 data/advisories/2025/RLSA-2025-2600.json create mode 100644 data/advisories/2025/RLSA-2025-2667.json create mode 100644 data/advisories/2025/RLSA-2025-2670.json create mode 100644 data/advisories/2025/RLSA-2025-2686.json create mode 100644 data/advisories/2025/RLSA-2025-2722.json create mode 100644 data/advisories/2025/RLSA-2025-2863.json create mode 100644 data/advisories/2025/RLSA-2025-2867.json create mode 100644 data/advisories/2025/RLSA-2025-2868.json create mode 100644 data/advisories/2025/RLSA-2025-2872.json create mode 100644 data/advisories/2025/RLSA-2025-2900.json create mode 100644 data/advisories/2025/RLSA-2025-3026.json create mode 100644 data/advisories/2025/RLSA-2025-3082.json create mode 100644 data/advisories/2025/RLSA-2025-3210.json create mode 100644 data/advisories/2025/RLSA-2025-3260.json create mode 100644 data/advisories/2025/RLSA-2025-3388.json create mode 100644 data/advisories/2025/RLSA-2025-3421.json create mode 100644 data/advisories/2025/RLSA-2025-3582.json create mode 100644 data/advisories/2025/RLSA-2025-3615.json create mode 100644 data/advisories/2025/RLSA-2025-3683.json create mode 100644 data/advisories/2025/RLSA-2025-3772.json create mode 100644 data/advisories/2025/RLSA-2025-3828.json create mode 100644 data/advisories/2025/RLSA-2025-3845.json create mode 100644 data/advisories/2025/RLSA-2025-3852.json create mode 100644 data/advisories/2025/RLSA-2025-3855.json create mode 100644 data/advisories/2025/RLSA-2025-3893.json create mode 100644 data/advisories/2025/RLSA-2025-3913.json create mode 100644 data/advisories/2025/RLSA-2025-3974.json create mode 100644 data/advisories/2025/RLSA-2025-3997.json create mode 100644 data/advisories/2025/RLSA-2025-4043.json create mode 100644 data/advisories/2025/RLSA-2025-4048.json create mode 100644 data/advisories/2025/RLSA-2025-4049.json create mode 100644 data/advisories/2025/RLSA-2025-4051.json create mode 100644 data/advisories/2025/RLSA-2025-4063.json create mode 100644 data/advisories/2025/RLSA-2025-4170.json create mode 100644 data/advisories/2025/RLSA-2025-4362.json create mode 100644 data/advisories/2025/RLSA-2025-4458.json create mode 100644 data/advisories/2025/RLSA-2025-4459.json create mode 100644 data/advisories/2025/RLSA-2025-4461.json create mode 100644 data/advisories/2025/RLSA-2025-4560.json create mode 100644 data/advisories/2025/RLSA-2025-4597.json create mode 100644 data/advisories/2025/RLSA-2025-4658.json create mode 100644 data/advisories/2025/RLSA-2025-4791.json create mode 100644 data/advisories/2025/RLSA-2025-4797.json create mode 100644 data/advisories/2025/RLSA-2025-7540.json create mode 100644 data/advisories/2025/RLSA-2025-7569.json create mode 100644 data/advisories/2025/RLSA-2025-7571.json create mode 100644 data/advisories/2025/RLSA-2025-7589.json create mode 100644 data/advisories/2025/RLSA-2025-7686.json create mode 100644 data/advisories/2025/RLSA-2025-7894.json create mode 100644 data/advisories/2025/RLSA-2025-7895.json create mode 100644 data/advisories/2025/RLSA-2025-8046.json create mode 100644 data/advisories/2025/RLSA-2025-8056.json create mode 100644 data/advisories/2025/RLSA-2025-8060.json create mode 100644 data/advisories/2025/RLSA-2025-8132.json create mode 100644 data/advisories/2025/RLSA-2025-8201.json create mode 100644 data/advisories/2025/RLSA-2025-8246.json create mode 100644 data/advisories/2025/RLSA-2025-8292.json create mode 100644 data/advisories/2025/RLSA-2025-8308.json create mode 100644 data/advisories/2025/RLSA-2025-8336.json create mode 100644 data/advisories/2025/RLSA-2025-8395.json create mode 100644 data/advisories/2025/RLSA-2025-8411.json create mode 100644 data/advisories/2025/RLSA-2025-8414.json create mode 100644 data/advisories/2025/RLSA-2025-8419.json create mode 100644 data/advisories/2025/RLSA-2025-8421.json create mode 100644 data/advisories/2025/RLSA-2025-8432.json create mode 100644 data/advisories/2025/RLSA-2025-8478.json create mode 100644 data/advisories/2025/RLSA-2025-8506.json create mode 100644 data/advisories/2025/RLSA-2025-8514.json create mode 100644 data/advisories/2025/RLSA-2025-8667.json create mode 100644 data/advisories/2025/RLSA-2025-8676.json create mode 100644 data/advisories/2025/RLSA-2025-8686.json create mode 100644 data/advisories/2025/RLSA-2025-8696.json create mode 100644 data/advisories/2025/RLSA-2025-8743.json create mode 100644 data/advisories/2025/RLSA-2025-8756.json create mode 100644 data/advisories/2025/RLSA-2025-8812.json create mode 100644 data/advisories/2025/RLSA-2025-8815.json create mode 100644 data/advisories/2025/RLSA-2025-8844.json create mode 100644 data/advisories/2025/RLSA-2025-8918.json create mode 100644 data/advisories/2025/RLSA-2025-8958.json create mode 100644 data/advisories/2025/RLSA-2025-9060.json create mode 100644 data/advisories/2025/RLSA-2025-9119.json create mode 100644 data/advisories/2025/RLSA-2025-9142.json create mode 100644 data/advisories/2025/RLSA-2025-9165.json create mode 100644 data/advisories/2025/RLSA-2025-9188.json create mode 100644 data/advisories/2025/RLSA-2025-9305.json create mode 100644 data/advisories/2025/RLSA-2025-9318.json create mode 100644 data/advisories/2025/RLSA-2025-9580.json create mode 100644 data/advisories/2025/RXSA-2025-1262.json diff --git a/data/advisories/2019/RLSA-2019-0975.json b/data/advisories/2019/RLSA-2019-0975.json new file mode 100644 index 0000000..e927876 --- /dev/null +++ b/data/advisories/2019/RLSA-2019-0975.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:0975","synopsis":"Important: container-tools:rhel8 security and bug fix update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for oci-umount, oci-systemd-hook.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* A flaw was found in the way runc handled system file descriptors when running containers. A malicious container could use this flaw to overwrite contents of the runc binary and consequently run arbitrary commands on the container host system. (CVE-2019-5736)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* [stream Rocky Linux8] rebase container-selinux to 2.94 (BZ#1693675)\n\n* [stream Rocky Linux8] unable to mount disk at `/var/lib/containers` via `systemd` unit when `container-selinux` policy installed (BZ#1695669)\n\n* [stream Rocky Linux8] don't allow a container to connect to random services (BZ#1695689)","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1664908","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1664908","description":""},{"ticket":"1693675","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1693675","description":"* [stream rhel8] rebase container-selinux to 2.94"},{"ticket":"1695669","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1695669","description":"* [stream rhel8] unable to mount disk at `/var/lib/containers` via `systemd` unit when `container-selinux` policy installed"},{"ticket":"1695689","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1695689","description":"* [stream rhel8] don't allow a container to connect to random services"}],"cves":[{"name":"CVE-2019-5736","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5736","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3BaseScore":"7.7","cwe":"CWE-672"}],"references":[],"publishedAt":"2019-05-07T03:39:11Z","rpms":{"Rocky Linux 8":{"nvras":["oci-systemd-hook-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-systemd-hook-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.src.rpm","oci-systemd-hook-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-systemd-hook-debuginfo-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-systemd-hook-debuginfo-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-systemd-hook-debugsource-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-systemd-hook-debugsource-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-umount-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-umount-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.src.rpm","oci-umount-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-umount-debuginfo-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-umount-debuginfo-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-umount-debugsource-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-umount-debugsource-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:0975","url":"https://access.redhat.com/errata/RHSA-2019:0975","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2019/RLSA-2019-0981.json b/data/advisories/2019/RLSA-2019-0981.json new file mode 100644 index 0000000..3f31938 --- /dev/null +++ b/data/advisories/2019/RLSA-2019-0981.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:0981","synopsis":"Important: python27:2.7 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for python2-rpm-macros, python-docutils, pytest, python-psycopg2, python-PyMySQL, python-lxml, PyYAML, python-pytest-mock, python-attrs, python-jinja2, python-mock, python-ipaddress, python-funcsigs, python-py, python-chardet, python-markupsafe, python-pluggy, python-pygments, Cython, babel, python-pysocks, python-coverage, python-setuptools_scm, pytz, python-nose, python-idna.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing.\n\nSQLAlchemy is an Object Relational Mapper (ORM) that provides a flexible, high-level interface to SQL databases.\n\nSecurity Fix(es):\n\n* python: Information Disclosure due to urlsplit improper NFKC normalization (CVE-2019-9636)\n\n* python-sqlalchemy: SQL Injection when the order_by parameter can be controlled (CVE-2019-7164)\n\n* python-sqlalchemy: SQL Injection when the group_by parameter can be controlled (CVE-2019-7548)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1674059","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1674059","description":""},{"ticket":"1678520","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1678520","description":""},{"ticket":"1688543","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1688543","description":""}],"cves":[{"name":"CVE-2019-7164","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7164","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3BaseScore":"7.3","cwe":"UNKNOWN"},{"name":"CVE-2019-7548","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7548","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3BaseScore":"7.3","cwe":"CWE-89"},{"name":"CVE-2019-9636","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9636","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"9.8","cwe":"CWE-172"}],"references":[],"publishedAt":"2019-05-07T03:40:00Z","rpms":{"Rocky Linux 8":{"nvras":["python-markupsafe-0:0.23-19.el8.src.rpm","python2-psycopg2-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python-attrs-0:17.4.0-10.module+el8.5.0+706+735ec4b3.src.rpm","babel-0:2.5.1-9.module+el8.4.0+403+9ae17a31.noarch.rpm","babel-0:2.5.1-9.module+el8.4.0+403+9ae17a31.src.rpm","Cython-0:0.28.1-7.module+el8.5.0+706+735ec4b3.src.rpm","Cython-0:0.28.1-7.module+el8.4.0+403+9ae17a31.src.rpm","pytest-0:3.4.2-13.module+el8.5.0+706+735ec4b3.src.rpm","pytest-0:3.4.2-13.module+el8.4.0+403+9ae17a31.src.rpm","python2-attrs-0:17.4.0-10.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-attrs-0:17.4.0-10.module+el8.4.0+403+9ae17a31.noarch.rpm","python-funcsigs-0:1.0.2-13.module+el8.4.0+403+9ae17a31.src.rpm","python2-babel-0:2.5.1-9.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-chardet-0:3.0.4-10.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-chardet-0:3.0.4-10.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-coverage-0:4.5.1-4.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-coverage-0:4.5.1-4.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-coverage-0:4.5.1-4.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-coverage-0:4.5.1-4.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-coverage-debuginfo-0:4.5.1-4.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-coverage-debuginfo-0:4.5.1-4.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-coverage-debuginfo-0:4.5.1-4.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-coverage-debuginfo-0:4.5.1-4.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-Cython-0:0.28.1-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-Cython-0:0.28.1-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-Cython-0:0.28.1-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-Cython-0:0.28.1-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-Cython-debuginfo-0:0.28.1-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-Cython-debuginfo-0:0.28.1-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-Cython-debuginfo-0:0.28.1-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-Cython-debuginfo-0:0.28.1-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-docutils-0:0.14-12.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-funcsigs-0:1.0.2-13.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-idna-0:2.5-7.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-idna-0:2.5-7.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-ipaddress-0:1.0.18-6.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-jinja2-0:2.10-8.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-markupsafe-0:0.23-19.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-markupsafe-0:0.23-19.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-markupsafe-0:0.23-19.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-markupsafe-0:0.23-19.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-mock-0:2.0.0-13.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-nose-0:1.3.7-30.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-pluggy-0:0.6.0-8.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-pluggy-0:0.6.0-8.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-psycopg2-0:2.7.5-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-psycopg2-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-psycopg2-0:2.7.5-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-psycopg2-debug-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-psycopg2-debug-0:2.7.5-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-psycopg2-debug-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-psycopg2-debug-0:2.7.5-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-psycopg2-debug-debuginfo-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-psycopg2-debug-debuginfo-0:2.7.5-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-psycopg2-debug-debuginfo-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-psycopg2-debug-debuginfo-0:2.7.5-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-psycopg2-debuginfo-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-psycopg2-debuginfo-0:2.7.5-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-psycopg2-debuginfo-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-psycopg2-debuginfo-0:2.7.5-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-psycopg2-tests-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-psycopg2-tests-0:2.7.5-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-psycopg2-tests-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-psycopg2-tests-0:2.7.5-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-py-0:1.5.3-6.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-py-0:1.5.3-6.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-pygments-0:2.2.0-20.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-PyMySQL-0:0.8.0-10.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-PyMySQL-0:0.8.0-10.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-pysocks-0:1.6.8-6.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-pysocks-0:1.6.8-6.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-pytest-0:3.4.2-13.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-pytest-0:3.4.2-13.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-pytest-mock-0:1.9.0-4.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-pytz-0:2017.2-12.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-pytz-0:2017.2-12.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-pyyaml-0:3.12-16.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-pyyaml-0:3.12-16.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-pyyaml-0:3.12-16.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-pyyaml-0:3.12-16.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-pyyaml-debuginfo-0:3.12-16.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-pyyaml-debuginfo-0:3.12-16.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-pyyaml-debuginfo-0:3.12-16.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-pyyaml-debuginfo-0:3.12-16.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-rpm-macros-0:3-38.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-rpm-macros-0:3-38.module+el8.4.0+403+9ae17a31.src.rpm","python2-setuptools_scm-0:1.15.7-6.module+el8.4.0+403+9ae17a31.noarch.rpm","python-attrs-0:17.4.0-10.module+el8.4.0+403+9ae17a31.src.rpm","python-chardet-0:3.0.4-10.module+el8.5.0+706+735ec4b3.src.rpm","python-chardet-0:3.0.4-10.module+el8.4.0+403+9ae17a31.src.rpm","python-coverage-0:4.5.1-4.module+el8.5.0+706+735ec4b3.src.rpm","python-coverage-0:4.5.1-4.module+el8.4.0+403+9ae17a31.src.rpm","python-docutils-0:0.14-12.module+el8.4.0+403+9ae17a31.src.rpm","python-docutils-0:0.14-12.module+el8.3.0+120+426d8baf.src.rpm","python-idna-0:2.5-7.module+el8.5.0+706+735ec4b3.src.rpm","python-idna-0:2.5-7.module+el8.4.0+403+9ae17a31.src.rpm","python-ipaddress-0:1.0.18-6.module+el8.4.0+403+9ae17a31.src.rpm","python-jinja2-0:2.10-8.module+el8.4.0+403+9ae17a31.src.rpm","python-lxml-0:4.2.3-3.el8.src.rpm","python-mock-0:2.0.0-13.module+el8.4.0+403+9ae17a31.src.rpm","python-nose-0:1.3.7-30.module+el8.3.0+120+426d8baf.src.rpm","python-nose-docs-0:1.3.7-30.module+el8.3.0+120+426d8baf.noarch.rpm","python-pluggy-0:0.6.0-8.module+el8.5.0+706+735ec4b3.src.rpm","python-pluggy-0:0.6.0-8.module+el8.4.0+403+9ae17a31.src.rpm","python-psycopg2-0:2.7.5-7.el8.src.rpm","python-psycopg2-doc-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python-psycopg2-doc-0:2.7.5-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python-psycopg2-doc-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python-psycopg2-doc-0:2.7.5-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python-py-0:1.5.3-6.module+el8.5.0+706+735ec4b3.src.rpm","python-py-0:1.5.3-6.module+el8.4.0+403+9ae17a31.src.rpm","python-pygments-0:2.2.0-20.module+el8.3.0+120+426d8baf.src.rpm","python-PyMySQL-0:0.8.0-10.module+el8.5.0+706+735ec4b3.src.rpm","python-PyMySQL-0:0.8.0-10.module+el8.3.0+120+426d8baf.src.rpm","python-pysocks-0:1.6.8-6.module+el8.5.0+706+735ec4b3.src.rpm","python-pysocks-0:1.6.8-6.module+el8.4.0+403+9ae17a31.src.rpm","python-pytest-mock-0:1.9.0-4.module+el8.4.0+403+9ae17a31.src.rpm","python-setuptools_scm-0:1.15.7-6.module+el8.4.0+403+9ae17a31.src.rpm","pytz-0:2017.2-12.module+el8.5.0+706+735ec4b3.src.rpm","pytz-0:2017.2-12.module+el8.4.0+403+9ae17a31.src.rpm","PyYAML-0:3.12-16.module+el8.5.0+706+735ec4b3.src.rpm","PyYAML-0:3.12-16.module+el8.4.0+403+9ae17a31.src.rpm","python-markupsafe-0:0.23-19.module+el8.5.0+706+735ec4b3.src.rpm","python-psycopg2-0:2.7.5-7.module+el8.5.0+706+735ec4b3.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:0981","url":"https://access.redhat.com/errata/RHSA-2019:0981","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2019/RLSA-2019-0984.json b/data/advisories/2019/RLSA-2019-0984.json new file mode 100644 index 0000000..54ce427 --- /dev/null +++ b/data/advisories/2019/RLSA-2019-0984.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:0984","synopsis":"Moderate: python36:3.6 security update","severity":"SEVERITY_MODERATE","topic":"An update is available for python-docutils, python-pygments, python-PyMySQL, python-docs, python36, python-nose.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.\n\nSQLAlchemy is an Object Relational Mapper (ORM) that provides a flexible, high-level interface to SQL databases.\n\nSecurity Fix(es):\n\n* python-sqlalchemy: SQL Injection when the order_by parameter can be controlled (CVE-2019-7164)\n\n* python-sqlalchemy: SQL Injection when the group_by parameter can be controlled (CVE-2019-7548)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1674059","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1674059","description":""},{"ticket":"1678520","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1678520","description":""}],"cves":[{"name":"CVE-2019-7164","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7164","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3BaseScore":"7.3","cwe":"UNKNOWN"},{"name":"CVE-2019-7548","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7548","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3BaseScore":"7.3","cwe":"CWE-89"}],"references":[],"publishedAt":"2019-05-07T03:40:33Z","rpms":{"Rocky Linux 8":{"nvras":["python36-0:3.6.8-2.module+el8.3.0+120+426d8baf.aarch64.rpm","python36-0:3.6.8-2.module+el8.3.0+120+426d8baf.src.rpm","python36-0:3.6.8-2.module+el8.3.0+120+426d8baf.x86_64.rpm","python36-debug-0:3.6.8-2.module+el8.3.0+120+426d8baf.aarch64.rpm","python36-debug-0:3.6.8-2.module+el8.3.0+120+426d8baf.x86_64.rpm","python36-devel-0:3.6.8-2.module+el8.3.0+120+426d8baf.aarch64.rpm","python36-devel-0:3.6.8-2.module+el8.3.0+120+426d8baf.x86_64.rpm","python36-rpm-macros-0:3.6.8-2.module+el8.3.0+120+426d8baf.noarch.rpm","python3-docs-0:3.6.7-2.module+el8.4.0+597+ddf0ddea.noarch.rpm","python3-docs-0:3.6.7-2.module+el8.3.0+120+426d8baf.noarch.rpm","python3-docutils-0:0.14-12.module+el8.4.0+597+ddf0ddea.noarch.rpm","python3-docutils-0:0.14-12.module+el8.3.0+120+426d8baf.noarch.rpm","python3-nose-0:1.3.7-30.module+el8.3.0+120+426d8baf.noarch.rpm","python3-pygments-0:2.2.0-20.module+el8.3.0+120+426d8baf.noarch.rpm","python3-PyMySQL-0:0.8.0-10.module+el8.3.0+120+426d8baf.noarch.rpm","python-docs-0:3.6.7-2.module+el8.4.0+597+ddf0ddea.src.rpm","python-docs-0:3.6.7-2.module+el8.3.0+120+426d8baf.src.rpm","python-docutils-0:0.14-12.module+el8.4.0+403+9ae17a31.src.rpm","python-docutils-0:0.14-12.module+el8.3.0+120+426d8baf.src.rpm","python-nose-0:1.3.7-30.module+el8.3.0+120+426d8baf.src.rpm","python-nose-docs-0:1.3.7-30.module+el8.3.0+120+426d8baf.noarch.rpm","python-pygments-0:2.2.0-20.module+el8.3.0+120+426d8baf.src.rpm","python-PyMySQL-0:0.8.0-10.module+el8.5.0+706+735ec4b3.src.rpm","python-PyMySQL-0:0.8.0-10.module+el8.3.0+120+426d8baf.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:0984","url":"https://access.redhat.com/errata/RHSA-2019:0984","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2019/RLSA-2019-1152.json b/data/advisories/2019/RLSA-2019-1152.json new file mode 100644 index 0000000..4d79490 --- /dev/null +++ b/data/advisories/2019/RLSA-2019-1152.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:1152","synopsis":"Important: python-jinja2 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for python-jinja2.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The python-jinja2 package contains Jinja2, a template engine written in pure Python. Jinja2 provides a Django inspired non-XML syntax but supports inline expressions and an optional sandboxed environment. \n\nSecurity Fix(es):\n\n* python-jinja2: str.format_map allows sandbox escape (CVE-2019-10906)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1698839","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1698839","description":""}],"cves":[{"name":"CVE-2019-10906","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10906","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3BaseScore":"9.0","cwe":"CWE-138"}],"references":[],"publishedAt":"2019-05-13T10:43:53Z","rpms":{"Rocky Linux 8":{"nvras":["python3-jinja2-0:2.10.1-2.el8_0.noarch.rpm","python-jinja2-0:2.10.1-2.el8_0.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:1152","url":"https://access.redhat.com/errata/RHSA-2019:1152","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2019/RLSA-2019-1529.json b/data/advisories/2019/RLSA-2019-1529.json new file mode 100644 index 0000000..740581b --- /dev/null +++ b/data/advisories/2019/RLSA-2019-1529.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:1529","synopsis":"Important: pki-deps:10.6 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for glassfish-jaxb-api, glassfish-fastinfoset, xalan-j2, xmlstreambuffer, apache-commons-lang, jackson-module-jaxb-annotations, apache-commons-collections, javassist, python-nss, bea-stax, velocity, xml-commons-apis, resteasy, xsom, slf4j, stax-ex, xerces-j2, jakarta-commons-httpclient, glassfish-jaxb, xml-commons-resolver, relaxngDatatype.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The Public Key Infrastructure (PKI) Deps module contains fundamental packages required as dependencies for the pki-core module by Rocky Enterprise Software Foundation Certificate System.\n\nSecurity Fix(es):\n\n* tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up (CVE-2018-8037)\n\n* tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins (CVE-2018-8014)\n\n* tomcat: Open redirect in default servlet (CVE-2018-11784)\n\n* tomcat: Host name verification missing in WebSocket client (CVE-2018-8034)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1579611","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1579611","description":""},{"ticket":"1607580","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1607580","description":""},{"ticket":"1607582","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1607582","description":""},{"ticket":"1636512","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1636512","description":""}],"cves":[{"name":"CVE-2018-11784","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11784","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3BaseScore":"5.3","cwe":"CWE-99"},{"name":"CVE-2018-8014","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8014","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3BaseScore":"5.7","cwe":"CWE-284"},{"name":"CVE-2018-8034","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8034","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3BaseScore":"4.3","cwe":"CWE-20"},{"name":"CVE-2018-8037","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8037","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3BaseScore":"9.1","cwe":"UNKNOWN"}],"references":[],"publishedAt":"2019-06-18T16:36:21Z","rpms":{"Rocky Linux 8":{"nvras":["apache-commons-collections-0:3.2.2-10.module+el8.3.0+53+ea062990.noarch.rpm","apache-commons-collections-0:3.2.2-10.module+el8.3.0+74+855e3f5d.noarch.rpm","apache-commons-collections-0:3.2.2-10.module+el8.3.0+53+ea062990.src.rpm","apache-commons-collections-0:3.2.2-10.module+el8.3.0+74+855e3f5d.src.rpm","apache-commons-lang-0:2.6-21.module+el8.3.0+53+ea062990.noarch.rpm","apache-commons-lang-0:2.6-21.module+el8.3.0+74+855e3f5d.noarch.rpm","apache-commons-lang-0:2.6-21.module+el8.3.0+53+ea062990.src.rpm","apache-commons-lang-0:2.6-21.module+el8.3.0+74+855e3f5d.src.rpm","bea-stax-0:1.2.0-16.module+el8.3.0+53+ea062990.src.rpm","bea-stax-api-0:1.2.0-16.module+el8.3.0+53+ea062990.noarch.rpm","glassfish-fastinfoset-0:1.2.13-9.module+el8.3.0+53+ea062990.noarch.rpm","glassfish-fastinfoset-0:1.2.13-9.module+el8.3.0+53+ea062990.src.rpm","glassfish-jaxb-0:2.2.11-11.module+el8.3.0+53+ea062990.src.rpm","glassfish-jaxb-api-0:2.2.12-8.module+el8.3.0+53+ea062990.noarch.rpm","glassfish-jaxb-api-0:2.2.12-8.module+el8.3.0+53+ea062990.src.rpm","glassfish-jaxb-core-0:2.2.11-11.module+el8.3.0+53+ea062990.noarch.rpm","glassfish-jaxb-runtime-0:2.2.11-11.module+el8.3.0+53+ea062990.noarch.rpm","glassfish-jaxb-txw2-0:2.2.11-11.module+el8.3.0+53+ea062990.noarch.rpm","jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.3.0+53+ea062990.noarch.rpm","jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.3.0+53+ea062990.src.rpm","jakarta-commons-httpclient-1:3.1-28.module+el8.3.0+53+ea062990.noarch.rpm","jakarta-commons-httpclient-1:3.1-28.module+el8.3.0+74+855e3f5d.noarch.rpm","jakarta-commons-httpclient-1:3.1-28.module+el8.3.0+53+ea062990.src.rpm","jakarta-commons-httpclient-1:3.1-28.module+el8.3.0+74+855e3f5d.src.rpm","javassist-0:3.18.1-8.module+el8.3.0+53+ea062990.noarch.rpm","javassist-0:3.18.1-8.module+el8.3.0+74+855e3f5d.noarch.rpm","javassist-0:3.18.1-8.module+el8.3.0+53+ea062990.src.rpm","javassist-0:3.18.1-8.module+el8.3.0+74+855e3f5d.src.rpm","javassist-javadoc-0:3.18.1-8.module+el8.3.0+53+ea062990.noarch.rpm","javassist-javadoc-0:3.18.1-8.module+el8.3.0+74+855e3f5d.noarch.rpm","python3-nss-0:1.0.1-10.module+el8.3.0+53+ea062990.aarch64.rpm","python3-nss-0:1.0.1-10.module+el8.3.0+53+ea062990.x86_64.rpm","python3-nss-debuginfo-0:1.0.1-10.module+el8.3.0+53+ea062990.aarch64.rpm","python3-nss-debuginfo-0:1.0.1-10.module+el8.3.0+53+ea062990.x86_64.rpm","python-nss-0:1.0.1-10.module+el8.3.0+53+ea062990.src.rpm","python-nss-debugsource-0:1.0.1-10.module+el8.3.0+53+ea062990.aarch64.rpm","python-nss-debugsource-0:1.0.1-10.module+el8.3.0+53+ea062990.x86_64.rpm","python-nss-doc-0:1.0.1-10.module+el8.3.0+53+ea062990.aarch64.rpm","python-nss-doc-0:1.0.1-10.module+el8.3.0+53+ea062990.x86_64.rpm","relaxngDatatype-0:2011.1-7.module+el8.3.0+53+ea062990.noarch.rpm","relaxngDatatype-0:2011.1-7.module+el8.3.0+53+ea062990.src.rpm","resteasy-0:3.0.26-3.module+el8.3.0+53+ea062990.noarch.rpm","resteasy-0:3.0.26-3.module+el8.3.0+53+ea062990.src.rpm","slf4j-0:1.7.25-4.module+el8.5.0+697+f586bb30.noarch.rpm","slf4j-0:1.7.25-4.module+el8.3.0+74+855e3f5d.noarch.rpm","slf4j-0:1.7.25-4.module+el8.3.0+133+b8b54b58.noarch.rpm","slf4j-0:1.7.25-4.module+el8.5.0+697+f586bb30.src.rpm","slf4j-0:1.7.25-4.module+el8.3.0+74+855e3f5d.src.rpm","slf4j-0:1.7.25-4.module+el8.3.0+133+b8b54b58.src.rpm","slf4j-jdk14-0:1.7.25-4.module+el8.5.0+697+f586bb30.noarch.rpm","slf4j-jdk14-0:1.7.25-4.module+el8.3.0+74+855e3f5d.noarch.rpm","slf4j-jdk14-0:1.7.25-4.module+el8.3.0+53+ea062990.noarch.rpm","stax-ex-0:1.7.7-8.module+el8.3.0+53+ea062990.noarch.rpm","stax-ex-0:1.7.7-8.module+el8.3.0+53+ea062990.src.rpm","velocity-0:1.7-24.module+el8.3.0+53+ea062990.noarch.rpm","velocity-0:1.7-24.module+el8.3.0+74+855e3f5d.noarch.rpm","velocity-0:1.7-24.module+el8.3.0+53+ea062990.src.rpm","velocity-0:1.7-24.module+el8.3.0+74+855e3f5d.src.rpm","xalan-j2-0:2.7.1-38.module+el8.3.0+53+ea062990.noarch.rpm","xalan-j2-0:2.7.1-38.module+el8.3.0+74+855e3f5d.noarch.rpm","xalan-j2-0:2.7.1-38.module+el8.3.0+53+ea062990.src.rpm","xalan-j2-0:2.7.1-38.module+el8.3.0+74+855e3f5d.src.rpm","xerces-j2-0:2.11.0-34.module+el8.3.0+53+ea062990.noarch.rpm","xerces-j2-0:2.11.0-34.module+el8.3.0+74+855e3f5d.noarch.rpm","xerces-j2-0:2.11.0-34.module+el8.3.0+53+ea062990.src.rpm","xerces-j2-0:2.11.0-34.module+el8.3.0+74+855e3f5d.src.rpm","xml-commons-apis-0:1.4.01-25.module+el8.5.0+697+f586bb30.noarch.rpm","xml-commons-apis-0:1.4.01-25.module+el8.3.0+74+855e3f5d.noarch.rpm","xml-commons-apis-0:1.4.01-25.module+el8.3.0+53+ea062990.noarch.rpm","xml-commons-apis-0:1.4.01-25.module+el8.5.0+697+f586bb30.src.rpm","xml-commons-apis-0:1.4.01-25.module+el8.3.0+74+855e3f5d.src.rpm","xml-commons-apis-0:1.4.01-25.module+el8.3.0+53+ea062990.src.rpm","xml-commons-resolver-0:1.2-26.module+el8.3.0+53+ea062990.noarch.rpm","xml-commons-resolver-0:1.2-26.module+el8.3.0+74+855e3f5d.noarch.rpm","xml-commons-resolver-0:1.2-26.module+el8.3.0+53+ea062990.src.rpm","xml-commons-resolver-0:1.2-26.module+el8.3.0+74+855e3f5d.src.rpm","xmlstreambuffer-0:1.5.4-8.module+el8.3.0+53+ea062990.noarch.rpm","xmlstreambuffer-0:1.5.4-8.module+el8.3.0+53+ea062990.src.rpm","xsom-0:0-19.20110809svn.module+el8.3.0+53+ea062990.noarch.rpm","xsom-0:0-19.20110809svn.module+el8.3.0+53+ea062990.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:1529","url":"https://access.redhat.com/errata/RHSA-2019:1529","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2019/RLSA-2019-1972.json b/data/advisories/2019/RLSA-2019-1972.json new file mode 100644 index 0000000..18d9ff4 --- /dev/null +++ b/data/advisories/2019/RLSA-2019-1972.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:1972","synopsis":"Important: ruby:2.5 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for rubygem-bson, rubygem-mysql2, rubygem-bundler, rubygem-mongo, rubygem-pg, rubygem-abrt.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.\n\nSecurity Fix(es):\n\n* rubygems: Installing a malicious gem may lead to arbitrary code execution (CVE-2019-8324)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1692520","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1692520","description":""}],"cves":[{"name":"CVE-2019-8324","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8324","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.2","cwe":"CWE-20"}],"references":[],"publishedAt":"2019-07-30T11:16:25Z","rpms":{"Rocky Linux 8":{"nvras":["rubygem-abrt-0:0.3.0-4.module+el8.5.0+738+032c9c02.noarch.rpm","rubygem-abrt-0:0.3.0-4.module+el8.3.0+167+5c390590.noarch.rpm","rubygem-abrt-0:0.3.0-4.module+el8.4.0+592+03ff458a.noarch.rpm","rubygem-abrt-0:0.3.0-4.module+el8.5.0+738+032c9c02.src.rpm","rubygem-abrt-0:0.3.0-4.module+el8.3.0+167+5c390590.src.rpm","rubygem-abrt-0:0.3.0-4.module+el8.4.0+592+03ff458a.src.rpm","rubygem-abrt-doc-0:0.3.0-4.module+el8.5.0+738+032c9c02.noarch.rpm","rubygem-abrt-doc-0:0.3.0-4.module+el8.3.0+167+5c390590.noarch.rpm","rubygem-abrt-doc-0:0.3.0-4.module+el8.4.0+592+03ff458a.noarch.rpm","rubygem-bson-0:4.3.0-2.module+el8.4.0+592+03ff458a.aarch64.rpm","rubygem-bson-0:4.3.0-2.module+el8.3.0+167+5c390590.aarch64.rpm","rubygem-bson-0:4.3.0-2.module+el8.4.0+592+03ff458a.src.rpm","rubygem-bson-0:4.3.0-2.module+el8.3.0+167+5c390590.src.rpm","rubygem-bson-0:4.3.0-2.module+el8.4.0+592+03ff458a.x86_64.rpm","rubygem-bson-0:4.3.0-2.module+el8.3.0+167+5c390590.x86_64.rpm","rubygem-bson-debuginfo-0:4.3.0-2.module+el8.4.0+592+03ff458a.aarch64.rpm","rubygem-bson-debuginfo-0:4.3.0-2.module+el8.3.0+167+5c390590.aarch64.rpm","rubygem-bson-debuginfo-0:4.3.0-2.module+el8.4.0+592+03ff458a.x86_64.rpm","rubygem-bson-debuginfo-0:4.3.0-2.module+el8.3.0+167+5c390590.x86_64.rpm","rubygem-bson-debugsource-0:4.3.0-2.module+el8.4.0+592+03ff458a.aarch64.rpm","rubygem-bson-debugsource-0:4.3.0-2.module+el8.3.0+167+5c390590.aarch64.rpm","rubygem-bson-debugsource-0:4.3.0-2.module+el8.4.0+592+03ff458a.x86_64.rpm","rubygem-bson-debugsource-0:4.3.0-2.module+el8.3.0+167+5c390590.x86_64.rpm","rubygem-bson-doc-0:4.3.0-2.module+el8.4.0+592+03ff458a.noarch.rpm","rubygem-bson-doc-0:4.3.0-2.module+el8.3.0+167+5c390590.noarch.rpm","rubygem-bundler-0:1.16.1-3.module+el8.3.0+167+5c390590.noarch.rpm","rubygem-bundler-0:1.16.1-3.module+el8.4.0+592+03ff458a.noarch.rpm","rubygem-bundler-0:1.16.1-3.module+el8.3.0+167+5c390590.src.rpm","rubygem-bundler-0:1.16.1-3.module+el8.4.0+592+03ff458a.src.rpm","rubygem-bundler-doc-0:1.16.1-3.module+el8.3.0+167+5c390590.noarch.rpm","rubygem-bundler-doc-0:1.16.1-3.module+el8.4.0+592+03ff458a.noarch.rpm","rubygem-mongo-0:2.5.1-2.module+el8.4.0+592+03ff458a.noarch.rpm","rubygem-mongo-0:2.5.1-2.module+el8.4.0+349+3470f258.noarch.rpm","rubygem-mongo-0:2.5.1-2.module+el8.4.0+592+03ff458a.src.rpm","rubygem-mongo-0:2.5.1-2.module+el8.4.0+349+3470f258.src.rpm","rubygem-mongo-doc-0:2.5.1-2.module+el8.4.0+592+03ff458a.noarch.rpm","rubygem-mongo-doc-0:2.5.1-2.module+el8.4.0+349+3470f258.noarch.rpm","rubygem-mysql2-0:0.4.10-4.module+el8.5.0+739+43897a5e.aarch64.rpm","rubygem-mysql2-0:0.4.10-4.module+el8.3.0+167+5c390590.aarch64.rpm","rubygem-mysql2-0:0.4.10-4.module+el8.4.0+592+03ff458a.aarch64.rpm","rubygem-mysql2-0:0.4.10-4.module+el8.5.0+739+43897a5e.src.rpm","rubygem-mysql2-0:0.4.10-4.module+el8.3.0+167+5c390590.src.rpm","rubygem-mysql2-0:0.4.10-4.module+el8.4.0+592+03ff458a.src.rpm","rubygem-mysql2-0:0.4.10-4.module+el8.5.0+739+43897a5e.x86_64.rpm","rubygem-mysql2-0:0.4.10-4.module+el8.3.0+167+5c390590.x86_64.rpm","rubygem-mysql2-0:0.4.10-4.module+el8.4.0+592+03ff458a.x86_64.rpm","rubygem-mysql2-debuginfo-0:0.4.10-4.module+el8.5.0+739+43897a5e.aarch64.rpm","rubygem-mysql2-debuginfo-0:0.4.10-4.module+el8.3.0+167+5c390590.aarch64.rpm","rubygem-mysql2-debuginfo-0:0.4.10-4.module+el8.4.0+592+03ff458a.aarch64.rpm","rubygem-mysql2-debuginfo-0:0.4.10-4.module+el8.5.0+739+43897a5e.x86_64.rpm","rubygem-mysql2-debuginfo-0:0.4.10-4.module+el8.3.0+167+5c390590.x86_64.rpm","rubygem-mysql2-debuginfo-0:0.4.10-4.module+el8.4.0+592+03ff458a.x86_64.rpm","rubygem-mysql2-debugsource-0:0.4.10-4.module+el8.5.0+739+43897a5e.aarch64.rpm","rubygem-mysql2-debugsource-0:0.4.10-4.module+el8.3.0+167+5c390590.aarch64.rpm","rubygem-mysql2-debugsource-0:0.4.10-4.module+el8.4.0+592+03ff458a.aarch64.rpm","rubygem-mysql2-debugsource-0:0.4.10-4.module+el8.5.0+739+43897a5e.x86_64.rpm","rubygem-mysql2-debugsource-0:0.4.10-4.module+el8.3.0+167+5c390590.x86_64.rpm","rubygem-mysql2-debugsource-0:0.4.10-4.module+el8.4.0+592+03ff458a.x86_64.rpm","rubygem-mysql2-doc-0:0.4.10-4.module+el8.5.0+739+43897a5e.noarch.rpm","rubygem-mysql2-doc-0:0.4.10-4.module+el8.3.0+167+5c390590.noarch.rpm","rubygem-mysql2-doc-0:0.4.10-4.module+el8.4.0+592+03ff458a.noarch.rpm","rubygem-pg-0:1.0.0-2.module+el8.4.0+592+03ff458a.aarch64.rpm","rubygem-pg-0:1.0.0-2.module+el8.3.0+167+5c390590.aarch64.rpm","rubygem-pg-0:1.0.0-2.module+el8.4.0+592+03ff458a.src.rpm","rubygem-pg-0:1.0.0-2.module+el8.3.0+167+5c390590.src.rpm","rubygem-pg-0:1.0.0-2.module+el8.4.0+592+03ff458a.x86_64.rpm","rubygem-pg-0:1.0.0-2.module+el8.3.0+167+5c390590.x86_64.rpm","rubygem-pg-debuginfo-0:1.0.0-2.module+el8.4.0+592+03ff458a.aarch64.rpm","rubygem-pg-debuginfo-0:1.0.0-2.module+el8.3.0+167+5c390590.aarch64.rpm","rubygem-pg-debuginfo-0:1.0.0-2.module+el8.4.0+592+03ff458a.x86_64.rpm","rubygem-pg-debuginfo-0:1.0.0-2.module+el8.3.0+167+5c390590.x86_64.rpm","rubygem-pg-debugsource-0:1.0.0-2.module+el8.4.0+592+03ff458a.aarch64.rpm","rubygem-pg-debugsource-0:1.0.0-2.module+el8.3.0+167+5c390590.aarch64.rpm","rubygem-pg-debugsource-0:1.0.0-2.module+el8.4.0+592+03ff458a.x86_64.rpm","rubygem-pg-debugsource-0:1.0.0-2.module+el8.3.0+167+5c390590.x86_64.rpm","rubygem-pg-doc-0:1.0.0-2.module+el8.4.0+592+03ff458a.noarch.rpm","rubygem-pg-doc-0:1.0.0-2.module+el8.3.0+167+5c390590.noarch.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:1972","url":"https://access.redhat.com/errata/RHSA-2019:1972","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2019/RLSA-2019-2002.json b/data/advisories/2019/RLSA-2019-2002.json new file mode 100644 index 0000000..f63e3c9 --- /dev/null +++ b/data/advisories/2019/RLSA-2019-2002.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:2002","synopsis":"Important: redis:5 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for redis.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.\n\nSecurity Fix(es):\n\n* redis: Heap buffer overflow in HyperLogLog triggered by malicious client (CVE-2019-10192)\n\n* redis: Stack buffer overflow in HyperLogLog triggered by malicious client (CVE-2019-10193)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1723918","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1723918","description":""},{"ticket":"1727668","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1727668","description":""}],"cves":[{"name":"CVE-2019-10192","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10192","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.2","cwe":"CWE-122"},{"name":"CVE-2019-10193","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10193","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.2","cwe":"CWE-121"}],"references":[],"publishedAt":"2019-08-07T10:40:54Z","rpms":{"Rocky Linux 8":{"nvras":["redis-0:5.0.3-2.module+el8.4.0+393+5af13779.aarch64.rpm","redis-0:5.0.3-2.module+el8.4.0+393+5af13779.src.rpm","redis-0:5.0.3-2.module+el8.4.0+393+5af13779.x86_64.rpm","redis-debuginfo-0:5.0.3-2.module+el8.4.0+393+5af13779.aarch64.rpm","redis-debuginfo-0:5.0.3-2.module+el8.4.0+393+5af13779.x86_64.rpm","redis-debugsource-0:5.0.3-2.module+el8.4.0+393+5af13779.aarch64.rpm","redis-debugsource-0:5.0.3-2.module+el8.4.0+393+5af13779.x86_64.rpm","redis-devel-0:5.0.3-2.module+el8.4.0+393+5af13779.aarch64.rpm","redis-devel-0:5.0.3-2.module+el8.4.0+393+5af13779.x86_64.rpm","redis-doc-0:5.0.3-2.module+el8.4.0+393+5af13779.noarch.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:2002","url":"https://access.redhat.com/errata/RHSA-2019:2002","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2019/RLSA-2019-2511.json b/data/advisories/2019/RLSA-2019-2511.json new file mode 100644 index 0000000..11e1884 --- /dev/null +++ b/data/advisories/2019/RLSA-2019-2511.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:2511","synopsis":"Important: mysql:8.0 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for mecab-ipadic, mecab.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon, mysqld, and many client programs.\n\nThe following packages have been upgraded to a later upstream version: mysql (8.0.17).\n\nSecurity Fix(es):\n\n* mysql: Server: Replication multiple unspecified vulnerabilities (CVE-2019-2800, CVE-2019-2436, CVE-2019-2531, CVE-2019-2534, CVE-2019-2614, CVE-2019-2617, CVE-2019-2630, CVE-2019-2634, CVE-2019-2635, CVE-2019-2755)\n\n* mysql: Server: Optimizer multiple unspecified vulnerabilities (CVE-2019-2420, CVE-2019-2481, CVE-2019-2507, CVE-2019-2529, CVE-2019-2530, CVE-2019-2581, CVE-2019-2596, CVE-2019-2607, CVE-2019-2625, CVE-2019-2681, CVE-2019-2685, CVE-2019-2686, CVE-2019-2687, CVE-2019-2688, CVE-2019-2689, CVE-2019-2693, CVE-2019-2694, CVE-2019-2695, CVE-2019-2757, CVE-2019-2774, CVE-2019-2796, CVE-2019-2802, CVE-2019-2803, CVE-2019-2808, CVE-2019-2810, CVE-2019-2812, CVE-2019-2815, CVE-2019-2830, CVE-2019-2834)\n\n* mysql: Server: Parser multiple unspecified vulnerabilities (CVE-2019-2434, CVE-2019-2455, CVE-2019-2805)\n\n* mysql: Server: PS multiple unspecified vulnerabilities (CVE-2019-2482, CVE-2019-2592)\n\n* mysql: Server: Security: Privileges multiple unspecified vulnerabilities (CVE-2019-2486, CVE-2019-2532, CVE-2019-2533, CVE-2019-2584, CVE-2019-2589, CVE-2019-2606, CVE-2019-2620, CVE-2019-2627, CVE-2019-2739, CVE-2019-2778, CVE-2019-2811, CVE-2019-2789)\n\n* mysql: Server: DDL multiple unspecified vulnerabilities (CVE-2019-2494, CVE-2019-2495, CVE-2019-2537, CVE-2019-2626, CVE-2019-2644)\n\n* mysql: InnoDB multiple unspecified vulnerabilities (CVE-2019-2502, CVE-2019-2510, CVE-2019-2580, CVE-2019-2585, CVE-2019-2593, CVE-2019-2624, CVE-2019-2628, CVE-2019-2758, CVE-2019-2785, CVE-2019-2798, CVE-2019-2879, CVE-2019-2814)\n\n* mysql: Server: Connection Handling unspecified vulnerability (CVE-2019-2503)\n\n* mysql: Server: Partition multiple unspecified vulnerabilities (CVE-2019-2528, CVE-2019-2587)\n\n* mysql: Server: Options multiple unspecified vulnerabilities (CVE-2019-2535, CVE-2019-2623, CVE-2019-2683, CVE-2019-2752)\n\n* mysql: Server: Packaging unspecified vulnerability (CVE-2019-2536)\n\n* mysql: Server: Connection unspecified vulnerability (CVE-2019-2539)\n\n* mysql: Server: Information Schema unspecified vulnerability (CVE-2019-2631)\n\n* mysql: Server: Group Replication Plugin unspecified vulnerability (CVE-2019-2636)\n\n* mysql: Server: Security: Roles multiple unspecified vulnerabilities (CVE-2019-2691, CVE-2019-2826)\n\n* mysql: Server: Pluggable Auth unspecified vulnerability (CVE-2019-2737)\n\n* mysql: Server: XML unspecified vulnerability (CVE-2019-2740)\n\n* mysql: Server: Components / Services unspecified vulnerability (CVE-2019-2780)\n\n* mysql: Server: DML unspecified vulnerability (CVE-2019-2784)\n\n* mysql: Server: Charsets unspecified vulnerability (CVE-2019-2795)\n\n* mysql: Client programs unspecified vulnerability (CVE-2019-2797)\n\n* mysql: Server: FTS unspecified vulnerability (CVE-2019-2801)\n\n* mysql: Server: Security: Audit unspecified vulnerability (CVE-2019-2819)\n\n* mysql: Server: Compiling unspecified vulnerability (CVE-2019-2738)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1666738","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1666738","description":""},{"ticket":"1666740","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1666740","description":""},{"ticket":"1666741","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1666741","description":""},{"ticket":"1666742","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1666742","description":""},{"ticket":"1666743","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1666743","description":""},{"ticket":"1666744","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1666744","description":""},{"ticket":"1666745","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1666745","description":""},{"ticket":"1666746","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1666746","description":""},{"ticket":"1666747","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1666747","description":""},{"ticket":"1666748","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1666748","description":""},{"ticket":"1666749","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1666749","description":""},{"ticket":"1666750","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1666750","description":""},{"ticket":"1666751","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1666751","description":""},{"ticket":"1666753","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1666753","description":""},{"ticket":"1666755","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1666755","description":""},{"ticket":"1666756","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1666756","description":""},{"ticket":"1666757","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1666757","description":""},{"ticket":"1666758","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1666758","description":""},{"ticket":"1666759","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1666759","description":""},{"ticket":"1666760","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1666760","description":""},{"ticket":"1666761","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1666761","description":""},{"ticket":"1666762","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1666762","description":""},{"ticket":"1666763","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1666763","description":""},{"ticket":"1666764","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1666764","description":""},{"ticket":"1702958","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702958","description":""},{"ticket":"1702959","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702959","description":""},{"ticket":"1702960","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702960","description":""},{"ticket":"1702961","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702961","description":""},{"ticket":"1702962","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702962","description":""},{"ticket":"1702963","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702963","description":""},{"ticket":"1702964","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702964","description":""},{"ticket":"1702965","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702965","description":""},{"ticket":"1702966","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702966","description":""},{"ticket":"1702967","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702967","description":""},{"ticket":"1702968","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702968","description":""},{"ticket":"1702969","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702969","description":""},{"ticket":"1702970","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702970","description":""},{"ticket":"1702971","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702971","description":""},{"ticket":"1702972","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702972","description":""},{"ticket":"1702973","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702973","description":""},{"ticket":"1702974","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702974","description":""},{"ticket":"1702975","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702975","description":""},{"ticket":"1702976","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702976","description":""},{"ticket":"1702977","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702977","description":""},{"ticket":"1702978","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702978","description":""},{"ticket":"1702979","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702979","description":""},{"ticket":"1702981","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702981","description":""},{"ticket":"1702982","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702982","description":""},{"ticket":"1702983","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702983","description":""},{"ticket":"1702984","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702984","description":""},{"ticket":"1702985","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702985","description":""},{"ticket":"1702986","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702986","description":""},{"ticket":"1702987","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702987","description":""},{"ticket":"1702989","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702989","description":""},{"ticket":"1702990","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702990","description":""},{"ticket":"1702991","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702991","description":""},{"ticket":"1702992","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702992","description":""},{"ticket":"1702993","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702993","description":""},{"ticket":"1702994","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702994","description":""},{"ticket":"1702995","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702995","description":""},{"ticket":"1702997","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702997","description":""},{"ticket":"1731997","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1731997","description":""},{"ticket":"1731998","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1731998","description":""},{"ticket":"1731999","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1731999","description":""},{"ticket":"1732000","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732000","description":""},{"ticket":"1732005","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732005","description":""},{"ticket":"1732006","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732006","description":""},{"ticket":"1732007","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732007","description":""},{"ticket":"1732008","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732008","description":""},{"ticket":"1732009","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732009","description":""},{"ticket":"1732010","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732010","description":""},{"ticket":"1732011","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732011","description":""},{"ticket":"1732012","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732012","description":""},{"ticket":"1732013","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732013","description":""},{"ticket":"1732015","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732015","description":""},{"ticket":"1732017","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732017","description":""},{"ticket":"1732018","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732018","description":""},{"ticket":"1732019","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732019","description":""},{"ticket":"1732020","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732020","description":""},{"ticket":"1732021","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732021","description":""},{"ticket":"1732022","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732022","description":""},{"ticket":"1732023","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732023","description":""},{"ticket":"1732024","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732024","description":""},{"ticket":"1732025","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732025","description":""},{"ticket":"1732026","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732026","description":""},{"ticket":"1732027","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732027","description":""},{"ticket":"1732028","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732028","description":""},{"ticket":"1732029","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732029","description":""},{"ticket":"1732030","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732030","description":""},{"ticket":"1732031","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732031","description":""},{"ticket":"1732032","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732032","description":""},{"ticket":"1732034","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732034","description":""},{"ticket":"1732035","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732035","description":""},{"ticket":"1732036","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732036","description":""},{"ticket":"1732037","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732037","description":""}],"cves":[{"name":"CVE-2019-2420","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2420","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2434","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2434","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2019-2436","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2436","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3BaseScore":"5.5","cwe":"UNKNOWN"},{"name":"CVE-2019-2455","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2455","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2019-2481","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2481","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2482","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2482","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2019-2486","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2486","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2494","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2494","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2495","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2495","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2502","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2502","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2503","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2503","cvss3ScoringVector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H","cvss3BaseScore":"6.4","cwe":"UNKNOWN"},{"name":"CVE-2019-2507","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2507","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2510","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2510","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2528","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2528","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2529","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2529","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2019-2530","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2530","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2531","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2531","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2532","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2532","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2533","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2533","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2019-2534","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2534","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3BaseScore":"7.1","cwe":"UNKNOWN"},{"name":"CVE-2019-2535","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2535","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.1","cwe":"UNKNOWN"},{"name":"CVE-2019-2536","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2536","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:N/A:H","cvss3BaseScore":"5.0","cwe":"UNKNOWN"},{"name":"CVE-2019-2537","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2537","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2539","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2539","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2580","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2580","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2581","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2581","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2584","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2584","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2585","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2585","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2587","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2587","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2589","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2589","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2592","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2592","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2593","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2593","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2596","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2596","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2606","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2606","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2607","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2607","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2614","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2614","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.4","cwe":"UNKNOWN"},{"name":"CVE-2019-2617","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2617","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.4","cwe":"UNKNOWN"},{"name":"CVE-2019-2620","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2620","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2623","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2623","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"5.3","cwe":"UNKNOWN"},{"name":"CVE-2019-2624","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2624","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2625","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2625","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2626","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2626","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2627","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2627","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2628","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2628","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2630","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2630","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.4","cwe":"UNKNOWN"},{"name":"CVE-2019-2631","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2631","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2634","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2634","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"5.1","cwe":"UNKNOWN"},{"name":"CVE-2019-2635","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2635","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2636","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2636","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.4","cwe":"UNKNOWN"},{"name":"CVE-2019-2644","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2644","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2681","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2681","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2683","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2683","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2685","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2685","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2686","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2686","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2687","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2687","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2688","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2688","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2689","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2689","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2691","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2691","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2693","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2693","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2019-2694","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2694","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2019-2695","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2695","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2019-2737","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2737","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2738","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2738","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3BaseScore":"3.1","cwe":"UNKNOWN"},{"name":"CVE-2019-2739","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2739","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3BaseScore":"5.1","cwe":"UNKNOWN"},{"name":"CVE-2019-2740","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2740","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2019-2752","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2752","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2755","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2755","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2757","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2757","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2758","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2758","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3BaseScore":"5.5","cwe":"UNKNOWN"},{"name":"CVE-2019-2774","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2774","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2778","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2778","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3BaseScore":"5.4","cwe":"UNKNOWN"},{"name":"CVE-2019-2780","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2780","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2784","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2784","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2785","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2785","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2789","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2789","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","cvss3BaseScore":"2.7","cwe":"UNKNOWN"},{"name":"CVE-2019-2795","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2795","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2019-2796","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2796","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2797","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2797","cvss3ScoringVector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.2","cwe":"UNKNOWN"},{"name":"CVE-2019-2798","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2798","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2800","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2800","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3BaseScore":"7.1","cwe":"UNKNOWN"},{"name":"CVE-2019-2801","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2801","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2802","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2802","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2803","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2803","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2805","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2805","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2019-2808","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2808","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2810","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2810","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2811","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2811","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2812","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2812","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2019-2814","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2814","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N","cvss3BaseScore":"2.2","cwe":"UNKNOWN"},{"name":"CVE-2019-2815","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2815","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2819","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2819","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3BaseScore":"5.5","cwe":"UNKNOWN"},{"name":"CVE-2019-2826","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2826","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2830","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2830","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2834","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2834","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2019-2879","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2879","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2948","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2948","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2950","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2950","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2969","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2969","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3BaseScore":"6.2","cwe":"UNKNOWN"},{"name":"CVE-2019-3003","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3003","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"}],"references":[],"publishedAt":"2019-08-15T17:31:05Z","rpms":{"Rocky Linux 8":{"nvras":["mecab-0:0.996-1.module+el8.3.0+242+87d3366a.9.aarch64.rpm","mecab-0:0.996-1.module+el8.3.0+242+87d3366a.9.src.rpm","mecab-0:0.996-1.module+el8.3.0+242+87d3366a.9.x86_64.rpm","mecab-debuginfo-0:0.996-1.module+el8.3.0+242+87d3366a.9.aarch64.rpm","mecab-debuginfo-0:0.996-1.module+el8.3.0+242+87d3366a.9.x86_64.rpm","mecab-debugsource-0:0.996-1.module+el8.3.0+242+87d3366a.9.aarch64.rpm","mecab-debugsource-0:0.996-1.module+el8.3.0+242+87d3366a.9.x86_64.rpm","mecab-ipadic-0:2.7.0.20070801-16.module+el8.3.0+242+87d3366a.aarch64.rpm","mecab-ipadic-0:2.7.0.20070801-16.module+el8.3.0+242+87d3366a.src.rpm","mecab-ipadic-0:2.7.0.20070801-16.module+el8.3.0+242+87d3366a.x86_64.rpm","mecab-ipadic-EUCJP-0:2.7.0.20070801-16.module+el8.3.0+242+87d3366a.aarch64.rpm","mecab-ipadic-EUCJP-0:2.7.0.20070801-16.module+el8.3.0+242+87d3366a.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:2511","url":"https://access.redhat.com/errata/RHSA-2019:2511","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2019/RLSA-2019-2512.json b/data/advisories/2019/RLSA-2019-2512.json new file mode 100644 index 0000000..04f888d --- /dev/null +++ b/data/advisories/2019/RLSA-2019-2512.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:2512","synopsis":"Important: subversion:1.10 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for utf8proc, libserf.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Subversion (SVN) is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes.\n\nSecurity Fix(es):\n\n* subversion: NULL pointer dereference in svnserve leading to an unauthenticated remote DoS (CVE-2019-0203)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1733073","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1733073","description":""}],"cves":[{"name":"CVE-2019-0203","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0203","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-476"}],"references":[],"publishedAt":"2019-08-15T17:34:10Z","rpms":{"Rocky Linux 8":{"nvras":["libserf-0:1.3.9-9.module+el8.7.0+1065+42200b2e.aarch64.rpm","libserf-0:1.3.9-9.module+el8.4.0+407+38733e5a.aarch64.rpm","libserf-0:1.3.9-9.module+el8.7.0+1065+42200b2e.src.rpm","libserf-0:1.3.9-9.module+el8.4.0+407+38733e5a.src.rpm","libserf-0:1.3.9-9.module+el8.7.0+1065+42200b2e.x86_64.rpm","libserf-0:1.3.9-9.module+el8.4.0+407+38733e5a.x86_64.rpm","libserf-debuginfo-0:1.3.9-9.module+el8.7.0+1065+42200b2e.aarch64.rpm","libserf-debuginfo-0:1.3.9-9.module+el8.4.0+407+38733e5a.aarch64.rpm","libserf-debuginfo-0:1.3.9-9.module+el8.7.0+1065+42200b2e.x86_64.rpm","libserf-debuginfo-0:1.3.9-9.module+el8.4.0+407+38733e5a.x86_64.rpm","libserf-debugsource-0:1.3.9-9.module+el8.7.0+1065+42200b2e.aarch64.rpm","libserf-debugsource-0:1.3.9-9.module+el8.4.0+407+38733e5a.aarch64.rpm","libserf-debugsource-0:1.3.9-9.module+el8.7.0+1065+42200b2e.x86_64.rpm","libserf-debugsource-0:1.3.9-9.module+el8.4.0+407+38733e5a.x86_64.rpm","utf8proc-0:2.1.1-5.module+el8.4.0+407+38733e5a.aarch64.rpm","utf8proc-0:2.1.1-5.module+el8.4.0+407+38733e5a.src.rpm","utf8proc-0:2.1.1-5.module+el8.4.0+407+38733e5a.x86_64.rpm","utf8proc-debuginfo-0:2.1.1-5.module+el8.4.0+407+38733e5a.aarch64.rpm","utf8proc-debuginfo-0:2.1.1-5.module+el8.4.0+407+38733e5a.x86_64.rpm","utf8proc-debugsource-0:2.1.1-5.module+el8.4.0+407+38733e5a.aarch64.rpm","utf8proc-debugsource-0:2.1.1-5.module+el8.4.0+407+38733e5a.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:2512","url":"https://access.redhat.com/errata/RHSA-2019:2512","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2019/RLSA-2019-2593.json b/data/advisories/2019/RLSA-2019-2593.json new file mode 100644 index 0000000..a9d6e0c --- /dev/null +++ b/data/advisories/2019/RLSA-2019-2593.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:2593","synopsis":"Important: squid:4 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for libecap.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nSecurity Fix(es):\n\n* squid: heap-based buffer overflow in HttpHeader::getAuth (CVE-2019-12527)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1730533","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1730533","description":""}],"cves":[{"name":"CVE-2019-12527","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12527","cvss3ScoringVector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.5","cwe":"CWE-122"}],"references":[],"publishedAt":"2019-09-02T10:22:04Z","rpms":{"Rocky Linux 8":{"nvras":["libecap-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-0:1.0.1-2.module+el8.4.0+404+316a0dc5.src.rpm","libecap-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm","libecap-debuginfo-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-debuginfo-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm","libecap-debugsource-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-debugsource-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm","libecap-devel-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-devel-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:2593","url":"https://access.redhat.com/errata/RHSA-2019:2593","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2019/RLSA-2019-2720.json b/data/advisories/2019/RLSA-2019-2720.json new file mode 100644 index 0000000..cdf0e7b --- /dev/null +++ b/data/advisories/2019/RLSA-2019-2720.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:2720","synopsis":"Important: pki-deps:10.6 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for glassfish-jaxb-api, glassfish-fastinfoset, xalan-j2, xmlstreambuffer, apache-commons-lang, jackson-module-jaxb-annotations, apache-commons-collections, javassist, python-nss, bea-stax, velocity, xml-commons-apis, resteasy, xsom, slf4j, jackson-jaxrs-providers, stax-ex, xerces-j2, jakarta-commons-httpclient, glassfish-jaxb, xml-commons-resolver, relaxngDatatype.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The Public Key Infrastructure (PKI) Deps module contains fundamental packages required as dependencies for the pki-core module by Rocky Enterprise Software Foundation Certificate System.\n\nSecurity Fix(es):\n\n* jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution (CVE-2019-12384)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1725807","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1725807","description":""}],"cves":[{"name":"CVE-2019-12384","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12384","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.1","cwe":"CWE-502"}],"references":[],"publishedAt":"2019-09-10T15:32:49Z","rpms":{"Rocky Linux 8":{"nvras":["apache-commons-collections-0:3.2.2-10.module+el8.3.0+53+ea062990.noarch.rpm","apache-commons-collections-0:3.2.2-10.module+el8.3.0+74+855e3f5d.noarch.rpm","apache-commons-collections-0:3.2.2-10.module+el8.3.0+53+ea062990.src.rpm","apache-commons-collections-0:3.2.2-10.module+el8.3.0+74+855e3f5d.src.rpm","apache-commons-lang-0:2.6-21.module+el8.3.0+53+ea062990.noarch.rpm","apache-commons-lang-0:2.6-21.module+el8.3.0+74+855e3f5d.noarch.rpm","apache-commons-lang-0:2.6-21.module+el8.3.0+53+ea062990.src.rpm","apache-commons-lang-0:2.6-21.module+el8.3.0+74+855e3f5d.src.rpm","javassist-0:3.18.1-8.module+el8.3.0+74+855e3f5d.src.rpm","bea-stax-0:1.2.0-16.module+el8.3.0+53+ea062990.src.rpm","bea-stax-api-0:1.2.0-16.module+el8.3.0+53+ea062990.noarch.rpm","glassfish-fastinfoset-0:1.2.13-9.module+el8.3.0+53+ea062990.noarch.rpm","glassfish-fastinfoset-0:1.2.13-9.module+el8.3.0+53+ea062990.src.rpm","glassfish-jaxb-0:2.2.11-11.module+el8.3.0+53+ea062990.src.rpm","glassfish-jaxb-api-0:2.2.12-8.module+el8.3.0+53+ea062990.noarch.rpm","glassfish-jaxb-api-0:2.2.12-8.module+el8.3.0+53+ea062990.src.rpm","glassfish-jaxb-core-0:2.2.11-11.module+el8.3.0+53+ea062990.noarch.rpm","glassfish-jaxb-runtime-0:2.2.11-11.module+el8.3.0+53+ea062990.noarch.rpm","glassfish-jaxb-txw2-0:2.2.11-11.module+el8.3.0+53+ea062990.noarch.rpm","jackson-jaxrs-json-provider-0:2.9.9-1.module+el8.3.0+53+ea062990.noarch.rpm","jackson-jaxrs-providers-0:2.9.9-1.module+el8.3.0+53+ea062990.noarch.rpm","jackson-jaxrs-providers-0:2.9.9-1.module+el8.3.0+53+ea062990.src.rpm","jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.3.0+53+ea062990.noarch.rpm","jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.3.0+53+ea062990.src.rpm","jakarta-commons-httpclient-1:3.1-28.module+el8.3.0+53+ea062990.noarch.rpm","javassist-0:3.18.1-8.module+el8.3.0+53+ea062990.src.rpm","jakarta-commons-httpclient-1:3.1-28.module+el8.3.0+74+855e3f5d.noarch.rpm","jakarta-commons-httpclient-1:3.1-28.module+el8.3.0+53+ea062990.src.rpm","jakarta-commons-httpclient-1:3.1-28.module+el8.3.0+74+855e3f5d.src.rpm","javassist-0:3.18.1-8.module+el8.3.0+53+ea062990.noarch.rpm","javassist-0:3.18.1-8.module+el8.3.0+74+855e3f5d.noarch.rpm","javassist-javadoc-0:3.18.1-8.module+el8.3.0+53+ea062990.noarch.rpm","javassist-javadoc-0:3.18.1-8.module+el8.3.0+74+855e3f5d.noarch.rpm","python3-nss-0:1.0.1-10.module+el8.3.0+53+ea062990.aarch64.rpm","python3-nss-0:1.0.1-10.module+el8.3.0+53+ea062990.x86_64.rpm","python3-nss-debuginfo-0:1.0.1-10.module+el8.3.0+53+ea062990.aarch64.rpm","python3-nss-debuginfo-0:1.0.1-10.module+el8.3.0+53+ea062990.x86_64.rpm","python-nss-0:1.0.1-10.module+el8.3.0+53+ea062990.src.rpm","python-nss-debugsource-0:1.0.1-10.module+el8.3.0+53+ea062990.aarch64.rpm","python-nss-debugsource-0:1.0.1-10.module+el8.3.0+53+ea062990.x86_64.rpm","python-nss-doc-0:1.0.1-10.module+el8.3.0+53+ea062990.aarch64.rpm","python-nss-doc-0:1.0.1-10.module+el8.3.0+53+ea062990.x86_64.rpm","relaxngDatatype-0:2011.1-7.module+el8.3.0+53+ea062990.noarch.rpm","relaxngDatatype-0:2011.1-7.module+el8.3.0+53+ea062990.src.rpm","resteasy-0:3.0.26-3.module+el8.3.0+53+ea062990.noarch.rpm","resteasy-0:3.0.26-3.module+el8.3.0+53+ea062990.src.rpm","slf4j-0:1.7.25-4.module+el8.5.0+697+f586bb30.noarch.rpm","slf4j-0:1.7.25-4.module+el8.3.0+74+855e3f5d.noarch.rpm","slf4j-0:1.7.25-4.module+el8.3.0+133+b8b54b58.noarch.rpm","slf4j-0:1.7.25-4.module+el8.5.0+697+f586bb30.src.rpm","slf4j-0:1.7.25-4.module+el8.3.0+74+855e3f5d.src.rpm","slf4j-0:1.7.25-4.module+el8.3.0+133+b8b54b58.src.rpm","slf4j-jdk14-0:1.7.25-4.module+el8.5.0+697+f586bb30.noarch.rpm","slf4j-jdk14-0:1.7.25-4.module+el8.3.0+74+855e3f5d.noarch.rpm","slf4j-jdk14-0:1.7.25-4.module+el8.3.0+53+ea062990.noarch.rpm","stax-ex-0:1.7.7-8.module+el8.3.0+53+ea062990.noarch.rpm","stax-ex-0:1.7.7-8.module+el8.3.0+53+ea062990.src.rpm","velocity-0:1.7-24.module+el8.3.0+53+ea062990.noarch.rpm","velocity-0:1.7-24.module+el8.3.0+74+855e3f5d.noarch.rpm","velocity-0:1.7-24.module+el8.3.0+53+ea062990.src.rpm","velocity-0:1.7-24.module+el8.3.0+74+855e3f5d.src.rpm","xalan-j2-0:2.7.1-38.module+el8.3.0+53+ea062990.noarch.rpm","xalan-j2-0:2.7.1-38.module+el8.3.0+74+855e3f5d.noarch.rpm","xalan-j2-0:2.7.1-38.module+el8.3.0+53+ea062990.src.rpm","xalan-j2-0:2.7.1-38.module+el8.3.0+74+855e3f5d.src.rpm","xerces-j2-0:2.11.0-34.module+el8.3.0+53+ea062990.noarch.rpm","xerces-j2-0:2.11.0-34.module+el8.3.0+74+855e3f5d.noarch.rpm","xerces-j2-0:2.11.0-34.module+el8.3.0+53+ea062990.src.rpm","xerces-j2-0:2.11.0-34.module+el8.3.0+74+855e3f5d.src.rpm","xml-commons-apis-0:1.4.01-25.module+el8.5.0+697+f586bb30.noarch.rpm","xml-commons-apis-0:1.4.01-25.module+el8.3.0+74+855e3f5d.noarch.rpm","xml-commons-apis-0:1.4.01-25.module+el8.3.0+53+ea062990.noarch.rpm","xml-commons-apis-0:1.4.01-25.module+el8.5.0+697+f586bb30.src.rpm","xml-commons-apis-0:1.4.01-25.module+el8.3.0+74+855e3f5d.src.rpm","xml-commons-apis-0:1.4.01-25.module+el8.3.0+53+ea062990.src.rpm","xml-commons-resolver-0:1.2-26.module+el8.3.0+53+ea062990.noarch.rpm","xml-commons-resolver-0:1.2-26.module+el8.3.0+74+855e3f5d.noarch.rpm","xml-commons-resolver-0:1.2-26.module+el8.3.0+53+ea062990.src.rpm","xml-commons-resolver-0:1.2-26.module+el8.3.0+74+855e3f5d.src.rpm","xmlstreambuffer-0:1.5.4-8.module+el8.3.0+53+ea062990.noarch.rpm","xmlstreambuffer-0:1.5.4-8.module+el8.3.0+53+ea062990.src.rpm","xsom-0:0-19.20110809svn.module+el8.3.0+53+ea062990.noarch.rpm","xsom-0:0-19.20110809svn.module+el8.3.0+53+ea062990.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:2720","url":"https://access.redhat.com/errata/RHSA-2019:2720","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2019/RLSA-2019-2722.json b/data/advisories/2019/RLSA-2019-2722.json new file mode 100644 index 0000000..da0dac7 --- /dev/null +++ b/data/advisories/2019/RLSA-2019-2722.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:2722","synopsis":"Low: libwmf security update","severity":"SEVERITY_LOW","topic":"An update is available for libwmf.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The libwmf packages provide a library for reading and converting Windows Metafile Format (WMF) vector graphics. The library is used by applications such as GIMP and ImageMagick.\n\nSecurity Fix(es):\n\n* gd: double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c (CVE-2019-6978)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1671390","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1671390","description":""}],"cves":[{"name":"CVE-2019-6978","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6978","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"5.3","cwe":"CWE-416"}],"references":[],"publishedAt":"2019-09-10T15:32:59Z","rpms":{"Rocky Linux 8":{"nvras":["libwmf-0:0.2.9-8.el8_0.x86_64.rpm","libwmf-debuginfo-0:0.2.9-8.el8_0.aarch64.rpm","libwmf-lite-0:0.2.9-8.el8_0.x86_64.rpm","libwmf-debuginfo-0:0.2.9-8.el8_0.i686.rpm","libwmf-debuginfo-0:0.2.9-8.el8_0.x86_64.rpm","libwmf-lite-0:0.2.9-8.el8_0.i686.rpm","libwmf-0:0.2.9-8.el8_0.src.rpm","libwmf-0:0.2.9-8.el8_0.aarch64.rpm","libwmf-0:0.2.9-8.el8_0.i686.rpm","libwmf-debugsource-0:0.2.9-8.el8_0.aarch64.rpm","libwmf-debugsource-0:0.2.9-8.el8_0.i686.rpm","libwmf-debugsource-0:0.2.9-8.el8_0.x86_64.rpm","libwmf-devel-0:0.2.9-8.el8_0.aarch64.rpm","libwmf-devel-0:0.2.9-8.el8_0.i686.rpm","libwmf-devel-0:0.2.9-8.el8_0.x86_64.rpm","libwmf-lite-0:0.2.9-8.el8_0.aarch64.rpm","libwmf-lite-debuginfo-0:0.2.9-8.el8_0.aarch64.rpm","libwmf-lite-debuginfo-0:0.2.9-8.el8_0.i686.rpm","libwmf-lite-debuginfo-0:0.2.9-8.el8_0.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:2722","url":"https://access.redhat.com/errata/RHSA-2019:2722","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2019/RLSA-2019-2799.json b/data/advisories/2019/RLSA-2019-2799.json new file mode 100644 index 0000000..9221511 --- /dev/null +++ b/data/advisories/2019/RLSA-2019-2799.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:2799","synopsis":"Important: nginx:1.14 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for nginx.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 (Post Office Protocol 3) and IMAP protocols, with a focus on high concurrency, performance and low memory usage. \n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511)\n\n* HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513)\n\n* HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1735741","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1735741","description":""},{"ticket":"1741860","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1741860","description":""},{"ticket":"1741864","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1741864","description":""}],"cves":[{"name":"CVE-2019-9511","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9511","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"CWE-400"},{"name":"CVE-2019-9513","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9513","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-400"},{"name":"CVE-2019-9516","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9516","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"CWE-400"}],"references":[],"publishedAt":"2019-09-17T08:45:10Z","rpms":{"Rocky Linux 8":{"nvras":["nginx-1:1.14.1-9.module+el8.4.0+542+81547229.aarch64.rpm","nginx-1:1.14.1-9.module+el8.4.0+542+81547229.src.rpm","nginx-1:1.14.1-9.module+el8.4.0+542+81547229.x86_64.rpm","nginx-all-modules-1:1.14.1-9.module+el8.4.0+542+81547229.noarch.rpm","nginx-debuginfo-1:1.14.1-9.module+el8.4.0+542+81547229.aarch64.rpm","nginx-debuginfo-1:1.14.1-9.module+el8.4.0+542+81547229.x86_64.rpm","nginx-debugsource-1:1.14.1-9.module+el8.4.0+542+81547229.aarch64.rpm","nginx-debugsource-1:1.14.1-9.module+el8.4.0+542+81547229.x86_64.rpm","nginx-filesystem-1:1.14.1-9.module+el8.4.0+542+81547229.noarch.rpm","nginx-mod-http-image-filter-1:1.14.1-9.module+el8.4.0+542+81547229.aarch64.rpm","nginx-mod-http-image-filter-1:1.14.1-9.module+el8.4.0+542+81547229.x86_64.rpm","nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.4.0+542+81547229.aarch64.rpm","nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.4.0+542+81547229.x86_64.rpm","nginx-mod-http-perl-1:1.14.1-9.module+el8.4.0+542+81547229.aarch64.rpm","nginx-mod-http-perl-1:1.14.1-9.module+el8.4.0+542+81547229.x86_64.rpm","nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.4.0+542+81547229.aarch64.rpm","nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.4.0+542+81547229.x86_64.rpm","nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.4.0+542+81547229.aarch64.rpm","nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.4.0+542+81547229.x86_64.rpm","nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.4.0+542+81547229.aarch64.rpm","nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.4.0+542+81547229.x86_64.rpm","nginx-mod-mail-1:1.14.1-9.module+el8.4.0+542+81547229.aarch64.rpm","nginx-mod-mail-1:1.14.1-9.module+el8.4.0+542+81547229.x86_64.rpm","nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.4.0+542+81547229.aarch64.rpm","nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.4.0+542+81547229.x86_64.rpm","nginx-mod-stream-1:1.14.1-9.module+el8.4.0+542+81547229.aarch64.rpm","nginx-mod-stream-1:1.14.1-9.module+el8.4.0+542+81547229.x86_64.rpm","nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.4.0+542+81547229.aarch64.rpm","nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.4.0+542+81547229.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:2799","url":"https://access.redhat.com/errata/RHSA-2019:2799","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2019/RLSA-2019-2925.json b/data/advisories/2019/RLSA-2019-2925.json new file mode 100644 index 0000000..0a263e2 --- /dev/null +++ b/data/advisories/2019/RLSA-2019-2925.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:2925","synopsis":"Important: nodejs:10 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for nodejs-nodemon, nodejs-packaging.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.\n\nThe following packages have been upgraded to a later upstream version: nodejs (10.16.3).\n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data requests leads to denial of service (CVE-2019-9511)\n\n* HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)\n\n* HTTP/2: flood using PRIORITY frames results in excessive resource consumption (CVE-2019-9513)\n\n* HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)\n\n* HTTP/2: flood using SETTINGS frames results in unbounded memory growth (CVE-2019-9515)\n\n* HTTP/2: 0-length headers lead to denial of service (CVE-2019-9516)\n\n* HTTP/2: request for large response leads to denial of service (CVE-2019-9517)\n\n* HTTP/2: flood using empty frames results in excessive resource consumption (CVE-2019-9518)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1735645","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1735645","description":""},{"ticket":"1735741","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1735741","description":""},{"ticket":"1735744","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1735744","description":""},{"ticket":"1735745","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1735745","description":""},{"ticket":"1735749","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1735749","description":""},{"ticket":"1741860","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1741860","description":""},{"ticket":"1741864","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1741864","description":""},{"ticket":"1741868","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1741868","description":""}],"cves":[{"name":"CVE-2019-5737","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5737","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"5.3","cwe":"CWE-400"},{"name":"CVE-2019-9511","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9511","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"CWE-400"},{"name":"CVE-2019-9512","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9512","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-400"},{"name":"CVE-2019-9513","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9513","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-400"},{"name":"CVE-2019-9514","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9514","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-400"},{"name":"CVE-2019-9515","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9515","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-400"},{"name":"CVE-2019-9516","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9516","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"CWE-400"},{"name":"CVE-2019-9517","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9517","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-400"},{"name":"CVE-2019-9518","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9518","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-400"}],"references":[],"publishedAt":"2019-09-30T07:07:29Z","rpms":{"Rocky Linux 8":{"nvras":["nodejs-nodemon-0:1.18.3-1.module+el8.3.0+101+f84c7154.noarch.rpm","nodejs-nodemon-0:1.18.3-1.module+el8.3.0+101+f84c7154.src.rpm","nodejs-packaging-0:17-3.module+el8.3.0+101+f84c7154.noarch.rpm","nodejs-packaging-0:17-3.module+el8.3.0+101+f84c7154.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:2925","url":"https://access.redhat.com/errata/RHSA-2019:2925","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2019/RLSA-2019-3335.json b/data/advisories/2019/RLSA-2019-3335.json new file mode 100644 index 0000000..c4f9f08 --- /dev/null +++ b/data/advisories/2019/RLSA-2019-3335.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:3335","synopsis":"Moderate: python27:2.7 security and bug fix update","severity":"SEVERITY_MODERATE","topic":"An update is available for python-pymongo, python2-rpm-macros, python-docutils, pytest, python-psycopg2, python-PyMySQL, python-lxml, PyYAML, python-pytest-mock, python-attrs, python-jinja2, python-docs, python-mock, python-ipaddress, python-funcsigs, python-py, python-chardet, python-markupsafe, python-pluggy, python-pygments, Cython, python-virtualenv, babel, python-dns, python-wheel, python-pysocks, python-coverage, python-setuptools_scm, pytz, python-nose, scipy, python-idna.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing.\n\nSecurity Fix(es):\n\n* numpy: crafted serialized object passed in numpy.load() in pickle python module allows arbitrary code execution (CVE-2019-6446)\n\n* python: CRLF injection via the query part of the url passed to urlopen() (CVE-2019-9740)\n\n* python: CRLF injection via the path part of the url passed to urlopen() (CVE-2019-9947)\n\n* python: Undocumented local_file protocol allows remote attackers to bypass protection mechanisms (CVE-2019-9948)\n\n* python-urllib3: CRLF injection due to not encoding the '\\r\\n' sequence leading to possible attack on internal service (CVE-2019-11236)\n\n* python-urllib3: Certification mishandle when error should be thrown (CVE-2019-11324)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1667950","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1667950","description":""},{"ticket":"1680967","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1680967","description":""},{"ticket":"1688169","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1688169","description":""},{"ticket":"1695570","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1695570","description":""},{"ticket":"1695572","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1695572","description":""},{"ticket":"1700824","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1700824","description":""},{"ticket":"1700993","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1700993","description":""},{"ticket":"1702473","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702473","description":""},{"ticket":"1709599","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1709599","description":""},{"ticket":"1718398","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1718398","description":""},{"ticket":"1734126","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1734126","description":""}],"cves":[{"name":"CVE-2019-11236","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11236","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3BaseScore":"6.5","cwe":"CWE-113"},{"name":"CVE-2019-11324","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11324","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3BaseScore":"7.5","cwe":"CWE-295"},{"name":"CVE-2019-6446","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6446","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"CWE-358->CWE-20"},{"name":"CVE-2019-9740","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9740","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3BaseScore":"6.5","cwe":"CWE-113"},{"name":"CVE-2019-9947","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9947","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3BaseScore":"6.5","cwe":"CWE-113"},{"name":"CVE-2019-9948","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9948","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3BaseScore":"7.4","cwe":"CWE-749"}],"references":[],"publishedAt":"2019-11-05T17:32:12Z","rpms":{"Rocky Linux 8":{"nvras":["babel-0:2.5.1-9.module+el8.4.0+403+9ae17a31.noarch.rpm","babel-0:2.5.1-9.module+el8.4.0+403+9ae17a31.src.rpm","Cython-0:0.28.1-7.module+el8.5.0+706+735ec4b3.src.rpm","Cython-0:0.28.1-7.module+el8.4.0+403+9ae17a31.src.rpm","Cython-debugsource-0:0.28.1-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","Cython-debugsource-0:0.28.1-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","Cython-debugsource-0:0.28.1-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","Cython-debugsource-0:0.28.1-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","pytest-0:3.4.2-13.module+el8.5.0+706+735ec4b3.src.rpm","pytest-0:3.4.2-13.module+el8.4.0+403+9ae17a31.src.rpm","python2-attrs-0:17.4.0-10.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-attrs-0:17.4.0-10.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-babel-0:2.5.1-9.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-bson-0:3.6.1-11.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-bson-0:3.6.1-11.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-bson-debuginfo-0:3.6.1-11.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-bson-debuginfo-0:3.6.1-11.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-chardet-0:3.0.4-10.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-chardet-0:3.0.4-10.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-coverage-0:4.5.1-4.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-coverage-0:4.5.1-4.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-coverage-0:4.5.1-4.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-coverage-0:4.5.1-4.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-coverage-debuginfo-0:4.5.1-4.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-coverage-debuginfo-0:4.5.1-4.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-coverage-debuginfo-0:4.5.1-4.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-coverage-debuginfo-0:4.5.1-4.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-Cython-0:0.28.1-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-Cython-0:0.28.1-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-Cython-0:0.28.1-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-Cython-0:0.28.1-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-Cython-debuginfo-0:0.28.1-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-Cython-debuginfo-0:0.28.1-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-Cython-debuginfo-0:0.28.1-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-Cython-debuginfo-0:0.28.1-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-dns-0:1.15.0-10.module+el8.7.0+1062+663ba31c.noarch.rpm","python2-dns-0:1.15.0-10.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-docs-0:2.7.16-2.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-docs-info-0:2.7.16-2.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-docutils-0:0.14-12.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-funcsigs-0:1.0.2-13.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-idna-0:2.5-7.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-idna-0:2.5-7.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-ipaddress-0:1.0.18-6.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-jinja2-0:2.10-8.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-markupsafe-0:0.23-19.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-markupsafe-0:0.23-19.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-markupsafe-0:0.23-19.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-markupsafe-0:0.23-19.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-mock-0:2.0.0-13.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-nose-0:1.3.7-30.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-pluggy-0:0.6.0-8.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-pluggy-0:0.6.0-8.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-psycopg2-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-psycopg2-0:2.7.5-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-psycopg2-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-psycopg2-0:2.7.5-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-psycopg2-debug-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-psycopg2-debug-0:2.7.5-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-psycopg2-debug-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-psycopg2-debug-0:2.7.5-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-psycopg2-debug-debuginfo-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-psycopg2-debug-debuginfo-0:2.7.5-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-psycopg2-debug-debuginfo-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-psycopg2-debug-debuginfo-0:2.7.5-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-psycopg2-debuginfo-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-psycopg2-debuginfo-0:2.7.5-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-psycopg2-debuginfo-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-psycopg2-debuginfo-0:2.7.5-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-psycopg2-tests-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-psycopg2-tests-0:2.7.5-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-psycopg2-tests-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-psycopg2-tests-0:2.7.5-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-py-0:1.5.3-6.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-py-0:1.5.3-6.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-pygments-0:2.2.0-20.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-pymongo-0:3.6.1-11.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-pymongo-0:3.6.1-11.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-pymongo-debuginfo-0:3.6.1-11.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-pymongo-debuginfo-0:3.6.1-11.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-pymongo-gridfs-0:3.6.1-11.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-pymongo-gridfs-0:3.6.1-11.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-PyMySQL-0:0.8.0-10.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-PyMySQL-0:0.8.0-10.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-pysocks-0:1.6.8-6.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-pysocks-0:1.6.8-6.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-pytest-0:3.4.2-13.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-pytest-0:3.4.2-13.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-pytest-mock-0:1.9.0-4.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-pytz-0:2017.2-12.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-pytz-0:2017.2-12.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-pyyaml-0:3.12-16.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-pyyaml-0:3.12-16.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-pyyaml-0:3.12-16.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-pyyaml-0:3.12-16.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-pyyaml-debuginfo-0:3.12-16.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-pyyaml-debuginfo-0:3.12-16.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-pyyaml-debuginfo-0:3.12-16.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-pyyaml-debuginfo-0:3.12-16.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-rpm-macros-0:3-38.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-rpm-macros-0:3-38.module+el8.4.0+403+9ae17a31.src.rpm","python2-scipy-0:1.0.0-20.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-scipy-0:1.0.0-20.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-scipy-debuginfo-0:1.0.0-20.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-scipy-debuginfo-0:1.0.0-20.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-setuptools_scm-0:1.15.7-6.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-virtualenv-0:15.1.0-19.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-wheel-1:0.31.1-2.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-wheel-wheel-1:0.31.1-2.module+el8.4.0+403+9ae17a31.noarch.rpm","python-attrs-0:17.4.0-10.module+el8.5.0+706+735ec4b3.src.rpm","python-attrs-0:17.4.0-10.module+el8.4.0+403+9ae17a31.src.rpm","python-chardet-0:3.0.4-10.module+el8.5.0+706+735ec4b3.src.rpm","python-chardet-0:3.0.4-10.module+el8.4.0+403+9ae17a31.src.rpm","python-coverage-0:4.5.1-4.module+el8.5.0+706+735ec4b3.src.rpm","python-coverage-0:4.5.1-4.module+el8.4.0+403+9ae17a31.src.rpm","python-coverage-debugsource-0:4.5.1-4.module+el8.5.0+706+735ec4b3.aarch64.rpm","python-coverage-debugsource-0:4.5.1-4.module+el8.4.0+403+9ae17a31.aarch64.rpm","python-coverage-debugsource-0:4.5.1-4.module+el8.5.0+706+735ec4b3.x86_64.rpm","python-coverage-debugsource-0:4.5.1-4.module+el8.4.0+403+9ae17a31.x86_64.rpm","python-dns-0:1.15.0-10.module+el8.7.0+1062+663ba31c.src.rpm","python-dns-0:1.15.0-10.el8.src.rpm","python-dns-0:1.15.0-10.module+el8.4.0+403+9ae17a31.src.rpm","python-docs-0:2.7.16-2.module+el8.4.0+403+9ae17a31.src.rpm","python-docutils-0:0.14-12.module+el8.4.0+403+9ae17a31.src.rpm","python-docutils-0:0.14-12.module+el8.3.0+120+426d8baf.src.rpm","python-funcsigs-0:1.0.2-13.module+el8.4.0+403+9ae17a31.src.rpm","python-idna-0:2.5-7.module+el8.5.0+706+735ec4b3.src.rpm","python-idna-0:2.5-7.module+el8.4.0+403+9ae17a31.src.rpm","python-ipaddress-0:1.0.18-6.module+el8.4.0+403+9ae17a31.src.rpm","python-jinja2-0:2.10-8.module+el8.4.0+403+9ae17a31.src.rpm","python-lxml-0:4.2.3-3.el8.src.rpm","python-markupsafe-0:0.23-19.el8.src.rpm","python-mock-0:2.0.0-13.module+el8.4.0+403+9ae17a31.src.rpm","python-nose-0:1.3.7-30.module+el8.3.0+120+426d8baf.src.rpm","python-nose-docs-0:1.3.7-30.module+el8.3.0+120+426d8baf.noarch.rpm","python-pluggy-0:0.6.0-8.module+el8.5.0+706+735ec4b3.src.rpm","python-pluggy-0:0.6.0-8.module+el8.4.0+403+9ae17a31.src.rpm","python-psycopg2-0:2.7.5-7.el8.src.rpm","python-psycopg2-debuginfo-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python-psycopg2-debuginfo-0:2.7.5-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python-psycopg2-debuginfo-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python-psycopg2-debuginfo-0:2.7.5-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python-psycopg2-debugsource-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python-psycopg2-debugsource-0:2.7.5-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python-psycopg2-debugsource-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python-psycopg2-debugsource-0:2.7.5-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python-psycopg2-doc-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python-psycopg2-doc-0:2.7.5-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python-psycopg2-doc-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python-psycopg2-doc-0:2.7.5-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python-py-0:1.5.3-6.module+el8.5.0+706+735ec4b3.src.rpm","python-py-0:1.5.3-6.module+el8.4.0+403+9ae17a31.src.rpm","python-pygments-0:2.2.0-20.module+el8.3.0+120+426d8baf.src.rpm","python-pymongo-0:3.6.1-11.module+el8.3.0+120+426d8baf.src.rpm","python-pymongo-debuginfo-0:3.6.1-11.module+el8.3.0+120+426d8baf.aarch64.rpm","python-pymongo-debuginfo-0:3.6.1-11.module+el8.3.0+120+426d8baf.x86_64.rpm","python-pymongo-debugsource-0:3.6.1-11.module+el8.3.0+120+426d8baf.aarch64.rpm","python-pymongo-debugsource-0:3.6.1-11.module+el8.3.0+120+426d8baf.x86_64.rpm","python-PyMySQL-0:0.8.0-10.module+el8.5.0+706+735ec4b3.src.rpm","python-PyMySQL-0:0.8.0-10.module+el8.3.0+120+426d8baf.src.rpm","python-pysocks-0:1.6.8-6.module+el8.5.0+706+735ec4b3.src.rpm","python-pysocks-0:1.6.8-6.module+el8.4.0+403+9ae17a31.src.rpm","python-pytest-mock-0:1.9.0-4.module+el8.4.0+403+9ae17a31.src.rpm","python-setuptools_scm-0:1.15.7-6.module+el8.4.0+403+9ae17a31.src.rpm","python-virtualenv-0:15.1.0-19.module+el8.3.0+120+426d8baf.src.rpm","python-wheel-1:0.31.1-2.module+el8.3.0+120+426d8baf.src.rpm","pytz-0:2017.2-12.module+el8.5.0+706+735ec4b3.src.rpm","pytz-0:2017.2-12.module+el8.4.0+403+9ae17a31.src.rpm","PyYAML-0:3.12-16.module+el8.5.0+706+735ec4b3.src.rpm","PyYAML-0:3.12-16.module+el8.4.0+403+9ae17a31.src.rpm","PyYAML-debugsource-0:3.12-16.module+el8.5.0+706+735ec4b3.aarch64.rpm","PyYAML-debugsource-0:3.12-16.module+el8.4.0+403+9ae17a31.aarch64.rpm","PyYAML-debugsource-0:3.12-16.module+el8.5.0+706+735ec4b3.x86_64.rpm","PyYAML-debugsource-0:3.12-16.module+el8.4.0+403+9ae17a31.x86_64.rpm","scipy-0:1.0.0-20.module+el8.3.0+120+426d8baf.src.rpm","scipy-debugsource-0:1.0.0-20.module+el8.3.0+120+426d8baf.aarch64.rpm","scipy-debugsource-0:1.0.0-20.module+el8.3.0+120+426d8baf.x86_64.rpm","python-markupsafe-0:0.23-19.module+el8.5.0+706+735ec4b3.src.rpm","python-psycopg2-0:2.7.5-7.module+el8.5.0+706+735ec4b3.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:3335","url":"https://access.redhat.com/errata/RHSA-2019:3335","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2019/RLSA-2019-3345.json b/data/advisories/2019/RLSA-2019-3345.json new file mode 100644 index 0000000..cad9f3a --- /dev/null +++ b/data/advisories/2019/RLSA-2019-3345.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:3345","synopsis":"Low: virt:rhel security, bug fix, and enhancement update","severity":"SEVERITY_LOW","topic":"An update is available for libiscsi, netcf, sgabios.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:Rocky Linux module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.\n\nSecurity Fix(es):\n\n* ntfs-3g: heap-based buffer overflow leads to local root privilege escalation (CVE-2019-9755)\n\n* QEMU: slirp: information leakage in tcp_emu() due to uninitialized stack variables (CVE-2019-9824)\n\n* QEMU: qxl: null pointer dereference while releasing spice resources (CVE-2019-12155)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1531543","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1531543","description":""},{"ticket":"1662272","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1662272","description":""},{"ticket":"1664463","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1664463","description":""},{"ticket":"1667249","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1667249","description":""},{"ticket":"1673010","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1673010","description":""},{"ticket":"1673396","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1673396","description":""},{"ticket":"1673401","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1673401","description":""},{"ticket":"1678515","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1678515","description":""},{"ticket":"1678979","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1678979","description":""},{"ticket":"1679483","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1679483","description":""},{"ticket":"1679966","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1679966","description":""},{"ticket":"1680231","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1680231","description":""},{"ticket":"1683681","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1683681","description":""},{"ticket":"1684383","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1684383","description":""},{"ticket":"1685151","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1685151","description":""},{"ticket":"1686895","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1686895","description":""},{"ticket":"1687541","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1687541","description":""},{"ticket":"1687596","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1687596","description":""},{"ticket":"1688062","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1688062","description":""},{"ticket":"1689297","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1689297","description":""},{"ticket":"1691356","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1691356","description":""},{"ticket":"1691624","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1691624","description":""},{"ticket":"1693299","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1693299","description":""},{"ticket":"1693433","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1693433","description":""},{"ticket":"1694148","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1694148","description":""},{"ticket":"1697627","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1697627","description":""},{"ticket":"1698133","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1698133","description":""},{"ticket":"1707192","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1707192","description":""},{"ticket":"1707598","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1707598","description":""},{"ticket":"1707706","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1707706","description":""},{"ticket":"1710575","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1710575","description":""},{"ticket":"1712670","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1712670","description":""},{"ticket":"1712810","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1712810","description":""},{"ticket":"1712946","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1712946","description":""},{"ticket":"1714933","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1714933","description":""},{"ticket":"1716347","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1716347","description":""},{"ticket":"1716907","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1716907","description":""},{"ticket":"1716908","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1716908","description":""},{"ticket":"1717088","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1717088","description":""},{"ticket":"1719578","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1719578","description":""},{"ticket":"1721434","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1721434","description":""},{"ticket":"1721983","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1721983","description":""},{"ticket":"1722668","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1722668","description":""},{"ticket":"1722735","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1722735","description":""},{"ticket":"1727821","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1727821","description":""},{"ticket":"1728530","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1728530","description":""},{"ticket":"1728657","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1728657","description":""},{"ticket":"1728958","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1728958","description":""},{"ticket":"1729675","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1729675","description":""},{"ticket":"1732642","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732642","description":""},{"ticket":"1737790","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1737790","description":""},{"ticket":"1738839","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1738839","description":""},{"ticket":"1738886","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1738886","description":""},{"ticket":"1740797","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1740797","description":""},{"ticket":"1741825","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1741825","description":""},{"ticket":"1741837","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1741837","description":""},{"ticket":"1742819","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1742819","description":""},{"ticket":"1744415","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1744415","description":""},{"ticket":"1747185","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1747185","description":""},{"ticket":"1747440","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1747440","description":""},{"ticket":"1749227","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1749227","description":""}],"cves":[{"name":"CVE-2019-12155","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12155","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3BaseScore":"3.8","cwe":"CWE-476"},{"name":"CVE-2019-9755","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9755","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-122"},{"name":"CVE-2019-9824","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9824","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3BaseScore":"2.8","cwe":"CWE-200"}],"references":[],"publishedAt":"2019-11-05T17:33:34Z","rpms":{"Rocky Linux 8":{"nvras":["libiscsi-0:1.18.0-8.module+el8.7.0+1084+97b81f61.src.rpm","libiscsi-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-0:1.18.0-8.module+el8.4.0+534+4680a14e.src.rpm","libiscsi-0:1.18.0-8.module+el8.6.0+847+b490afdd.src.rpm","libiscsi-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-devel-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-devel-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-devel-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-utils-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-utils-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-utils-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-0:0.2.8-12.module+el8.7.0+1084+97b81f61.src.rpm","netcf-0:0.2.8-12.module+el8.4.0+534+4680a14e.src.rpm","netcf-0:0.2.8-12.module+el8.6.0+847+b490afdd.src.rpm","netcf-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-debugsource-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-debugsource-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-debugsource-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-devel-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-devel-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-devel-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-devel-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-devel-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-devel-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-devel-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-devel-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-devel-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-libs-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-libs-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-libs-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-libs-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-libs-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-libs-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-libs-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-libs-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-libs-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","sgabios-1:0.20170427git-3.module+el8.7.0+1084+97b81f61.i686.rpm","sgabios-1:0.20170427git-3.module+el8.4.0+534+4680a14e.i686.rpm","sgabios-1:0.20170427git-3.module+el8.6.0+847+b490afdd.i686.rpm","sgabios-1:0.20170427git-3.module+el8.7.0+1084+97b81f61.src.rpm","sgabios-1:0.20170427git-3.module+el8.4.0+534+4680a14e.src.rpm","sgabios-1:0.20170427git-3.module+el8.6.0+847+b490afdd.src.rpm","sgabios-1:0.20170427git-3.module+el8.7.0+1084+97b81f61.x86_64.rpm","sgabios-1:0.20170427git-3.module+el8.4.0+534+4680a14e.x86_64.rpm","sgabios-1:0.20170427git-3.module+el8.6.0+847+b490afdd.x86_64.rpm","sgabios-bin-1:0.20170427git-3.module+el8.7.0+1084+97b81f61.noarch.rpm","sgabios-bin-1:0.20170427git-3.module+el8.4.0+534+4680a14e.noarch.rpm","sgabios-bin-1:0.20170427git-3.module+el8.6.0+847+b490afdd.noarch.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:3345","url":"https://access.redhat.com/errata/RHSA-2019:3345","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2019/RLSA-2019-3403.json b/data/advisories/2019/RLSA-2019-3403.json new file mode 100644 index 0000000..4603080 --- /dev/null +++ b/data/advisories/2019/RLSA-2019-3403.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:3403","synopsis":"Important: container-tools:rhel8 security, bug fix, and enhancement update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for oci-umount, oci-systemd-hook.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* QEMU: slirp: heap buffer overflow during packet reassembly (CVE-2019-14378)\n\n* containers/image: not enforcing TLS when sending username+password credentials to token servers leading to credential disclosure (CVE-2019-10214)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1655211","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1655211","description":""},{"ticket":"1661597","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1661597","description":""},{"ticket":"1671023","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1671023","description":""},{"ticket":"1672581","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1672581","description":""},{"ticket":"1674519","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1674519","description":""},{"ticket":"1677251","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1677251","description":""},{"ticket":"1677264","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1677264","description":""},{"ticket":"1689255","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1689255","description":""},{"ticket":"1690514","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1690514","description":""},{"ticket":"1691543","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1691543","description":""},{"ticket":"1692513","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1692513","description":""},{"ticket":"1693154","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1693154","description":""},{"ticket":"1693424","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1693424","description":""},{"ticket":"1707220","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1707220","description":""},{"ticket":"1719626","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1719626","description":""},{"ticket":"1719994","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1719994","description":""},{"ticket":"1720646","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1720646","description":""},{"ticket":"1720654","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1720654","description":""},{"ticket":"1721247","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1721247","description":""},{"ticket":"1721638","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1721638","description":""},{"ticket":"1723879","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1723879","description":""},{"ticket":"1728700","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1728700","description":""},{"ticket":"1730281","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1730281","description":""},{"ticket":"1731117","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1731117","description":""},{"ticket":"1732508","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732508","description":""},{"ticket":"1734745","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1734745","description":""},{"ticket":"1734809","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1734809","description":""},{"ticket":"1737077","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1737077","description":""},{"ticket":"1739961","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1739961","description":""},{"ticket":"1740079","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1740079","description":""},{"ticket":"1741157","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1741157","description":""},{"ticket":"1743685","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1743685","description":""}],"cves":[{"name":"CVE-2019-10214","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10214","cvss3ScoringVector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3BaseScore":"6.4","cwe":"CWE-522"},{"name":"CVE-2019-14378","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14378","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","cvss3BaseScore":"7.0","cwe":"CWE-122"},{"name":"CVE-2019-9946","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9946","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3BaseScore":"6.5","cwe":"CWE-841"}],"references":[],"publishedAt":"2019-11-05T17:41:57Z","rpms":{"Rocky Linux 8":{"nvras":["oci-systemd-hook-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-systemd-hook-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.src.rpm","oci-systemd-hook-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-systemd-hook-debuginfo-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-systemd-hook-debuginfo-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-systemd-hook-debugsource-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-systemd-hook-debugsource-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-umount-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-umount-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.src.rpm","oci-umount-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-umount-debuginfo-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-umount-debuginfo-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-umount-debugsource-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-umount-debugsource-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:3403","url":"https://access.redhat.com/errata/RHSA-2019:3403","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2019/RLSA-2019-3476.json b/data/advisories/2019/RLSA-2019-3476.json new file mode 100644 index 0000000..d3861f9 --- /dev/null +++ b/data/advisories/2019/RLSA-2019-3476.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:3476","synopsis":"Moderate: squid:4 security and bug fix update","severity":"SEVERITY_MODERATE","topic":"An update is available for libecap.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nSecurity Fix(es):\n\n* squid: XSS via user_name or auth parameter in cachemgr.cgi (CVE-2019-13345)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1679526","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1679526","description":""},{"ticket":"1683527","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1683527","description":""},{"ticket":"1703117","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1703117","description":""},{"ticket":"1717046","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1717046","description":""},{"ticket":"1727744","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1727744","description":""}],"cves":[{"name":"CVE-2019-13345","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13345","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3BaseScore":"4.3","cwe":"CWE-79"}],"references":[],"publishedAt":"2019-11-05T17:50:00Z","rpms":{"Rocky Linux 8":{"nvras":["libecap-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-0:1.0.1-2.module+el8.4.0+404+316a0dc5.src.rpm","libecap-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm","libecap-debuginfo-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-debuginfo-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm","libecap-debugsource-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-debugsource-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm","libecap-devel-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-devel-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:3476","url":"https://access.redhat.com/errata/RHSA-2019:3476","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2019/RLSA-2019-3494.json b/data/advisories/2019/RLSA-2019-3494.json new file mode 100644 index 0000000..5884222 --- /dev/null +++ b/data/advisories/2019/RLSA-2019-3494.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:3494","synopsis":"Important: container-tools:1.0 security and bug fix update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for fuse-overlayfs, oci-umount, oci-systemd-hook.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* QEMU: slirp: heap buffer overflow during packet reassembly (CVE-2019-14378)\n\n* containers/image: not enforcing TLS when sending username+password credentials to token servers leading to credential disclosure (CVE-2019-10214)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1700877","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1700877","description":""},{"ticket":"1732508","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732508","description":""},{"ticket":"1734745","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1734745","description":""}],"cves":[{"name":"CVE-2019-10214","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10214","cvss3ScoringVector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3BaseScore":"6.4","cwe":"CWE-522"},{"name":"CVE-2019-14378","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14378","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","cvss3BaseScore":"7.0","cwe":"CWE-122"}],"references":[],"publishedAt":"2019-11-05T17:52:13Z","rpms":{"Rocky Linux 8":{"nvras":["fuse-overlayfs-0:0.3-5.module+el8.5.0+681+c9a1951f.aarch64.rpm","fuse-overlayfs-0:0.3-5.module+el8.4.0+557+48ba8b2f.aarch64.rpm","fuse-overlayfs-0:0.3-5.module+el8.5.0+681+c9a1951f.src.rpm","fuse-overlayfs-0:0.3-5.module+el8.4.0+557+48ba8b2f.src.rpm","fuse-overlayfs-0:0.3-5.module+el8.5.0+681+c9a1951f.x86_64.rpm","fuse-overlayfs-0:0.3-5.module+el8.4.0+557+48ba8b2f.x86_64.rpm","fuse-overlayfs-debuginfo-0:0.3-5.module+el8.5.0+681+c9a1951f.aarch64.rpm","fuse-overlayfs-debuginfo-0:0.3-5.module+el8.4.0+557+48ba8b2f.aarch64.rpm","fuse-overlayfs-debuginfo-0:0.3-5.module+el8.5.0+681+c9a1951f.x86_64.rpm","fuse-overlayfs-debuginfo-0:0.3-5.module+el8.4.0+557+48ba8b2f.x86_64.rpm","fuse-overlayfs-debugsource-0:0.3-5.module+el8.5.0+681+c9a1951f.aarch64.rpm","fuse-overlayfs-debugsource-0:0.3-5.module+el8.4.0+557+48ba8b2f.aarch64.rpm","fuse-overlayfs-debugsource-0:0.3-5.module+el8.5.0+681+c9a1951f.x86_64.rpm","fuse-overlayfs-debugsource-0:0.3-5.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-systemd-hook-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-systemd-hook-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.src.rpm","oci-systemd-hook-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-systemd-hook-debuginfo-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-systemd-hook-debuginfo-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-systemd-hook-debugsource-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-systemd-hook-debugsource-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-umount-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-umount-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.src.rpm","oci-umount-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-umount-debuginfo-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-umount-debuginfo-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-umount-debugsource-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-umount-debugsource-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:3494","url":"https://access.redhat.com/errata/RHSA-2019:3494","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2019/RLSA-2019-3553.json b/data/advisories/2019/RLSA-2019-3553.json new file mode 100644 index 0000000..d14a508 --- /dev/null +++ b/data/advisories/2019/RLSA-2019-3553.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:3553","synopsis":"Low: GNOME security, bug fix, and enhancement update","severity":"SEVERITY_LOW","topic":"An update is available for pidgin, gnome-desktop3, pango, gdk-pixbuf2.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"GNOME is the default desktop environment of Rocky Linux.\n\nSecurity Fix(es):\n\n* evince: uninitialized memory use in function tiff_document_render() and tiff_document_get_thumbnail() (CVE-2019-11459)\n\n* gvfs: improper authorization in daemon/gvfsdaemon.c in gvfsd (CVE-2019-12795)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1662193","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1662193","description":""},{"ticket":"1667136","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1667136","description":""},{"ticket":"1673011","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1673011","description":""},{"ticket":"1674382","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1674382","description":""},{"ticket":"1679127","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1679127","description":""},{"ticket":"1680164","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1680164","description":""},{"ticket":"1685811","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1685811","description":""},{"ticket":"1687949","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1687949","description":""},{"ticket":"1690506","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1690506","description":""},{"ticket":"1696708","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1696708","description":""},{"ticket":"1698520","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1698520","description":""},{"ticket":"1698884","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1698884","description":""},{"ticket":"1698923","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1698923","description":""},{"ticket":"1698929","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1698929","description":""},{"ticket":"1698930","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1698930","description":""},{"ticket":"1704355","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1704355","description":""},{"ticket":"1704360","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1704360","description":""},{"ticket":"1704378","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1704378","description":""},{"ticket":"1705583","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1705583","description":""},{"ticket":"1706793","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1706793","description":""},{"ticket":"1709937","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1709937","description":""},{"ticket":"1713080","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1713080","description":""},{"ticket":"1713330","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1713330","description":""},{"ticket":"1713453","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1713453","description":""},{"ticket":"1713685","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1713685","description":""},{"ticket":"1715738","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1715738","description":""},{"ticket":"1715761","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1715761","description":""},{"ticket":"1715765","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1715765","description":""},{"ticket":"1716295","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1716295","description":""},{"ticket":"1716771","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1716771","description":""},{"ticket":"1718133","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1718133","description":""},{"ticket":"1719241","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1719241","description":""},{"ticket":"1719279","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1719279","description":""},{"ticket":"1719779","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1719779","description":""},{"ticket":"1720481","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1720481","description":""},{"ticket":"1721195","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1721195","description":""},{"ticket":"1721575","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1721575","description":""},{"ticket":"1722047","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1722047","description":""},{"ticket":"1722844","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1722844","description":""},{"ticket":"1723467","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1723467","description":""},{"ticket":"1723836","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1723836","description":""},{"ticket":"1724551","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1724551","description":""},{"ticket":"1725101","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1725101","description":""},{"ticket":"1725107","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1725107","description":""},{"ticket":"1725120","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1725120","description":""},{"ticket":"1725555","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1725555","description":""},{"ticket":"1725741","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1725741","description":""},{"ticket":"1725766","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1725766","description":""},{"ticket":"1725854","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1725854","description":""},{"ticket":"1726093","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1726093","description":""},{"ticket":"1726505","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1726505","description":""},{"ticket":"1726656","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1726656","description":""},{"ticket":"1728277","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1728277","description":""},{"ticket":"1731372","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1731372","description":""},{"ticket":"1735382","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1735382","description":""},{"ticket":"1737326","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1737326","description":""},{"ticket":"1739116","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1739116","description":""},{"ticket":"1739117","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1739117","description":""},{"ticket":"1741547","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1741547","description":""}],"cves":[{"name":"CVE-2019-11070","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11070","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3BaseScore":"6.5","cwe":"CWE-200"},{"name":"CVE-2019-11459","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11459","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3BaseScore":"3.3","cwe":"CWE-125"},{"name":"CVE-2019-12795","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12795","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3BaseScore":"4.5","cwe":"CWE-285"},{"name":"CVE-2019-3820","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3820","cvss3ScoringVector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3BaseScore":"4.8","cwe":"CWE-285"},{"name":"CVE-2019-6237","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6237","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-6251","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6251","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3BaseScore":"4.3","cwe":"CWE-20"},{"name":"CVE-2019-8506","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8506","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3BaseScore":"6.3","cwe":"CWE-94"},{"name":"CVE-2019-8518","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8518","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3BaseScore":"6.3","cwe":"CWE-94"},{"name":"CVE-2019-8523","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8523","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3BaseScore":"6.3","cwe":"CWE-94"},{"name":"CVE-2019-8524","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8524","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3BaseScore":"6.3","cwe":"CWE-94"},{"name":"CVE-2019-8535","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8535","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3BaseScore":"6.3","cwe":"CWE-94"},{"name":"CVE-2019-8536","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8536","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3BaseScore":"6.3","cwe":"CWE-94"},{"name":"CVE-2019-8544","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8544","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3BaseScore":"6.3","cwe":"CWE-94"},{"name":"CVE-2019-8551","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8551","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-79"},{"name":"CVE-2019-8558","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8558","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3BaseScore":"6.3","cwe":"CWE-94"},{"name":"CVE-2019-8559","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8559","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3BaseScore":"6.3","cwe":"CWE-94"},{"name":"CVE-2019-8563","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8563","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3BaseScore":"6.3","cwe":"CWE-94"},{"name":"CVE-2019-8571","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8571","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8583","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8583","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8584","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8584","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8586","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8586","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8587","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8587","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8594","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8594","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8595","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8595","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8596","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8596","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8597","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8597","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8601","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8601","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8607","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8607","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2019-8608","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8608","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8609","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8609","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8610","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8610","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8611","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8611","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8615","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8615","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8619","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8619","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8622","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8622","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8623","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8623","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8666","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8666","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8671","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8671","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8672","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8672","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8673","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8673","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8676","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8676","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8677","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8677","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8679","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8679","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8681","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8681","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8686","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8686","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8687","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8687","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8689","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8689","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8690","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8690","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"UNKNOWN"},{"name":"CVE-2019-8726","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8726","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8735","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8735","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8768","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8768","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3BaseScore":"5.3","cwe":"UNKNOWN"}],"references":[],"publishedAt":"2019-11-05T17:59:21Z","rpms":{"Rocky Linux 8":{"nvras":["pango-devel-0:1.42.4-6.el8.x86_64.rpm","pidgin-0:2.13.0-5.el8.src.rpm","gdk-pixbuf2-0:2.36.12-5.el8.aarch64.rpm","gdk-pixbuf2-0:2.36.12-5.el8.i686.rpm","gdk-pixbuf2-0:2.36.12-5.el8.src.rpm","gdk-pixbuf2-0:2.36.12-5.el8.x86_64.rpm","gdk-pixbuf2-debuginfo-0:2.36.12-5.el8.aarch64.rpm","gdk-pixbuf2-debuginfo-0:2.36.12-5.el8.i686.rpm","gdk-pixbuf2-debuginfo-0:2.36.12-5.el8.x86_64.rpm","gdk-pixbuf2-debugsource-0:2.36.12-5.el8.aarch64.rpm","gdk-pixbuf2-debugsource-0:2.36.12-5.el8.i686.rpm","gdk-pixbuf2-debugsource-0:2.36.12-5.el8.x86_64.rpm","gdk-pixbuf2-devel-0:2.36.12-5.el8.aarch64.rpm","gdk-pixbuf2-devel-0:2.36.12-5.el8.i686.rpm","gdk-pixbuf2-devel-0:2.36.12-5.el8.x86_64.rpm","gdk-pixbuf2-devel-debuginfo-0:2.36.12-5.el8.aarch64.rpm","gdk-pixbuf2-devel-debuginfo-0:2.36.12-5.el8.i686.rpm","gdk-pixbuf2-devel-debuginfo-0:2.36.12-5.el8.x86_64.rpm","gdk-pixbuf2-modules-0:2.36.12-5.el8.aarch64.rpm","gdk-pixbuf2-modules-0:2.36.12-5.el8.i686.rpm","gdk-pixbuf2-modules-0:2.36.12-5.el8.x86_64.rpm","gdk-pixbuf2-modules-debuginfo-0:2.36.12-5.el8.aarch64.rpm","gdk-pixbuf2-modules-debuginfo-0:2.36.12-5.el8.i686.rpm","gdk-pixbuf2-modules-debuginfo-0:2.36.12-5.el8.x86_64.rpm","gdk-pixbuf2-xlib-0:2.36.12-5.el8.aarch64.rpm","gdk-pixbuf2-xlib-0:2.36.12-5.el8.i686.rpm","gdk-pixbuf2-xlib-0:2.36.12-5.el8.x86_64.rpm","gdk-pixbuf2-xlib-debuginfo-0:2.36.12-5.el8.aarch64.rpm","gdk-pixbuf2-xlib-debuginfo-0:2.36.12-5.el8.i686.rpm","gdk-pixbuf2-xlib-debuginfo-0:2.36.12-5.el8.x86_64.rpm","gdk-pixbuf2-xlib-devel-0:2.36.12-5.el8.aarch64.rpm","gdk-pixbuf2-xlib-devel-0:2.36.12-5.el8.i686.rpm","gdk-pixbuf2-xlib-devel-0:2.36.12-5.el8.x86_64.rpm","gnome-desktop3-0:3.32.2-1.el8.i686.rpm","gnome-desktop3-0:3.32.2-1.el8.src.rpm","gnome-desktop3-0:3.32.2-1.el8.x86_64.rpm","gnome-desktop3-debuginfo-0:3.32.2-1.el8.i686.rpm","gnome-desktop3-debuginfo-0:3.32.2-1.el8.x86_64.rpm","gnome-desktop3-debugsource-0:3.32.2-1.el8.i686.rpm","gnome-desktop3-debugsource-0:3.32.2-1.el8.x86_64.rpm","gnome-desktop3-devel-0:3.32.2-1.el8.i686.rpm","gnome-desktop3-devel-0:3.32.2-1.el8.x86_64.rpm","libpurple-0:2.13.0-5.el8.aarch64.rpm","libpurple-0:2.13.0-5.el8.i686.rpm","libpurple-0:2.13.0-5.el8.x86_64.rpm","libpurple-debuginfo-0:2.13.0-5.el8.aarch64.rpm","libpurple-debuginfo-0:2.13.0-5.el8.i686.rpm","libpurple-debuginfo-0:2.13.0-5.el8.x86_64.rpm","libpurple-devel-0:2.13.0-5.el8.aarch64.rpm","libpurple-devel-0:2.13.0-5.el8.i686.rpm","libpurple-devel-0:2.13.0-5.el8.x86_64.rpm","pango-0:1.42.4-6.el8.aarch64.rpm","pango-0:1.42.4-6.el8.i686.rpm","pango-0:1.42.4-6.el8.src.rpm","pango-0:1.42.4-6.el8.x86_64.rpm","pango-debuginfo-0:1.42.4-6.el8.aarch64.rpm","pango-debuginfo-0:1.42.4-6.el8.i686.rpm","pango-debuginfo-0:1.42.4-6.el8.x86_64.rpm","pango-debugsource-0:1.42.4-6.el8.aarch64.rpm","pango-debugsource-0:1.42.4-6.el8.i686.rpm","pango-debugsource-0:1.42.4-6.el8.x86_64.rpm","pango-devel-0:1.42.4-6.el8.aarch64.rpm","pango-devel-0:1.42.4-6.el8.i686.rpm","pidgin-0:2.13.0-5.el8.x86_64.rpm","pidgin-debuginfo-0:2.13.0-5.el8.aarch64.rpm","pidgin-debuginfo-0:2.13.0-5.el8.i686.rpm","pidgin-debuginfo-0:2.13.0-5.el8.x86_64.rpm","pidgin-debugsource-0:2.13.0-5.el8.aarch64.rpm","pidgin-debugsource-0:2.13.0-5.el8.i686.rpm","pidgin-debugsource-0:2.13.0-5.el8.x86_64.rpm","pidgin-devel-0:2.13.0-5.el8.i686.rpm","pidgin-devel-0:2.13.0-5.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:3553","url":"https://access.redhat.com/errata/RHSA-2019:3553","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2019/RLSA-2019-3643.json b/data/advisories/2019/RLSA-2019-3643.json new file mode 100644 index 0000000..c00ab4c --- /dev/null +++ b/data/advisories/2019/RLSA-2019-3643.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:3643","synopsis":"Low: gettext security update","severity":"SEVERITY_LOW","topic":"An update is available for gettext.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The gettext packages provide a documentation for producing multi-lingual messages in programs, set of conventions about how programs should be written, a runtime library, and a directory and file naming organization for the message catalogs.\n\nSecurity Fix(es):\n\n* gettext: double free in default_add_message in read-catalog.c (CVE-2018-18751)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1647043","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1647043","description":""}],"cves":[{"name":"CVE-2018-18751","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18751","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"4.0","cwe":"CWE-416"}],"references":[],"publishedAt":"2019-11-05T18:10:22Z","rpms":{"Rocky Linux 8":{"nvras":["gettext-0:0.19.8.1-17.el8.aarch64.rpm","gettext-0:0.19.8.1-17.el8.src.rpm","gettext-0:0.19.8.1-17.el8.x86_64.rpm","gettext-common-devel-0:0.19.8.1-17.el8.noarch.rpm","gettext-devel-0:0.19.8.1-17.el8.i686.rpm","gettext-debuginfo-0:0.19.8.1-17.el8.aarch64.rpm","gettext-debuginfo-0:0.19.8.1-17.el8.i686.rpm","gettext-debuginfo-0:0.19.8.1-17.el8.x86_64.rpm","gettext-debugsource-0:0.19.8.1-17.el8.aarch64.rpm","gettext-debugsource-0:0.19.8.1-17.el8.i686.rpm","gettext-debugsource-0:0.19.8.1-17.el8.x86_64.rpm","gettext-devel-0:0.19.8.1-17.el8.aarch64.rpm","gettext-devel-0:0.19.8.1-17.el8.x86_64.rpm","gettext-devel-debuginfo-0:0.19.8.1-17.el8.aarch64.rpm","gettext-devel-debuginfo-0:0.19.8.1-17.el8.i686.rpm","gettext-devel-debuginfo-0:0.19.8.1-17.el8.x86_64.rpm","gettext-libs-0:0.19.8.1-17.el8.aarch64.rpm","gettext-libs-0:0.19.8.1-17.el8.i686.rpm","gettext-libs-0:0.19.8.1-17.el8.x86_64.rpm","gettext-libs-debuginfo-0:0.19.8.1-17.el8.aarch64.rpm","gettext-libs-debuginfo-0:0.19.8.1-17.el8.i686.rpm","gettext-libs-debuginfo-0:0.19.8.1-17.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:3643","url":"https://access.redhat.com/errata/RHSA-2019:3643","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2019/RLSA-2019-3673.json b/data/advisories/2019/RLSA-2019-3673.json new file mode 100644 index 0000000..526b326 --- /dev/null +++ b/data/advisories/2019/RLSA-2019-3673.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:3673","synopsis":"Low: lldpad security and bug fix update","severity":"SEVERITY_LOW","topic":"An update is available for lldpad.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The lldpad packages provide the Linux user space daemon and configuration tool for Intel's Link Layer Discovery Protocol (LLDP) Agent with Enhanced Ethernet support.\n\nSecurity Fix(es):\n\n* lldptool: improper sanitization of shell-escape codes (CVE-2018-10932)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1614896","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1614896","description":""},{"ticket":"1727326","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1727326","description":""}],"cves":[{"name":"CVE-2018-10932","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10932","cvss3ScoringVector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3BaseScore":"4.3","cwe":"CWE-117"}],"references":[],"publishedAt":"2019-11-05T18:14:00Z","rpms":{"Rocky Linux 8":{"nvras":["lldpad-0:1.0.1-13.git036e314.el8.aarch64.rpm","lldpad-0:1.0.1-13.git036e314.el8.i686.rpm","lldpad-0:1.0.1-13.git036e314.el8.src.rpm","lldpad-0:1.0.1-13.git036e314.el8.x86_64.rpm","lldpad-debuginfo-0:1.0.1-13.git036e314.el8.aarch64.rpm","lldpad-debuginfo-0:1.0.1-13.git036e314.el8.i686.rpm","lldpad-debuginfo-0:1.0.1-13.git036e314.el8.x86_64.rpm","lldpad-debugsource-0:1.0.1-13.git036e314.el8.aarch64.rpm","lldpad-debugsource-0:1.0.1-13.git036e314.el8.i686.rpm","lldpad-debugsource-0:1.0.1-13.git036e314.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:3673","url":"https://access.redhat.com/errata/RHSA-2019:3673","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2019/RLSA-2019-3703.json b/data/advisories/2019/RLSA-2019-3703.json new file mode 100644 index 0000000..1d0c88d --- /dev/null +++ b/data/advisories/2019/RLSA-2019-3703.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:3703","synopsis":"Low: libvorbis security update","severity":"SEVERITY_LOW","topic":"An update is available for libvorbis.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The libvorbis package contains runtime libraries for use in programs that support Ogg Vorbis, a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed format for audio and music at fixed and variable bitrates.\n\nSecurity Fix(es):\n\n* libvorbis: heap buffer overflow in mapping0_forward function (CVE-2018-10392)\n\n* libvorbis: stack buffer overflow in bark_noise_hybridmp function (CVE-2018-10393)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1574193","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1574193","description":""},{"ticket":"1574194","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1574194","description":""}],"cves":[{"name":"CVE-2018-10392","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10392","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-122"},{"name":"CVE-2018-10393","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10393","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L","cvss3BaseScore":"7.3","cwe":"CWE-122"}],"references":[],"publishedAt":"2019-11-05T20:52:55Z","rpms":{"Rocky Linux 8":{"nvras":["libvorbis-1:1.3.6-2.el8.aarch64.rpm","libvorbis-1:1.3.6-2.el8.i686.rpm","libvorbis-1:1.3.6-2.el8.src.rpm","libvorbis-1:1.3.6-2.el8.x86_64.rpm","libvorbis-debuginfo-1:1.3.6-2.el8.aarch64.rpm","libvorbis-debuginfo-1:1.3.6-2.el8.i686.rpm","libvorbis-debuginfo-1:1.3.6-2.el8.x86_64.rpm","libvorbis-debugsource-1:1.3.6-2.el8.aarch64.rpm","libvorbis-debugsource-1:1.3.6-2.el8.i686.rpm","libvorbis-debugsource-1:1.3.6-2.el8.x86_64.rpm","libvorbis-devel-1:1.3.6-2.el8.aarch64.rpm","libvorbis-devel-1:1.3.6-2.el8.i686.rpm","libvorbis-devel-1:1.3.6-2.el8.x86_64.rpm","libvorbis-devel-docs-1:1.3.6-2.el8.noarch.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:3703","url":"https://access.redhat.com/errata/RHSA-2019:3703","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2019/RLSA-2019-3704.json b/data/advisories/2019/RLSA-2019-3704.json new file mode 100644 index 0000000..f8f0a8a --- /dev/null +++ b/data/advisories/2019/RLSA-2019-3704.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:3704","synopsis":"Moderate: numpy security update","severity":"SEVERITY_MODERATE","topic":"An update is available for numpy.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The numpy packages provide NumPY. NumPY is an extension to the Python programming language, which adds support for large, multi-dimensional arrays and matrices, and a library of mathematical functions that operate on such arrays.\n\nSecurity Fix(es):\n\n* numpy: crafted serialized object passed in numpy.load() in pickle python module allows arbitrary code execution (CVE-2019-6446)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1667950","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1667950","description":""},{"ticket":"1687873","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1687873","description":""}],"cves":[{"name":"CVE-2019-6446","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6446","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"CWE-358->CWE-20"}],"references":[],"publishedAt":"2019-11-05T20:53:10Z","rpms":{"Rocky Linux 8":{"nvras":["numpy-1:1.14.3-9.el8.src.rpm","python3-numpy-1:1.14.3-9.el8.aarch64.rpm","python3-numpy-1:1.14.3-9.el8.x86_64.rpm","python3-numpy-debuginfo-1:1.14.3-9.el8.aarch64.rpm","python3-numpy-debuginfo-1:1.14.3-9.el8.x86_64.rpm","python3-numpy-f2py-1:1.14.3-9.el8.aarch64.rpm","python3-numpy-f2py-1:1.14.3-9.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:3704","url":"https://access.redhat.com/errata/RHSA-2019:3704","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2019/RLSA-2019-3705.json b/data/advisories/2019/RLSA-2019-3705.json new file mode 100644 index 0000000..055657a --- /dev/null +++ b/data/advisories/2019/RLSA-2019-3705.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:3705","synopsis":"Moderate: libjpeg-turbo security update","severity":"SEVERITY_MODERATE","topic":"An update is available for libjpeg-turbo.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance.\n\nSecurity Fix(es):\n\n* libjpeg-turbo: heap-based buffer over-read via crafted 8-bit BMP in get_8bit_row in rdbmp.c leads to denial of service (CVE-2018-14498)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1687424","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1687424","description":""},{"ticket":"1688397","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1688397","description":""}],"cves":[{"name":"CVE-2018-14498","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14498","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3BaseScore":"4.4","cwe":"CWE-125"}],"references":[],"publishedAt":"2019-11-05T20:53:12Z","rpms":{"Rocky Linux 8":{"nvras":["libjpeg-turbo-0:1.5.3-10.el8.aarch64.rpm","libjpeg-turbo-0:1.5.3-10.el8.i686.rpm","libjpeg-turbo-0:1.5.3-10.el8.src.rpm","libjpeg-turbo-0:1.5.3-10.el8.x86_64.rpm","libjpeg-turbo-debuginfo-0:1.5.3-10.el8.aarch64.rpm","libjpeg-turbo-debuginfo-0:1.5.3-10.el8.i686.rpm","libjpeg-turbo-debuginfo-0:1.5.3-10.el8.x86_64.rpm","libjpeg-turbo-debugsource-0:1.5.3-10.el8.aarch64.rpm","libjpeg-turbo-debugsource-0:1.5.3-10.el8.i686.rpm","libjpeg-turbo-debugsource-0:1.5.3-10.el8.x86_64.rpm","libjpeg-turbo-devel-0:1.5.3-10.el8.aarch64.rpm","libjpeg-turbo-devel-0:1.5.3-10.el8.i686.rpm","libjpeg-turbo-devel-0:1.5.3-10.el8.x86_64.rpm","libjpeg-turbo-utils-0:1.5.3-10.el8.aarch64.rpm","libjpeg-turbo-utils-0:1.5.3-10.el8.x86_64.rpm","libjpeg-turbo-utils-debuginfo-0:1.5.3-10.el8.aarch64.rpm","libjpeg-turbo-utils-debuginfo-0:1.5.3-10.el8.x86_64.rpm","turbojpeg-0:1.5.3-10.el8.aarch64.rpm","turbojpeg-0:1.5.3-10.el8.i686.rpm","turbojpeg-0:1.5.3-10.el8.x86_64.rpm","turbojpeg-debuginfo-0:1.5.3-10.el8.aarch64.rpm","turbojpeg-debuginfo-0:1.5.3-10.el8.i686.rpm","turbojpeg-debuginfo-0:1.5.3-10.el8.x86_64.rpm","turbojpeg-devel-0:1.5.3-10.el8.aarch64.rpm","turbojpeg-devel-0:1.5.3-10.el8.i686.rpm","turbojpeg-devel-0:1.5.3-10.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:3705","url":"https://access.redhat.com/errata/RHSA-2019:3705","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2019/RLSA-2019-3706.json b/data/advisories/2019/RLSA-2019-3706.json new file mode 100644 index 0000000..bad0195 --- /dev/null +++ b/data/advisories/2019/RLSA-2019-3706.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:3706","synopsis":"Moderate: lua security and bug fix update","severity":"SEVERITY_MODERATE","topic":"An update is available for lua.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language.\n\nSecurity Fix(es):\n\n* lua: use-after-free in lua_upvaluejoin in lapi.c resulting in denial of service (CVE-2019-6706)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1670019","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1670019","description":""}],"cves":[{"name":"CVE-2019-6706","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6706","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-416"}],"references":[],"publishedAt":"2019-11-05T20:53:20Z","rpms":{"Rocky Linux 8":{"nvras":["lua-0:5.3.4-11.el8.aarch64.rpm","lua-0:5.3.4-11.el8.i686.rpm","lua-0:5.3.4-11.el8.src.rpm","lua-0:5.3.4-11.el8.x86_64.rpm","lua-debuginfo-0:5.3.4-11.el8.aarch64.rpm","lua-debuginfo-0:5.3.4-11.el8.i686.rpm","lua-debuginfo-0:5.3.4-11.el8.x86_64.rpm","lua-debugsource-0:5.3.4-11.el8.aarch64.rpm","lua-debugsource-0:5.3.4-11.el8.i686.rpm","lua-debugsource-0:5.3.4-11.el8.x86_64.rpm","lua-devel-0:5.3.4-11.el8.aarch64.rpm","lua-devel-0:5.3.4-11.el8.i686.rpm","lua-devel-0:5.3.4-11.el8.x86_64.rpm","lua-libs-0:5.3.4-11.el8.aarch64.rpm","lua-libs-0:5.3.4-11.el8.i686.rpm","lua-libs-0:5.3.4-11.el8.x86_64.rpm","lua-libs-debuginfo-0:5.3.4-11.el8.aarch64.rpm","lua-libs-debuginfo-0:5.3.4-11.el8.i686.rpm","lua-libs-debuginfo-0:5.3.4-11.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:3706","url":"https://access.redhat.com/errata/RHSA-2019:3706","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2019/RLSA-2019-3708.json b/data/advisories/2019/RLSA-2019-3708.json new file mode 100644 index 0000000..15a35cc --- /dev/null +++ b/data/advisories/2019/RLSA-2019-3708.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:3708","synopsis":"Moderate: mariadb:10.3 security and bug fix update","severity":"SEVERITY_MODERATE","topic":"An update is available for asio, Judy.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. \n\nThe following packages have been upgraded to a later upstream version: mariadb (10.3.17), galera (25.3.26). (BZ#1701687, BZ#1711265, BZ#1741358)\n\nSecurity Fix(es):\n\n* mysql: InnoDB unspecified vulnerability (CPU Jan 2019) (CVE-2019-2510)\n\n* mysql: Server: DDL unspecified vulnerability (CPU Jan 2019) (CVE-2019-2537)\n\n* mysql: Server: Replication unspecified vulnerability (CPU Apr 2019) (CVE-2019-2614)\n\n* mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019) (CVE-2019-2627)\n\n* mysql: InnoDB unspecified vulnerability (CPU Apr 2019) (CVE-2019-2628)\n\n* mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2019) (CVE-2019-2737)\n\n* mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019) (CVE-2019-2739)\n\n* mysql: Server: XML unspecified vulnerability (CPU Jul 2019) (CVE-2019-2740)\n\n* mysql: InnoDB unspecified vulnerability (CPU Jul 2019) (CVE-2019-2758)\n\n* mysql: Server: Parser unspecified vulnerability (CPU Jul 2019) (CVE-2019-2805)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1657220","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1657220","description":""},{"ticket":"1659920","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1659920","description":""},{"ticket":"1666751","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1666751","description":""},{"ticket":"1666763","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1666763","description":""},{"ticket":"1686818","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1686818","description":""},{"ticket":"1687879","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1687879","description":""},{"ticket":"1693245","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1693245","description":""},{"ticket":"1702707","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702707","description":""},{"ticket":"1702709","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702709","description":""},{"ticket":"1702969","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702969","description":""},{"ticket":"1702976","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702976","description":""},{"ticket":"1702977","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702977","description":""},{"ticket":"1731997","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1731997","description":""},{"ticket":"1731999","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1731999","description":""},{"ticket":"1732000","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732000","description":""},{"ticket":"1732008","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732008","description":""},{"ticket":"1732025","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732025","description":""}],"cves":[{"name":"CVE-2019-2510","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2510","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2537","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2537","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2614","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2614","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.4","cwe":"UNKNOWN"},{"name":"CVE-2019-2627","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2627","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2628","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2628","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2737","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2737","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2739","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2739","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3BaseScore":"5.1","cwe":"UNKNOWN"},{"name":"CVE-2019-2740","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2740","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2019-2758","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2758","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3BaseScore":"5.5","cwe":"UNKNOWN"},{"name":"CVE-2019-2805","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2805","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2020-2922","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2922","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3BaseScore":"3.7","cwe":"UNKNOWN"},{"name":"CVE-2021-2007","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-2007","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3BaseScore":"3.7","cwe":"UNKNOWN"}],"references":[],"publishedAt":"2019-11-05T20:53:43Z","rpms":{"Rocky Linux 8":{"nvras":["asio-0:1.10.8-7.module+el8.5.0+777+18007c86.src.rpm","asio-0:1.10.8-7.module+el8.3.0+126+a7f7b5c5.src.rpm","asio-devel-0:1.10.8-7.module+el8.5.0+777+18007c86.aarch64.rpm","asio-devel-0:1.10.8-7.module+el8.3.0+126+a7f7b5c5.aarch64.rpm","asio-devel-0:1.10.8-7.module+el8.5.0+777+18007c86.i686.rpm","asio-devel-0:1.10.8-7.module+el8.3.0+126+a7f7b5c5.i686.rpm","asio-devel-0:1.10.8-7.module+el8.5.0+777+18007c86.x86_64.rpm","asio-devel-0:1.10.8-7.module+el8.3.0+126+a7f7b5c5.x86_64.rpm","Judy-0:1.0.5-18.module+el8.4.0+427+adf35707.aarch64.rpm","Judy-0:1.0.5-18.module+el8.4.0+427+adf35707.i686.rpm","Judy-0:1.0.5-18.module+el8.4.0+427+adf35707.src.rpm","Judy-0:1.0.5-18.module+el8.4.0+427+adf35707.x86_64.rpm","Judy-debuginfo-0:1.0.5-18.module+el8.4.0+427+adf35707.aarch64.rpm","Judy-debuginfo-0:1.0.5-18.module+el8.4.0+427+adf35707.i686.rpm","Judy-debuginfo-0:1.0.5-18.module+el8.4.0+427+adf35707.x86_64.rpm","Judy-debugsource-0:1.0.5-18.module+el8.4.0+427+adf35707.aarch64.rpm","Judy-debugsource-0:1.0.5-18.module+el8.4.0+427+adf35707.i686.rpm","Judy-debugsource-0:1.0.5-18.module+el8.4.0+427+adf35707.x86_64.rpm","Judy-devel-0:1.0.5-18.module+el8.4.0+427+adf35707.aarch64.rpm","Judy-devel-0:1.0.5-18.module+el8.4.0+427+adf35707.i686.rpm","Judy-devel-0:1.0.5-18.module+el8.4.0+427+adf35707.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:3708","url":"https://access.redhat.com/errata/RHSA-2019:3708","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2019/RLSA-2019-3735.json b/data/advisories/2019/RLSA-2019-3735.json new file mode 100644 index 0000000..5806f51 --- /dev/null +++ b/data/advisories/2019/RLSA-2019-3735.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:3735","synopsis":"Critical: php:7.2 security update","severity":"SEVERITY_CRITICAL","topic":"An update is available for libzip, php-pear, php-pecl-apcu, php-pecl-zip.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.\n\nSecurity Fix(es):\n\n* php: underflow in env_path_info in fpm_main.c (CVE-2019-11043)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1766378","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1766378","description":""}],"cves":[{"name":"CVE-2019-11043","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11043","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.1","cwe":"CWE-20->CWE-787"}],"references":[],"publishedAt":"2019-11-06T13:15:34Z","rpms":{"Rocky Linux 8":{"nvras":["apcu-panel-0:5.1.12-2.module+el8.4.0+413+c9202dda.noarch.rpm","libzip-0:1.5.1-2.module+el8.4.0+413+c9202dda.aarch64.rpm","libzip-0:1.5.1-2.module+el8.4.0+413+c9202dda.src.rpm","libzip-0:1.5.1-2.module+el8.4.0+413+c9202dda.x86_64.rpm","libzip-debuginfo-0:1.5.1-2.module+el8.4.0+413+c9202dda.aarch64.rpm","libzip-debuginfo-0:1.5.1-2.module+el8.4.0+413+c9202dda.x86_64.rpm","libzip-debugsource-0:1.5.1-2.module+el8.4.0+413+c9202dda.aarch64.rpm","libzip-debugsource-0:1.5.1-2.module+el8.4.0+413+c9202dda.x86_64.rpm","libzip-devel-0:1.5.1-2.module+el8.4.0+413+c9202dda.aarch64.rpm","libzip-devel-0:1.5.1-2.module+el8.4.0+413+c9202dda.x86_64.rpm","libzip-tools-0:1.5.1-2.module+el8.4.0+413+c9202dda.aarch64.rpm","libzip-tools-0:1.5.1-2.module+el8.4.0+413+c9202dda.x86_64.rpm","libzip-tools-debuginfo-0:1.5.1-2.module+el8.4.0+413+c9202dda.aarch64.rpm","libzip-tools-debuginfo-0:1.5.1-2.module+el8.4.0+413+c9202dda.x86_64.rpm","php-pear-1:1.10.5-9.module+el8.4.0+413+c9202dda.noarch.rpm","php-pear-1:1.10.5-9.module+el8.4.0+413+c9202dda.src.rpm","php-pecl-apcu-0:5.1.12-2.module+el8.4.0+413+c9202dda.aarch64.rpm","php-pecl-apcu-0:5.1.12-2.module+el8.4.0+413+c9202dda.src.rpm","php-pecl-apcu-0:5.1.12-2.module+el8.4.0+413+c9202dda.x86_64.rpm","php-pecl-apcu-debuginfo-0:5.1.12-2.module+el8.4.0+413+c9202dda.aarch64.rpm","php-pecl-apcu-debuginfo-0:5.1.12-2.module+el8.4.0+413+c9202dda.x86_64.rpm","php-pecl-apcu-debugsource-0:5.1.12-2.module+el8.4.0+413+c9202dda.aarch64.rpm","php-pecl-apcu-debugsource-0:5.1.12-2.module+el8.4.0+413+c9202dda.x86_64.rpm","php-pecl-apcu-devel-0:5.1.12-2.module+el8.4.0+413+c9202dda.aarch64.rpm","php-pecl-apcu-devel-0:5.1.12-2.module+el8.4.0+413+c9202dda.x86_64.rpm","php-pecl-zip-0:1.15.3-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-pecl-zip-0:1.15.3-1.module+el8.4.0+413+c9202dda.src.rpm","php-pecl-zip-0:1.15.3-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-pecl-zip-debuginfo-0:1.15.3-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-pecl-zip-debuginfo-0:1.15.3-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-pecl-zip-debugsource-0:1.15.3-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-pecl-zip-debugsource-0:1.15.3-1.module+el8.4.0+413+c9202dda.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:3735","url":"https://access.redhat.com/errata/RHSA-2019:3735","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2019/RLSA-2019-3736.json b/data/advisories/2019/RLSA-2019-3736.json new file mode 100644 index 0000000..53171c4 --- /dev/null +++ b/data/advisories/2019/RLSA-2019-3736.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:3736","synopsis":"Critical: php:7.3 security update","severity":"SEVERITY_CRITICAL","topic":"An update is available for libzip, php-pear, php-pecl-apcu, php-pecl-zip.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.\n\nSecurity Fix(es):\n\n* php: underflow in env_path_info in fpm_main.c (CVE-2019-11043)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1766378","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1766378","description":""}],"cves":[{"name":"CVE-2019-11043","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11043","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.1","cwe":"CWE-20->CWE-787"}],"references":[],"publishedAt":"2019-11-06T13:15:46Z","rpms":{"Rocky Linux 8":{"nvras":["apcu-panel-0:5.1.17-1.module+el8.4.0+414+2e7afcdd.noarch.rpm","libzip-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","libzip-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.src.rpm","libzip-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","libzip-debuginfo-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","libzip-debuginfo-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","libzip-debugsource-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","libzip-debugsource-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","libzip-devel-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","libzip-devel-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","libzip-tools-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","libzip-tools-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","libzip-tools-debuginfo-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","libzip-tools-debuginfo-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-pear-1:1.10.9-1.module+el8.4.0+414+2e7afcdd.noarch.rpm","php-pear-1:1.10.9-1.module+el8.4.0+414+2e7afcdd.src.rpm","php-pecl-apcu-0:5.1.17-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-pecl-apcu-0:5.1.17-1.module+el8.4.0+414+2e7afcdd.src.rpm","php-pecl-apcu-0:5.1.17-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-pecl-apcu-debuginfo-0:5.1.17-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-pecl-apcu-debuginfo-0:5.1.17-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-pecl-apcu-debugsource-0:5.1.17-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-pecl-apcu-debugsource-0:5.1.17-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-pecl-apcu-devel-0:5.1.17-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-pecl-apcu-devel-0:5.1.17-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-pecl-zip-0:1.15.4-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-pecl-zip-0:1.15.4-1.module+el8.4.0+414+2e7afcdd.src.rpm","php-pecl-zip-0:1.15.4-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-pecl-zip-debuginfo-0:1.15.4-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-pecl-zip-debuginfo-0:1.15.4-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-pecl-zip-debugsource-0:1.15.4-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-pecl-zip-debugsource-0:1.15.4-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:3736","url":"https://access.redhat.com/errata/RHSA-2019:3736","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2019/RLSA-2019-4269.json b/data/advisories/2019/RLSA-2019-4269.json new file mode 100644 index 0000000..9274d35 --- /dev/null +++ b/data/advisories/2019/RLSA-2019-4269.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:4269","synopsis":"Important: container-tools:rhel8 security and bug fix update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for oci-umount, oci-systemd-hook.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)\n\n* HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)\n\n* runc: AppArmor/SELinux bypass with malicious image that specifies a volume at /proc (CVE-2019-16884)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* avc: podman run --security-opt label=type:svirt_qemu_net_t (BZ#1764318)\n\n* backport json-file logging support to 1.4.2 (BZ#1770176)\n\n* Selinux won't allow SCTP inter pod communication (BZ#1774382)","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1735645","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1735645","description":""},{"ticket":"1735744","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1735744","description":""},{"ticket":"1757214","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1757214","description":""},{"ticket":"1764318","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1764318","description":"* avc: podman run --security-opt label=type:svirt_qemu_net_t"},{"ticket":"1770176","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1770176","description":"* backport json-file logging support to 1.4.2"},{"ticket":"1774382","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1774382","description":"* Selinux won't allow SCTP inter pod communication"}],"cves":[{"name":"CVE-2019-16884","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16884","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","cvss3BaseScore":"6.5","cwe":"CWE-41"},{"name":"CVE-2019-18466","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18466","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3BaseScore":"2.5","cwe":"CWE-59"},{"name":"CVE-2019-9512","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9512","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-400"},{"name":"CVE-2019-9514","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9514","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-400"}],"references":[],"publishedAt":"2019-12-17T09:19:28Z","rpms":{"Rocky Linux 8":{"nvras":["oci-systemd-hook-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-systemd-hook-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.src.rpm","oci-systemd-hook-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-systemd-hook-debuginfo-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-systemd-hook-debuginfo-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-systemd-hook-debugsource-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-systemd-hook-debugsource-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-umount-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-umount-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.src.rpm","oci-umount-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-umount-debuginfo-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-umount-debuginfo-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-umount-debugsource-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-umount-debugsource-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:4269","url":"https://access.redhat.com/errata/RHSA-2019:4269","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2019/RLSA-2019-4273.json b/data/advisories/2019/RLSA-2019-4273.json new file mode 100644 index 0000000..b12ffda --- /dev/null +++ b/data/advisories/2019/RLSA-2019-4273.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:4273","synopsis":"Important: container-tools:1.0 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for fuse-overlayfs, oci-umount, runc, skopeo, oci-systemd-hook, containernetworking-plugins.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)\n\n* HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1735645","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1735645","description":""},{"ticket":"1735744","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1735744","description":""}],"cves":[{"name":"CVE-2019-9512","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9512","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-400"},{"name":"CVE-2019-9514","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9514","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-400"}],"references":[],"publishedAt":"2019-12-17T09:20:02Z","rpms":{"Rocky Linux 8":{"nvras":["fuse-overlayfs-0:0.3-5.module+el8.5.0+681+c9a1951f.src.rpm","containernetworking-plugins-0:0.7.4-4.git9ebe139.module+el8.5.0+681+c9a1951f.aarch64.rpm","containernetworking-plugins-0:0.7.4-4.git9ebe139.module+el8.4.0+557+48ba8b2f.aarch64.rpm","containernetworking-plugins-0:0.7.4-4.git9ebe139.module+el8.5.0+681+c9a1951f.src.rpm","containernetworking-plugins-0:0.7.4-4.git9ebe139.module+el8.4.0+557+48ba8b2f.src.rpm","containernetworking-plugins-0:0.7.4-4.git9ebe139.module+el8.5.0+681+c9a1951f.x86_64.rpm","containernetworking-plugins-0:0.7.4-4.git9ebe139.module+el8.4.0+557+48ba8b2f.x86_64.rpm","containernetworking-plugins-debuginfo-0:0.7.4-4.git9ebe139.module+el8.5.0+681+c9a1951f.aarch64.rpm","containernetworking-plugins-debuginfo-0:0.7.4-4.git9ebe139.module+el8.4.0+557+48ba8b2f.aarch64.rpm","fuse-overlayfs-0:0.3-5.module+el8.5.0+681+c9a1951f.aarch64.rpm","containernetworking-plugins-debuginfo-0:0.7.4-4.git9ebe139.module+el8.5.0+681+c9a1951f.x86_64.rpm","containernetworking-plugins-debuginfo-0:0.7.4-4.git9ebe139.module+el8.4.0+557+48ba8b2f.x86_64.rpm","containernetworking-plugins-debugsource-0:0.7.4-4.git9ebe139.module+el8.5.0+681+c9a1951f.aarch64.rpm","containernetworking-plugins-debugsource-0:0.7.4-4.git9ebe139.module+el8.4.0+557+48ba8b2f.aarch64.rpm","containernetworking-plugins-debugsource-0:0.7.4-4.git9ebe139.module+el8.5.0+681+c9a1951f.x86_64.rpm","containernetworking-plugins-debugsource-0:0.7.4-4.git9ebe139.module+el8.4.0+557+48ba8b2f.x86_64.rpm","containers-common-1:0.1.32-6.git1715c90.module+el8.5.0+681+c9a1951f.aarch64.rpm","containers-common-1:0.1.32-6.git1715c90.module+el8.4.0+557+48ba8b2f.aarch64.rpm","containers-common-1:0.1.32-6.git1715c90.module+el8.5.0+681+c9a1951f.x86_64.rpm","containers-common-1:0.1.32-6.git1715c90.module+el8.4.0+557+48ba8b2f.x86_64.rpm","fuse-overlayfs-0:0.3-5.module+el8.4.0+557+48ba8b2f.aarch64.rpm","fuse-overlayfs-0:0.3-5.module+el8.4.0+557+48ba8b2f.src.rpm","fuse-overlayfs-0:0.3-5.module+el8.5.0+681+c9a1951f.x86_64.rpm","fuse-overlayfs-0:0.3-5.module+el8.4.0+557+48ba8b2f.x86_64.rpm","fuse-overlayfs-debuginfo-0:0.3-5.module+el8.5.0+681+c9a1951f.aarch64.rpm","fuse-overlayfs-debuginfo-0:0.3-5.module+el8.4.0+557+48ba8b2f.aarch64.rpm","fuse-overlayfs-debuginfo-0:0.3-5.module+el8.5.0+681+c9a1951f.x86_64.rpm","fuse-overlayfs-debuginfo-0:0.3-5.module+el8.4.0+557+48ba8b2f.x86_64.rpm","fuse-overlayfs-debugsource-0:0.3-5.module+el8.5.0+681+c9a1951f.aarch64.rpm","fuse-overlayfs-debugsource-0:0.3-5.module+el8.4.0+557+48ba8b2f.aarch64.rpm","fuse-overlayfs-debugsource-0:0.3-5.module+el8.5.0+681+c9a1951f.x86_64.rpm","fuse-overlayfs-debugsource-0:0.3-5.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-systemd-hook-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-systemd-hook-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.src.rpm","oci-systemd-hook-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-systemd-hook-debuginfo-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-systemd-hook-debuginfo-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-systemd-hook-debugsource-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-systemd-hook-debugsource-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-umount-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-umount-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.src.rpm","oci-umount-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-umount-debuginfo-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-umount-debuginfo-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-umount-debugsource-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-umount-debugsource-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.x86_64.rpm","runc-0:1.0.0-56.rc5.dev.git2abd837.module+el8.5.0+681+c9a1951f.aarch64.rpm","runc-0:1.0.0-56.rc5.dev.git2abd837.module+el8.4.0+557+48ba8b2f.aarch64.rpm","runc-0:1.0.0-56.rc5.dev.git2abd837.module+el8.5.0+681+c9a1951f.src.rpm","runc-0:1.0.0-56.rc5.dev.git2abd837.module+el8.4.0+557+48ba8b2f.src.rpm","runc-0:1.0.0-56.rc5.dev.git2abd837.module+el8.5.0+681+c9a1951f.x86_64.rpm","runc-0:1.0.0-56.rc5.dev.git2abd837.module+el8.4.0+557+48ba8b2f.x86_64.rpm","runc-debuginfo-0:1.0.0-56.rc5.dev.git2abd837.module+el8.5.0+681+c9a1951f.aarch64.rpm","runc-debuginfo-0:1.0.0-56.rc5.dev.git2abd837.module+el8.4.0+557+48ba8b2f.aarch64.rpm","runc-debuginfo-0:1.0.0-56.rc5.dev.git2abd837.module+el8.5.0+681+c9a1951f.x86_64.rpm","runc-debuginfo-0:1.0.0-56.rc5.dev.git2abd837.module+el8.4.0+557+48ba8b2f.x86_64.rpm","runc-debugsource-0:1.0.0-56.rc5.dev.git2abd837.module+el8.5.0+681+c9a1951f.aarch64.rpm","runc-debugsource-0:1.0.0-56.rc5.dev.git2abd837.module+el8.4.0+557+48ba8b2f.aarch64.rpm","runc-debugsource-0:1.0.0-56.rc5.dev.git2abd837.module+el8.5.0+681+c9a1951f.x86_64.rpm","runc-debugsource-0:1.0.0-56.rc5.dev.git2abd837.module+el8.4.0+557+48ba8b2f.x86_64.rpm","skopeo-1:0.1.32-6.git1715c90.module+el8.5.0+681+c9a1951f.aarch64.rpm","skopeo-1:0.1.32-6.git1715c90.module+el8.4.0+557+48ba8b2f.aarch64.rpm","skopeo-1:0.1.32-6.git1715c90.module+el8.5.0+681+c9a1951f.src.rpm","skopeo-1:0.1.32-6.git1715c90.module+el8.4.0+557+48ba8b2f.src.rpm","skopeo-1:0.1.32-6.git1715c90.module+el8.5.0+681+c9a1951f.x86_64.rpm","skopeo-1:0.1.32-6.git1715c90.module+el8.4.0+557+48ba8b2f.x86_64.rpm","skopeo-debuginfo-1:0.1.32-6.git1715c90.module+el8.5.0+681+c9a1951f.aarch64.rpm","skopeo-debuginfo-1:0.1.32-6.git1715c90.module+el8.4.0+557+48ba8b2f.aarch64.rpm","skopeo-debuginfo-1:0.1.32-6.git1715c90.module+el8.5.0+681+c9a1951f.x86_64.rpm","skopeo-debuginfo-1:0.1.32-6.git1715c90.module+el8.4.0+557+48ba8b2f.x86_64.rpm","skopeo-debugsource-1:0.1.32-6.git1715c90.module+el8.5.0+681+c9a1951f.aarch64.rpm","skopeo-debugsource-1:0.1.32-6.git1715c90.module+el8.4.0+557+48ba8b2f.aarch64.rpm","skopeo-debugsource-1:0.1.32-6.git1715c90.module+el8.5.0+681+c9a1951f.x86_64.rpm","skopeo-debugsource-1:0.1.32-6.git1715c90.module+el8.4.0+557+48ba8b2f.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:4273","url":"https://access.redhat.com/errata/RHSA-2019:4273","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-0279.json b/data/advisories/2020/RLSA-2020-0279.json new file mode 100644 index 0000000..d5c20c9 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-0279.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:0279","synopsis":"Moderate: virt:rhel security update","severity":"SEVERITY_MODERATE","topic":"An update is available for libiscsi, netcf, sgabios.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:Rocky Linux module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.\n\nSecurity Fix(es):\n\n* hw: TSX Transaction Asynchronous Abort (TAA) (CVE-2019-11135)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1753062","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1753062","description":""}],"cves":[{"name":"CVE-2019-11135","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11135","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3BaseScore":"6.5","cwe":"CWE-226->CWE-385->CWE-203"}],"references":[],"publishedAt":"2020-01-29T13:42:54Z","rpms":{"Rocky Linux 8":{"nvras":["libiscsi-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-0:1.18.0-8.module+el8.7.0+1084+97b81f61.src.rpm","libiscsi-0:1.18.0-8.module+el8.4.0+534+4680a14e.src.rpm","libiscsi-0:1.18.0-8.module+el8.6.0+847+b490afdd.src.rpm","libiscsi-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-devel-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-devel-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-devel-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-utils-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-utils-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-utils-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-0:0.2.8-12.module+el8.7.0+1084+97b81f61.src.rpm","netcf-0:0.2.8-12.module+el8.4.0+534+4680a14e.src.rpm","netcf-0:0.2.8-12.module+el8.6.0+847+b490afdd.src.rpm","netcf-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-debugsource-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-debugsource-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-debugsource-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-devel-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-devel-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-devel-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-devel-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-devel-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-devel-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-devel-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-devel-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-devel-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-libs-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-libs-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-libs-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-libs-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-libs-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-libs-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-libs-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-libs-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-libs-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","sgabios-1:0.20170427git-3.module+el8.7.0+1084+97b81f61.i686.rpm","sgabios-1:0.20170427git-3.module+el8.4.0+534+4680a14e.i686.rpm","sgabios-1:0.20170427git-3.module+el8.6.0+847+b490afdd.i686.rpm","sgabios-1:0.20170427git-3.module+el8.7.0+1084+97b81f61.src.rpm","sgabios-1:0.20170427git-3.module+el8.4.0+534+4680a14e.src.rpm","sgabios-1:0.20170427git-3.module+el8.6.0+847+b490afdd.src.rpm","sgabios-1:0.20170427git-3.module+el8.7.0+1084+97b81f61.x86_64.rpm","sgabios-1:0.20170427git-3.module+el8.4.0+534+4680a14e.x86_64.rpm","sgabios-1:0.20170427git-3.module+el8.6.0+847+b490afdd.x86_64.rpm","sgabios-bin-1:0.20170427git-3.module+el8.7.0+1084+97b81f61.noarch.rpm","sgabios-bin-1:0.20170427git-3.module+el8.4.0+534+4680a14e.noarch.rpm","sgabios-bin-1:0.20170427git-3.module+el8.6.0+847+b490afdd.noarch.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:0279","url":"https://access.redhat.com/errata/RHSA-2020:0279","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-0348.json b/data/advisories/2020/RLSA-2020-0348.json new file mode 100644 index 0000000..0ad160d --- /dev/null +++ b/data/advisories/2020/RLSA-2020-0348.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:0348","synopsis":"Important: container-tools:rhel8 security, bug fix, and enhancement update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for containernetworking-plugins, python-podman-api, udica, cockpit-podman.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() (CVE-2020-7039)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1731747","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1731747","description":""},{"ticket":"1732280","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732280","description":""},{"ticket":"1732811","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732811","description":""},{"ticket":"1752599","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1752599","description":""},{"ticket":"1779787","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1779787","description":""},{"ticket":"1779789","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1779789","description":""},{"ticket":"1783277","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1783277","description":""},{"ticket":"1783278","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1783278","description":""},{"ticket":"1783279","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1783279","description":""},{"ticket":"1783280","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1783280","description":""},{"ticket":"1783281","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1783281","description":""},{"ticket":"1787523","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1787523","description":""},{"ticket":"1787524","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1787524","description":""},{"ticket":"1791551","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1791551","description":""}],"cves":[{"name":"CVE-2019-15890","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15890","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3BaseScore":"5.6","cwe":"CWE-416"},{"name":"CVE-2020-7039","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7039","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3BaseScore":"5.6","cwe":"CWE-122"}],"references":[],"publishedAt":"2020-02-04T11:39:46Z","rpms":{"Rocky Linux 8":{"nvras":["cockpit-podman-0:11-1.module+el8.5.0+770+e2f49861.noarch.rpm","cockpit-podman-0:11-1.module+el8.4.0+559+c02fa3b2.noarch.rpm","cockpit-podman-0:11-1.module+el8.5.0+708+6758137d.noarch.rpm","cockpit-podman-0:11-1.module+el8.5.0+770+e2f49861.src.rpm","cockpit-podman-0:11-1.module+el8.4.0+559+c02fa3b2.src.rpm","cockpit-podman-0:11-1.module+el8.5.0+708+6758137d.src.rpm","containernetworking-plugins-0:0.8.3-4.module+el8.5.0+770+e2f49861.aarch64.rpm","containernetworking-plugins-0:0.8.3-4.module+el8.4.0+559+c02fa3b2.aarch64.rpm","containernetworking-plugins-0:0.8.3-4.module+el8.5.0+708+6758137d.aarch64.rpm","containernetworking-plugins-0:0.8.3-4.module+el8.5.0+770+e2f49861.src.rpm","containernetworking-plugins-0:0.8.3-4.module+el8.4.0+559+c02fa3b2.src.rpm","containernetworking-plugins-0:0.8.3-4.module+el8.5.0+708+6758137d.src.rpm","containernetworking-plugins-0:0.8.3-4.module+el8.5.0+770+e2f49861.x86_64.rpm","containernetworking-plugins-0:0.8.3-4.module+el8.4.0+559+c02fa3b2.x86_64.rpm","containernetworking-plugins-0:0.8.3-4.module+el8.5.0+708+6758137d.x86_64.rpm","containernetworking-plugins-debuginfo-0:0.8.3-4.module+el8.5.0+770+e2f49861.aarch64.rpm","containernetworking-plugins-debuginfo-0:0.8.3-4.module+el8.4.0+559+c02fa3b2.aarch64.rpm","containernetworking-plugins-debuginfo-0:0.8.3-4.module+el8.5.0+708+6758137d.aarch64.rpm","containernetworking-plugins-debuginfo-0:0.8.3-4.module+el8.5.0+770+e2f49861.x86_64.rpm","containernetworking-plugins-debuginfo-0:0.8.3-4.module+el8.4.0+559+c02fa3b2.x86_64.rpm","containernetworking-plugins-debuginfo-0:0.8.3-4.module+el8.5.0+708+6758137d.x86_64.rpm","containernetworking-plugins-debugsource-0:0.8.3-4.module+el8.5.0+770+e2f49861.aarch64.rpm","containernetworking-plugins-debugsource-0:0.8.3-4.module+el8.4.0+559+c02fa3b2.aarch64.rpm","containernetworking-plugins-debugsource-0:0.8.3-4.module+el8.5.0+708+6758137d.aarch64.rpm","containernetworking-plugins-debugsource-0:0.8.3-4.module+el8.5.0+770+e2f49861.x86_64.rpm","containernetworking-plugins-debugsource-0:0.8.3-4.module+el8.4.0+559+c02fa3b2.x86_64.rpm","containernetworking-plugins-debugsource-0:0.8.3-4.module+el8.5.0+708+6758137d.x86_64.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+770+e2f49861.noarch.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2.noarch.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+708+6758137d.noarch.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+770+e2f49861.src.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2.src.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+708+6758137d.src.rpm","udica-0:0.2.1-2.module+el8.5.0+770+e2f49861.noarch.rpm","udica-0:0.2.1-2.module+el8.4.0+559+c02fa3b2.noarch.rpm","udica-0:0.2.1-2.module+el8.5.0+708+6758137d.noarch.rpm","udica-0:0.2.1-2.module+el8.5.0+770+e2f49861.src.rpm","udica-0:0.2.1-2.module+el8.4.0+559+c02fa3b2.src.rpm","udica-0:0.2.1-2.module+el8.5.0+708+6758137d.src.rpm","container-selinux-2:2.124.0-1.gitf958d0c.module+el8.5.0+681+c9a1951f.noarch.rpm","container-selinux-2:2.124.0-1.gitf958d0c.module+el8.5.0+681+c9a1951f.src.rpm","podman-0:1.6.4-28.module+el8.5.0+770+e2f49861.aarch64.rpm","podman-0:1.6.4-28.module+el8.5.0+770+e2f49861.src.rpm","podman-0:1.6.4-28.module+el8.5.0+770+e2f49861.x86_64.rpm","podman-debuginfo-0:1.6.4-28.module+el8.5.0+770+e2f49861.aarch64.rpm","podman-debuginfo-0:1.6.4-28.module+el8.5.0+770+e2f49861.x86_64.rpm","podman-debugsource-0:1.6.4-28.module+el8.5.0+770+e2f49861.aarch64.rpm","podman-debugsource-0:1.6.4-28.module+el8.5.0+770+e2f49861.x86_64.rpm","podman-docker-0:1.6.4-28.module+el8.5.0+770+e2f49861.noarch.rpm","podman-remote-0:1.6.4-28.module+el8.5.0+770+e2f49861.aarch64.rpm","podman-remote-0:1.6.4-28.module+el8.5.0+770+e2f49861.x86_64.rpm","podman-remote-debuginfo-0:1.6.4-28.module+el8.5.0+770+e2f49861.aarch64.rpm","podman-remote-debuginfo-0:1.6.4-28.module+el8.5.0+770+e2f49861.x86_64.rpm","podman-tests-0:1.6.4-28.module+el8.5.0+770+e2f49861.aarch64.rpm","podman-tests-0:1.6.4-28.module+el8.5.0+770+e2f49861.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:0348","url":"https://access.redhat.com/errata/RHSA-2020:0348","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-0579.json b/data/advisories/2020/RLSA-2020-0579.json new file mode 100644 index 0000000..191c697 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-0579.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:0579","synopsis":"Important: nodejs:10 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for nodejs-nodemon, nodejs-packaging.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.\n\nThe following packages have been upgraded to a later upstream version: nodejs (10.19.0).\n\nSecurity Fix(es):\n\n* nodejs: HTTP request smuggling using malformed Transfer-Encoding header (CVE-2019-15605)\n\n* nodejs: Remotely trigger an assertion on a TLS server with a malformed certificate string (CVE-2019-15604)\n\n* nodejs: HTTP header values do not have trailing optional whitespace trimmed (CVE-2019-15606)\n\n* npm: Symlink reference outside of node_modules folder through the bin field upon installation (CVE-2019-16775)\n\n* npm: Arbitrary file write via constructed entry in the package.json bin field (CVE-2019-16776)\n\n* npm: Global node_modules Binary Overwrite (CVE-2019-16777)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1788301","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1788301","description":""},{"ticket":"1788305","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1788305","description":""},{"ticket":"1788310","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1788310","description":""},{"ticket":"1800364","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1800364","description":""},{"ticket":"1800366","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1800366","description":""},{"ticket":"1800367","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1800367","description":""}],"cves":[{"name":"CVE-2019-15604","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15604","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"5.9","cwe":"CWE-172"},{"name":"CVE-2019-15605","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15605","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L","cvss3BaseScore":"7.1","cwe":"CWE-444"},{"name":"CVE-2019-15606","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15606","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3BaseScore":"4.8","cwe":"CWE-138"},{"name":"CVE-2019-16775","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16775","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","cvss3BaseScore":"4.8","cwe":"CWE-20"},{"name":"CVE-2019-16776","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16776","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","cvss3BaseScore":"4.8","cwe":"CWE-20"},{"name":"CVE-2019-16777","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16777","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","cvss3BaseScore":"4.8","cwe":"CWE-20"}],"references":[],"publishedAt":"2020-02-25T07:57:02Z","rpms":{"Rocky Linux 8":{"nvras":["nodejs-nodemon-0:1.18.3-1.module+el8.3.0+101+f84c7154.noarch.rpm","nodejs-nodemon-0:1.18.3-1.module+el8.3.0+101+f84c7154.src.rpm","nodejs-packaging-0:17-3.module+el8.3.0+101+f84c7154.noarch.rpm","nodejs-packaging-0:17-3.module+el8.3.0+101+f84c7154.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:0579","url":"https://access.redhat.com/errata/RHSA-2020:0579","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-0598.json b/data/advisories/2020/RLSA-2020-0598.json new file mode 100644 index 0000000..4d7f9f2 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-0598.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:0598","synopsis":"Important: nodejs:12 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for nodejs-nodemon, nodejs-packaging.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.\n\nThe following packages have been upgraded to a later upstream version: nodejs (12.16.1).\n\nSecurity Fix(es):\n\n* nodejs: HTTP request smuggling using malformed Transfer-Encoding header (CVE-2019-15605)\n\n* nodejs: Remotely trigger an assertion on a TLS server with a malformed certificate string (CVE-2019-15604)\n\n* nodejs: HTTP header values do not have trailing optional whitespace trimmed (CVE-2019-15606)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1800364","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1800364","description":""},{"ticket":"1800366","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1800366","description":""},{"ticket":"1800367","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1800367","description":""}],"cves":[{"name":"CVE-2019-15604","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15604","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"5.9","cwe":"CWE-172"},{"name":"CVE-2019-15605","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15605","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L","cvss3BaseScore":"7.1","cwe":"CWE-444"},{"name":"CVE-2019-15606","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15606","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3BaseScore":"4.8","cwe":"CWE-138"}],"references":[],"publishedAt":"2020-02-25T13:06:23Z","rpms":{"Rocky Linux 8":{"nvras":["nodejs-nodemon-0:1.18.3-1.module+el8.3.0+101+f84c7154.noarch.rpm","nodejs-nodemon-0:1.18.3-1.module+el8.3.0+101+f84c7154.src.rpm","nodejs-packaging-0:17-3.module+el8.3.0+101+f84c7154.noarch.rpm","nodejs-packaging-0:17-3.module+el8.3.0+101+f84c7154.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:0598","url":"https://access.redhat.com/errata/RHSA-2020:0598","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-0633.json b/data/advisories/2020/RLSA-2020-0633.json new file mode 100644 index 0000000..16deb66 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-0633.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:0633","synopsis":"Important: ppp security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for ppp.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The ppp packages contain the Point-to-Point Protocol (PPP) daemon and documentation for PPP support. The PPP protocol provides a method for transmitting datagrams over serial point-to-point links. PPP is usually used to dial in to an Internet Service Provider (ISP) or other organization over a modem and phone line.\n\nSecurity Fix(es):\n\n* ppp: Buffer overflow in the eap_request and eap_response functions in eap.c (CVE-2020-8597)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1800727","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1800727","description":""}],"cves":[{"name":"CVE-2020-8597","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8597","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"9.8","cwe":"CWE-120"}],"references":[],"publishedAt":"2020-02-27T14:59:09Z","rpms":{"Rocky Linux 8":{"nvras":["ppp-0:2.4.7-26.el8_1.aarch64.rpm","ppp-0:2.4.7-26.el8_1.i686.rpm","ppp-0:2.4.7-26.el8_1.src.rpm","ppp-0:2.4.7-26.el8_1.x86_64.rpm","ppp-debuginfo-0:2.4.7-26.el8_1.aarch64.rpm","ppp-debuginfo-0:2.4.7-26.el8_1.i686.rpm","ppp-debuginfo-0:2.4.7-26.el8_1.x86_64.rpm","ppp-debugsource-0:2.4.7-26.el8_1.aarch64.rpm","ppp-debugsource-0:2.4.7-26.el8_1.i686.rpm","ppp-debugsource-0:2.4.7-26.el8_1.x86_64.rpm","ppp-devel-0:2.4.7-26.el8_1.aarch64.rpm","ppp-devel-0:2.4.7-26.el8_1.i686.rpm","ppp-devel-0:2.4.7-26.el8_1.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:0633","url":"https://access.redhat.com/errata/RHSA-2020:0633","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-0902.json b/data/advisories/2020/RLSA-2020-0902.json new file mode 100644 index 0000000..84317a1 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-0902.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:0902","synopsis":"Important: icu security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for icu.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The International Components for Unicode (ICU) library provides robust and full-featured Unicode services.\n\nSecurity Fix(es):\n\n* ICU: Integer overflow in UnicodeString::doAppend() (CVE-2020-10531)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1807349","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1807349","description":""}],"cves":[{"name":"CVE-2020-10531","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10531","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"CWE-190"}],"references":[],"publishedAt":"2020-03-19T10:43:49Z","rpms":{"Rocky Linux 8":{"nvras":["icu-0:60.3-2.el8_1.aarch64.rpm","icu-0:60.3-2.el8_1.src.rpm","icu-0:60.3-2.el8_1.x86_64.rpm","icu-debuginfo-0:60.3-2.el8_1.aarch64.rpm","icu-debuginfo-0:60.3-2.el8_1.i686.rpm","icu-debuginfo-0:60.3-2.el8_1.x86_64.rpm","icu-debugsource-0:60.3-2.el8_1.aarch64.rpm","icu-debugsource-0:60.3-2.el8_1.i686.rpm","icu-debugsource-0:60.3-2.el8_1.x86_64.rpm","libicu-0:60.3-2.el8_1.aarch64.rpm","libicu-0:60.3-2.el8_1.i686.rpm","libicu-0:60.3-2.el8_1.x86_64.rpm","libicu-debuginfo-0:60.3-2.el8_1.aarch64.rpm","libicu-debuginfo-0:60.3-2.el8_1.i686.rpm","libicu-debuginfo-0:60.3-2.el8_1.x86_64.rpm","libicu-devel-0:60.3-2.el8_1.aarch64.rpm","libicu-devel-0:60.3-2.el8_1.i686.rpm","libicu-devel-0:60.3-2.el8_1.x86_64.rpm","libicu-devel-debuginfo-0:60.3-2.el8_1.aarch64.rpm","libicu-devel-debuginfo-0:60.3-2.el8_1.i686.rpm","libicu-devel-debuginfo-0:60.3-2.el8_1.x86_64.rpm","libicu-doc-0:60.3-2.el8_1.noarch.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:0902","url":"https://access.redhat.com/errata/RHSA-2020:0902","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-0903.json b/data/advisories/2020/RLSA-2020-0903.json new file mode 100644 index 0000000..ea2c3bb --- /dev/null +++ b/data/advisories/2020/RLSA-2020-0903.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:0903","synopsis":"Important: zsh security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for zsh.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The zsh shell is a command interpreter usable as an interactive login shell and as a shell script command processor. Zsh resembles the ksh shell (the Korn shell), but includes many enhancements. Zsh supports command-line editing, built-in spelling correction, programmable command completion, shell functions (with autoloading), a history mechanism, and more.\n\nSecurity Fix(es):\n\n* zsh: insecure dropping of privileges when unsetting PRIVILEGED option (CVE-2019-20044)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1804859","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1804859","description":""}],"cves":[{"name":"CVE-2019-20044","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20044","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.8","cwe":"CWE-271"}],"references":[],"publishedAt":"2020-03-19T10:45:02Z","rpms":{"Rocky Linux 8":{"nvras":["zsh-0:5.5.1-6.el8_1.2.aarch64.rpm","zsh-0:5.5.1-6.el8_1.2.src.rpm","zsh-0:5.5.1-6.el8_1.2.x86_64.rpm","zsh-debuginfo-0:5.5.1-6.el8_1.2.aarch64.rpm","zsh-debuginfo-0:5.5.1-6.el8_1.2.x86_64.rpm","zsh-debugsource-0:5.5.1-6.el8_1.2.aarch64.rpm","zsh-debugsource-0:5.5.1-6.el8_1.2.x86_64.rpm","zsh-html-0:5.5.1-6.el8_1.2.noarch.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:0903","url":"https://access.redhat.com/errata/RHSA-2020:0903","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-1293.json b/data/advisories/2020/RLSA-2020-1293.json new file mode 100644 index 0000000..0e742d4 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-1293.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:1293","synopsis":"Important: nodejs:12 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for nodejs-nodemon, nodejs-packaging.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.\n\nSecurity Fix(es):\n\n* ICU: Integer overflow in UnicodeString::doAppend() (CVE-2020-10531)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1807349","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1807349","description":""}],"cves":[{"name":"CVE-2020-10531","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10531","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"CWE-190"}],"references":[],"publishedAt":"2020-04-02T07:23:16Z","rpms":{"Rocky Linux 8":{"nvras":["nodejs-nodemon-0:1.18.3-1.module+el8.3.0+101+f84c7154.noarch.rpm","nodejs-nodemon-0:1.18.3-1.module+el8.3.0+101+f84c7154.src.rpm","nodejs-packaging-0:17-3.module+el8.3.0+101+f84c7154.noarch.rpm","nodejs-packaging-0:17-3.module+el8.3.0+101+f84c7154.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:1293","url":"https://access.redhat.com/errata/RHSA-2020:1293","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-1317.json b/data/advisories/2020/RLSA-2020-1317.json new file mode 100644 index 0000000..ea37b3c --- /dev/null +++ b/data/advisories/2020/RLSA-2020-1317.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:1317","synopsis":"Important: nodejs:10 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for nodejs-nodemon, nodejs-packaging.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nSecurity Fix(es):\n\n* ICU: Integer overflow in UnicodeString::doAppend() (CVE-2020-10531)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1807349","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1807349","description":""}],"cves":[{"name":"CVE-2020-10531","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10531","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"CWE-190"}],"references":[],"publishedAt":"2020-04-06T07:21:40Z","rpms":{"Rocky Linux 8":{"nvras":["nodejs-nodemon-0:1.18.3-1.module+el8.3.0+101+f84c7154.noarch.rpm","nodejs-nodemon-0:1.18.3-1.module+el8.3.0+101+f84c7154.src.rpm","nodejs-packaging-0:17-3.module+el8.3.0+101+f84c7154.noarch.rpm","nodejs-packaging-0:17-3.module+el8.3.0+101+f84c7154.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:1317","url":"https://access.redhat.com/errata/RHSA-2020:1317","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-1358.json b/data/advisories/2020/RLSA-2020-1358.json new file mode 100644 index 0000000..440ebfb --- /dev/null +++ b/data/advisories/2020/RLSA-2020-1358.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:1358","synopsis":"Important: virt:rhel security and bug fix update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for libiscsi, netcf, sgabios.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:Rocky Linux module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.\n\nSecurity Fix(es):\n\n* QEMU: block: iscsi: OOB heap access via an unexpected response of iSCSI Server (CVE-2020-1711)\n\n* QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() (CVE-2020-7039)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* libvirtd: error : virCPUx86UpdateLive:3110 : operation failed: guest CPU doesn't match specification: missing features: fxsr_opt (BZ#1809510)","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1791551","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1791551","description":""},{"ticket":"1794290","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1794290","description":""},{"ticket":"1809510","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1809510","description":"* libvirtd: error : virCPUx86UpdateLive:3110 : operation failed: guest CPU doesn't match specification: missing features: fxsr_opt"}],"cves":[{"name":"CVE-2020-1711","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1711","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3BaseScore":"6.0","cwe":"CWE-122"},{"name":"CVE-2020-7039","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7039","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3BaseScore":"5.6","cwe":"CWE-122"}],"references":[],"publishedAt":"2020-04-07T12:58:04Z","rpms":{"Rocky Linux 8":{"nvras":["libiscsi-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-0:1.18.0-8.module+el8.7.0+1084+97b81f61.src.rpm","libiscsi-0:1.18.0-8.module+el8.4.0+534+4680a14e.src.rpm","libiscsi-0:1.18.0-8.module+el8.6.0+847+b490afdd.src.rpm","libiscsi-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-devel-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-devel-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-devel-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-utils-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-utils-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-utils-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-0:0.2.8-12.module+el8.7.0+1084+97b81f61.src.rpm","netcf-0:0.2.8-12.module+el8.4.0+534+4680a14e.src.rpm","netcf-0:0.2.8-12.module+el8.6.0+847+b490afdd.src.rpm","netcf-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-debugsource-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-debugsource-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-debugsource-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-devel-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-devel-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-devel-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-devel-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-devel-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-devel-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-devel-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-devel-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-devel-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-libs-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-libs-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-libs-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-libs-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-libs-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-libs-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-libs-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-libs-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-libs-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","sgabios-1:0.20170427git-3.module+el8.7.0+1084+97b81f61.i686.rpm","sgabios-1:0.20170427git-3.module+el8.4.0+534+4680a14e.i686.rpm","sgabios-1:0.20170427git-3.module+el8.6.0+847+b490afdd.i686.rpm","sgabios-1:0.20170427git-3.module+el8.7.0+1084+97b81f61.src.rpm","sgabios-1:0.20170427git-3.module+el8.4.0+534+4680a14e.src.rpm","sgabios-1:0.20170427git-3.module+el8.6.0+847+b490afdd.src.rpm","sgabios-1:0.20170427git-3.module+el8.7.0+1084+97b81f61.x86_64.rpm","sgabios-1:0.20170427git-3.module+el8.4.0+534+4680a14e.x86_64.rpm","sgabios-1:0.20170427git-3.module+el8.6.0+847+b490afdd.x86_64.rpm","sgabios-bin-1:0.20170427git-3.module+el8.7.0+1084+97b81f61.noarch.rpm","sgabios-bin-1:0.20170427git-3.module+el8.4.0+534+4680a14e.noarch.rpm","sgabios-bin-1:0.20170427git-3.module+el8.6.0+847+b490afdd.noarch.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:1358","url":"https://access.redhat.com/errata/RHSA-2020:1358","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-1360.json b/data/advisories/2020/RLSA-2020-1360.json new file mode 100644 index 0000000..962b67a --- /dev/null +++ b/data/advisories/2020/RLSA-2020-1360.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:1360","synopsis":"Important: container-tools:1.0 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for fuse-overlayfs, oci-umount, runc, skopeo, oci-systemd-hook, containernetworking-plugins.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() (CVE-2020-7039)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1791551","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1791551","description":""}],"cves":[{"name":"CVE-2020-7039","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7039","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3BaseScore":"5.6","cwe":"CWE-122"}],"references":[],"publishedAt":"2020-04-07T12:58:09Z","rpms":{"Rocky Linux 8":{"nvras":["containernetworking-plugins-0:0.7.4-4.git9ebe139.module+el8.5.0+681+c9a1951f.aarch64.rpm","containernetworking-plugins-0:0.7.4-4.git9ebe139.module+el8.4.0+557+48ba8b2f.aarch64.rpm","containernetworking-plugins-0:0.7.4-4.git9ebe139.module+el8.5.0+681+c9a1951f.src.rpm","containernetworking-plugins-0:0.7.4-4.git9ebe139.module+el8.4.0+557+48ba8b2f.src.rpm","containernetworking-plugins-0:0.7.4-4.git9ebe139.module+el8.5.0+681+c9a1951f.x86_64.rpm","containernetworking-plugins-0:0.7.4-4.git9ebe139.module+el8.4.0+557+48ba8b2f.x86_64.rpm","containernetworking-plugins-debuginfo-0:0.7.4-4.git9ebe139.module+el8.5.0+681+c9a1951f.aarch64.rpm","containernetworking-plugins-debuginfo-0:0.7.4-4.git9ebe139.module+el8.4.0+557+48ba8b2f.aarch64.rpm","containernetworking-plugins-debuginfo-0:0.7.4-4.git9ebe139.module+el8.5.0+681+c9a1951f.x86_64.rpm","containernetworking-plugins-debuginfo-0:0.7.4-4.git9ebe139.module+el8.4.0+557+48ba8b2f.x86_64.rpm","containernetworking-plugins-debugsource-0:0.7.4-4.git9ebe139.module+el8.5.0+681+c9a1951f.aarch64.rpm","containernetworking-plugins-debugsource-0:0.7.4-4.git9ebe139.module+el8.4.0+557+48ba8b2f.aarch64.rpm","containernetworking-plugins-debugsource-0:0.7.4-4.git9ebe139.module+el8.5.0+681+c9a1951f.x86_64.rpm","containernetworking-plugins-debugsource-0:0.7.4-4.git9ebe139.module+el8.4.0+557+48ba8b2f.x86_64.rpm","containers-common-1:0.1.32-6.git1715c90.module+el8.5.0+681+c9a1951f.aarch64.rpm","containers-common-1:0.1.32-6.git1715c90.module+el8.4.0+557+48ba8b2f.aarch64.rpm","containers-common-1:0.1.32-6.git1715c90.module+el8.5.0+681+c9a1951f.x86_64.rpm","containers-common-1:0.1.32-6.git1715c90.module+el8.4.0+557+48ba8b2f.x86_64.rpm","fuse-overlayfs-0:0.3-5.module+el8.5.0+681+c9a1951f.aarch64.rpm","fuse-overlayfs-0:0.3-5.module+el8.4.0+557+48ba8b2f.aarch64.rpm","fuse-overlayfs-0:0.3-5.module+el8.5.0+681+c9a1951f.src.rpm","fuse-overlayfs-0:0.3-5.module+el8.4.0+557+48ba8b2f.src.rpm","fuse-overlayfs-0:0.3-5.module+el8.5.0+681+c9a1951f.x86_64.rpm","fuse-overlayfs-0:0.3-5.module+el8.4.0+557+48ba8b2f.x86_64.rpm","fuse-overlayfs-debuginfo-0:0.3-5.module+el8.5.0+681+c9a1951f.aarch64.rpm","fuse-overlayfs-debuginfo-0:0.3-5.module+el8.4.0+557+48ba8b2f.aarch64.rpm","fuse-overlayfs-debuginfo-0:0.3-5.module+el8.5.0+681+c9a1951f.x86_64.rpm","fuse-overlayfs-debuginfo-0:0.3-5.module+el8.4.0+557+48ba8b2f.x86_64.rpm","fuse-overlayfs-debugsource-0:0.3-5.module+el8.5.0+681+c9a1951f.aarch64.rpm","fuse-overlayfs-debugsource-0:0.3-5.module+el8.4.0+557+48ba8b2f.aarch64.rpm","fuse-overlayfs-debugsource-0:0.3-5.module+el8.5.0+681+c9a1951f.x86_64.rpm","fuse-overlayfs-debugsource-0:0.3-5.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-systemd-hook-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-systemd-hook-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.src.rpm","oci-systemd-hook-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-systemd-hook-debuginfo-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-systemd-hook-debuginfo-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-systemd-hook-debugsource-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-systemd-hook-debugsource-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-umount-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-umount-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.src.rpm","oci-umount-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-umount-debuginfo-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-umount-debuginfo-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-umount-debugsource-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-umount-debugsource-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.x86_64.rpm","runc-0:1.0.0-56.rc5.dev.git2abd837.module+el8.5.0+681+c9a1951f.aarch64.rpm","runc-0:1.0.0-56.rc5.dev.git2abd837.module+el8.4.0+557+48ba8b2f.aarch64.rpm","runc-0:1.0.0-56.rc5.dev.git2abd837.module+el8.5.0+681+c9a1951f.src.rpm","runc-0:1.0.0-56.rc5.dev.git2abd837.module+el8.4.0+557+48ba8b2f.src.rpm","runc-0:1.0.0-56.rc5.dev.git2abd837.module+el8.5.0+681+c9a1951f.x86_64.rpm","runc-0:1.0.0-56.rc5.dev.git2abd837.module+el8.4.0+557+48ba8b2f.x86_64.rpm","runc-debuginfo-0:1.0.0-56.rc5.dev.git2abd837.module+el8.5.0+681+c9a1951f.aarch64.rpm","runc-debuginfo-0:1.0.0-56.rc5.dev.git2abd837.module+el8.4.0+557+48ba8b2f.aarch64.rpm","runc-debuginfo-0:1.0.0-56.rc5.dev.git2abd837.module+el8.5.0+681+c9a1951f.x86_64.rpm","runc-debuginfo-0:1.0.0-56.rc5.dev.git2abd837.module+el8.4.0+557+48ba8b2f.x86_64.rpm","runc-debugsource-0:1.0.0-56.rc5.dev.git2abd837.module+el8.5.0+681+c9a1951f.aarch64.rpm","runc-debugsource-0:1.0.0-56.rc5.dev.git2abd837.module+el8.4.0+557+48ba8b2f.aarch64.rpm","runc-debugsource-0:1.0.0-56.rc5.dev.git2abd837.module+el8.5.0+681+c9a1951f.x86_64.rpm","runc-debugsource-0:1.0.0-56.rc5.dev.git2abd837.module+el8.4.0+557+48ba8b2f.x86_64.rpm","skopeo-1:0.1.32-6.git1715c90.module+el8.5.0+681+c9a1951f.aarch64.rpm","skopeo-1:0.1.32-6.git1715c90.module+el8.4.0+557+48ba8b2f.aarch64.rpm","skopeo-1:0.1.32-6.git1715c90.module+el8.5.0+681+c9a1951f.src.rpm","skopeo-1:0.1.32-6.git1715c90.module+el8.4.0+557+48ba8b2f.src.rpm","skopeo-1:0.1.32-6.git1715c90.module+el8.5.0+681+c9a1951f.x86_64.rpm","skopeo-1:0.1.32-6.git1715c90.module+el8.4.0+557+48ba8b2f.x86_64.rpm","skopeo-debuginfo-1:0.1.32-6.git1715c90.module+el8.5.0+681+c9a1951f.aarch64.rpm","skopeo-debuginfo-1:0.1.32-6.git1715c90.module+el8.4.0+557+48ba8b2f.aarch64.rpm","skopeo-debuginfo-1:0.1.32-6.git1715c90.module+el8.5.0+681+c9a1951f.x86_64.rpm","skopeo-debuginfo-1:0.1.32-6.git1715c90.module+el8.4.0+557+48ba8b2f.x86_64.rpm","skopeo-debugsource-1:0.1.32-6.git1715c90.module+el8.5.0+681+c9a1951f.aarch64.rpm","skopeo-debugsource-1:0.1.32-6.git1715c90.module+el8.4.0+557+48ba8b2f.aarch64.rpm","skopeo-debugsource-1:0.1.32-6.git1715c90.module+el8.5.0+681+c9a1951f.x86_64.rpm","skopeo-debugsource-1:0.1.32-6.git1715c90.module+el8.4.0+557+48ba8b2f.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:1360","url":"https://access.redhat.com/errata/RHSA-2020:1360","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-1379.json b/data/advisories/2020/RLSA-2020-1379.json new file mode 100644 index 0000000..6e9e4ef --- /dev/null +++ b/data/advisories/2020/RLSA-2020-1379.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:1379","synopsis":"Important: container-tools:rhel8 security and bug fix update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for udica, python-podman-api, slirp4netns, containernetworking-plugins, cockpit-podman.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* QEMU: Slirp: potential OOB access due to unsafe snprintf() usages (CVE-2020-8608)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* useradd and groupadd fail under rootless Buildah and podman [stream-container-tools-Rocky Linux8-Rocky Linux-8.1.1] (BZ#1803495)\n\n* Podman support for FIPS Mode requires a bind mount inside the container [stream-container-tools-Rocky Linux8-Rocky Linux-8.1.1/buildah] (BZ#1804188)\n\n* Podman support for FIPS Mode requires a bind mount inside the container [stream-container-tools-Rocky Linux8-Rocky Linux-8.1.1/podman] (BZ#1804194)\n\n* fuse-overlayfs segfault [stream-container-tools-Rocky Linux8-Rocky Linux-8.1.1/fuse-overlayfs] (BZ#1805016)\n\n* buildah COPY command is slow when .dockerignore file is not present [stream-container-tools-Rocky Linux8-Rocky Linux-8.1.1/buildah] (BZ#1806119)","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1798453","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1798453","description":""},{"ticket":"1803495","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1803495","description":"* useradd and groupadd fail under rootless Buildah and podman [stream-container-tools-rhel8-rhel-8.1.1]"},{"ticket":"1804188","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1804188","description":"* Podman support for FIPS Mode requires a bind mount inside the container [stream-container-tools-rhel8-rhel-8.1.1/buildah]"},{"ticket":"1804194","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1804194","description":"* Podman support for FIPS Mode requires a bind mount inside the container [stream-container-tools-rhel8-rhel-8.1.1/podman]"},{"ticket":"1805016","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1805016","description":"* fuse-overlayfs segfault [stream-container-tools-rhel8-rhel-8.1.1/fuse-overlayfs]"},{"ticket":"1806119","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1806119","description":"* buildah COPY command is slow when .dockerignore file is not present [stream-container-tools-rhel8-rhel-8.1.1/buildah]"}],"cves":[{"name":"CVE-2020-8608","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8608","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3BaseScore":"5.6","cwe":"CWE-122"}],"references":[],"publishedAt":"2020-04-07T09:15:36Z","rpms":{"Rocky Linux 8":{"nvras":["cockpit-podman-0:11-1.module+el8.5.0+770+e2f49861.noarch.rpm","cockpit-podman-0:11-1.module+el8.4.0+559+c02fa3b2.noarch.rpm","cockpit-podman-0:11-1.module+el8.5.0+708+6758137d.noarch.rpm","cockpit-podman-0:11-1.module+el8.5.0+770+e2f49861.src.rpm","cockpit-podman-0:11-1.module+el8.4.0+559+c02fa3b2.src.rpm","cockpit-podman-0:11-1.module+el8.5.0+708+6758137d.src.rpm","containernetworking-plugins-0:0.8.3-4.module+el8.5.0+770+e2f49861.aarch64.rpm","containernetworking-plugins-0:0.8.3-4.module+el8.4.0+559+c02fa3b2.aarch64.rpm","containernetworking-plugins-0:0.8.3-4.module+el8.5.0+708+6758137d.aarch64.rpm","containernetworking-plugins-0:0.8.3-4.module+el8.5.0+770+e2f49861.src.rpm","containernetworking-plugins-0:0.8.3-4.module+el8.4.0+559+c02fa3b2.src.rpm","containernetworking-plugins-0:0.8.3-4.module+el8.5.0+708+6758137d.src.rpm","containernetworking-plugins-0:0.8.3-4.module+el8.5.0+770+e2f49861.x86_64.rpm","containernetworking-plugins-0:0.8.3-4.module+el8.4.0+559+c02fa3b2.x86_64.rpm","containernetworking-plugins-0:0.8.3-4.module+el8.5.0+708+6758137d.x86_64.rpm","containernetworking-plugins-debuginfo-0:0.8.3-4.module+el8.5.0+770+e2f49861.aarch64.rpm","containernetworking-plugins-debuginfo-0:0.8.3-4.module+el8.4.0+559+c02fa3b2.aarch64.rpm","containernetworking-plugins-debuginfo-0:0.8.3-4.module+el8.5.0+708+6758137d.aarch64.rpm","containernetworking-plugins-debuginfo-0:0.8.3-4.module+el8.5.0+770+e2f49861.x86_64.rpm","containernetworking-plugins-debuginfo-0:0.8.3-4.module+el8.4.0+559+c02fa3b2.x86_64.rpm","containernetworking-plugins-debuginfo-0:0.8.3-4.module+el8.5.0+708+6758137d.x86_64.rpm","containernetworking-plugins-debugsource-0:0.8.3-4.module+el8.5.0+770+e2f49861.aarch64.rpm","containernetworking-plugins-debugsource-0:0.8.3-4.module+el8.4.0+559+c02fa3b2.aarch64.rpm","containernetworking-plugins-debugsource-0:0.8.3-4.module+el8.5.0+708+6758137d.aarch64.rpm","containernetworking-plugins-debugsource-0:0.8.3-4.module+el8.5.0+770+e2f49861.x86_64.rpm","containernetworking-plugins-debugsource-0:0.8.3-4.module+el8.4.0+559+c02fa3b2.x86_64.rpm","containernetworking-plugins-debugsource-0:0.8.3-4.module+el8.5.0+708+6758137d.x86_64.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+770+e2f49861.noarch.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2.noarch.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+708+6758137d.noarch.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+770+e2f49861.src.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2.src.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+708+6758137d.src.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.5.0+770+e2f49861.aarch64.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.4.0+536+994a2182.aarch64.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.5.0+708+6758137d.aarch64.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.5.0+770+e2f49861.src.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.4.0+536+994a2182.src.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.5.0+708+6758137d.src.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.5.0+770+e2f49861.x86_64.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.4.0+536+994a2182.x86_64.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.5.0+708+6758137d.x86_64.rpm","slirp4netns-debuginfo-0:0.4.2-3.git21fdece.module+el8.5.0+770+e2f49861.aarch64.rpm","slirp4netns-debuginfo-0:0.4.2-3.git21fdece.module+el8.4.0+536+994a2182.aarch64.rpm","slirp4netns-debuginfo-0:0.4.2-3.git21fdece.module+el8.5.0+708+6758137d.aarch64.rpm","slirp4netns-debuginfo-0:0.4.2-3.git21fdece.module+el8.5.0+770+e2f49861.x86_64.rpm","slirp4netns-debuginfo-0:0.4.2-3.git21fdece.module+el8.4.0+536+994a2182.x86_64.rpm","slirp4netns-debuginfo-0:0.4.2-3.git21fdece.module+el8.5.0+708+6758137d.x86_64.rpm","slirp4netns-debugsource-0:0.4.2-3.git21fdece.module+el8.5.0+770+e2f49861.aarch64.rpm","slirp4netns-debugsource-0:0.4.2-3.git21fdece.module+el8.4.0+536+994a2182.aarch64.rpm","slirp4netns-debugsource-0:0.4.2-3.git21fdece.module+el8.5.0+708+6758137d.aarch64.rpm","slirp4netns-debugsource-0:0.4.2-3.git21fdece.module+el8.5.0+770+e2f49861.x86_64.rpm","slirp4netns-debugsource-0:0.4.2-3.git21fdece.module+el8.4.0+536+994a2182.x86_64.rpm","slirp4netns-debugsource-0:0.4.2-3.git21fdece.module+el8.5.0+708+6758137d.x86_64.rpm","udica-0:0.2.1-2.module+el8.5.0+770+e2f49861.noarch.rpm","udica-0:0.2.1-2.module+el8.4.0+559+c02fa3b2.noarch.rpm","udica-0:0.2.1-2.module+el8.5.0+708+6758137d.noarch.rpm","udica-0:0.2.1-2.module+el8.5.0+770+e2f49861.src.rpm","udica-0:0.2.1-2.module+el8.4.0+559+c02fa3b2.src.rpm","udica-0:0.2.1-2.module+el8.5.0+708+6758137d.src.rpm","container-selinux-2:2.124.0-1.gitf958d0c.module+el8.5.0+681+c9a1951f.noarch.rpm","container-selinux-2:2.124.0-1.gitf958d0c.module+el8.5.0+681+c9a1951f.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:1379","url":"https://access.redhat.com/errata/RHSA-2020:1379","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-1577.json b/data/advisories/2020/RLSA-2020-1577.json new file mode 100644 index 0000000..58b8b1d --- /dev/null +++ b/data/advisories/2020/RLSA-2020-1577.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:1577","synopsis":"Moderate: exiv2 security, bug fix, and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for libgexiv2, gnome-color-manager, gegl, exiv2.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC, and JPEG comments.\n\nThe following packages have been upgraded to a later upstream version: exiv2 (0.27.2). (BZ#1651917)\n\nSecurity Fix(es):\n\n* exiv2: infinite loop and hang in Jp2Image::readMetadata() in jp2image.cpp could lead to DoS (CVE-2019-20421)\n\n* exiv2: null pointer dereference in the Exiv2::DataValue::toLong function in value.cpp (CVE-2017-18005)\n\n* exiv2: Excessive memory allocation in Exiv2::Jp2Image::readMetadata function in jp2image.cpp (CVE-2018-4868)\n\n* exiv2: assertion failure in BigTiffImage::readData in bigtiffimage.cpp (CVE-2018-9303)\n\n* exiv2: divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp (CVE-2018-9304)\n\n* exiv2: out of bounds read in IptcData::printStructure in iptc.c (CVE-2018-9305)\n\n* exiv2: OOB read in pngimage.cpp:tEXtToDataBuf() allows for crash via crafted file (CVE-2018-10772)\n\n* exiv2: information leak via a crafted file (CVE-2018-11037)\n\n* exiv2: buffer overflow in samples/geotag.cpp (CVE-2018-14338)\n\n* exiv2: heap-based buffer overflow in Exiv2::d2Data in types.cpp (CVE-2018-17229)\n\n* exiv2: heap-based buffer overflow in Exiv2::ul2Data in types.cpp (CVE-2018-17230)\n\n* exiv2: NULL pointer dereference in Exiv2::DataValue::copy in value.cpp leading to application crash (CVE-2018-17282)\n\n* exiv2: Stack overflow in CiffDirectory::readDirectory() at crwimage_int.cpp leading to denial of service (CVE-2018-17581)\n\n* exiv2: infinite loop in Exiv2::Image::printIFDStructure function in image.cpp (CVE-2018-18915)\n\n* exiv2: heap-based buffer over-read in Exiv2::IptcParser::decode in iptc.cpp (CVE-2018-19107)\n\n* exiv2: infinite loop in Exiv2::PsdImage::readMetadata in psdimage.cpp (CVE-2018-19108)\n\n* exiv2: heap-based buffer over-read in PngChunk::readRawProfile in pngchunk_int.cpp (CVE-2018-19535)\n\n* exiv2: NULL pointer dereference in Exiv2::isoSpeed in easyaccess.cpp (CVE-2018-19607)\n\n* exiv2: Heap-based buffer over-read in Exiv2::tEXtToDataBuf function resulting in a denial of service (CVE-2018-20096)\n\n* exiv2: Segmentation fault in Exiv2::Internal::TiffParserWorker::findPrimaryGroups function (CVE-2018-20097)\n\n* exiv2: Heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service (CVE-2018-20098)\n\n* exiv2: Infinite loop in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service (CVE-2018-20099)\n\n* exiv2: infinite recursion in Exiv2::Image::printTiffStructure in file image.cpp resulting in denial of service (CVE-2019-9143)\n\n* exiv2: denial of service in PngImage::readMetadata (CVE-2019-13109)\n\n* exiv2: integer overflow in WebPImage::decodeChunks leads to denial of service (CVE-2019-13111)\n\n* exiv2: uncontrolled memory allocation in PngChunk::parseChunkContent causing denial of service (CVE-2019-13112)\n\n* exiv2: invalid data location in CRW image file causing denial of service (CVE-2019-13113)\n\n* exiv2: null-pointer dereference in http.c causing denial of service (CVE-2019-13114)\n\n* exiv2: out of bounds read in IptcData::printStructure in iptc.c (CVE-2018-9306)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1531171","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1531171","description":""},{"ticket":"1531724","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1531724","description":""},{"ticket":"1566725","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1566725","description":""},{"ticket":"1566731","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1566731","description":""},{"ticket":"1566735","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1566735","description":""},{"ticket":"1566737","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1566737","description":""},{"ticket":"1579544","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1579544","description":""},{"ticket":"1594627","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1594627","description":""},{"ticket":"1609396","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1609396","description":""},{"ticket":"1632481","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1632481","description":""},{"ticket":"1632484","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1632484","description":""},{"ticket":"1632490","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1632490","description":""},{"ticket":"1635045","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1635045","description":""},{"ticket":"1646555","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1646555","description":""},{"ticket":"1649094","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1649094","description":""},{"ticket":"1649101","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1649101","description":""},{"ticket":"1651917","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1651917","description":"The following packages have been upgraded to a later upstream version: exiv2 (0.27.2)."},{"ticket":"1656187","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1656187","description":""},{"ticket":"1656195","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1656195","description":""},{"ticket":"1660423","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1660423","description":""},{"ticket":"1660424","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1660424","description":""},{"ticket":"1660425","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1660425","description":""},{"ticket":"1660426","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1660426","description":""},{"ticket":"1684381","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1684381","description":""},{"ticket":"1728484","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1728484","description":""},{"ticket":"1728488","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1728488","description":""},{"ticket":"1728490","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1728490","description":""},{"ticket":"1728492","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1728492","description":""},{"ticket":"1728494","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1728494","description":""},{"ticket":"1757444","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1757444","description":""},{"ticket":"1757445","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1757445","description":""},{"ticket":"1767748","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1767748","description":""},{"ticket":"1800472","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1800472","description":""}],"cves":[{"name":"CVE-2017-18005","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18005","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"5.3","cwe":"(CWE-476|CWE-617)"},{"name":"CVE-2018-10772","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10772","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"4.3","cwe":"CWE-400"},{"name":"CVE-2018-11037","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11037","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3BaseScore":"4.4","cwe":"CWE-200"},{"name":"CVE-2018-14338","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14338","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-121"},{"name":"CVE-2018-17229","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17229","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-122"},{"name":"CVE-2018-17230","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17230","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-125"},{"name":"CVE-2018-17282","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17282","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-476"},{"name":"CVE-2018-17581","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17581","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-400"},{"name":"CVE-2018-18915","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18915","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-835"},{"name":"CVE-2018-19107","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19107","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-190->CWE-125"},{"name":"CVE-2018-19108","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19108","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-190->CWE-835"},{"name":"CVE-2018-19535","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19535","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-125"},{"name":"CVE-2018-19607","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19607","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-476"},{"name":"CVE-2018-20096","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20096","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-125"},{"name":"CVE-2018-20097","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20097","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-125"},{"name":"CVE-2018-20098","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20098","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-125"},{"name":"CVE-2018-20099","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20099","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-835"},{"name":"CVE-2018-4868","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4868","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"5.3","cwe":"CWE-400"},{"name":"CVE-2018-9303","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9303","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-617"},{"name":"CVE-2018-9304","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9304","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-369"},{"name":"CVE-2018-9305","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9305","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3BaseScore":"4.4","cwe":"CWE-125"},{"name":"CVE-2018-9306","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9306","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3BaseScore":"4.4","cwe":"CWE-125"},{"name":"CVE-2019-13109","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13109","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-190->CWE-400"},{"name":"CVE-2019-13111","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13111","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-190->CWE-400"},{"name":"CVE-2019-13112","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13112","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-400"},{"name":"CVE-2019-13113","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13113","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-617"},{"name":"CVE-2019-13114","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13114","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3BaseScore":"5.5","cwe":"CWE-476"},{"name":"CVE-2019-20421","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20421","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-835->CWE-400"},{"name":"CVE-2019-9143","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9143","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"4.0","cwe":"CWE-835"}],"references":[],"publishedAt":"2020-04-28T08:52:31Z","rpms":{"Rocky Linux 8":{"nvras":["exiv2-0:0.27.2-5.el8.x86_64.rpm","exiv2-debuginfo-0:0.27.2-5.el8.aarch64.rpm","exiv2-debuginfo-0:0.27.2-5.el8.i686.rpm","exiv2-0:0.27.2-5.el8.aarch64.rpm","exiv2-0:0.27.2-5.el8.src.rpm","exiv2-debuginfo-0:0.27.2-5.el8.x86_64.rpm","exiv2-debugsource-0:0.27.2-5.el8.aarch64.rpm","exiv2-debugsource-0:0.27.2-5.el8.i686.rpm","exiv2-debugsource-0:0.27.2-5.el8.x86_64.rpm","exiv2-devel-0:0.27.2-5.el8.aarch64.rpm","exiv2-devel-0:0.27.2-5.el8.i686.rpm","exiv2-devel-0:0.27.2-5.el8.x86_64.rpm","exiv2-doc-0:0.27.2-5.el8.noarch.rpm","exiv2-libs-0:0.27.2-5.el8.aarch64.rpm","exiv2-libs-0:0.27.2-5.el8.i686.rpm","exiv2-libs-0:0.27.2-5.el8.x86_64.rpm","exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64.rpm","exiv2-libs-debuginfo-0:0.27.2-5.el8.i686.rpm","exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64.rpm","gegl-0:0.2.0-39.el8.aarch64.rpm","gegl-0:0.2.0-39.el8.i686.rpm","gegl-0:0.2.0-39.el8.src.rpm","gegl-0:0.2.0-39.el8.x86_64.rpm","gegl-debuginfo-0:0.2.0-39.el8.aarch64.rpm","gegl-debuginfo-0:0.2.0-39.el8.i686.rpm","gegl-debuginfo-0:0.2.0-39.el8.x86_64.rpm","gegl-debugsource-0:0.2.0-39.el8.aarch64.rpm","gegl-debugsource-0:0.2.0-39.el8.i686.rpm","gegl-debugsource-0:0.2.0-39.el8.x86_64.rpm","gnome-color-manager-0:3.28.0-3.el8.src.rpm","gnome-color-manager-0:3.28.0-3.el8.x86_64.rpm","gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64.rpm","gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64.rpm","libgexiv2-0:0.10.8-4.el8.aarch64.rpm","libgexiv2-0:0.10.8-4.el8.i686.rpm","libgexiv2-0:0.10.8-4.el8.src.rpm","libgexiv2-0:0.10.8-4.el8.x86_64.rpm","libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64.rpm","libgexiv2-debuginfo-0:0.10.8-4.el8.i686.rpm","libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64.rpm","libgexiv2-debugsource-0:0.10.8-4.el8.aarch64.rpm","libgexiv2-debugsource-0:0.10.8-4.el8.i686.rpm","libgexiv2-debugsource-0:0.10.8-4.el8.x86_64.rpm","libgexiv2-devel-0:0.10.8-4.el8.aarch64.rpm","libgexiv2-devel-0:0.10.8-4.el8.i686.rpm","libgexiv2-devel-0:0.10.8-4.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:1577","url":"https://access.redhat.com/errata/RHSA-2020:1577","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-1581.json b/data/advisories/2020/RLSA-2020-1581.json new file mode 100644 index 0000000..c88f82e --- /dev/null +++ b/data/advisories/2020/RLSA-2020-1581.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:1581","synopsis":"Low: wavpack security update","severity":"SEVERITY_LOW","topic":"An update is available for wavpack.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. \n\nSecurity Fix(es):\n\n* wawpack: Infinite loop in WavpackPackInit function lead to DoS (CVE-2018-19840)\n\n* wawpack: Out-of-bounds read in WavpackVerifySingleBlock function leads to DoS (CVE-2018-19841)\n\n* wavpack: Use of uninitialized variable in WavpackSetConfiguration64 leads to DoS (CVE-2019-11498)\n\n* wavpack: Divide by zero in ParseDsdiffHeaderConfig leads to crash (CVE-2019-1010315)\n\n* wavpack: Use of uninitialized variable in ParseCaffHeaderConfig leads to DoS (CVE-2019-1010317)\n\n* wavpack: Use of uninitialized variable in ParseWave64HeaderConfig leads to DoS (CVE-2019-1010319)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1661448","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1661448","description":""},{"ticket":"1661449","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1661449","description":""},{"ticket":"1704633","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1704633","description":""},{"ticket":"1729418","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1729418","description":""},{"ticket":"1737740","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1737740","description":""},{"ticket":"1737747","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1737747","description":""}],"cves":[{"name":"CVE-2018-19840","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19840","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-835"},{"name":"CVE-2018-19841","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19841","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-125"},{"name":"CVE-2019-1010315","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1010315","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"4.3","cwe":"CWE-369"},{"name":"CVE-2019-1010317","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1010317","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3BaseScore":"3.3","cwe":"CWE-20->CWE-665"},{"name":"CVE-2019-1010319","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1010319","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"2.5","cwe":"CWE-665->CWE-369"},{"name":"CVE-2019-11498","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11498","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"4.0","cwe":"CWE-456"}],"references":[],"publishedAt":"2020-04-28T08:53:05Z","rpms":{"Rocky Linux 8":{"nvras":["wavpack-0:5.1.0-15.el8.aarch64.rpm","wavpack-0:5.1.0-15.el8.i686.rpm","wavpack-0:5.1.0-15.el8.src.rpm","wavpack-0:5.1.0-15.el8.x86_64.rpm","wavpack-debuginfo-0:5.1.0-15.el8.aarch64.rpm","wavpack-debuginfo-0:5.1.0-15.el8.i686.rpm","wavpack-debuginfo-0:5.1.0-15.el8.x86_64.rpm","wavpack-debugsource-0:5.1.0-15.el8.aarch64.rpm","wavpack-debugsource-0:5.1.0-15.el8.i686.rpm","wavpack-debugsource-0:5.1.0-15.el8.x86_64.rpm","wavpack-devel-0:5.1.0-15.el8.aarch64.rpm","wavpack-devel-0:5.1.0-15.el8.i686.rpm","wavpack-devel-0:5.1.0-15.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:1581","url":"https://access.redhat.com/errata/RHSA-2020:1581","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-1605.json b/data/advisories/2020/RLSA-2020-1605.json new file mode 100644 index 0000000..81ff9db --- /dev/null +++ b/data/advisories/2020/RLSA-2020-1605.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:1605","synopsis":"Moderate: python27:2.7 security, bug fix, and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for python-pymongo, python2-rpm-macros, python-docutils, pytest, python-psycopg2, python-PyMySQL, python-lxml, PyYAML, python-pytest-mock, python-attrs, python-jinja2, python-docs, python-requests, python-mock, python-ipaddress, python-funcsigs, python-py, python-chardet, python-markupsafe, python-pluggy, python-pygments, Cython, python-virtualenv, babel, python-dns, python-wheel, python-pysocks, python-coverage, python-setuptools_scm, pytz, python-nose, scipy, python-idna.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL.\n\nThe following packages have been upgraded to a later upstream version: python2 (2.7.17). (BZ#1759944)\n\nSecurity Fix(es):\n\n* python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure (CVE-2018-20060)\n\n* python: Cookie domain check returns incorrect results (CVE-2018-20852)\n\n* python-urllib3: CRLF injection due to not encoding the '\\r\\n' sequence leading to possible attack on internal service (CVE-2019-11236)\n\n* python-urllib3: Certification mishandle when error should be thrown (CVE-2019-11324)\n\n* python: email.utils.parseaddr wrongly parses email addresses (CVE-2019-16056)\n\n* python-requests: Redirect from HTTPS to HTTP does not remove Authorization header (CVE-2018-18074)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1702473","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702473","description":""},{"ticket":"1643829","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1643829","description":""},{"ticket":"1649153","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1649153","description":""},{"ticket":"1659551","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1659551","description":""},{"ticket":"1700824","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1700824","description":""},{"ticket":"1740347","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1740347","description":""},{"ticket":"1749839","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1749839","description":""},{"ticket":"1762422","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1762422","description":""}],"cves":[{"name":"CVE-2018-18074","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18074","cvss3ScoringVector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3BaseScore":"2.6","cwe":"CWE-522"},{"name":"CVE-2018-20060","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20060","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3BaseScore":"5.3","cwe":"CWE-522"},{"name":"CVE-2018-20852","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20852","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3BaseScore":"5.3","cwe":"CWE-20"},{"name":"CVE-2019-11236","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11236","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3BaseScore":"6.5","cwe":"CWE-113"},{"name":"CVE-2019-11324","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11324","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3BaseScore":"7.5","cwe":"CWE-295"},{"name":"CVE-2019-16056","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16056","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3BaseScore":"7.3","cwe":"CWE-20"},{"name":"CVE-2019-16935","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16935","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-79"}],"references":[],"publishedAt":"2020-04-28T08:55:59Z","rpms":{"Rocky Linux 8":{"nvras":["babel-0:2.5.1-9.module+el8.4.0+403+9ae17a31.noarch.rpm","babel-0:2.5.1-9.module+el8.4.0+403+9ae17a31.src.rpm","Cython-0:0.28.1-7.module+el8.5.0+706+735ec4b3.src.rpm","Cython-0:0.28.1-7.module+el8.4.0+403+9ae17a31.src.rpm","Cython-debugsource-0:0.28.1-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","Cython-debugsource-0:0.28.1-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","Cython-debugsource-0:0.28.1-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","Cython-debugsource-0:0.28.1-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","pytest-0:3.4.2-13.module+el8.5.0+706+735ec4b3.src.rpm","pytest-0:3.4.2-13.module+el8.4.0+403+9ae17a31.src.rpm","python2-attrs-0:17.4.0-10.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-attrs-0:17.4.0-10.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-babel-0:2.5.1-9.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-bson-0:3.6.1-11.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-bson-0:3.6.1-11.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-bson-debuginfo-0:3.6.1-11.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-bson-debuginfo-0:3.6.1-11.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-chardet-0:3.0.4-10.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-chardet-0:3.0.4-10.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-coverage-0:4.5.1-4.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-coverage-0:4.5.1-4.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-coverage-0:4.5.1-4.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-coverage-0:4.5.1-4.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-coverage-debuginfo-0:4.5.1-4.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-coverage-debuginfo-0:4.5.1-4.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-coverage-debuginfo-0:4.5.1-4.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-coverage-debuginfo-0:4.5.1-4.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-Cython-0:0.28.1-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-Cython-0:0.28.1-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-Cython-0:0.28.1-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-Cython-0:0.28.1-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-Cython-debuginfo-0:0.28.1-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-Cython-debuginfo-0:0.28.1-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-Cython-debuginfo-0:0.28.1-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-Cython-debuginfo-0:0.28.1-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-dns-0:1.15.0-10.module+el8.7.0+1062+663ba31c.noarch.rpm","python2-dns-0:1.15.0-10.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-docs-0:2.7.16-2.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-docs-info-0:2.7.16-2.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-docutils-0:0.14-12.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-funcsigs-0:1.0.2-13.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-idna-0:2.5-7.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-idna-0:2.5-7.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-ipaddress-0:1.0.18-6.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-jinja2-0:2.10-8.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-markupsafe-0:0.23-19.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-markupsafe-0:0.23-19.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-markupsafe-0:0.23-19.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-markupsafe-0:0.23-19.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-mock-0:2.0.0-13.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-nose-0:1.3.7-30.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-pluggy-0:0.6.0-8.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-pluggy-0:0.6.0-8.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-psycopg2-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-psycopg2-0:2.7.5-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-psycopg2-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-psycopg2-0:2.7.5-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-psycopg2-debug-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-psycopg2-debug-0:2.7.5-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-psycopg2-debug-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-psycopg2-debug-0:2.7.5-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-psycopg2-debug-debuginfo-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-psycopg2-debug-debuginfo-0:2.7.5-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-psycopg2-debug-debuginfo-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-psycopg2-debug-debuginfo-0:2.7.5-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-psycopg2-debuginfo-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-psycopg2-debuginfo-0:2.7.5-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-psycopg2-debuginfo-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-psycopg2-debuginfo-0:2.7.5-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-psycopg2-tests-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-psycopg2-tests-0:2.7.5-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-psycopg2-tests-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-psycopg2-tests-0:2.7.5-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-py-0:1.5.3-6.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-py-0:1.5.3-6.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-pygments-0:2.2.0-20.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-pymongo-0:3.6.1-11.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-pymongo-0:3.6.1-11.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-pymongo-debuginfo-0:3.6.1-11.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-pymongo-debuginfo-0:3.6.1-11.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-pymongo-gridfs-0:3.6.1-11.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-pymongo-gridfs-0:3.6.1-11.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-PyMySQL-0:0.8.0-10.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-PyMySQL-0:0.8.0-10.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-pysocks-0:1.6.8-6.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-pysocks-0:1.6.8-6.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-pytest-0:3.4.2-13.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-pytest-0:3.4.2-13.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-pytest-mock-0:1.9.0-4.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-pytz-0:2017.2-12.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-pytz-0:2017.2-12.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-pyyaml-0:3.12-16.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-pyyaml-0:3.12-16.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-pyyaml-0:3.12-16.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-pyyaml-0:3.12-16.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-pyyaml-debuginfo-0:3.12-16.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-pyyaml-debuginfo-0:3.12-16.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-pyyaml-debuginfo-0:3.12-16.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-pyyaml-debuginfo-0:3.12-16.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-requests-0:2.20.0-3.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-requests-0:2.20.0-3.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-rpm-macros-0:3-38.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-rpm-macros-0:3-38.module+el8.4.0+403+9ae17a31.src.rpm","python2-scipy-0:1.0.0-20.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-scipy-0:1.0.0-20.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-scipy-debuginfo-0:1.0.0-20.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-scipy-debuginfo-0:1.0.0-20.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-setuptools_scm-0:1.15.7-6.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-virtualenv-0:15.1.0-19.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-wheel-1:0.31.1-2.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-wheel-wheel-1:0.31.1-2.module+el8.4.0+403+9ae17a31.noarch.rpm","python-attrs-0:17.4.0-10.module+el8.5.0+706+735ec4b3.src.rpm","python-attrs-0:17.4.0-10.module+el8.4.0+403+9ae17a31.src.rpm","python-chardet-0:3.0.4-10.module+el8.5.0+706+735ec4b3.src.rpm","python-chardet-0:3.0.4-10.module+el8.4.0+403+9ae17a31.src.rpm","python-coverage-0:4.5.1-4.module+el8.5.0+706+735ec4b3.src.rpm","python-coverage-0:4.5.1-4.module+el8.4.0+403+9ae17a31.src.rpm","python-coverage-debugsource-0:4.5.1-4.module+el8.5.0+706+735ec4b3.aarch64.rpm","python-coverage-debugsource-0:4.5.1-4.module+el8.4.0+403+9ae17a31.aarch64.rpm","python-coverage-debugsource-0:4.5.1-4.module+el8.5.0+706+735ec4b3.x86_64.rpm","python-coverage-debugsource-0:4.5.1-4.module+el8.4.0+403+9ae17a31.x86_64.rpm","python-dns-0:1.15.0-10.module+el8.7.0+1062+663ba31c.src.rpm","python-dns-0:1.15.0-10.el8.src.rpm","python-dns-0:1.15.0-10.module+el8.4.0+403+9ae17a31.src.rpm","python-docs-0:2.7.16-2.module+el8.4.0+403+9ae17a31.src.rpm","python-docutils-0:0.14-12.module+el8.4.0+403+9ae17a31.src.rpm","python-docutils-0:0.14-12.module+el8.3.0+120+426d8baf.src.rpm","python-funcsigs-0:1.0.2-13.module+el8.4.0+403+9ae17a31.src.rpm","python-idna-0:2.5-7.module+el8.5.0+706+735ec4b3.src.rpm","python-idna-0:2.5-7.module+el8.4.0+403+9ae17a31.src.rpm","python-ipaddress-0:1.0.18-6.module+el8.4.0+403+9ae17a31.src.rpm","python-jinja2-0:2.10-8.module+el8.4.0+403+9ae17a31.src.rpm","python-lxml-0:4.2.3-3.el8.src.rpm","python-markupsafe-0:0.23-19.el8.src.rpm","python-mock-0:2.0.0-13.module+el8.4.0+403+9ae17a31.src.rpm","python-nose-0:1.3.7-30.module+el8.3.0+120+426d8baf.src.rpm","python-nose-docs-0:1.3.7-30.module+el8.3.0+120+426d8baf.noarch.rpm","python-pluggy-0:0.6.0-8.module+el8.5.0+706+735ec4b3.src.rpm","python-pluggy-0:0.6.0-8.module+el8.4.0+403+9ae17a31.src.rpm","python-psycopg2-0:2.7.5-7.el8.src.rpm","python-psycopg2-debuginfo-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python-psycopg2-debuginfo-0:2.7.5-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python-py-0:1.5.3-6.module+el8.5.0+706+735ec4b3.src.rpm","python-psycopg2-debuginfo-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python-psycopg2-debuginfo-0:2.7.5-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python-psycopg2-debugsource-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python-psycopg2-debugsource-0:2.7.5-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python-psycopg2-debugsource-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python-psycopg2-debugsource-0:2.7.5-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python-psycopg2-doc-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python-psycopg2-doc-0:2.7.5-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python-psycopg2-doc-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python-psycopg2-doc-0:2.7.5-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python-py-0:1.5.3-6.module+el8.4.0+403+9ae17a31.src.rpm","python-pygments-0:2.2.0-20.module+el8.3.0+120+426d8baf.src.rpm","python-pymongo-0:3.6.1-11.module+el8.3.0+120+426d8baf.src.rpm","python-pymongo-debuginfo-0:3.6.1-11.module+el8.3.0+120+426d8baf.aarch64.rpm","python-pymongo-debuginfo-0:3.6.1-11.module+el8.3.0+120+426d8baf.x86_64.rpm","python-pymongo-debugsource-0:3.6.1-11.module+el8.3.0+120+426d8baf.aarch64.rpm","python-pymongo-debugsource-0:3.6.1-11.module+el8.3.0+120+426d8baf.x86_64.rpm","python-PyMySQL-0:0.8.0-10.module+el8.5.0+706+735ec4b3.src.rpm","python-PyMySQL-0:0.8.0-10.module+el8.3.0+120+426d8baf.src.rpm","python-pysocks-0:1.6.8-6.module+el8.5.0+706+735ec4b3.src.rpm","python-pysocks-0:1.6.8-6.module+el8.4.0+403+9ae17a31.src.rpm","python-pytest-mock-0:1.9.0-4.module+el8.4.0+403+9ae17a31.src.rpm","python-requests-0:2.20.0-3.module+el8.5.0+706+735ec4b3.src.rpm","python-requests-0:2.20.0-3.module+el8.4.0+403+9ae17a31.src.rpm","python-setuptools_scm-0:1.15.7-6.module+el8.4.0+403+9ae17a31.src.rpm","python-virtualenv-0:15.1.0-19.module+el8.3.0+120+426d8baf.src.rpm","python-wheel-1:0.31.1-2.module+el8.3.0+120+426d8baf.src.rpm","pytz-0:2017.2-12.module+el8.5.0+706+735ec4b3.src.rpm","pytz-0:2017.2-12.module+el8.4.0+403+9ae17a31.src.rpm","PyYAML-0:3.12-16.module+el8.5.0+706+735ec4b3.src.rpm","PyYAML-0:3.12-16.module+el8.4.0+403+9ae17a31.src.rpm","PyYAML-debugsource-0:3.12-16.module+el8.5.0+706+735ec4b3.aarch64.rpm","PyYAML-debugsource-0:3.12-16.module+el8.4.0+403+9ae17a31.aarch64.rpm","PyYAML-debugsource-0:3.12-16.module+el8.5.0+706+735ec4b3.x86_64.rpm","PyYAML-debugsource-0:3.12-16.module+el8.4.0+403+9ae17a31.x86_64.rpm","scipy-0:1.0.0-20.module+el8.3.0+120+426d8baf.src.rpm","scipy-debugsource-0:1.0.0-20.module+el8.3.0+120+426d8baf.aarch64.rpm","scipy-debugsource-0:1.0.0-20.module+el8.3.0+120+426d8baf.x86_64.rpm","python-markupsafe-0:0.23-19.module+el8.5.0+706+735ec4b3.src.rpm","python-psycopg2-0:2.7.5-7.module+el8.5.0+706+735ec4b3.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:1605","url":"https://access.redhat.com/errata/RHSA-2020:1605","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-1616.json b/data/advisories/2020/RLSA-2020-1616.json new file mode 100644 index 0000000..cc83335 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-1616.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:1616","synopsis":"Low: irssi security update","severity":"SEVERITY_LOW","topic":"An update is available for irssi.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Irssi is a modular IRC client with Perl scripting. \n\nSecurity Fix(es):\n\n* irssi: use after free when sending SASL login to server (CVE-2019-13045)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1727683","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1727683","description":""}],"cves":[{"name":"CVE-2019-13045","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13045","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.7","cwe":"CWE-416"}],"references":[],"publishedAt":"2020-04-28T08:56:59Z","rpms":{"Rocky Linux 8":{"nvras":["irssi-0:1.1.1-3.el8.aarch64.rpm","irssi-0:1.1.1-3.el8.src.rpm","irssi-0:1.1.1-3.el8.x86_64.rpm","irssi-debuginfo-0:1.1.1-3.el8.aarch64.rpm","irssi-debuginfo-0:1.1.1-3.el8.x86_64.rpm","irssi-debugsource-0:1.1.1-3.el8.aarch64.rpm","irssi-debugsource-0:1.1.1-3.el8.x86_64.rpm","irssi-devel-0:1.1.1-3.el8.aarch64.rpm","irssi-devel-0:1.1.1-3.el8.i686.rpm","irssi-devel-0:1.1.1-3.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:1616","url":"https://access.redhat.com/errata/RHSA-2020:1616","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-1624.json b/data/advisories/2020/RLSA-2020-1624.json new file mode 100644 index 0000000..cf21f8d --- /dev/null +++ b/data/advisories/2020/RLSA-2020-1624.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:1624","synopsis":"Moderate: php:7.2 security, bug fix, and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for php-pear, php, php-pecl-apcu, libzip, php-pecl-zip.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.\n\nThe following packages have been upgraded to a later upstream version: php (7.2.24). (BZ#1726981)\n\nSecurity Fix(es):\n\n* php: Invalid memory access in function xmlrpc_decode() (CVE-2019-9020)\n\n* php: File rename across filesystems may allow unwanted access during processing (CVE-2019-9637)\n\n* php: Uninitialized read in exif_process_IFD_in_MAKERNOTE (CVE-2019-9638)\n\n* php: Uninitialized read in exif_process_IFD_in_MAKERNOTE (CVE-2019-9639)\n\n* php: Invalid read in exif_process_SOFn() (CVE-2019-9640)\n\n* php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers() (CVE-2019-11039)\n\n* php: Buffer over-read in exif_read_data() (CVE-2019-11040)\n\n* php: Buffer over-read in PHAR reading functions (CVE-2018-20783)\n\n* php: Heap-based buffer over-read in PHAR reading functions (CVE-2019-9021)\n\n* php: memcpy with negative length via crafted DNS response (CVE-2019-9022)\n\n* php: Heap-based buffer over-read in mbstring regular expression functions (CVE-2019-9023)\n\n* php: Out-of-bounds read in base64_decode_xmlrpc in ext/xmlrpc/libxmlrpc/base64.c (CVE-2019-9024)\n\n* php: Heap buffer overflow in function exif_process_IFD_TAG() (CVE-2019-11034)\n\n* php: Heap buffer overflow in function exif_iif_add_value() (CVE-2019-11035)\n\n* php: Buffer over-read in exif_process_IFD_TAG() leading to information disclosure (CVE-2019-11036)\n\n* php: Heap buffer over-read in exif_scan_thumbnail() (CVE-2019-11041)\n\n* php: Heap buffer over-read in exif_process_user_comment() (CVE-2019-11042)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1680545","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1680545","description":""},{"ticket":"1685123","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1685123","description":""},{"ticket":"1685132","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1685132","description":""},{"ticket":"1685398","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1685398","description":""},{"ticket":"1685404","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1685404","description":""},{"ticket":"1685412","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1685412","description":""},{"ticket":"1688897","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1688897","description":""},{"ticket":"1688922","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1688922","description":""},{"ticket":"1688934","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1688934","description":""},{"ticket":"1688939","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1688939","description":""},{"ticket":"1702246","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702246","description":""},{"ticket":"1702256","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1702256","description":""},{"ticket":"1707299","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1707299","description":""},{"ticket":"1724152","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1724152","description":""},{"ticket":"1724154","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1724154","description":""},{"ticket":"1739459","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1739459","description":""},{"ticket":"1739465","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1739465","description":""}],"cves":[{"name":"CVE-2018-20783","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20783","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3BaseScore":"5.3","cwe":"UNKNOWN"},{"name":"CVE-2019-11034","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11034","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3BaseScore":"6.5","cwe":"CWE-122"},{"name":"CVE-2019-11035","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11035","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3BaseScore":"6.5","cwe":"CWE-122"},{"name":"CVE-2019-11036","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11036","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3BaseScore":"4.0","cwe":"CWE-122"},{"name":"CVE-2019-11039","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11039","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3BaseScore":"6.5","cwe":"CWE-190->CWE-125"},{"name":"CVE-2019-11040","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11040","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3BaseScore":"6.5","cwe":"CWE-125"},{"name":"CVE-2019-11041","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11041","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3BaseScore":"3.7","cwe":"CWE-120"},{"name":"CVE-2019-11042","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11042","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3BaseScore":"3.7","cwe":"CWE-120"},{"name":"CVE-2019-9020","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9020","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3BaseScore":"7.3","cwe":"CWE-119"},{"name":"CVE-2019-9021","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9021","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"5.3","cwe":"CWE-122"},{"name":"CVE-2019-9022","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9022","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L","cvss3BaseScore":"4.6","cwe":"CWE-119"},{"name":"CVE-2019-9023","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9023","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3BaseScore":"5.4","cwe":"CWE-122"},{"name":"CVE-2019-9024","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9024","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3BaseScore":"6.5","cwe":"CWE-125"},{"name":"CVE-2019-9637","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9637","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3BaseScore":"7.5","cwe":"CWE-266"},{"name":"CVE-2019-9638","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9638","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"5.3","cwe":"CWE-665"},{"name":"CVE-2019-9639","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9639","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"5.3","cwe":"CWE-665"},{"name":"CVE-2019-9640","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9640","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"5.3","cwe":"CWE-125"}],"references":[],"publishedAt":"2020-04-28T08:57:54Z","rpms":{"Rocky Linux 8":{"nvras":["apcu-panel-0:5.1.12-2.module+el8.4.0+413+c9202dda.noarch.rpm","libzip-0:1.5.1-2.module+el8.4.0+413+c9202dda.aarch64.rpm","libzip-0:1.5.1-2.module+el8.4.0+413+c9202dda.src.rpm","libzip-0:1.5.1-2.module+el8.4.0+413+c9202dda.x86_64.rpm","libzip-debuginfo-0:1.5.1-2.module+el8.4.0+413+c9202dda.aarch64.rpm","libzip-debuginfo-0:1.5.1-2.module+el8.4.0+413+c9202dda.x86_64.rpm","libzip-debugsource-0:1.5.1-2.module+el8.4.0+413+c9202dda.aarch64.rpm","libzip-debugsource-0:1.5.1-2.module+el8.4.0+413+c9202dda.x86_64.rpm","libzip-devel-0:1.5.1-2.module+el8.4.0+413+c9202dda.aarch64.rpm","libzip-devel-0:1.5.1-2.module+el8.4.0+413+c9202dda.x86_64.rpm","libzip-tools-0:1.5.1-2.module+el8.4.0+413+c9202dda.aarch64.rpm","libzip-tools-0:1.5.1-2.module+el8.4.0+413+c9202dda.x86_64.rpm","libzip-tools-debuginfo-0:1.5.1-2.module+el8.4.0+413+c9202dda.aarch64.rpm","libzip-tools-debuginfo-0:1.5.1-2.module+el8.4.0+413+c9202dda.x86_64.rpm","php-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-0:7.2.24-1.module+el8.4.0+413+c9202dda.src.rpm","php-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-bcmath-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-bcmath-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-bcmath-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-bcmath-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-cli-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-cli-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-cli-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-cli-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-common-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-common-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-common-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-common-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-dba-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-dba-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-dba-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-dba-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-dbg-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-dbg-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-dbg-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-dbg-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-debugsource-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-debugsource-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-devel-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-devel-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-embedded-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-embedded-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-embedded-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-embedded-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-enchant-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-enchant-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-enchant-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-enchant-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-fpm-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-fpm-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-fpm-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-fpm-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-gd-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-gd-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-gd-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-gd-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-gmp-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-gmp-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-gmp-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-gmp-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-intl-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-intl-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-intl-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-intl-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-json-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-json-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-json-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-json-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-ldap-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-ldap-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-ldap-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-ldap-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-mbstring-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-mbstring-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-mbstring-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-mbstring-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-mysqlnd-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-mysqlnd-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-mysqlnd-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-mysqlnd-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-odbc-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-odbc-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-odbc-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-odbc-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-opcache-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-opcache-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-opcache-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-opcache-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-pdo-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-pdo-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-pdo-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-pdo-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-pear-1:1.10.5-9.module+el8.4.0+413+c9202dda.noarch.rpm","php-pear-1:1.10.5-9.module+el8.4.0+413+c9202dda.src.rpm","php-pecl-apcu-0:5.1.12-2.module+el8.4.0+413+c9202dda.aarch64.rpm","php-pecl-apcu-0:5.1.12-2.module+el8.4.0+413+c9202dda.src.rpm","php-pecl-apcu-0:5.1.12-2.module+el8.4.0+413+c9202dda.x86_64.rpm","php-pecl-apcu-debuginfo-0:5.1.12-2.module+el8.4.0+413+c9202dda.aarch64.rpm","php-pecl-apcu-debuginfo-0:5.1.12-2.module+el8.4.0+413+c9202dda.x86_64.rpm","php-pecl-apcu-debugsource-0:5.1.12-2.module+el8.4.0+413+c9202dda.aarch64.rpm","php-pecl-apcu-debugsource-0:5.1.12-2.module+el8.4.0+413+c9202dda.x86_64.rpm","php-pecl-apcu-devel-0:5.1.12-2.module+el8.4.0+413+c9202dda.aarch64.rpm","php-pecl-apcu-devel-0:5.1.12-2.module+el8.4.0+413+c9202dda.x86_64.rpm","php-pecl-zip-0:1.15.3-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-pecl-zip-0:1.15.3-1.module+el8.4.0+413+c9202dda.src.rpm","php-pecl-zip-0:1.15.3-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-pecl-zip-debuginfo-0:1.15.3-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-pecl-zip-debuginfo-0:1.15.3-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-pecl-zip-debugsource-0:1.15.3-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-pecl-zip-debugsource-0:1.15.3-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-pgsql-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-pgsql-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-pgsql-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-pgsql-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-process-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-process-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-process-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-process-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-recode-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-recode-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-recode-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-recode-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-snmp-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-snmp-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-snmp-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-snmp-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-soap-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-soap-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-soap-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-soap-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-xml-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-xml-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-xml-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-xml-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-xmlrpc-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-xmlrpc-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-xmlrpc-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-xmlrpc-debuginfo-0:7.2.24-1.module+el8.4.0+413+c9202dda.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:1624","url":"https://access.redhat.com/errata/RHSA-2020:1624","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-1631.json b/data/advisories/2020/RLSA-2020-1631.json new file mode 100644 index 0000000..f71942d --- /dev/null +++ b/data/advisories/2020/RLSA-2020-1631.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:1631","synopsis":"Low: GStreamer, libmad, and SDL security, bug fix, and enhancement update","severity":"SEVERITY_LOW","topic":"An update is available for libmad, gstreamer1-plugins-ugly-free, gstreamer1-plugins-bad-free, SDL2, orc, gstreamer1.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The GStreamer library provides a streaming media framework based on graphs of media data filters.\n\nThe libmad package is an MPEG audio decoder capable of 24-bit output. \n\nSimple DirectMedia Layer (SDL) is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device.\n\nSecurity Fix(es):\n\n* libmad: Double-free in the mad_decoder_run() function (CVE-2018-7263)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1488585","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1488585","description":""},{"ticket":"1547504","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1547504","description":""},{"ticket":"1693292","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1693292","description":""},{"ticket":"1724677","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1724677","description":""},{"ticket":"1751780","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1751780","description":""},{"ticket":"1756299","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1756299","description":""}],"cves":[{"name":"CVE-2018-7263","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7263","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-416"}],"references":[],"publishedAt":"2020-04-28T08:58:37Z","rpms":{"Rocky Linux 8":{"nvras":["orc-0:0.4.28-3.el8.aarch64.rpm","gstreamer1-0:1.16.1-2.el8.aarch64.rpm","gstreamer1-0:1.16.1-2.el8.i686.rpm","gstreamer1-0:1.16.1-2.el8.src.rpm","gstreamer1-0:1.16.1-2.el8.x86_64.rpm","gstreamer1-debuginfo-0:1.16.1-2.el8.aarch64.rpm","gstreamer1-debuginfo-0:1.16.1-2.el8.i686.rpm","gstreamer1-debuginfo-0:1.16.1-2.el8.x86_64.rpm","gstreamer1-debugsource-0:1.16.1-2.el8.aarch64.rpm","gstreamer1-debugsource-0:1.16.1-2.el8.i686.rpm","gstreamer1-debugsource-0:1.16.1-2.el8.x86_64.rpm","gstreamer1-devel-0:1.16.1-2.el8.aarch64.rpm","gstreamer1-devel-0:1.16.1-2.el8.i686.rpm","gstreamer1-devel-0:1.16.1-2.el8.x86_64.rpm","gstreamer1-plugins-bad-free-0:1.16.1-1.el8.aarch64.rpm","gstreamer1-plugins-bad-free-0:1.16.1-1.el8.i686.rpm","gstreamer1-plugins-bad-free-0:1.16.1-1.el8.src.rpm","gstreamer1-plugins-bad-free-0:1.16.1-1.el8.x86_64.rpm","gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-1.el8.aarch64.rpm","gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-1.el8.i686.rpm","gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-1.el8.x86_64.rpm","gstreamer1-plugins-bad-free-debugsource-0:1.16.1-1.el8.aarch64.rpm","gstreamer1-plugins-bad-free-debugsource-0:1.16.1-1.el8.i686.rpm","gstreamer1-plugins-bad-free-debugsource-0:1.16.1-1.el8.x86_64.rpm","gstreamer1-plugins-bad-free-devel-0:1.16.1-1.el8.aarch64.rpm","gstreamer1-plugins-bad-free-devel-0:1.16.1-1.el8.i686.rpm","gstreamer1-plugins-bad-free-devel-0:1.16.1-1.el8.x86_64.rpm","gstreamer1-plugins-ugly-free-0:1.16.1-1.el8.aarch64.rpm","gstreamer1-plugins-ugly-free-0:1.16.1-1.el8.i686.rpm","gstreamer1-plugins-ugly-free-0:1.16.1-1.el8.src.rpm","gstreamer1-plugins-ugly-free-0:1.16.1-1.el8.x86_64.rpm","gstreamer1-plugins-ugly-free-debuginfo-0:1.16.1-1.el8.aarch64.rpm","gstreamer1-plugins-ugly-free-debuginfo-0:1.16.1-1.el8.i686.rpm","gstreamer1-plugins-ugly-free-debuginfo-0:1.16.1-1.el8.x86_64.rpm","gstreamer1-plugins-ugly-free-debugsource-0:1.16.1-1.el8.aarch64.rpm","gstreamer1-plugins-ugly-free-debugsource-0:1.16.1-1.el8.i686.rpm","gstreamer1-plugins-ugly-free-debugsource-0:1.16.1-1.el8.x86_64.rpm","libmad-0:0.15.1b-25.el8.aarch64.rpm","libmad-0:0.15.1b-25.el8.i686.rpm","libmad-0:0.15.1b-25.el8.src.rpm","libmad-0:0.15.1b-25.el8.x86_64.rpm","libmad-debuginfo-0:0.15.1b-25.el8.aarch64.rpm","libmad-debuginfo-0:0.15.1b-25.el8.i686.rpm","libmad-debuginfo-0:0.15.1b-25.el8.x86_64.rpm","libmad-debugsource-0:0.15.1b-25.el8.aarch64.rpm","libmad-debugsource-0:0.15.1b-25.el8.i686.rpm","libmad-debugsource-0:0.15.1b-25.el8.x86_64.rpm","libmad-devel-0:0.15.1b-25.el8.aarch64.rpm","libmad-devel-0:0.15.1b-25.el8.i686.rpm","libmad-devel-0:0.15.1b-25.el8.x86_64.rpm","orc-0:0.4.28-3.el8.i686.rpm","orc-0:0.4.28-3.el8.src.rpm","orc-0:0.4.28-3.el8.x86_64.rpm","orc-compiler-0:0.4.28-3.el8.aarch64.rpm","orc-compiler-0:0.4.28-3.el8.x86_64.rpm","orc-compiler-debuginfo-0:0.4.28-3.el8.aarch64.rpm","orc-compiler-debuginfo-0:0.4.28-3.el8.x86_64.rpm","orc-debuginfo-0:0.4.28-3.el8.aarch64.rpm","orc-debuginfo-0:0.4.28-3.el8.i686.rpm","orc-debuginfo-0:0.4.28-3.el8.x86_64.rpm","orc-debugsource-0:0.4.28-3.el8.aarch64.rpm","orc-debugsource-0:0.4.28-3.el8.i686.rpm","orc-debugsource-0:0.4.28-3.el8.x86_64.rpm","orc-devel-0:0.4.28-3.el8.aarch64.rpm","orc-devel-0:0.4.28-3.el8.i686.rpm","orc-devel-0:0.4.28-3.el8.x86_64.rpm","SDL2-0:2.0.10-2.el8.aarch64.rpm","SDL2-0:2.0.10-2.el8.i686.rpm","SDL2-0:2.0.10-2.el8.src.rpm","SDL2-0:2.0.10-2.el8.x86_64.rpm","SDL2-debuginfo-0:2.0.10-2.el8.aarch64.rpm","SDL2-debuginfo-0:2.0.10-2.el8.i686.rpm","SDL2-debuginfo-0:2.0.10-2.el8.x86_64.rpm","SDL2-debugsource-0:2.0.10-2.el8.aarch64.rpm","SDL2-debugsource-0:2.0.10-2.el8.i686.rpm","SDL2-debugsource-0:2.0.10-2.el8.x86_64.rpm","SDL2-devel-0:2.0.10-2.el8.aarch64.rpm","SDL2-devel-0:2.0.10-2.el8.i686.rpm","SDL2-devel-0:2.0.10-2.el8.x86_64.rpm","SDL2-static-0:2.0.10-2.el8.aarch64.rpm","SDL2-static-0:2.0.10-2.el8.i686.rpm","SDL2-static-0:2.0.10-2.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:1631","url":"https://access.redhat.com/errata/RHSA-2020:1631","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-1636.json b/data/advisories/2020/RLSA-2020-1636.json new file mode 100644 index 0000000..312591e --- /dev/null +++ b/data/advisories/2020/RLSA-2020-1636.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:1636","synopsis":"Moderate: libsndfile security update","severity":"SEVERITY_MODERATE","topic":"An update is available for libsndfile.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. \n\nSecurity Fix(es):\n\n* libsndfile: stack-based buffer overflow in sndfile-deinterleave utility (CVE-2018-13139)\n\n* libsndfile: buffer over-read in the function i2alaw_array in alaw.c (CVE-2018-19662)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1598480","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1598480","description":""},{"ticket":"1659631","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1659631","description":""}],"cves":[{"name":"CVE-2018-13139","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13139","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.8","cwe":"CWE-121"},{"name":"CVE-2018-19662","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19662","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-190->CWE-125"}],"references":[],"publishedAt":"2020-04-28T08:59:15Z","rpms":{"Rocky Linux 8":{"nvras":["libsndfile-0:1.0.28-10.el8.aarch64.rpm","libsndfile-0:1.0.28-10.el8.i686.rpm","libsndfile-0:1.0.28-10.el8.src.rpm","libsndfile-0:1.0.28-10.el8.x86_64.rpm","libsndfile-debuginfo-0:1.0.28-10.el8.aarch64.rpm","libsndfile-debuginfo-0:1.0.28-10.el8.i686.rpm","libsndfile-debuginfo-0:1.0.28-10.el8.x86_64.rpm","libsndfile-debugsource-0:1.0.28-10.el8.aarch64.rpm","libsndfile-debugsource-0:1.0.28-10.el8.i686.rpm","libsndfile-debugsource-0:1.0.28-10.el8.x86_64.rpm","libsndfile-devel-0:1.0.28-10.el8.aarch64.rpm","libsndfile-devel-0:1.0.28-10.el8.i686.rpm","libsndfile-devel-0:1.0.28-10.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:1636","url":"https://access.redhat.com/errata/RHSA-2020:1636","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-1644.json b/data/advisories/2020/RLSA-2020-1644.json new file mode 100644 index 0000000..4f09975 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-1644.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:1644","synopsis":"Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for jackson-core, glassfish-jaxb-api, glassfish-fastinfoset, xalan-j2, xmlstreambuffer, jackson-annotations, jackson-databind, apache-commons-lang, jackson-module-jaxb-annotations, apache-commons-collections, javassist, python-nss, bea-stax, velocity, xml-commons-apis, resteasy, xsom, slf4j, jackson-jaxrs-providers, stax-ex, xerces-j2, jakarta-commons-httpclient, glassfish-jaxb, xml-commons-resolver, relaxngDatatype.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The Public Key Infrastructure (PKI) Core contains fundamental packages required by Rocky Enterprise Software Foundation Certificate System.\n\nSecurity Fix(es):\n\n* jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig (CVE-2019-14540)\n\n* jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource (CVE-2019-16335)\n\n* jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.* (CVE-2019-16942)\n\n* jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource (CVE-2019-16943)\n\n* jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.* (CVE-2019-17531)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1535313","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1535313","description":""},{"ticket":"1655438","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1655438","description":""},{"ticket":"1656786","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1656786","description":""},{"ticket":"1698084","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1698084","description":""},{"ticket":"1744095","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1744095","description":""},{"ticket":"1755831","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1755831","description":""},{"ticket":"1755849","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1755849","description":""},{"ticket":"1758187","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1758187","description":""},{"ticket":"1758191","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1758191","description":""},{"ticket":"1767125","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1767125","description":""},{"ticket":"1767131","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1767131","description":""},{"ticket":"1775293","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1775293","description":""},{"ticket":"1777032","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1777032","description":""},{"ticket":"1782486","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1782486","description":""},{"ticket":"1795215","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1795215","description":""},{"ticket":"1802006","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1802006","description":""},{"ticket":"1806840","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1806840","description":""},{"ticket":"1807371","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1807371","description":""},{"ticket":"1807421","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1807421","description":""},{"ticket":"1809210","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1809210","description":""}],"cves":[{"name":"CVE-2019-14540","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14540","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3BaseScore":"7.5","cwe":"CWE-502->CWE-200"},{"name":"CVE-2019-16335","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16335","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3BaseScore":"7.5","cwe":"CWE-502->CWE-200"},{"name":"CVE-2019-16942","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16942","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3BaseScore":"7.5","cwe":"CWE-502->CWE-200"},{"name":"CVE-2019-16943","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16943","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3BaseScore":"7.5","cwe":"CWE-502->CWE-200"},{"name":"CVE-2019-17531","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17531","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.1","cwe":"CWE-20"},{"name":"CVE-2019-20330","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20330","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.1","cwe":"CWE-502"},{"name":"CVE-2020-10672","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10672","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.1","cwe":"CWE-96"},{"name":"CVE-2020-10673","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10673","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.1","cwe":"CWE-96"},{"name":"CVE-2020-8840","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8840","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.1","cwe":"CWE-502"},{"name":"CVE-2020-9546","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9546","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.1","cwe":"CWE-502"},{"name":"CVE-2020-9547","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9547","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.1","cwe":"CWE-502"},{"name":"CVE-2020-9548","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9548","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.1","cwe":"CWE-502"}],"references":[],"publishedAt":"2020-04-28T09:00:20Z","rpms":{"Rocky Linux 8":{"nvras":["apache-commons-collections-0:3.2.2-10.module+el8.3.0+53+ea062990.noarch.rpm","apache-commons-collections-0:3.2.2-10.module+el8.3.0+74+855e3f5d.noarch.rpm","apache-commons-collections-0:3.2.2-10.module+el8.3.0+53+ea062990.src.rpm","apache-commons-collections-0:3.2.2-10.module+el8.3.0+74+855e3f5d.src.rpm","apache-commons-lang-0:2.6-21.module+el8.3.0+53+ea062990.noarch.rpm","apache-commons-lang-0:2.6-21.module+el8.3.0+74+855e3f5d.noarch.rpm","apache-commons-lang-0:2.6-21.module+el8.3.0+53+ea062990.src.rpm","apache-commons-lang-0:2.6-21.module+el8.3.0+74+855e3f5d.src.rpm","bea-stax-0:1.2.0-16.module+el8.3.0+53+ea062990.src.rpm","bea-stax-api-0:1.2.0-16.module+el8.3.0+53+ea062990.noarch.rpm","glassfish-fastinfoset-0:1.2.13-9.module+el8.3.0+53+ea062990.noarch.rpm","glassfish-fastinfoset-0:1.2.13-9.module+el8.3.0+53+ea062990.src.rpm","glassfish-jaxb-0:2.2.11-11.module+el8.3.0+53+ea062990.src.rpm","glassfish-jaxb-api-0:2.2.12-8.module+el8.3.0+53+ea062990.noarch.rpm","glassfish-jaxb-api-0:2.2.12-8.module+el8.3.0+53+ea062990.src.rpm","glassfish-jaxb-core-0:2.2.11-11.module+el8.3.0+53+ea062990.noarch.rpm","glassfish-jaxb-runtime-0:2.2.11-11.module+el8.3.0+53+ea062990.noarch.rpm","glassfish-jaxb-txw2-0:2.2.11-11.module+el8.3.0+53+ea062990.noarch.rpm","jackson-annotations-0:2.10.0-1.module+el8.3.0+53+ea062990.noarch.rpm","jackson-annotations-0:2.10.0-1.module+el8.3.0+53+ea062990.src.rpm","jackson-core-0:2.10.0-1.module+el8.3.0+53+ea062990.noarch.rpm","jackson-core-0:2.10.0-1.module+el8.3.0+53+ea062990.src.rpm","jackson-databind-0:2.10.0-1.module+el8.3.0+53+ea062990.noarch.rpm","jackson-databind-0:2.10.0-1.module+el8.3.0+53+ea062990.src.rpm","jackson-jaxrs-json-provider-0:2.9.9-1.module+el8.3.0+53+ea062990.noarch.rpm","jackson-jaxrs-providers-0:2.9.9-1.module+el8.3.0+53+ea062990.noarch.rpm","jackson-jaxrs-providers-0:2.9.9-1.module+el8.3.0+53+ea062990.src.rpm","jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.3.0+53+ea062990.noarch.rpm","jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.3.0+53+ea062990.src.rpm","jakarta-commons-httpclient-1:3.1-28.module+el8.3.0+53+ea062990.noarch.rpm","jakarta-commons-httpclient-1:3.1-28.module+el8.3.0+74+855e3f5d.noarch.rpm","jakarta-commons-httpclient-1:3.1-28.module+el8.3.0+53+ea062990.src.rpm","jakarta-commons-httpclient-1:3.1-28.module+el8.3.0+74+855e3f5d.src.rpm","python-nss-0:1.0.1-10.module+el8.3.0+53+ea062990.src.rpm","javassist-0:3.18.1-8.module+el8.3.0+53+ea062990.noarch.rpm","javassist-0:3.18.1-8.module+el8.3.0+74+855e3f5d.noarch.rpm","javassist-0:3.18.1-8.module+el8.3.0+53+ea062990.src.rpm","javassist-0:3.18.1-8.module+el8.3.0+74+855e3f5d.src.rpm","javassist-javadoc-0:3.18.1-8.module+el8.3.0+53+ea062990.noarch.rpm","javassist-javadoc-0:3.18.1-8.module+el8.3.0+74+855e3f5d.noarch.rpm","python3-nss-0:1.0.1-10.module+el8.3.0+53+ea062990.aarch64.rpm","python3-nss-0:1.0.1-10.module+el8.3.0+53+ea062990.x86_64.rpm","python3-nss-debuginfo-0:1.0.1-10.module+el8.3.0+53+ea062990.aarch64.rpm","python3-nss-debuginfo-0:1.0.1-10.module+el8.3.0+53+ea062990.x86_64.rpm","python-nss-debugsource-0:1.0.1-10.module+el8.3.0+53+ea062990.aarch64.rpm","python-nss-debugsource-0:1.0.1-10.module+el8.3.0+53+ea062990.x86_64.rpm","python-nss-doc-0:1.0.1-10.module+el8.3.0+53+ea062990.aarch64.rpm","python-nss-doc-0:1.0.1-10.module+el8.3.0+53+ea062990.x86_64.rpm","relaxngDatatype-0:2011.1-7.module+el8.3.0+53+ea062990.noarch.rpm","relaxngDatatype-0:2011.1-7.module+el8.3.0+53+ea062990.src.rpm","resteasy-0:3.0.26-3.module+el8.3.0+53+ea062990.noarch.rpm","resteasy-0:3.0.26-3.module+el8.3.0+53+ea062990.src.rpm","slf4j-0:1.7.25-4.module+el8.5.0+697+f586bb30.noarch.rpm","slf4j-0:1.7.25-4.module+el8.3.0+74+855e3f5d.noarch.rpm","slf4j-0:1.7.25-4.module+el8.3.0+133+b8b54b58.noarch.rpm","slf4j-0:1.7.25-4.module+el8.5.0+697+f586bb30.src.rpm","slf4j-0:1.7.25-4.module+el8.3.0+74+855e3f5d.src.rpm","slf4j-0:1.7.25-4.module+el8.3.0+133+b8b54b58.src.rpm","slf4j-jdk14-0:1.7.25-4.module+el8.5.0+697+f586bb30.noarch.rpm","slf4j-jdk14-0:1.7.25-4.module+el8.3.0+74+855e3f5d.noarch.rpm","slf4j-jdk14-0:1.7.25-4.module+el8.3.0+53+ea062990.noarch.rpm","stax-ex-0:1.7.7-8.module+el8.3.0+53+ea062990.noarch.rpm","stax-ex-0:1.7.7-8.module+el8.3.0+53+ea062990.src.rpm","velocity-0:1.7-24.module+el8.3.0+53+ea062990.noarch.rpm","velocity-0:1.7-24.module+el8.3.0+74+855e3f5d.noarch.rpm","velocity-0:1.7-24.module+el8.3.0+53+ea062990.src.rpm","velocity-0:1.7-24.module+el8.3.0+74+855e3f5d.src.rpm","xalan-j2-0:2.7.1-38.module+el8.3.0+53+ea062990.noarch.rpm","xalan-j2-0:2.7.1-38.module+el8.3.0+74+855e3f5d.noarch.rpm","xalan-j2-0:2.7.1-38.module+el8.3.0+53+ea062990.src.rpm","xalan-j2-0:2.7.1-38.module+el8.3.0+74+855e3f5d.src.rpm","xerces-j2-0:2.11.0-34.module+el8.3.0+53+ea062990.noarch.rpm","xerces-j2-0:2.11.0-34.module+el8.3.0+74+855e3f5d.noarch.rpm","xerces-j2-0:2.11.0-34.module+el8.3.0+53+ea062990.src.rpm","xerces-j2-0:2.11.0-34.module+el8.3.0+74+855e3f5d.src.rpm","xml-commons-apis-0:1.4.01-25.module+el8.5.0+697+f586bb30.noarch.rpm","xml-commons-apis-0:1.4.01-25.module+el8.3.0+74+855e3f5d.noarch.rpm","xml-commons-apis-0:1.4.01-25.module+el8.3.0+53+ea062990.noarch.rpm","xml-commons-apis-0:1.4.01-25.module+el8.5.0+697+f586bb30.src.rpm","xml-commons-apis-0:1.4.01-25.module+el8.3.0+74+855e3f5d.src.rpm","xml-commons-apis-0:1.4.01-25.module+el8.3.0+53+ea062990.src.rpm","xml-commons-resolver-0:1.2-26.module+el8.3.0+53+ea062990.noarch.rpm","xml-commons-resolver-0:1.2-26.module+el8.3.0+74+855e3f5d.noarch.rpm","xml-commons-resolver-0:1.2-26.module+el8.3.0+53+ea062990.src.rpm","xml-commons-resolver-0:1.2-26.module+el8.3.0+74+855e3f5d.src.rpm","xmlstreambuffer-0:1.5.4-8.module+el8.3.0+53+ea062990.noarch.rpm","xmlstreambuffer-0:1.5.4-8.module+el8.3.0+53+ea062990.src.rpm","xsom-0:0-19.20110809svn.module+el8.3.0+53+ea062990.noarch.rpm","xsom-0:0-19.20110809svn.module+el8.3.0+53+ea062990.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:1644","url":"https://access.redhat.com/errata/RHSA-2020:1644","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-1650.json b/data/advisories/2020/RLSA-2020-1650.json new file mode 100644 index 0000000..5838864 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-1650.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:1650","synopsis":"Moderate: container-tools:rhel8 security, bug fix, and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for udica, runc, toolbox, python-podman-api, slirp4netns, criu.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* runc: volume mount race condition with shared mounts leads to information leak/integrity manipulation (CVE-2019-19921)\n\n* containers/image: Container images read entire image manifest into memory (CVE-2020-1702)\n\n* podman: incorrectly allows existing files in volumes to be overwritten by a container when it is created (CVE-2020-1726)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1703245","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1703245","description":""},{"ticket":"1717357","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1717357","description":""},{"ticket":"1731107","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1731107","description":""},{"ticket":"1732704","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732704","description":""},{"ticket":"1732713","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732713","description":""},{"ticket":"1748519","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1748519","description":""},{"ticket":"1749999","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1749999","description":""},{"ticket":"1754744","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1754744","description":""},{"ticket":"1754763","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1754763","description":""},{"ticket":"1755119","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1755119","description":""},{"ticket":"1756919","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1756919","description":""},{"ticket":"1757693","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1757693","description":""},{"ticket":"1757845","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1757845","description":""},{"ticket":"1763454","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1763454","description":""},{"ticket":"1766774","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1766774","description":""},{"ticket":"1768930","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1768930","description":""},{"ticket":"1769469","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1769469","description":""},{"ticket":"1771990","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1771990","description":""},{"ticket":"1774755","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1774755","description":""},{"ticket":"1775307","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1775307","description":""},{"ticket":"1776112","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1776112","description":""},{"ticket":"1779834","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1779834","description":""},{"ticket":"1783267","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1783267","description":""},{"ticket":"1783268","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1783268","description":""},{"ticket":"1783270","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1783270","description":""},{"ticket":"1783272","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1783272","description":""},{"ticket":"1783274","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1783274","description":""},{"ticket":"1784267","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1784267","description":""},{"ticket":"1784952","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1784952","description":""},{"ticket":"1788539","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1788539","description":""},{"ticket":"1792796","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1792796","description":""},{"ticket":"1793084","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1793084","description":""},{"ticket":"1793598","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1793598","description":""},{"ticket":"1796107","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1796107","description":""},{"ticket":"1801152","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1801152","description":""},{"ticket":"1802907","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1802907","description":""},{"ticket":"1803496","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1803496","description":""},{"ticket":"1804849","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1804849","description":""},{"ticket":"1805017","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1805017","description":""},{"ticket":"1805212","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1805212","description":""},{"ticket":"1806901","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1806901","description":""},{"ticket":"1808707","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1808707","description":""},{"ticket":"1810053","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1810053","description":""},{"ticket":"1811514","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1811514","description":""},{"ticket":"1813295","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1813295","description":""}],"cves":[{"name":"CVE-2019-19921","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19921","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.0","cwe":"CWE-41"},{"name":"CVE-2020-1702","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1702","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.5","cwe":"CWE-400"},{"name":"CVE-2020-1726","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1726","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3BaseScore":"5.9","cwe":"CWE-552"}],"references":[],"publishedAt":"2020-04-28T09:01:00Z","rpms":{"Rocky Linux 8":{"nvras":["crit-0:3.12-9.module+el8.5.0+681+c9a1951f.aarch64.rpm","crit-0:3.12-9.module+el8.4.0+557+48ba8b2f.aarch64.rpm","crit-0:3.12-9.module+el8.5.0+681+c9a1951f.x86_64.rpm","crit-0:3.12-9.module+el8.4.0+557+48ba8b2f.x86_64.rpm","criu-0:3.12-9.module+el8.5.0+681+c9a1951f.aarch64.rpm","criu-0:3.12-9.module+el8.4.0+557+48ba8b2f.aarch64.rpm","criu-0:3.12-9.module+el8.5.0+681+c9a1951f.src.rpm","criu-0:3.12-9.module+el8.4.0+557+48ba8b2f.src.rpm","criu-0:3.12-9.module+el8.5.0+681+c9a1951f.x86_64.rpm","criu-0:3.12-9.module+el8.4.0+557+48ba8b2f.x86_64.rpm","criu-debuginfo-0:3.12-9.module+el8.5.0+681+c9a1951f.aarch64.rpm","criu-debuginfo-0:3.12-9.module+el8.4.0+557+48ba8b2f.aarch64.rpm","criu-debuginfo-0:3.12-9.module+el8.5.0+681+c9a1951f.x86_64.rpm","criu-debuginfo-0:3.12-9.module+el8.4.0+557+48ba8b2f.x86_64.rpm","criu-debugsource-0:3.12-9.module+el8.5.0+681+c9a1951f.aarch64.rpm","criu-debugsource-0:3.12-9.module+el8.4.0+557+48ba8b2f.aarch64.rpm","criu-debugsource-0:3.12-9.module+el8.5.0+681+c9a1951f.x86_64.rpm","criu-debugsource-0:3.12-9.module+el8.4.0+557+48ba8b2f.x86_64.rpm","python3-criu-0:3.12-9.module+el8.5.0+681+c9a1951f.aarch64.rpm","python3-criu-0:3.12-9.module+el8.4.0+557+48ba8b2f.aarch64.rpm","python3-criu-0:3.12-9.module+el8.5.0+681+c9a1951f.x86_64.rpm","python3-criu-0:3.12-9.module+el8.4.0+557+48ba8b2f.x86_64.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+770+e2f49861.noarch.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2.noarch.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+708+6758137d.noarch.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+770+e2f49861.src.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2.src.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+708+6758137d.src.rpm","runc-0:1.0.0-65.rc10.module+el8.4.0+559+c02fa3b2.aarch64.rpm","runc-0:1.0.0-65.rc10.module+el8.4.0+559+c02fa3b2.src.rpm","runc-0:1.0.0-65.rc10.module+el8.4.0+559+c02fa3b2.x86_64.rpm","runc-debuginfo-0:1.0.0-65.rc10.module+el8.4.0+559+c02fa3b2.aarch64.rpm","runc-debuginfo-0:1.0.0-65.rc10.module+el8.4.0+559+c02fa3b2.x86_64.rpm","runc-debugsource-0:1.0.0-65.rc10.module+el8.4.0+559+c02fa3b2.aarch64.rpm","runc-debugsource-0:1.0.0-65.rc10.module+el8.4.0+559+c02fa3b2.x86_64.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.5.0+770+e2f49861.aarch64.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.4.0+536+994a2182.aarch64.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.5.0+708+6758137d.aarch64.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.5.0+770+e2f49861.src.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.4.0+536+994a2182.src.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.5.0+708+6758137d.src.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.5.0+770+e2f49861.x86_64.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.4.0+536+994a2182.x86_64.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.5.0+708+6758137d.x86_64.rpm","slirp4netns-debuginfo-0:0.4.2-3.git21fdece.module+el8.5.0+770+e2f49861.aarch64.rpm","slirp4netns-debuginfo-0:0.4.2-3.git21fdece.module+el8.4.0+536+994a2182.aarch64.rpm","slirp4netns-debuginfo-0:0.4.2-3.git21fdece.module+el8.5.0+708+6758137d.aarch64.rpm","slirp4netns-debuginfo-0:0.4.2-3.git21fdece.module+el8.5.0+770+e2f49861.x86_64.rpm","slirp4netns-debuginfo-0:0.4.2-3.git21fdece.module+el8.4.0+536+994a2182.x86_64.rpm","slirp4netns-debuginfo-0:0.4.2-3.git21fdece.module+el8.5.0+708+6758137d.x86_64.rpm","slirp4netns-debugsource-0:0.4.2-3.git21fdece.module+el8.5.0+770+e2f49861.aarch64.rpm","slirp4netns-debugsource-0:0.4.2-3.git21fdece.module+el8.4.0+536+994a2182.aarch64.rpm","slirp4netns-debugsource-0:0.4.2-3.git21fdece.module+el8.5.0+708+6758137d.aarch64.rpm","slirp4netns-debugsource-0:0.4.2-3.git21fdece.module+el8.5.0+770+e2f49861.x86_64.rpm","slirp4netns-debugsource-0:0.4.2-3.git21fdece.module+el8.4.0+536+994a2182.x86_64.rpm","slirp4netns-debugsource-0:0.4.2-3.git21fdece.module+el8.5.0+708+6758137d.x86_64.rpm","toolbox-0:0.0.7-1.module+el8.5.0+770+e2f49861.noarch.rpm","toolbox-0:0.0.7-1.module+el8.4.0+559+c02fa3b2.noarch.rpm","toolbox-0:0.0.7-1.module+el8.5.0+708+6758137d.noarch.rpm","toolbox-0:0.0.7-1.module+el8.5.0+770+e2f49861.src.rpm","toolbox-0:0.0.7-1.module+el8.4.0+559+c02fa3b2.src.rpm","toolbox-0:0.0.7-1.module+el8.5.0+708+6758137d.src.rpm","udica-0:0.2.1-2.module+el8.5.0+770+e2f49861.noarch.rpm","udica-0:0.2.1-2.module+el8.4.0+559+c02fa3b2.noarch.rpm","udica-0:0.2.1-2.module+el8.5.0+708+6758137d.noarch.rpm","udica-0:0.2.1-2.module+el8.5.0+770+e2f49861.src.rpm","udica-0:0.2.1-2.module+el8.4.0+559+c02fa3b2.src.rpm","udica-0:0.2.1-2.module+el8.5.0+708+6758137d.src.rpm","container-selinux-2:2.124.0-1.gitf958d0c.module+el8.5.0+681+c9a1951f.noarch.rpm","container-selinux-2:2.124.0-1.gitf958d0c.module+el8.5.0+681+c9a1951f.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:1650","url":"https://access.redhat.com/errata/RHSA-2020:1650","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-1653.json b/data/advisories/2020/RLSA-2020-1653.json new file mode 100644 index 0000000..35c0b94 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-1653.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:1653","synopsis":"Moderate: zziplib security update","severity":"SEVERITY_MODERATE","topic":"An update is available for zziplib.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The zziplib is a lightweight library to easily extract data from zip files.\n\nSecurity Fix(es):\n\n* zziplib: directory traversal in unzzip_cat in the bins/unzzipcat-mem.c (CVE-2018-17828)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1635888","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1635888","description":""}],"cves":[{"name":"CVE-2018-17828","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17828","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3BaseScore":"5.5","cwe":"CWE-22"}],"references":[],"publishedAt":"2020-04-28T09:01:25Z","rpms":{"Rocky Linux 8":{"nvras":["zziplib-0:0.13.68-8.el8.aarch64.rpm","zziplib-0:0.13.68-8.el8.i686.rpm","zziplib-0:0.13.68-8.el8.src.rpm","zziplib-0:0.13.68-8.el8.x86_64.rpm","zziplib-debuginfo-0:0.13.68-8.el8.aarch64.rpm","zziplib-debuginfo-0:0.13.68-8.el8.i686.rpm","zziplib-debuginfo-0:0.13.68-8.el8.x86_64.rpm","zziplib-debugsource-0:0.13.68-8.el8.aarch64.rpm","zziplib-debugsource-0:0.13.68-8.el8.i686.rpm","zziplib-debugsource-0:0.13.68-8.el8.x86_64.rpm","zziplib-devel-0:0.13.68-8.el8.aarch64.rpm","zziplib-devel-0:0.13.68-8.el8.i686.rpm","zziplib-devel-0:0.13.68-8.el8.x86_64.rpm","zziplib-utils-0:0.13.68-8.el8.aarch64.rpm","zziplib-utils-0:0.13.68-8.el8.x86_64.rpm","zziplib-utils-debuginfo-0:0.13.68-8.el8.aarch64.rpm","zziplib-utils-debuginfo-0:0.13.68-8.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:1653","url":"https://access.redhat.com/errata/RHSA-2020:1653","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-1665.json b/data/advisories/2020/RLSA-2020-1665.json new file mode 100644 index 0000000..9907f8d --- /dev/null +++ b/data/advisories/2020/RLSA-2020-1665.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:1665","synopsis":"Moderate: qt5 security, bug fix, and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for qt5-qtwayland, qt5-qtdoc, qt5-qtserialport, qt5-qtxmlpatterns, qt5-qtlocation, qt5-qttranslations, qt5-qtgraphicaleffects, qt5-qtscript, qt5-qtdeclarative, qt5-qtserialbus, qt5-qtimageformats, qt5, qt5-qtx11extras, qt5-qtquickcontrols2, qt5-qtquickcontrols, qt5-qtconnectivity, qt5-qtsvg, qgnomeplatform, qt5-qt3d, qt5-qtcanvas3d, qt5-qtsensors, python-qt5, qt5-qtwebchannel, qt5-qtmultimedia.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt.\n\nThe following packages have been upgraded to a later upstream version: qt5 (5.12.5), qt5-qt3d (5.12.5), qt5-qtbase (5.12.5), qt5-qtcanvas3d (5.12.5), qt5-qtconnectivity (5.12.5), qt5-qtdeclarative (5.12.5), qt5-qtdoc (5.12.5), qt5-qtgraphicaleffects (5.12.5), qt5-qtimageformats (5.12.5), qt5-qtlocation (5.12.5), qt5-qtmultimedia (5.12.5), qt5-qtquickcontrols (5.12.5), qt5-qtquickcontrols2 (5.12.5), qt5-qtscript (5.12.5), qt5-qtsensors (5.12.5), qt5-qtserialbus (5.12.5), qt5-qtserialport (5.12.5), qt5-qtsvg (5.12.5), qt5-qttools (5.12.5), qt5-qttranslations (5.12.5), qt5-qtwayland (5.12.5), qt5-qtwebchannel (5.12.5), qt5-qtwebsockets (5.12.5), qt5-qtx11extras (5.12.5), qt5-qtxmlpatterns (5.12.5), python-qt5 (5.13.1), sip (4.19.19). (BZ#1775603, BZ#1775604)\n\nSecurity Fix(es):\n\n* qt: Malformed PPM image causing division by zero and crash in qppmhandler.cpp (CVE-2018-19872)\n\n* qt5-qtsvg: Invalid parsing of malformed url reference resulting in a denial of service (CVE-2018-19869)\n\n* qt5-qtimageformats: QTgaFile CPU exhaustion (CVE-2018-19871)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1733150","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1733150","description":""},{"ticket":"1661460","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1661460","description":""},{"ticket":"1661465","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1661465","description":""},{"ticket":"1691636","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1691636","description":""},{"ticket":"1733133","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1733133","description":""},{"ticket":"1733134","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1733134","description":""},{"ticket":"1733135","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1733135","description":""},{"ticket":"1733136","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1733136","description":""},{"ticket":"1733137","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1733137","description":""},{"ticket":"1733139","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1733139","description":""},{"ticket":"1733140","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1733140","description":""},{"ticket":"1733141","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1733141","description":""},{"ticket":"1733142","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1733142","description":""},{"ticket":"1733143","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1733143","description":""},{"ticket":"1733144","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1733144","description":""},{"ticket":"1733145","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1733145","description":""},{"ticket":"1733146","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1733146","description":""},{"ticket":"1733147","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1733147","description":""},{"ticket":"1733148","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1733148","description":""},{"ticket":"1733149","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1733149","description":""},{"ticket":"1733151","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1733151","description":""},{"ticket":"1733152","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1733152","description":""},{"ticket":"1733153","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1733153","description":""},{"ticket":"1733154","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1733154","description":""},{"ticket":"1733155","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1733155","description":""},{"ticket":"1733156","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1733156","description":""},{"ticket":"1733157","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1733157","description":""},{"ticket":"1733158","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1733158","description":""},{"ticket":"1733159","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1733159","description":""},{"ticket":"1765637","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1765637","description":""},{"ticket":"1769077","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1769077","description":""},{"ticket":"1774418","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1774418","description":""},{"ticket":"1775603","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1775603","description":"The following packages have been upgraded to a later upstream version: qt5 (5.12.5), qt5-qt3d (5.12.5), qt5-qtbase (5.12.5), qt5-qtcanvas3d (5.12.5), qt5-qtconnectivity (5.12.5), qt5-qtdeclarative (5.12.5), qt5-qtdoc (5.12.5), qt5-qtgraphicaleffects (5.12.5), qt5-qtimageformats (5.12.5), qt5-qtlocation (5.12.5), qt5-qtmultimedia (5.12.5), qt5-qtquickcontrols (5.12.5), qt5-qtquickcontrols2 (5.12.5), qt5-qtscript (5.12.5), qt5-qtsensors (5.12.5), qt5-qtserialbus (5.12.5), qt5-qtserialport (5.12.5), qt5-qtsvg (5.12.5), qt5-qttools (5.12.5), qt5-qttranslations (5.12.5), qt5-qtwayland (5.12.5), qt5-qtwebchannel (5.12.5), qt5-qtwebsockets (5.12.5), qt5-qtx11extras (5.12.5), qt5-qtxmlpatterns (5.12.5), python-qt5 (5.13.1), sip (4.19.19). (BZ#1775603, BZ#1775604)"},{"ticket":"1775604","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1775604","description":""}],"cves":[{"name":"CVE-2018-19869","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19869","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-20"},{"name":"CVE-2018-19871","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19871","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-400"},{"name":"CVE-2018-19872","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19872","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.2","cwe":"CWE-369"},{"name":"CVE-2019-18281","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18281","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"4.3","cwe":"CWE-119"}],"references":[],"publishedAt":"2020-04-28T09:02:52Z","rpms":{"Rocky Linux 8":{"nvras":["python3-qt5-0:5.13.1-1.el8.aarch64.rpm","python3-qt5-0:5.13.1-1.el8.i686.rpm","python3-qt5-0:5.13.1-1.el8.x86_64.rpm","python3-qt5-base-0:5.13.1-1.el8.aarch64.rpm","python3-qt5-base-0:5.13.1-1.el8.i686.rpm","python3-qt5-base-0:5.13.1-1.el8.x86_64.rpm","python3-qt5-base-debuginfo-0:5.13.1-1.el8.aarch64.rpm","python3-qt5-base-debuginfo-0:5.13.1-1.el8.i686.rpm","python3-qt5-base-debuginfo-0:5.13.1-1.el8.x86_64.rpm","python3-qt5-debuginfo-0:5.13.1-1.el8.aarch64.rpm","python3-qt5-debuginfo-0:5.13.1-1.el8.i686.rpm","python3-qt5-debuginfo-0:5.13.1-1.el8.x86_64.rpm","python3-qt5-devel-0:5.13.1-1.el8.aarch64.rpm","python3-qt5-devel-0:5.13.1-1.el8.i686.rpm","python3-qt5-devel-0:5.13.1-1.el8.x86_64.rpm","python-qt5-0:5.13.1-1.el8.src.rpm","python-qt5-debuginfo-0:5.13.1-1.el8.aarch64.rpm","python-qt5-debuginfo-0:5.13.1-1.el8.i686.rpm","python-qt5-debuginfo-0:5.13.1-1.el8.x86_64.rpm","python-qt5-debugsource-0:5.13.1-1.el8.aarch64.rpm","python-qt5-debugsource-0:5.13.1-1.el8.i686.rpm","python-qt5-debugsource-0:5.13.1-1.el8.x86_64.rpm","python-qt5-rpm-macros-0:5.13.1-1.el8.noarch.rpm","qgnomeplatform-0:0.4-3.el8.aarch64.rpm","qgnomeplatform-0:0.4-3.el8.i686.rpm","qgnomeplatform-0:0.4-3.el8.src.rpm","qgnomeplatform-0:0.4-3.el8.x86_64.rpm","qgnomeplatform-debuginfo-0:0.4-3.el8.aarch64.rpm","qgnomeplatform-debuginfo-0:0.4-3.el8.i686.rpm","qgnomeplatform-debuginfo-0:0.4-3.el8.x86_64.rpm","qgnomeplatform-debugsource-0:0.4-3.el8.aarch64.rpm","qgnomeplatform-debugsource-0:0.4-3.el8.i686.rpm","qgnomeplatform-debugsource-0:0.4-3.el8.x86_64.rpm","qt5-0:5.12.5-3.el8.src.rpm","qt5-devel-0:5.12.5-3.el8.noarch.rpm","qt5-qt3d-0:5.12.5-2.el8.aarch64.rpm","qt5-qt3d-0:5.12.5-2.el8.i686.rpm","qt5-qt3d-0:5.12.5-2.el8.src.rpm","qt5-qt3d-0:5.12.5-2.el8.x86_64.rpm","qt5-qt3d-debuginfo-0:5.12.5-2.el8.aarch64.rpm","qt5-qt3d-debuginfo-0:5.12.5-2.el8.i686.rpm","qt5-qt3d-debuginfo-0:5.12.5-2.el8.x86_64.rpm","qt5-qt3d-debugsource-0:5.12.5-2.el8.aarch64.rpm","qt5-qt3d-debugsource-0:5.12.5-2.el8.i686.rpm","qt5-qt3d-debugsource-0:5.12.5-2.el8.x86_64.rpm","qt5-qt3d-devel-0:5.12.5-2.el8.aarch64.rpm","qt5-qt3d-devel-0:5.12.5-2.el8.i686.rpm","qt5-qt3d-devel-0:5.12.5-2.el8.x86_64.rpm","qt5-qt3d-devel-debuginfo-0:5.12.5-2.el8.aarch64.rpm","qt5-qt3d-devel-debuginfo-0:5.12.5-2.el8.i686.rpm","qt5-qt3d-devel-debuginfo-0:5.12.5-2.el8.x86_64.rpm","qt5-qt3d-examples-0:5.12.5-2.el8.aarch64.rpm","qt5-qt3d-examples-0:5.12.5-2.el8.x86_64.rpm","qt5-qt3d-examples-debuginfo-0:5.12.5-2.el8.aarch64.rpm","qt5-qt3d-examples-debuginfo-0:5.12.5-2.el8.x86_64.rpm","qt5-qtcanvas3d-0:5.12.5-1.el8.aarch64.rpm","qt5-qtcanvas3d-0:5.12.5-1.el8.i686.rpm","qt5-qtcanvas3d-0:5.12.5-1.el8.src.rpm","qt5-qtcanvas3d-0:5.12.5-1.el8.x86_64.rpm","qt5-qtcanvas3d-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtcanvas3d-debuginfo-0:5.12.5-1.el8.i686.rpm","qt5-qtcanvas3d-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtcanvas3d-debugsource-0:5.12.5-1.el8.aarch64.rpm","qt5-qtcanvas3d-debugsource-0:5.12.5-1.el8.i686.rpm","qt5-qtcanvas3d-debugsource-0:5.12.5-1.el8.x86_64.rpm","qt5-qtcanvas3d-examples-0:5.12.5-1.el8.aarch64.rpm","qt5-qtcanvas3d-examples-0:5.12.5-1.el8.x86_64.rpm","qt5-qtcanvas3d-examples-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtcanvas3d-examples-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtconnectivity-0:5.12.5-1.el8.aarch64.rpm","qt5-qtconnectivity-0:5.12.5-1.el8.i686.rpm","qt5-qtconnectivity-0:5.12.5-1.el8.src.rpm","qt5-qtconnectivity-0:5.12.5-1.el8.x86_64.rpm","qt5-qtconnectivity-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtconnectivity-debuginfo-0:5.12.5-1.el8.i686.rpm","qt5-qtconnectivity-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtconnectivity-debugsource-0:5.12.5-1.el8.aarch64.rpm","qt5-qtconnectivity-debugsource-0:5.12.5-1.el8.i686.rpm","qt5-qtconnectivity-debugsource-0:5.12.5-1.el8.x86_64.rpm","qt5-qtconnectivity-devel-0:5.12.5-1.el8.aarch64.rpm","qt5-qtconnectivity-devel-0:5.12.5-1.el8.i686.rpm","qt5-qtconnectivity-devel-0:5.12.5-1.el8.x86_64.rpm","qt5-qtconnectivity-examples-0:5.12.5-1.el8.aarch64.rpm","qt5-qtconnectivity-examples-0:5.12.5-1.el8.x86_64.rpm","qt5-qtconnectivity-examples-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtconnectivity-examples-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtdeclarative-0:5.12.5-1.el8.aarch64.rpm","qt5-qtdeclarative-0:5.12.5-1.el8.i686.rpm","qt5-qtdeclarative-0:5.12.5-1.el8.src.rpm","qt5-qtdeclarative-0:5.12.5-1.el8.x86_64.rpm","qt5-qtdeclarative-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtdeclarative-debuginfo-0:5.12.5-1.el8.i686.rpm","qt5-qtdeclarative-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtdeclarative-debugsource-0:5.12.5-1.el8.aarch64.rpm","qt5-qtdeclarative-debugsource-0:5.12.5-1.el8.i686.rpm","qt5-qtdeclarative-debugsource-0:5.12.5-1.el8.x86_64.rpm","qt5-qtdeclarative-devel-0:5.12.5-1.el8.aarch64.rpm","qt5-qtdeclarative-devel-0:5.12.5-1.el8.i686.rpm","qt5-qtdeclarative-devel-0:5.12.5-1.el8.x86_64.rpm","qt5-qtdeclarative-devel-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtdeclarative-devel-debuginfo-0:5.12.5-1.el8.i686.rpm","qt5-qtdeclarative-devel-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtdeclarative-examples-0:5.12.5-1.el8.aarch64.rpm","qt5-qtdeclarative-examples-0:5.12.5-1.el8.x86_64.rpm","qt5-qtdeclarative-examples-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtdeclarative-examples-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtdeclarative-static-0:5.12.5-1.el8.aarch64.rpm","qt5-qtdeclarative-static-0:5.12.5-1.el8.i686.rpm","qt5-qtdeclarative-static-0:5.12.5-1.el8.x86_64.rpm","qt5-qtdoc-0:5.12.5-1.el8.noarch.rpm","qt5-qtdoc-0:5.12.5-1.el8.src.rpm","qt5-qtgraphicaleffects-0:5.12.5-1.el8.aarch64.rpm","qt5-qtgraphicaleffects-0:5.12.5-1.el8.i686.rpm","qt5-qtgraphicaleffects-0:5.12.5-1.el8.src.rpm","qt5-qtgraphicaleffects-0:5.12.5-1.el8.x86_64.rpm","qt5-qtgraphicaleffects-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtgraphicaleffects-debuginfo-0:5.12.5-1.el8.i686.rpm","qt5-qtgraphicaleffects-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtgraphicaleffects-debugsource-0:5.12.5-1.el8.aarch64.rpm","qt5-qtgraphicaleffects-debugsource-0:5.12.5-1.el8.i686.rpm","qt5-qtgraphicaleffects-debugsource-0:5.12.5-1.el8.x86_64.rpm","qt5-qtimageformats-0:5.12.5-1.el8.aarch64.rpm","qt5-qtimageformats-0:5.12.5-1.el8.i686.rpm","qt5-qtimageformats-0:5.12.5-1.el8.src.rpm","qt5-qtimageformats-0:5.12.5-1.el8.x86_64.rpm","qt5-qtimageformats-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtimageformats-debuginfo-0:5.12.5-1.el8.i686.rpm","qt5-qtimageformats-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtimageformats-debugsource-0:5.12.5-1.el8.aarch64.rpm","qt5-qtimageformats-debugsource-0:5.12.5-1.el8.i686.rpm","qt5-qtimageformats-debugsource-0:5.12.5-1.el8.x86_64.rpm","qt5-qtlocation-0:5.12.5-1.el8.aarch64.rpm","qt5-qtlocation-0:5.12.5-1.el8.i686.rpm","qt5-qtlocation-0:5.12.5-1.el8.src.rpm","qt5-qtlocation-0:5.12.5-1.el8.x86_64.rpm","qt5-qtlocation-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtlocation-debuginfo-0:5.12.5-1.el8.i686.rpm","qt5-qtlocation-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtlocation-debugsource-0:5.12.5-1.el8.aarch64.rpm","qt5-qtlocation-debugsource-0:5.12.5-1.el8.i686.rpm","qt5-qtlocation-debugsource-0:5.12.5-1.el8.x86_64.rpm","qt5-qtlocation-devel-0:5.12.5-1.el8.aarch64.rpm","qt5-qtlocation-devel-0:5.12.5-1.el8.i686.rpm","qt5-qtlocation-devel-0:5.12.5-1.el8.x86_64.rpm","qt5-qtlocation-examples-0:5.12.5-1.el8.aarch64.rpm","qt5-qtlocation-examples-0:5.12.5-1.el8.x86_64.rpm","qt5-qtlocation-examples-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtlocation-examples-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtmultimedia-0:5.12.5-1.el8.aarch64.rpm","qt5-qtmultimedia-0:5.12.5-1.el8.i686.rpm","qt5-qtmultimedia-0:5.12.5-1.el8.src.rpm","qt5-qtmultimedia-0:5.12.5-1.el8.x86_64.rpm","qt5-qtmultimedia-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtmultimedia-debuginfo-0:5.12.5-1.el8.i686.rpm","qt5-qtmultimedia-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtmultimedia-debugsource-0:5.12.5-1.el8.aarch64.rpm","qt5-qtmultimedia-debugsource-0:5.12.5-1.el8.i686.rpm","qt5-qtmultimedia-debugsource-0:5.12.5-1.el8.x86_64.rpm","qt5-qtmultimedia-devel-0:5.12.5-1.el8.aarch64.rpm","qt5-qtmultimedia-devel-0:5.12.5-1.el8.i686.rpm","qt5-qtmultimedia-devel-0:5.12.5-1.el8.x86_64.rpm","qt5-qtmultimedia-examples-0:5.12.5-1.el8.aarch64.rpm","qt5-qtmultimedia-examples-0:5.12.5-1.el8.x86_64.rpm","qt5-qtmultimedia-examples-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtmultimedia-examples-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtquickcontrols2-0:5.12.5-1.el8.aarch64.rpm","qt5-qtquickcontrols2-0:5.12.5-1.el8.i686.rpm","qt5-qtquickcontrols2-0:5.12.5-1.el8.src.rpm","qt5-qtquickcontrols2-0:5.12.5-1.el8.x86_64.rpm","qt5-qtquickcontrols2-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtquickcontrols2-debuginfo-0:5.12.5-1.el8.i686.rpm","qt5-qtquickcontrols2-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtquickcontrols2-debugsource-0:5.12.5-1.el8.aarch64.rpm","qt5-qtquickcontrols2-debugsource-0:5.12.5-1.el8.i686.rpm","qt5-qtquickcontrols2-debugsource-0:5.12.5-1.el8.x86_64.rpm","qt5-qtquickcontrols2-devel-0:5.12.5-1.el8.aarch64.rpm","qt5-qtquickcontrols2-devel-0:5.12.5-1.el8.i686.rpm","qt5-qtquickcontrols2-devel-0:5.12.5-1.el8.x86_64.rpm","qt5-qtquickcontrols2-examples-0:5.12.5-1.el8.aarch64.rpm","qt5-qtquickcontrols2-examples-0:5.12.5-1.el8.x86_64.rpm","qt5-qtquickcontrols2-examples-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtquickcontrols2-examples-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtquickcontrols-0:5.12.5-1.el8.aarch64.rpm","qt5-qtquickcontrols-0:5.12.5-1.el8.i686.rpm","qt5-qtquickcontrols-0:5.12.5-1.el8.src.rpm","qt5-qtquickcontrols-0:5.12.5-1.el8.x86_64.rpm","qt5-qtquickcontrols-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtquickcontrols-debuginfo-0:5.12.5-1.el8.i686.rpm","qt5-qtquickcontrols-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtquickcontrols-debugsource-0:5.12.5-1.el8.aarch64.rpm","qt5-qtquickcontrols-debugsource-0:5.12.5-1.el8.i686.rpm","qt5-qtquickcontrols-debugsource-0:5.12.5-1.el8.x86_64.rpm","qt5-qtquickcontrols-examples-0:5.12.5-1.el8.aarch64.rpm","qt5-qtquickcontrols-examples-0:5.12.5-1.el8.x86_64.rpm","qt5-qtquickcontrols-examples-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtquickcontrols-examples-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtscript-0:5.12.5-1.el8.aarch64.rpm","qt5-qtscript-0:5.12.5-1.el8.i686.rpm","qt5-qtscript-0:5.12.5-1.el8.src.rpm","qt5-qtscript-0:5.12.5-1.el8.x86_64.rpm","qt5-qtscript-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtscript-debuginfo-0:5.12.5-1.el8.i686.rpm","qt5-qtscript-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtscript-debugsource-0:5.12.5-1.el8.aarch64.rpm","qt5-qtscript-debugsource-0:5.12.5-1.el8.i686.rpm","qt5-qtscript-debugsource-0:5.12.5-1.el8.x86_64.rpm","qt5-qtscript-devel-0:5.12.5-1.el8.aarch64.rpm","qt5-qtscript-devel-0:5.12.5-1.el8.i686.rpm","qt5-qtscript-devel-0:5.12.5-1.el8.x86_64.rpm","qt5-qtscript-examples-0:5.12.5-1.el8.aarch64.rpm","qt5-qtscript-examples-0:5.12.5-1.el8.x86_64.rpm","qt5-qtscript-examples-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtscript-examples-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtsensors-0:5.12.5-1.el8.aarch64.rpm","qt5-qtsensors-0:5.12.5-1.el8.i686.rpm","qt5-qtsensors-0:5.12.5-1.el8.src.rpm","qt5-qtsensors-0:5.12.5-1.el8.x86_64.rpm","qt5-qtsensors-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtsensors-debuginfo-0:5.12.5-1.el8.i686.rpm","qt5-qtsensors-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtsensors-debugsource-0:5.12.5-1.el8.aarch64.rpm","qt5-qtsensors-debugsource-0:5.12.5-1.el8.i686.rpm","qt5-qtsensors-debugsource-0:5.12.5-1.el8.x86_64.rpm","qt5-qtsensors-devel-0:5.12.5-1.el8.aarch64.rpm","qt5-qtsensors-devel-0:5.12.5-1.el8.i686.rpm","qt5-qtsensors-devel-0:5.12.5-1.el8.x86_64.rpm","qt5-qtsensors-examples-0:5.12.5-1.el8.aarch64.rpm","qt5-qtsensors-examples-0:5.12.5-1.el8.x86_64.rpm","qt5-qtsensors-examples-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtsensors-examples-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtserialbus-0:5.12.5-1.el8.aarch64.rpm","qt5-qtserialbus-0:5.12.5-1.el8.i686.rpm","qt5-qtserialbus-0:5.12.5-1.el8.src.rpm","qt5-qtserialbus-0:5.12.5-1.el8.x86_64.rpm","qt5-qtserialbus-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtserialbus-debuginfo-0:5.12.5-1.el8.i686.rpm","qt5-qtserialbus-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtserialbus-debugsource-0:5.12.5-1.el8.aarch64.rpm","qt5-qtserialbus-debugsource-0:5.12.5-1.el8.i686.rpm","qt5-qtserialbus-debugsource-0:5.12.5-1.el8.x86_64.rpm","qt5-qtserialbus-examples-0:5.12.5-1.el8.aarch64.rpm","qt5-qtserialbus-examples-0:5.12.5-1.el8.x86_64.rpm","qt5-qtserialbus-examples-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtserialbus-examples-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtserialport-0:5.12.5-1.el8.aarch64.rpm","qt5-qtserialport-0:5.12.5-1.el8.i686.rpm","qt5-qtserialport-0:5.12.5-1.el8.src.rpm","qt5-qtserialport-0:5.12.5-1.el8.x86_64.rpm","qt5-qtserialport-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtserialport-debuginfo-0:5.12.5-1.el8.i686.rpm","qt5-qtserialport-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtserialport-debugsource-0:5.12.5-1.el8.aarch64.rpm","qt5-qtserialport-debugsource-0:5.12.5-1.el8.i686.rpm","qt5-qtserialport-debugsource-0:5.12.5-1.el8.x86_64.rpm","qt5-qtserialport-devel-0:5.12.5-1.el8.aarch64.rpm","qt5-qtserialport-devel-0:5.12.5-1.el8.i686.rpm","qt5-qtserialport-devel-0:5.12.5-1.el8.x86_64.rpm","qt5-qtserialport-examples-0:5.12.5-1.el8.aarch64.rpm","qt5-qtserialport-examples-0:5.12.5-1.el8.x86_64.rpm","qt5-qtserialport-examples-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtserialport-examples-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtsvg-0:5.12.5-1.el8.aarch64.rpm","qt5-qtsvg-0:5.12.5-1.el8.i686.rpm","qt5-qtsvg-0:5.12.5-1.el8.src.rpm","qt5-qtsvg-0:5.12.5-1.el8.x86_64.rpm","qt5-qtsvg-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtsvg-debuginfo-0:5.12.5-1.el8.i686.rpm","qt5-qtsvg-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtsvg-debugsource-0:5.12.5-1.el8.aarch64.rpm","qt5-qtsvg-debugsource-0:5.12.5-1.el8.i686.rpm","qt5-qtsvg-debugsource-0:5.12.5-1.el8.x86_64.rpm","qt5-qtsvg-devel-0:5.12.5-1.el8.aarch64.rpm","qt5-qtsvg-devel-0:5.12.5-1.el8.i686.rpm","qt5-qtsvg-devel-0:5.12.5-1.el8.x86_64.rpm","qt5-qtsvg-examples-0:5.12.5-1.el8.aarch64.rpm","qt5-qtsvg-examples-0:5.12.5-1.el8.x86_64.rpm","qt5-qtsvg-examples-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtsvg-examples-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qttranslations-0:5.12.5-1.el8.noarch.rpm","qt5-qttranslations-0:5.12.5-1.el8.src.rpm","qt5-qtwayland-0:5.12.5-1.el8.aarch64.rpm","qt5-qtwayland-0:5.12.5-1.el8.i686.rpm","qt5-qtwayland-0:5.12.5-1.el8.src.rpm","qt5-qtwayland-0:5.12.5-1.el8.x86_64.rpm","qt5-qtwayland-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtwayland-debuginfo-0:5.12.5-1.el8.i686.rpm","qt5-qtwayland-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtwayland-debugsource-0:5.12.5-1.el8.aarch64.rpm","qt5-qtwayland-debugsource-0:5.12.5-1.el8.i686.rpm","qt5-qtwayland-debugsource-0:5.12.5-1.el8.x86_64.rpm","qt5-qtwayland-devel-0:5.12.5-1.el8.aarch64.rpm","qt5-qtwayland-devel-0:5.12.5-1.el8.i686.rpm","qt5-qtwayland-devel-0:5.12.5-1.el8.x86_64.rpm","qt5-qtwayland-devel-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtwayland-devel-debuginfo-0:5.12.5-1.el8.i686.rpm","qt5-qtwayland-devel-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtwayland-examples-0:5.12.5-1.el8.aarch64.rpm","qt5-qtwayland-examples-0:5.12.5-1.el8.x86_64.rpm","qt5-qtwayland-examples-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtwayland-examples-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtwebchannel-0:5.12.5-1.el8.aarch64.rpm","qt5-qtwebchannel-0:5.12.5-1.el8.i686.rpm","qt5-qtwebchannel-0:5.12.5-1.el8.src.rpm","qt5-qtwebchannel-0:5.12.5-1.el8.x86_64.rpm","qt5-qtwebchannel-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtwebchannel-debuginfo-0:5.12.5-1.el8.i686.rpm","qt5-qtwebchannel-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtwebchannel-debugsource-0:5.12.5-1.el8.aarch64.rpm","qt5-qtwebchannel-debugsource-0:5.12.5-1.el8.i686.rpm","qt5-qtwebchannel-debugsource-0:5.12.5-1.el8.x86_64.rpm","qt5-qtwebchannel-devel-0:5.12.5-1.el8.aarch64.rpm","qt5-qtwebchannel-devel-0:5.12.5-1.el8.i686.rpm","qt5-qtwebchannel-devel-0:5.12.5-1.el8.x86_64.rpm","qt5-qtwebchannel-examples-0:5.12.5-1.el8.aarch64.rpm","qt5-qtwebchannel-examples-0:5.12.5-1.el8.x86_64.rpm","qt5-qtwebchannel-examples-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtwebchannel-examples-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtx11extras-0:5.12.5-1.el8.aarch64.rpm","qt5-qtx11extras-0:5.12.5-1.el8.i686.rpm","qt5-qtx11extras-0:5.12.5-1.el8.src.rpm","qt5-qtx11extras-0:5.12.5-1.el8.x86_64.rpm","qt5-qtx11extras-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtx11extras-debuginfo-0:5.12.5-1.el8.i686.rpm","qt5-qtx11extras-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtx11extras-debugsource-0:5.12.5-1.el8.aarch64.rpm","qt5-qtx11extras-debugsource-0:5.12.5-1.el8.i686.rpm","qt5-qtx11extras-debugsource-0:5.12.5-1.el8.x86_64.rpm","qt5-qtx11extras-devel-0:5.12.5-1.el8.aarch64.rpm","qt5-qtx11extras-devel-0:5.12.5-1.el8.i686.rpm","qt5-qtx11extras-devel-0:5.12.5-1.el8.x86_64.rpm","qt5-qtxmlpatterns-0:5.12.5-1.el8.aarch64.rpm","qt5-qtxmlpatterns-0:5.12.5-1.el8.i686.rpm","qt5-qtxmlpatterns-0:5.12.5-1.el8.src.rpm","qt5-qtxmlpatterns-0:5.12.5-1.el8.x86_64.rpm","qt5-qtxmlpatterns-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtxmlpatterns-debuginfo-0:5.12.5-1.el8.i686.rpm","qt5-qtxmlpatterns-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtxmlpatterns-debugsource-0:5.12.5-1.el8.aarch64.rpm","qt5-qtxmlpatterns-debugsource-0:5.12.5-1.el8.i686.rpm","qt5-qtxmlpatterns-debugsource-0:5.12.5-1.el8.x86_64.rpm","qt5-qtxmlpatterns-devel-0:5.12.5-1.el8.aarch64.rpm","qt5-qtxmlpatterns-devel-0:5.12.5-1.el8.i686.rpm","qt5-qtxmlpatterns-devel-0:5.12.5-1.el8.x86_64.rpm","qt5-qtxmlpatterns-devel-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtxmlpatterns-devel-debuginfo-0:5.12.5-1.el8.i686.rpm","qt5-qtxmlpatterns-devel-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-qtxmlpatterns-examples-0:5.12.5-1.el8.aarch64.rpm","qt5-qtxmlpatterns-examples-0:5.12.5-1.el8.x86_64.rpm","qt5-qtxmlpatterns-examples-debuginfo-0:5.12.5-1.el8.aarch64.rpm","qt5-qtxmlpatterns-examples-debuginfo-0:5.12.5-1.el8.x86_64.rpm","qt5-rpm-macros-0:5.12.5-3.el8.noarch.rpm","qt5-srpm-macros-0:5.12.5-3.el8.noarch.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:1665","url":"https://access.redhat.com/errata/RHSA-2020:1665","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-1686.json b/data/advisories/2020/RLSA-2020-1686.json new file mode 100644 index 0000000..111a1a5 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-1686.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:1686","synopsis":"Low: libmspack security and bug fix update","severity":"SEVERITY_LOW","topic":"An update is available for libmspack.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The libmspack packages contain a library providing compression and extraction of the Cabinet (CAB) file format used by Microsoft.\n\nSecurity Fix(es):\n\n* libmspack: buffer overflow in function chmd_read_headers() (CVE-2019-1010305)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1730568","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1730568","description":""},{"ticket":"1736743","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1736743","description":""}],"cves":[{"name":"CVE-2019-1010305","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1010305","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3BaseScore":"2.5","cwe":"CWE-120"}],"references":[],"publishedAt":"2020-04-28T09:05:11Z","rpms":{"Rocky Linux 8":{"nvras":["libmspack-0:0.7-0.3.alpha.el8.4.aarch64.rpm","libmspack-0:0.7-0.3.alpha.el8.4.i686.rpm","libmspack-0:0.7-0.3.alpha.el8.4.src.rpm","libmspack-0:0.7-0.3.alpha.el8.4.x86_64.rpm","libmspack-debuginfo-0:0.7-0.3.alpha.el8.4.aarch64.rpm","libmspack-debuginfo-0:0.7-0.3.alpha.el8.4.i686.rpm","libmspack-debuginfo-0:0.7-0.3.alpha.el8.4.x86_64.rpm","libmspack-debugsource-0:0.7-0.3.alpha.el8.4.aarch64.rpm","libmspack-debugsource-0:0.7-0.3.alpha.el8.4.i686.rpm","libmspack-debugsource-0:0.7-0.3.alpha.el8.4.x86_64.rpm","libmspack-devel-0:0.7-0.3.alpha.el8.4.aarch64.rpm","libmspack-devel-0:0.7-0.3.alpha.el8.4.i686.rpm","libmspack-devel-0:0.7-0.3.alpha.el8.4.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:1686","url":"https://access.redhat.com/errata/RHSA-2020:1686","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-1708.json b/data/advisories/2020/RLSA-2020-1708.json new file mode 100644 index 0000000..98a627a --- /dev/null +++ b/data/advisories/2020/RLSA-2020-1708.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:1708","synopsis":"Moderate: liblouis security and bug fix update","severity":"SEVERITY_MODERATE","topic":"An update is available for liblouis.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Liblouis is an open source braille translator and back-translator named in honor of Louis Braille. It features support for computer and literary braille, supports contracted and uncontracted translation for many languages and has support for hyphenation. New languages can easily be added through tables that support a rule or dictionary based approach. Liblouis also supports math braille (Nemeth and Marburg).\n\nSecurity Fix(es):\n\n* liblouis: Stack-based buffer overflow in function includeFile in compileTranslationTable.c (CVE-2018-11684)\n\n* liblouis: Stack-based buffer overflow in function compileHyphenation in compileTranslationTable.c (CVE-2018-11685)\n\n* liblouis: Segmentation fault in logging.c:lou_logPrint() (CVE-2018-11577)\n\n* liblouis: Stack-based buffer overflow in compileTranslationTable.c (CVE-2018-12085)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1585905","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1585905","description":""},{"ticket":"1588631","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1588631","description":""},{"ticket":"1588636","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1588636","description":""},{"ticket":"1589940","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1589940","description":""}],"cves":[{"name":"CVE-2018-11577","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11577","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"4.3","cwe":"CWE-400"},{"name":"CVE-2018-11684","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11684","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.8","cwe":"CWE-121"},{"name":"CVE-2018-11685","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11685","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.8","cwe":"CWE-121"},{"name":"CVE-2018-12085","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12085","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-121"}],"references":[],"publishedAt":"2020-04-28T09:07:17Z","rpms":{"Rocky Linux 8":{"nvras":["liblouis-debuginfo-0:2.6.2-21.el8.x86_64.rpm","liblouis-0:2.6.2-21.el8.aarch64.rpm","liblouis-0:2.6.2-21.el8.i686.rpm","liblouis-0:2.6.2-21.el8.src.rpm","liblouis-0:2.6.2-21.el8.x86_64.rpm","liblouis-debuginfo-0:2.6.2-21.el8.aarch64.rpm","liblouis-debuginfo-0:2.6.2-21.el8.i686.rpm","liblouis-debugsource-0:2.6.2-21.el8.aarch64.rpm","liblouis-debugsource-0:2.6.2-21.el8.i686.rpm","liblouis-debugsource-0:2.6.2-21.el8.x86_64.rpm","python3-louis-0:2.6.2-21.el8.noarch.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:1708","url":"https://access.redhat.com/errata/RHSA-2020:1708","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-1766.json b/data/advisories/2020/RLSA-2020-1766.json new file mode 100644 index 0000000..cf5e347 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-1766.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:1766","synopsis":"Moderate: GNOME security, bug fix, and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for mozjs52, gnome-tweaks, clutter, gnome-menus, mozjs60, baobab.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"GNOME is the default desktop environment of Rocky Linux.\n\nSecurity Fix(es):\n\n* LibRaw: stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp (CVE-2018-20337)\n\n* gdm: lock screen bypass when timed login is enabled (CVE-2019-3825)\n\n* gvfs: mishandling of file ownership in daemon/gvfsbackendadmin.c (CVE-2019-12447)\n\n* gvfs: race condition in daemon/gvfsbackendadmin.c due to admin backend not implementing query_info_on_read/write (CVE-2019-12448)\n\n* gvfs: mishandling of file's user and group ownership in daemon/gvfsbackendadmin.c due to unavailability of root privileges (CVE-2019-12449)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1365717","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1365717","description":""},{"ticket":"1656988","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1656988","description":""},{"ticket":"1658001","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1658001","description":""},{"ticket":"1661555","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1661555","description":""},{"ticket":"1666070","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1666070","description":""},{"ticket":"1668901","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1668901","description":""},{"ticket":"1671744","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1671744","description":""},{"ticket":"1672825","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1672825","description":""},{"ticket":"1674535","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1674535","description":""},{"ticket":"1684729","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1684729","description":""},{"ticket":"1687979","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1687979","description":""},{"ticket":"1690170","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1690170","description":""},{"ticket":"1692299","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1692299","description":""},{"ticket":"1710882","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1710882","description":""},{"ticket":"1715890","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1715890","description":""},{"ticket":"1716754","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1716754","description":""},{"ticket":"1716761","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1716761","description":""},{"ticket":"1716767","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1716767","description":""},{"ticket":"1716774","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1716774","description":""},{"ticket":"1719819","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1719819","description":""},{"ticket":"1720249","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1720249","description":""},{"ticket":"1720251","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1720251","description":""},{"ticket":"1721124","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1721124","description":""},{"ticket":"1721133","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1721133","description":""},{"ticket":"1723462","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1723462","description":""},{"ticket":"1723464","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1723464","description":""},{"ticket":"1724302","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1724302","description":""},{"ticket":"1725154","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1725154","description":""},{"ticket":"1728330","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1728330","description":""},{"ticket":"1728562","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1728562","description":""},{"ticket":"1728564","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1728564","description":""},{"ticket":"1728567","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1728567","description":""},{"ticket":"1730612","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1730612","description":""},{"ticket":"1730891","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1730891","description":""},{"ticket":"1736742","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1736742","description":""},{"ticket":"1742710","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1742710","description":""},{"ticket":"1744452","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1744452","description":""},{"ticket":"1744527","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1744527","description":""},{"ticket":"1745147","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1745147","description":""},{"ticket":"1747972","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1747972","description":""},{"ticket":"1749372","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1749372","description":""},{"ticket":"1750516","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1750516","description":""},{"ticket":"1753520","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1753520","description":""},{"ticket":"1759075","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1759075","description":""},{"ticket":"1759525","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1759525","description":""},{"ticket":"1759619","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1759619","description":""},{"ticket":"1759913","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1759913","description":""},{"ticket":"1760363","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1760363","description":""},{"ticket":"1763207","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1763207","description":""},{"ticket":"1765448","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1765448","description":""},{"ticket":"1765632","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1765632","description":""},{"ticket":"1766649","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1766649","description":""},{"ticket":"1766695","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1766695","description":""},{"ticket":"1768461","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1768461","description":""},{"ticket":"1776530","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1776530","description":""},{"ticket":"1777556","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1777556","description":""},{"ticket":"1777911","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1777911","description":""},{"ticket":"1778668","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1778668","description":""},{"ticket":"1782425","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1782425","description":""},{"ticket":"1782497","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1782497","description":""},{"ticket":"1782517","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1782517","description":""},{"ticket":"1785233","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1785233","description":""},{"ticket":"1789474","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1789474","description":""},{"ticket":"1793413","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1793413","description":""},{"ticket":"1804123","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1804123","description":""},{"ticket":"1809079","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1809079","description":""}],"cves":[{"name":"CVE-2018-20337","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20337","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-121"},{"name":"CVE-2019-12447","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12447","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3BaseScore":"6.4","cwe":"CWE-282"},{"name":"CVE-2019-12448","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12448","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3BaseScore":"6.4","cwe":"CWE-364"},{"name":"CVE-2019-12449","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12449","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3BaseScore":"4.8","cwe":"CWE-282"},{"name":"CVE-2019-3825","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3825","cvss3ScoringVector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"6.3","cwe":"CWE-287"}],"references":[],"publishedAt":"2020-04-28T09:13:23Z","rpms":{"Rocky Linux 8":{"nvras":["baobab-0:3.28.0-4.el8.src.rpm","baobab-0:3.28.0-4.el8.aarch64.rpm","baobab-0:3.28.0-4.el8.x86_64.rpm","baobab-debuginfo-0:3.28.0-4.el8.aarch64.rpm","baobab-debuginfo-0:3.28.0-4.el8.x86_64.rpm","baobab-debugsource-0:3.28.0-4.el8.aarch64.rpm","baobab-debugsource-0:3.28.0-4.el8.x86_64.rpm","clutter-0:1.26.2-8.el8.aarch64.rpm","clutter-0:1.26.2-8.el8.i686.rpm","clutter-0:1.26.2-8.el8.src.rpm","clutter-0:1.26.2-8.el8.x86_64.rpm","clutter-debuginfo-0:1.26.2-8.el8.aarch64.rpm","clutter-debuginfo-0:1.26.2-8.el8.i686.rpm","clutter-debuginfo-0:1.26.2-8.el8.x86_64.rpm","clutter-debugsource-0:1.26.2-8.el8.aarch64.rpm","clutter-debugsource-0:1.26.2-8.el8.i686.rpm","clutter-debugsource-0:1.26.2-8.el8.x86_64.rpm","clutter-devel-0:1.26.2-8.el8.aarch64.rpm","clutter-devel-0:1.26.2-8.el8.i686.rpm","clutter-devel-0:1.26.2-8.el8.x86_64.rpm","clutter-doc-0:1.26.2-8.el8.aarch64.rpm","clutter-doc-0:1.26.2-8.el8.x86_64.rpm","gnome-menus-0:3.13.3-11.el8.aarch64.rpm","gnome-menus-0:3.13.3-11.el8.i686.rpm","gnome-menus-0:3.13.3-11.el8.src.rpm","gnome-menus-0:3.13.3-11.el8.x86_64.rpm","gnome-menus-debuginfo-0:3.13.3-11.el8.aarch64.rpm","gnome-menus-debuginfo-0:3.13.3-11.el8.i686.rpm","gnome-menus-debuginfo-0:3.13.3-11.el8.x86_64.rpm","gnome-menus-debugsource-0:3.13.3-11.el8.aarch64.rpm","gnome-menus-debugsource-0:3.13.3-11.el8.i686.rpm","gnome-menus-debugsource-0:3.13.3-11.el8.x86_64.rpm","gnome-menus-devel-0:3.13.3-11.el8.aarch64.rpm","gnome-menus-devel-0:3.13.3-11.el8.i686.rpm","gnome-menus-devel-0:3.13.3-11.el8.x86_64.rpm","gnome-tweaks-0:3.28.1-7.el8.noarch.rpm","gnome-tweaks-0:3.28.1-7.el8.src.rpm","mozjs52-0:52.9.0-2.el8.aarch64.rpm","mozjs52-0:52.9.0-2.el8.i686.rpm","mozjs52-0:52.9.0-2.el8.src.rpm","mozjs52-0:52.9.0-2.el8.x86_64.rpm","mozjs52-debuginfo-0:52.9.0-2.el8.aarch64.rpm","mozjs52-debuginfo-0:52.9.0-2.el8.i686.rpm","mozjs52-debuginfo-0:52.9.0-2.el8.x86_64.rpm","mozjs52-debugsource-0:52.9.0-2.el8.aarch64.rpm","mozjs52-debugsource-0:52.9.0-2.el8.i686.rpm","mozjs52-debugsource-0:52.9.0-2.el8.x86_64.rpm","mozjs52-devel-0:52.9.0-2.el8.aarch64.rpm","mozjs52-devel-0:52.9.0-2.el8.i686.rpm","mozjs52-devel-0:52.9.0-2.el8.x86_64.rpm","mozjs52-devel-debuginfo-0:52.9.0-2.el8.aarch64.rpm","mozjs52-devel-debuginfo-0:52.9.0-2.el8.i686.rpm","mozjs52-devel-debuginfo-0:52.9.0-2.el8.x86_64.rpm","mozjs60-0:60.9.0-4.el8.aarch64.rpm","mozjs60-0:60.9.0-4.el8.i686.rpm","mozjs60-0:60.9.0-4.el8.src.rpm","mozjs60-0:60.9.0-4.el8.x86_64.rpm","mozjs60-debuginfo-0:60.9.0-4.el8.aarch64.rpm","mozjs60-debuginfo-0:60.9.0-4.el8.i686.rpm","mozjs60-debuginfo-0:60.9.0-4.el8.x86_64.rpm","mozjs60-debugsource-0:60.9.0-4.el8.aarch64.rpm","mozjs60-debugsource-0:60.9.0-4.el8.i686.rpm","mozjs60-debugsource-0:60.9.0-4.el8.x86_64.rpm","mozjs60-devel-0:60.9.0-4.el8.aarch64.rpm","mozjs60-devel-0:60.9.0-4.el8.i686.rpm","mozjs60-devel-0:60.9.0-4.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:1766","url":"https://access.redhat.com/errata/RHSA-2020:1766","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-1852.json b/data/advisories/2020/RLSA-2020-1852.json new file mode 100644 index 0000000..3edec71 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-1852.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:1852","synopsis":"Moderate: patch security and bug fix update","severity":"SEVERITY_MODERATE","topic":"An update is available for patch.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The patch program applies diff files to originals. The diff command is used to compare an original to a changed file. Diff lists the changes made to the file. A person who has the original file can then use the patch command with the diff file to add the changes to their original file (patching the file).\n\nSecurity Fix(es):\n\n* patch: the following of symlinks in inp.c and util.c is mishandled in cases other than input files (CVE-2019-13636)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1732781","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732781","description":""}],"cves":[{"name":"CVE-2019-13636","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13636","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3BaseScore":"5.9","cwe":"CWE-59"}],"references":[],"publishedAt":"2020-04-28T09:23:52Z","rpms":{"Rocky Linux 8":{"nvras":["patch-0:2.7.6-11.el8.aarch64.rpm","patch-0:2.7.6-11.el8.src.rpm","patch-0:2.7.6-11.el8.x86_64.rpm","patch-debuginfo-0:2.7.6-11.el8.aarch64.rpm","patch-debuginfo-0:2.7.6-11.el8.x86_64.rpm","patch-debugsource-0:2.7.6-11.el8.aarch64.rpm","patch-debugsource-0:2.7.6-11.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:1852","url":"https://access.redhat.com/errata/RHSA-2020:1852","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-1926.json b/data/advisories/2020/RLSA-2020-1926.json new file mode 100644 index 0000000..985e668 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-1926.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:1926","synopsis":"Important: container-tools:1.0 security and bug fix update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for fuse-overlayfs, container-selinux, oci-umount, runc, slirp4netns, oci-systemd-hook, criu.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* buildah: Crafted input tar file may lead to local file overwrite during image build process (CVE-2020-10696)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* conflicting requests: failed to install container-tools:1.0 (BZ#1813776)\n\n* podman run container error with avc denied (BZ#1816541)","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1776313","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1776313","description":""},{"ticket":"1813776","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1813776","description":"* conflicting requests: failed to install container-tools:1.0"},{"ticket":"1816541","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1816541","description":"* podman run container error with avc denied"},{"ticket":"1817651","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1817651","description":""}],"cves":[{"name":"CVE-2020-10696","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10696","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"CWE-22"}],"references":[],"publishedAt":"2020-04-28T16:06:48Z","rpms":{"Rocky Linux 8":{"nvras":["container-selinux-2:2.124.0-1.gitf958d0c.module+el8.5.0+681+c9a1951f.noarch.rpm","container-selinux-2:2.124.0-1.gitf958d0c.module+el8.4.0+557+48ba8b2f.noarch.rpm","container-selinux-2:2.124.0-1.gitf958d0c.module+el8.5.0+681+c9a1951f.src.rpm","container-selinux-2:2.124.0-1.gitf958d0c.module+el8.4.0+557+48ba8b2f.src.rpm","crit-0:3.12-9.module+el8.5.0+681+c9a1951f.aarch64.rpm","crit-0:3.12-9.module+el8.4.0+557+48ba8b2f.aarch64.rpm","crit-0:3.12-9.module+el8.5.0+681+c9a1951f.x86_64.rpm","crit-0:3.12-9.module+el8.4.0+557+48ba8b2f.x86_64.rpm","criu-0:3.12-9.module+el8.5.0+681+c9a1951f.aarch64.rpm","criu-0:3.12-9.module+el8.4.0+557+48ba8b2f.aarch64.rpm","criu-0:3.12-9.module+el8.5.0+681+c9a1951f.src.rpm","criu-0:3.12-9.module+el8.4.0+557+48ba8b2f.src.rpm","criu-0:3.12-9.module+el8.5.0+681+c9a1951f.x86_64.rpm","criu-0:3.12-9.module+el8.4.0+557+48ba8b2f.x86_64.rpm","criu-debuginfo-0:3.12-9.module+el8.5.0+681+c9a1951f.aarch64.rpm","criu-debuginfo-0:3.12-9.module+el8.4.0+557+48ba8b2f.aarch64.rpm","criu-debuginfo-0:3.12-9.module+el8.5.0+681+c9a1951f.x86_64.rpm","criu-debuginfo-0:3.12-9.module+el8.4.0+557+48ba8b2f.x86_64.rpm","criu-debugsource-0:3.12-9.module+el8.5.0+681+c9a1951f.aarch64.rpm","criu-debugsource-0:3.12-9.module+el8.4.0+557+48ba8b2f.aarch64.rpm","criu-debugsource-0:3.12-9.module+el8.5.0+681+c9a1951f.x86_64.rpm","criu-debugsource-0:3.12-9.module+el8.4.0+557+48ba8b2f.x86_64.rpm","fuse-overlayfs-0:0.3-5.module+el8.5.0+681+c9a1951f.aarch64.rpm","fuse-overlayfs-0:0.3-5.module+el8.4.0+557+48ba8b2f.aarch64.rpm","fuse-overlayfs-0:0.3-5.module+el8.5.0+681+c9a1951f.src.rpm","fuse-overlayfs-0:0.3-5.module+el8.4.0+557+48ba8b2f.src.rpm","fuse-overlayfs-0:0.3-5.module+el8.5.0+681+c9a1951f.x86_64.rpm","fuse-overlayfs-0:0.3-5.module+el8.4.0+557+48ba8b2f.x86_64.rpm","fuse-overlayfs-debuginfo-0:0.3-5.module+el8.5.0+681+c9a1951f.aarch64.rpm","fuse-overlayfs-debuginfo-0:0.3-5.module+el8.4.0+557+48ba8b2f.aarch64.rpm","fuse-overlayfs-debuginfo-0:0.3-5.module+el8.5.0+681+c9a1951f.x86_64.rpm","fuse-overlayfs-debuginfo-0:0.3-5.module+el8.4.0+557+48ba8b2f.x86_64.rpm","fuse-overlayfs-debugsource-0:0.3-5.module+el8.5.0+681+c9a1951f.aarch64.rpm","fuse-overlayfs-debugsource-0:0.3-5.module+el8.4.0+557+48ba8b2f.aarch64.rpm","fuse-overlayfs-debugsource-0:0.3-5.module+el8.5.0+681+c9a1951f.x86_64.rpm","fuse-overlayfs-debugsource-0:0.3-5.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-systemd-hook-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-systemd-hook-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.src.rpm","oci-systemd-hook-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-systemd-hook-debuginfo-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-systemd-hook-debuginfo-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-systemd-hook-debugsource-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-systemd-hook-debugsource-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-umount-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-umount-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.src.rpm","oci-umount-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-umount-debuginfo-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-umount-debuginfo-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-umount-debugsource-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-umount-debugsource-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.x86_64.rpm","python3-criu-0:3.12-9.module+el8.5.0+681+c9a1951f.aarch64.rpm","python3-criu-0:3.12-9.module+el8.4.0+557+48ba8b2f.aarch64.rpm","python3-criu-0:3.12-9.module+el8.5.0+681+c9a1951f.x86_64.rpm","python3-criu-0:3.12-9.module+el8.4.0+557+48ba8b2f.x86_64.rpm","runc-0:1.0.0-56.rc5.dev.git2abd837.module+el8.5.0+681+c9a1951f.aarch64.rpm","runc-0:1.0.0-56.rc5.dev.git2abd837.module+el8.4.0+557+48ba8b2f.aarch64.rpm","runc-0:1.0.0-56.rc5.dev.git2abd837.module+el8.5.0+681+c9a1951f.src.rpm","runc-0:1.0.0-56.rc5.dev.git2abd837.module+el8.4.0+557+48ba8b2f.src.rpm","runc-0:1.0.0-56.rc5.dev.git2abd837.module+el8.5.0+681+c9a1951f.x86_64.rpm","runc-0:1.0.0-56.rc5.dev.git2abd837.module+el8.4.0+557+48ba8b2f.x86_64.rpm","runc-debuginfo-0:1.0.0-56.rc5.dev.git2abd837.module+el8.5.0+681+c9a1951f.aarch64.rpm","runc-debuginfo-0:1.0.0-56.rc5.dev.git2abd837.module+el8.4.0+557+48ba8b2f.aarch64.rpm","runc-debuginfo-0:1.0.0-56.rc5.dev.git2abd837.module+el8.5.0+681+c9a1951f.x86_64.rpm","runc-debuginfo-0:1.0.0-56.rc5.dev.git2abd837.module+el8.4.0+557+48ba8b2f.x86_64.rpm","runc-debugsource-0:1.0.0-56.rc5.dev.git2abd837.module+el8.5.0+681+c9a1951f.aarch64.rpm","runc-debugsource-0:1.0.0-56.rc5.dev.git2abd837.module+el8.4.0+557+48ba8b2f.aarch64.rpm","runc-debugsource-0:1.0.0-56.rc5.dev.git2abd837.module+el8.5.0+681+c9a1951f.x86_64.rpm","runc-debugsource-0:1.0.0-56.rc5.dev.git2abd837.module+el8.4.0+557+48ba8b2f.x86_64.rpm","slirp4netns-0:0.1-5.dev.gitc4e1bc5.module+el8.5.0+681+c9a1951f.aarch64.rpm","slirp4netns-0:0.1-5.dev.gitc4e1bc5.module+el8.4.0+535+5beadeea.aarch64.rpm","slirp4netns-0:0.1-5.dev.gitc4e1bc5.module+el8.5.0+681+c9a1951f.src.rpm","slirp4netns-0:0.1-5.dev.gitc4e1bc5.module+el8.4.0+535+5beadeea.src.rpm","slirp4netns-0:0.1-5.dev.gitc4e1bc5.module+el8.5.0+681+c9a1951f.x86_64.rpm","slirp4netns-0:0.1-5.dev.gitc4e1bc5.module+el8.4.0+535+5beadeea.x86_64.rpm","slirp4netns-debuginfo-0:0.1-5.dev.gitc4e1bc5.module+el8.5.0+681+c9a1951f.aarch64.rpm","slirp4netns-debuginfo-0:0.1-5.dev.gitc4e1bc5.module+el8.4.0+535+5beadeea.aarch64.rpm","slirp4netns-debuginfo-0:0.1-5.dev.gitc4e1bc5.module+el8.5.0+681+c9a1951f.x86_64.rpm","slirp4netns-debuginfo-0:0.1-5.dev.gitc4e1bc5.module+el8.4.0+535+5beadeea.x86_64.rpm","slirp4netns-debugsource-0:0.1-5.dev.gitc4e1bc5.module+el8.5.0+681+c9a1951f.aarch64.rpm","slirp4netns-debugsource-0:0.1-5.dev.gitc4e1bc5.module+el8.4.0+535+5beadeea.aarch64.rpm","slirp4netns-debugsource-0:0.1-5.dev.gitc4e1bc5.module+el8.5.0+681+c9a1951f.x86_64.rpm","slirp4netns-debugsource-0:0.1-5.dev.gitc4e1bc5.module+el8.4.0+535+5beadeea.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:1926","url":"https://access.redhat.com/errata/RHSA-2020:1926","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-1931.json b/data/advisories/2020/RLSA-2020-1931.json new file mode 100644 index 0000000..9dea853 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-1931.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:1931","synopsis":"Important: container-tools:2.0 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for udica, toolbox, python-podman-api, slirp4netns, containernetworking-plugins, criu, cockpit-podman.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* buildah: Crafted input tar file may lead to local file overwrite during image build process (CVE-2020-10696)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1817651","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1817651","description":""}],"cves":[{"name":"CVE-2020-10696","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10696","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"CWE-22"}],"references":[],"publishedAt":"2020-04-28T16:07:22Z","rpms":{"Rocky Linux 8":{"nvras":["cockpit-podman-0:11-1.module+el8.5.0+770+e2f49861.noarch.rpm","cockpit-podman-0:11-1.module+el8.4.0+559+c02fa3b2.noarch.rpm","cockpit-podman-0:11-1.module+el8.5.0+708+6758137d.noarch.rpm","cockpit-podman-0:11-1.module+el8.5.0+770+e2f49861.src.rpm","cockpit-podman-0:11-1.module+el8.4.0+559+c02fa3b2.src.rpm","cockpit-podman-0:11-1.module+el8.5.0+708+6758137d.src.rpm","containernetworking-plugins-0:0.8.3-4.module+el8.5.0+770+e2f49861.aarch64.rpm","containernetworking-plugins-0:0.8.3-4.module+el8.4.0+559+c02fa3b2.aarch64.rpm","containernetworking-plugins-0:0.8.3-4.module+el8.5.0+708+6758137d.aarch64.rpm","containernetworking-plugins-0:0.8.3-4.module+el8.5.0+770+e2f49861.src.rpm","containernetworking-plugins-0:0.8.3-4.module+el8.4.0+559+c02fa3b2.src.rpm","containernetworking-plugins-0:0.8.3-4.module+el8.5.0+708+6758137d.src.rpm","containernetworking-plugins-0:0.8.3-4.module+el8.5.0+770+e2f49861.x86_64.rpm","containernetworking-plugins-0:0.8.3-4.module+el8.4.0+559+c02fa3b2.x86_64.rpm","containernetworking-plugins-0:0.8.3-4.module+el8.5.0+708+6758137d.x86_64.rpm","containernetworking-plugins-debuginfo-0:0.8.3-4.module+el8.5.0+770+e2f49861.aarch64.rpm","containernetworking-plugins-debuginfo-0:0.8.3-4.module+el8.4.0+559+c02fa3b2.aarch64.rpm","containernetworking-plugins-debuginfo-0:0.8.3-4.module+el8.5.0+708+6758137d.aarch64.rpm","containernetworking-plugins-debuginfo-0:0.8.3-4.module+el8.5.0+770+e2f49861.x86_64.rpm","containernetworking-plugins-debuginfo-0:0.8.3-4.module+el8.4.0+559+c02fa3b2.x86_64.rpm","containernetworking-plugins-debuginfo-0:0.8.3-4.module+el8.5.0+708+6758137d.x86_64.rpm","containernetworking-plugins-debugsource-0:0.8.3-4.module+el8.5.0+770+e2f49861.aarch64.rpm","containernetworking-plugins-debugsource-0:0.8.3-4.module+el8.4.0+559+c02fa3b2.aarch64.rpm","containernetworking-plugins-debugsource-0:0.8.3-4.module+el8.5.0+708+6758137d.aarch64.rpm","containernetworking-plugins-debugsource-0:0.8.3-4.module+el8.5.0+770+e2f49861.x86_64.rpm","containernetworking-plugins-debugsource-0:0.8.3-4.module+el8.4.0+559+c02fa3b2.x86_64.rpm","containernetworking-plugins-debugsource-0:0.8.3-4.module+el8.5.0+708+6758137d.x86_64.rpm","crit-0:3.12-9.module+el8.5.0+681+c9a1951f.aarch64.rpm","crit-0:3.12-9.module+el8.4.0+557+48ba8b2f.aarch64.rpm","crit-0:3.12-9.module+el8.5.0+681+c9a1951f.x86_64.rpm","crit-0:3.12-9.module+el8.4.0+557+48ba8b2f.x86_64.rpm","criu-0:3.12-9.module+el8.5.0+681+c9a1951f.aarch64.rpm","criu-0:3.12-9.module+el8.4.0+557+48ba8b2f.aarch64.rpm","criu-0:3.12-9.module+el8.5.0+681+c9a1951f.src.rpm","criu-0:3.12-9.module+el8.4.0+557+48ba8b2f.src.rpm","criu-0:3.12-9.module+el8.5.0+681+c9a1951f.x86_64.rpm","criu-0:3.12-9.module+el8.4.0+557+48ba8b2f.x86_64.rpm","criu-debuginfo-0:3.12-9.module+el8.5.0+681+c9a1951f.aarch64.rpm","criu-debuginfo-0:3.12-9.module+el8.4.0+557+48ba8b2f.aarch64.rpm","criu-debuginfo-0:3.12-9.module+el8.5.0+681+c9a1951f.x86_64.rpm","criu-debuginfo-0:3.12-9.module+el8.4.0+557+48ba8b2f.x86_64.rpm","criu-debugsource-0:3.12-9.module+el8.5.0+681+c9a1951f.aarch64.rpm","criu-debugsource-0:3.12-9.module+el8.4.0+557+48ba8b2f.aarch64.rpm","criu-debugsource-0:3.12-9.module+el8.5.0+681+c9a1951f.x86_64.rpm","criu-debugsource-0:3.12-9.module+el8.4.0+557+48ba8b2f.x86_64.rpm","python3-criu-0:3.12-9.module+el8.5.0+681+c9a1951f.aarch64.rpm","python3-criu-0:3.12-9.module+el8.4.0+557+48ba8b2f.aarch64.rpm","python3-criu-0:3.12-9.module+el8.5.0+681+c9a1951f.x86_64.rpm","python3-criu-0:3.12-9.module+el8.4.0+557+48ba8b2f.x86_64.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+770+e2f49861.noarch.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2.noarch.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+708+6758137d.noarch.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+770+e2f49861.src.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2.src.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+708+6758137d.src.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.5.0+770+e2f49861.aarch64.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.4.0+536+994a2182.aarch64.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.5.0+708+6758137d.aarch64.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.5.0+770+e2f49861.src.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.4.0+536+994a2182.src.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.5.0+708+6758137d.src.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.5.0+770+e2f49861.x86_64.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.4.0+536+994a2182.x86_64.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.5.0+708+6758137d.x86_64.rpm","slirp4netns-debuginfo-0:0.4.2-3.git21fdece.module+el8.5.0+770+e2f49861.aarch64.rpm","slirp4netns-debuginfo-0:0.4.2-3.git21fdece.module+el8.4.0+536+994a2182.aarch64.rpm","slirp4netns-debuginfo-0:0.4.2-3.git21fdece.module+el8.5.0+708+6758137d.aarch64.rpm","slirp4netns-debuginfo-0:0.4.2-3.git21fdece.module+el8.5.0+770+e2f49861.x86_64.rpm","slirp4netns-debuginfo-0:0.4.2-3.git21fdece.module+el8.4.0+536+994a2182.x86_64.rpm","slirp4netns-debuginfo-0:0.4.2-3.git21fdece.module+el8.5.0+708+6758137d.x86_64.rpm","slirp4netns-debugsource-0:0.4.2-3.git21fdece.module+el8.5.0+770+e2f49861.aarch64.rpm","slirp4netns-debugsource-0:0.4.2-3.git21fdece.module+el8.4.0+536+994a2182.aarch64.rpm","slirp4netns-debugsource-0:0.4.2-3.git21fdece.module+el8.5.0+708+6758137d.aarch64.rpm","slirp4netns-debugsource-0:0.4.2-3.git21fdece.module+el8.5.0+770+e2f49861.x86_64.rpm","slirp4netns-debugsource-0:0.4.2-3.git21fdece.module+el8.4.0+536+994a2182.x86_64.rpm","slirp4netns-debugsource-0:0.4.2-3.git21fdece.module+el8.5.0+708+6758137d.x86_64.rpm","toolbox-0:0.0.7-1.module+el8.5.0+770+e2f49861.noarch.rpm","toolbox-0:0.0.7-1.module+el8.4.0+559+c02fa3b2.noarch.rpm","toolbox-0:0.0.7-1.module+el8.5.0+708+6758137d.noarch.rpm","toolbox-0:0.0.7-1.module+el8.5.0+770+e2f49861.src.rpm","toolbox-0:0.0.7-1.module+el8.4.0+559+c02fa3b2.src.rpm","toolbox-0:0.0.7-1.module+el8.5.0+708+6758137d.src.rpm","udica-0:0.2.1-2.module+el8.5.0+770+e2f49861.noarch.rpm","udica-0:0.2.1-2.module+el8.4.0+559+c02fa3b2.noarch.rpm","udica-0:0.2.1-2.module+el8.5.0+708+6758137d.noarch.rpm","udica-0:0.2.1-2.module+el8.5.0+770+e2f49861.src.rpm","udica-0:0.2.1-2.module+el8.4.0+559+c02fa3b2.src.rpm","udica-0:0.2.1-2.module+el8.5.0+708+6758137d.src.rpm","container-selinux-2:2.124.0-1.gitf958d0c.module+el8.5.0+681+c9a1951f.noarch.rpm","container-selinux-2:2.124.0-1.gitf958d0c.module+el8.5.0+681+c9a1951f.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:1931","url":"https://access.redhat.com/errata/RHSA-2020:1931","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-1932.json b/data/advisories/2020/RLSA-2020-1932.json new file mode 100644 index 0000000..ed35512 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-1932.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:1932","synopsis":"Important: container-tools:rhel8 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for udica, runc, toolbox, python-podman-api, slirp4netns, buildah, criu.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* buildah: Crafted input tar file may lead to local file overwrite during image build process (CVE-2020-10696)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1817651","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1817651","description":""}],"cves":[{"name":"CVE-2020-10696","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10696","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"CWE-22"}],"references":[],"publishedAt":"2020-04-28T16:07:32Z","rpms":{"Rocky Linux 8":{"nvras":["buildah-0:1.11.6-8.module+el8.4.0+559+c02fa3b2.aarch64.rpm","buildah-0:1.11.6-8.module+el8.4.0+559+c02fa3b2.src.rpm","buildah-0:1.11.6-8.module+el8.4.0+559+c02fa3b2.x86_64.rpm","buildah-debuginfo-0:1.11.6-8.module+el8.4.0+559+c02fa3b2.aarch64.rpm","buildah-debuginfo-0:1.11.6-8.module+el8.4.0+559+c02fa3b2.x86_64.rpm","buildah-debugsource-0:1.11.6-8.module+el8.4.0+559+c02fa3b2.aarch64.rpm","buildah-debugsource-0:1.11.6-8.module+el8.4.0+559+c02fa3b2.x86_64.rpm","buildah-tests-0:1.11.6-8.module+el8.4.0+559+c02fa3b2.aarch64.rpm","buildah-tests-0:1.11.6-8.module+el8.4.0+559+c02fa3b2.x86_64.rpm","buildah-tests-debuginfo-0:1.11.6-8.module+el8.4.0+559+c02fa3b2.aarch64.rpm","buildah-tests-debuginfo-0:1.11.6-8.module+el8.4.0+559+c02fa3b2.x86_64.rpm","crit-0:3.12-9.module+el8.5.0+681+c9a1951f.aarch64.rpm","crit-0:3.12-9.module+el8.4.0+557+48ba8b2f.aarch64.rpm","crit-0:3.12-9.module+el8.5.0+681+c9a1951f.x86_64.rpm","crit-0:3.12-9.module+el8.4.0+557+48ba8b2f.x86_64.rpm","criu-0:3.12-9.module+el8.5.0+681+c9a1951f.aarch64.rpm","criu-0:3.12-9.module+el8.4.0+557+48ba8b2f.aarch64.rpm","criu-0:3.12-9.module+el8.5.0+681+c9a1951f.src.rpm","criu-0:3.12-9.module+el8.4.0+557+48ba8b2f.src.rpm","criu-0:3.12-9.module+el8.5.0+681+c9a1951f.x86_64.rpm","criu-0:3.12-9.module+el8.4.0+557+48ba8b2f.x86_64.rpm","criu-debuginfo-0:3.12-9.module+el8.5.0+681+c9a1951f.aarch64.rpm","criu-debuginfo-0:3.12-9.module+el8.4.0+557+48ba8b2f.aarch64.rpm","criu-debuginfo-0:3.12-9.module+el8.5.0+681+c9a1951f.x86_64.rpm","criu-debuginfo-0:3.12-9.module+el8.4.0+557+48ba8b2f.x86_64.rpm","criu-debugsource-0:3.12-9.module+el8.5.0+681+c9a1951f.aarch64.rpm","criu-debugsource-0:3.12-9.module+el8.4.0+557+48ba8b2f.aarch64.rpm","criu-debugsource-0:3.12-9.module+el8.5.0+681+c9a1951f.x86_64.rpm","criu-debugsource-0:3.12-9.module+el8.4.0+557+48ba8b2f.x86_64.rpm","python3-criu-0:3.12-9.module+el8.5.0+681+c9a1951f.aarch64.rpm","python3-criu-0:3.12-9.module+el8.4.0+557+48ba8b2f.aarch64.rpm","python3-criu-0:3.12-9.module+el8.5.0+681+c9a1951f.x86_64.rpm","python3-criu-0:3.12-9.module+el8.4.0+557+48ba8b2f.x86_64.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+770+e2f49861.noarch.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2.noarch.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+708+6758137d.noarch.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+770+e2f49861.src.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2.src.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+708+6758137d.src.rpm","runc-0:1.0.0-65.rc10.module+el8.4.0+559+c02fa3b2.aarch64.rpm","runc-0:1.0.0-65.rc10.module+el8.4.0+559+c02fa3b2.src.rpm","runc-0:1.0.0-65.rc10.module+el8.4.0+559+c02fa3b2.x86_64.rpm","runc-debuginfo-0:1.0.0-65.rc10.module+el8.4.0+559+c02fa3b2.aarch64.rpm","runc-debuginfo-0:1.0.0-65.rc10.module+el8.4.0+559+c02fa3b2.x86_64.rpm","runc-debugsource-0:1.0.0-65.rc10.module+el8.4.0+559+c02fa3b2.aarch64.rpm","runc-debugsource-0:1.0.0-65.rc10.module+el8.4.0+559+c02fa3b2.x86_64.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.5.0+770+e2f49861.aarch64.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.4.0+536+994a2182.aarch64.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.5.0+708+6758137d.aarch64.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.5.0+770+e2f49861.src.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.4.0+536+994a2182.src.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.5.0+708+6758137d.src.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.5.0+770+e2f49861.x86_64.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.4.0+536+994a2182.x86_64.rpm","slirp4netns-0:0.4.2-3.git21fdece.module+el8.5.0+708+6758137d.x86_64.rpm","slirp4netns-debuginfo-0:0.4.2-3.git21fdece.module+el8.5.0+770+e2f49861.aarch64.rpm","slirp4netns-debuginfo-0:0.4.2-3.git21fdece.module+el8.4.0+536+994a2182.aarch64.rpm","slirp4netns-debuginfo-0:0.4.2-3.git21fdece.module+el8.5.0+708+6758137d.aarch64.rpm","slirp4netns-debuginfo-0:0.4.2-3.git21fdece.module+el8.5.0+770+e2f49861.x86_64.rpm","slirp4netns-debuginfo-0:0.4.2-3.git21fdece.module+el8.4.0+536+994a2182.x86_64.rpm","slirp4netns-debuginfo-0:0.4.2-3.git21fdece.module+el8.5.0+708+6758137d.x86_64.rpm","slirp4netns-debugsource-0:0.4.2-3.git21fdece.module+el8.5.0+770+e2f49861.aarch64.rpm","slirp4netns-debugsource-0:0.4.2-3.git21fdece.module+el8.4.0+536+994a2182.aarch64.rpm","slirp4netns-debugsource-0:0.4.2-3.git21fdece.module+el8.5.0+708+6758137d.aarch64.rpm","slirp4netns-debugsource-0:0.4.2-3.git21fdece.module+el8.5.0+770+e2f49861.x86_64.rpm","slirp4netns-debugsource-0:0.4.2-3.git21fdece.module+el8.4.0+536+994a2182.x86_64.rpm","slirp4netns-debugsource-0:0.4.2-3.git21fdece.module+el8.5.0+708+6758137d.x86_64.rpm","toolbox-0:0.0.7-1.module+el8.5.0+770+e2f49861.noarch.rpm","toolbox-0:0.0.7-1.module+el8.4.0+559+c02fa3b2.noarch.rpm","toolbox-0:0.0.7-1.module+el8.5.0+708+6758137d.noarch.rpm","toolbox-0:0.0.7-1.module+el8.5.0+770+e2f49861.src.rpm","toolbox-0:0.0.7-1.module+el8.4.0+559+c02fa3b2.src.rpm","toolbox-0:0.0.7-1.module+el8.5.0+708+6758137d.src.rpm","udica-0:0.2.1-2.module+el8.5.0+770+e2f49861.noarch.rpm","udica-0:0.2.1-2.module+el8.4.0+559+c02fa3b2.noarch.rpm","udica-0:0.2.1-2.module+el8.5.0+708+6758137d.noarch.rpm","udica-0:0.2.1-2.module+el8.5.0+770+e2f49861.src.rpm","udica-0:0.2.1-2.module+el8.4.0+559+c02fa3b2.src.rpm","udica-0:0.2.1-2.module+el8.5.0+708+6758137d.src.rpm","container-selinux-2:2.124.0-1.gitf958d0c.module+el8.5.0+681+c9a1951f.noarch.rpm","container-selinux-2:2.124.0-1.gitf958d0c.module+el8.5.0+681+c9a1951f.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:1932","url":"https://access.redhat.com/errata/RHSA-2020:1932","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-2041.json b/data/advisories/2020/RLSA-2020-2041.json new file mode 100644 index 0000000..72551d3 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-2041.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:2041","synopsis":"Important: squid:4 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for libecap.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nSecurity Fix(es):\n\n* squid: improper check for new member in ESIExpression::Evaluate allows for stack buffer overflow (CVE-2019-12519)\n\n* squid: improper access restriction upon Digest Authentication nonce replay could lead to remote code execution (CVE-2020-11945)\n\n* squid: parsing of header Proxy-Authentication leads to memory corruption (CVE-2019-12525)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1730535","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1730535","description":""},{"ticket":"1827552","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1827552","description":""},{"ticket":"1827563","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1827563","description":""}],"cves":[{"name":"CVE-2019-12519","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12519","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.1","cwe":"CWE-121"},{"name":"CVE-2019-12525","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12525","cvss3ScoringVector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"4.3","cwe":"CWE-119"},{"name":"CVE-2020-11945","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11945","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.1","cwe":"CWE-284"}],"references":[],"publishedAt":"2020-05-06T12:52:10Z","rpms":{"Rocky Linux 8":{"nvras":["libecap-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-0:1.0.1-2.module+el8.4.0+404+316a0dc5.src.rpm","libecap-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm","libecap-debuginfo-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-debuginfo-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm","libecap-debugsource-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-debugsource-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm","libecap-devel-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-devel-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:2041","url":"https://access.redhat.com/errata/RHSA-2020:2041","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-2231.json b/data/advisories/2020/RLSA-2020-2231.json new file mode 100644 index 0000000..61c810d --- /dev/null +++ b/data/advisories/2020/RLSA-2020-2231.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:2231","synopsis":"Important: Rocky Enterprise Software Foundation Ceph Storage 4.1 security, bug fix, and enhancement update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for smartmontools.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Rocky Enterprise Software Foundation Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a Ceph management platform, deployment utilities, and support services.\n\nSecurity Fix(es):\n\n* ceph-ansible: hard coded credential in ceph-ansible playbook (CVE-2020-1716)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgements, and other related information refer to the CVE page(s) listed in the References section.\n\nBug Fix(es) and Enhancement(s):\n\nFor detailed information on changes in this release, see the Rocky Enterprise Software Foundation Ceph Storage 4.1 Release Notes available at:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_ceph_storage/4.1/html/release_notes/index","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1274084","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1274084","description":""},{"ticket":"1553202","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1553202","description":""},{"ticket":"1581421","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1581421","description":""},{"ticket":"1625951","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1625951","description":""},{"ticket":"1639817","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1639817","description":""},{"ticket":"1656512","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1656512","description":""},{"ticket":"1658491","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1658491","description":""},{"ticket":"1665683","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1665683","description":""},{"ticket":"1678701","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1678701","description":""},{"ticket":"1679924","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1679924","description":""},{"ticket":"1687971","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1687971","description":""},{"ticket":"1716815","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1716815","description":""},{"ticket":"1716972","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1716972","description":""},{"ticket":"1719446","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1719446","description":""},{"ticket":"1724428","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1724428","description":""},{"ticket":"1731148","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1731148","description":""},{"ticket":"1731554","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1731554","description":""},{"ticket":"1734583","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1734583","description":""},{"ticket":"1738334","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1738334","description":""},{"ticket":"1741677","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1741677","description":""},{"ticket":"1743388","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1743388","description":""},{"ticket":"1744276","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1744276","description":""},{"ticket":"1746491","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1746491","description":""},{"ticket":"1747206","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1747206","description":""},{"ticket":"1747516","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1747516","description":""},{"ticket":"1759700","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1759700","description":""},{"ticket":"1759716","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1759716","description":""},{"ticket":"1759725","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1759725","description":""},{"ticket":"1759727","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1759727","description":""},{"ticket":"1760126","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1760126","description":""},{"ticket":"1760129","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1760129","description":""},{"ticket":"1760219","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1760219","description":""},{"ticket":"1761474","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1761474","description":""},{"ticket":"1761743","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1761743","description":""},{"ticket":"1762170","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1762170","description":""},{"ticket":"1762197","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1762197","description":""},{"ticket":"1762852","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1762852","description":""},{"ticket":"1764431","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1764431","description":""},{"ticket":"1765517","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1765517","description":""},{"ticket":"1765530","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1765530","description":""},{"ticket":"1765536","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1765536","description":""},{"ticket":"1767144","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1767144","description":""},{"ticket":"1771206","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1771206","description":""},{"ticket":"1771208","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1771208","description":""},{"ticket":"1775218","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1775218","description":""},{"ticket":"1775266","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1775266","description":""},{"ticket":"1775404","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1775404","description":""},{"ticket":"1777064","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1777064","description":""},{"ticket":"1777380","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1777380","description":""},{"ticket":"1779186","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1779186","description":""},{"ticket":"1782253","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1782253","description":""},{"ticket":"1783223","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1783223","description":""},{"ticket":"1784011","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1784011","description":""},{"ticket":"1784405","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1784405","description":""},{"ticket":"1784729","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1784729","description":""},{"ticket":"1784746","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1784746","description":""},{"ticket":"1784895","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1784895","description":""},{"ticket":"1785363","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1785363","description":""},{"ticket":"1785472","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1785472","description":""},{"ticket":"1785474","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1785474","description":""},{"ticket":"1785475","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1785475","description":""},{"ticket":"1785476","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1785476","description":""},{"ticket":"1785477","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1785477","description":""},{"ticket":"1785478","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1785478","description":""},{"ticket":"1785580","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1785580","description":""},{"ticket":"1785646","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1785646","description":""},{"ticket":"1785736","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1785736","description":""},{"ticket":"1786107","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1786107","description":""},{"ticket":"1786173","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1786173","description":""},{"ticket":"1786287","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1786287","description":""},{"ticket":"1786457","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1786457","description":""},{"ticket":"1786684","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1786684","description":""},{"ticket":"1788347","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1788347","description":""},{"ticket":"1788917","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1788917","description":""},{"ticket":"1789357","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1789357","description":""},{"ticket":"1790472","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1790472","description":""},{"ticket":"1790479","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1790479","description":""},{"ticket":"1791174","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1791174","description":""},{"ticket":"1792222","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1792222","description":""},{"ticket":"1792225","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1792225","description":""},{"ticket":"1792230","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1792230","description":""},{"ticket":"1792320","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1792320","description":""},{"ticket":"1793542","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1793542","description":""},{"ticket":"1793564","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1793564","description":""},{"ticket":"1794351","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1794351","description":""},{"ticket":"1794713","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1794713","description":""},{"ticket":"1794715","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1794715","description":""},{"ticket":"1795406","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1795406","description":""},{"ticket":"1795592","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1795592","description":""},{"ticket":"1796160","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1796160","description":""},{"ticket":"1796453","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1796453","description":""},{"ticket":"1796853","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1796853","description":""},{"ticket":"1797161","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1797161","description":""},{"ticket":"1797817","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1797817","description":""},{"ticket":"1798153","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1798153","description":""},{"ticket":"1798718","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1798718","description":""},{"ticket":"1798719","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1798719","description":""},{"ticket":"1798781","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1798781","description":""},{"ticket":"1802199","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1802199","description":""},{"ticket":"1805347","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1805347","description":""},{"ticket":"1805391","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1805391","description":""},{"ticket":"1805643","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1805643","description":""},{"ticket":"1807085","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1807085","description":""},{"ticket":"1807184","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1807184","description":""},{"ticket":"1808046","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1808046","description":""},{"ticket":"1808345","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1808345","description":""},{"ticket":"1808495","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1808495","description":""},{"ticket":"1809242","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1809242","description":""},{"ticket":"1810121","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1810121","description":""},{"ticket":"1810551","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1810551","description":""},{"ticket":"1810610","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1810610","description":""},{"ticket":"1810884","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1810884","description":""},{"ticket":"1810948","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1810948","description":""},{"ticket":"1811547","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1811547","description":""},{"ticket":"1813349","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1813349","description":""},{"ticket":"1814082","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1814082","description":""},{"ticket":"1814380","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1814380","description":""},{"ticket":"1814542","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1814542","description":""},{"ticket":"1814806","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1814806","description":""},{"ticket":"1814942","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1814942","description":""},{"ticket":"1815211","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1815211","description":""},{"ticket":"1815239","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1815239","description":""},{"ticket":"1815261","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1815261","description":""},{"ticket":"1815390","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1815390","description":""},{"ticket":"1815579","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1815579","description":""},{"ticket":"1816713","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1816713","description":""},{"ticket":"1816989","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1816989","description":""},{"ticket":"1817069","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1817069","description":""},{"ticket":"1817586","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1817586","description":""},{"ticket":"1817985","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1817985","description":""},{"ticket":"1819302","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1819302","description":""},{"ticket":"1819681","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1819681","description":""},{"ticket":"1820233","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1820233","description":""},{"ticket":"1820272","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1820272","description":""},{"ticket":"1820560","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1820560","description":""},{"ticket":"1821784","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1821784","description":""},{"ticket":"1822153","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1822153","description":""},{"ticket":"1822328","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1822328","description":""},{"ticket":"1822482","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1822482","description":""},{"ticket":"1822599","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1822599","description":""},{"ticket":"1822902","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1822902","description":""},{"ticket":"1822905","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1822905","description":""},{"ticket":"1823975","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1823975","description":""},{"ticket":"1824263","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1824263","description":""},{"ticket":"1825104","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1825104","description":""},{"ticket":"1825149","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1825149","description":""},{"ticket":"1825288","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1825288","description":""},{"ticket":"1825827","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1825827","description":""},{"ticket":"1825988","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1825988","description":""},{"ticket":"1826884","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1826884","description":""},{"ticket":"1827299","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1827299","description":""},{"ticket":"1827781","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1827781","description":""},{"ticket":"1827785","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1827785","description":""},{"ticket":"1827789","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1827789","description":""},{"ticket":"1827799","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1827799","description":""},{"ticket":"1829804","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1829804","description":""},{"ticket":"1831119","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1831119","description":""},{"ticket":"1831285","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1831285","description":""},{"ticket":"1831342","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1831342","description":""},{"ticket":"1833063","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1833063","description":""},{"ticket":"1834790","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1834790","description":""},{"ticket":"1837206","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1837206","description":""}],"cves":[{"name":"CVE-2020-1716","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1716","cvss3ScoringVector":"UNKNOWN","cvss3BaseScore":"UNKNOWN","cwe":"UNKNOWN"}],"references":[],"publishedAt":"2020-05-19T16:02:01Z","rpms":{"Rocky Linux 8":{"nvras":["smartmontools-1:7.1-1.el8.src.rpm","smartmontools-1:7.1-1.el8.x86_64.rpm","smartmontools-debuginfo-1:7.1-1.el8.x86_64.rpm","smartmontools-debugsource-1:7.1-1.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:2231","url":"https://access.redhat.com/errata/RHSA-2020:2231","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-2755.json b/data/advisories/2020/RLSA-2020-2755.json new file mode 100644 index 0000000..eb4d0ac --- /dev/null +++ b/data/advisories/2020/RLSA-2020-2755.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:2755","synopsis":"Important: nghttp2 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for nghttp2.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.\n\nSecurity Fix(es):\n\n* nghttp2: overly large SETTINGS frames can lead to DoS (CVE-2020-11080)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1844929","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1844929","description":""}],"cves":[{"name":"CVE-2020-11080","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11080","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-770"}],"references":[],"publishedAt":"2020-06-25T16:31:29Z","rpms":{"Rocky Linux 8":{"nvras":["libnghttp2-0:1.33.0-3.el8_3.1.aarch64.rpm","libnghttp2-0:1.33.0-3.el8_3.1.i686.rpm","libnghttp2-0:1.33.0-3.el8_3.1.x86_64.rpm","libnghttp2-debuginfo-0:1.33.0-3.el8_3.1.aarch64.rpm","libnghttp2-debuginfo-0:1.33.0-3.el8_3.1.i686.rpm","libnghttp2-debuginfo-0:1.33.0-3.el8_3.1.x86_64.rpm","libnghttp2-devel-0:1.33.0-3.el8_3.1.aarch64.rpm","libnghttp2-devel-0:1.33.0-3.el8_3.1.i686.rpm","libnghttp2-devel-0:1.33.0-3.el8_3.1.x86_64.rpm","nghttp2-0:1.33.0-3.el8_3.1.aarch64.rpm","nghttp2-0:1.33.0-3.el8_3.1.src.rpm","nghttp2-0:1.33.0-3.el8_3.1.x86_64.rpm","nghttp2-debuginfo-0:1.33.0-3.el8_3.1.aarch64.rpm","nghttp2-debuginfo-0:1.33.0-3.el8_3.1.i686.rpm","nghttp2-debuginfo-0:1.33.0-3.el8_3.1.x86_64.rpm","nghttp2-debugsource-0:1.33.0-3.el8_3.1.aarch64.rpm","nghttp2-debugsource-0:1.33.0-3.el8_3.1.i686.rpm","nghttp2-debugsource-0:1.33.0-3.el8_3.1.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:2755","url":"https://access.redhat.com/errata/RHSA-2020:2755","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-2774.json b/data/advisories/2020/RLSA-2020-2774.json new file mode 100644 index 0000000..8e17555 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-2774.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:2774","synopsis":"Important: virt:rhel security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for libiscsi, netcf, sgabios.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:Rocky Linux module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.\n\nSecurity Fix(es):\n\n* QEMU: Slirp: potential OOB access due to unsafe snprintf() usages (CVE-2020-8608)\n\n* QEMU: vnc: memory leakage upon disconnect (CVE-2019-20382)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1798453","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1798453","description":""},{"ticket":"1810390","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1810390","description":""}],"cves":[{"name":"CVE-2019-20382","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20382","cvss3ScoringVector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.5","cwe":"CWE-401->CWE-772"},{"name":"CVE-2020-8608","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8608","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3BaseScore":"5.6","cwe":"CWE-122"}],"references":[],"publishedAt":"2020-06-30T13:38:53Z","rpms":{"Rocky Linux 8":{"nvras":["libiscsi-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-0:1.18.0-8.module+el8.7.0+1084+97b81f61.src.rpm","libiscsi-0:1.18.0-8.module+el8.4.0+534+4680a14e.src.rpm","libiscsi-0:1.18.0-8.module+el8.6.0+847+b490afdd.src.rpm","libiscsi-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-devel-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-devel-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-devel-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-utils-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-utils-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-utils-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-0:0.2.8-12.module+el8.7.0+1084+97b81f61.src.rpm","netcf-0:0.2.8-12.module+el8.4.0+534+4680a14e.src.rpm","netcf-0:0.2.8-12.module+el8.6.0+847+b490afdd.src.rpm","netcf-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-debugsource-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-debugsource-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-debugsource-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-devel-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-devel-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-devel-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-devel-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-devel-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-devel-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-devel-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-devel-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-devel-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-libs-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-libs-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-libs-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-libs-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-libs-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-libs-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-libs-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-libs-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-libs-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","sgabios-1:0.20170427git-3.module+el8.7.0+1084+97b81f61.i686.rpm","sgabios-1:0.20170427git-3.module+el8.4.0+534+4680a14e.i686.rpm","sgabios-1:0.20170427git-3.module+el8.6.0+847+b490afdd.i686.rpm","sgabios-1:0.20170427git-3.module+el8.7.0+1084+97b81f61.src.rpm","sgabios-1:0.20170427git-3.module+el8.4.0+534+4680a14e.src.rpm","sgabios-1:0.20170427git-3.module+el8.6.0+847+b490afdd.src.rpm","sgabios-1:0.20170427git-3.module+el8.7.0+1084+97b81f61.x86_64.rpm","sgabios-1:0.20170427git-3.module+el8.4.0+534+4680a14e.x86_64.rpm","sgabios-1:0.20170427git-3.module+el8.6.0+847+b490afdd.x86_64.rpm","sgabios-bin-1:0.20170427git-3.module+el8.7.0+1084+97b81f61.noarch.rpm","sgabios-bin-1:0.20170427git-3.module+el8.4.0+534+4680a14e.noarch.rpm","sgabios-bin-1:0.20170427git-3.module+el8.6.0+847+b490afdd.noarch.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:2774","url":"https://access.redhat.com/errata/RHSA-2020:2774","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-2848.json b/data/advisories/2020/RLSA-2020-2848.json new file mode 100644 index 0000000..927bba7 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-2848.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:2848","synopsis":"Important: nodejs:10 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for nodejs-nodemon, nodejs-packaging.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nThe following packages have been upgraded to a later upstream version: nodejs (10.21.0).\n\nSecurity Fix(es):\n\n* nghttp2: overly large SETTINGS frames can lead to DoS (CVE-2020-11080)\n\n* nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a constructor or __proto__ payload (CVE-2020-7598)\n\n* nodejs: memory corruption in napi_get_value_string_* functions (CVE-2020-8174)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1813344","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1813344","description":""},{"ticket":"1844929","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1844929","description":""},{"ticket":"1845256","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1845256","description":""}],"cves":[{"name":"CVE-2020-11080","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11080","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-770"},{"name":"CVE-2020-7598","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7598","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3BaseScore":"5.6","cwe":"CWE-20"},{"name":"CVE-2020-8174","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8174","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.1","cwe":"CWE-119"}],"references":[],"publishedAt":"2020-07-07T08:51:24Z","rpms":{"Rocky Linux 8":{"nvras":["nodejs-nodemon-0:1.18.3-1.module+el8.3.0+101+f84c7154.noarch.rpm","nodejs-nodemon-0:1.18.3-1.module+el8.3.0+101+f84c7154.src.rpm","nodejs-packaging-0:17-3.module+el8.3.0+101+f84c7154.noarch.rpm","nodejs-packaging-0:17-3.module+el8.3.0+101+f84c7154.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:2848","url":"https://access.redhat.com/errata/RHSA-2020:2848","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-2852.json b/data/advisories/2020/RLSA-2020-2852.json new file mode 100644 index 0000000..c3368e3 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-2852.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:2852","synopsis":"Important: nodejs:12 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for nodejs-nodemon, nodejs-packaging.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nThe following packages have been upgraded to a later upstream version: nodejs (12.18.2).\n\nSecurity Fix(es):\n\n* nghttp2: overly large SETTINGS frames can lead to DoS (CVE-2020-11080)\n\n* nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a constructor or __proto__ payload (CVE-2020-7598)\n\n* nodejs: TLS session reuse can lead to hostname verification bypass (CVE-2020-8172)\n\n* nodejs: memory corruption in napi_get_value_string_* functions (CVE-2020-8174)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1813344","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1813344","description":""},{"ticket":"1844929","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1844929","description":""},{"ticket":"1845247","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1845247","description":""},{"ticket":"1845256","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1845256","description":""}],"cves":[{"name":"CVE-2020-11080","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11080","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-770"},{"name":"CVE-2020-7598","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7598","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3BaseScore":"5.6","cwe":"CWE-20"},{"name":"CVE-2020-8172","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8172","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3BaseScore":"7.4","cwe":"CWE-285"},{"name":"CVE-2020-8174","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8174","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.1","cwe":"CWE-119"}],"references":[],"publishedAt":"2020-07-07T08:52:35Z","rpms":{"Rocky Linux 8":{"nvras":["nodejs-nodemon-0:1.18.3-1.module+el8.3.0+101+f84c7154.noarch.rpm","nodejs-nodemon-0:1.18.3-1.module+el8.3.0+101+f84c7154.src.rpm","nodejs-packaging-0:17-3.module+el8.3.0+101+f84c7154.noarch.rpm","nodejs-packaging-0:17-3.module+el8.3.0+101+f84c7154.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:2852","url":"https://access.redhat.com/errata/RHSA-2020:2852","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-3032.json b/data/advisories/2020/RLSA-2020-3032.json new file mode 100644 index 0000000..3bbd5da --- /dev/null +++ b/data/advisories/2020/RLSA-2020-3032.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:3032","synopsis":"Moderate: mod_auth_openidc:2.3 security and bug fix update","severity":"SEVERITY_MODERATE","topic":"An update is available for cjose.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. \n\nSecurity Fix(es):\n\n* mod_auth_openidc: Open redirect in logout url when using URLs with leading slashes (CVE-2019-14857)\n\n* mod_auth_openidc: Open redirect issue exists in URLs with slash and backslash (CVE-2019-20479)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Module stream mod_auth_openidc:2.3 does not have correct module.md file (BZ#1844107)","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1760613","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1760613","description":""},{"ticket":"1805102","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1805102","description":""},{"ticket":"1844107","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1844107","description":"* Module stream mod_auth_openidc:2.3 does not have correct module.md file"}],"cves":[{"name":"CVE-2019-14857","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14857","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-601"},{"name":"CVE-2019-20479","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20479","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-601"}],"references":[],"publishedAt":"2020-07-21T14:12:27Z","rpms":{"Rocky Linux 8":{"nvras":["cjose-0:0.6.1-2.module+el8.3.0+129+2feafa46.aarch64.rpm","cjose-0:0.6.1-2.module+el8.3.0+129+2feafa46.src.rpm","cjose-0:0.6.1-2.module+el8.3.0+129+2feafa46.x86_64.rpm","cjose-debuginfo-0:0.6.1-2.module+el8.3.0+129+2feafa46.aarch64.rpm","cjose-debuginfo-0:0.6.1-2.module+el8.3.0+129+2feafa46.x86_64.rpm","cjose-debugsource-0:0.6.1-2.module+el8.3.0+129+2feafa46.aarch64.rpm","cjose-debugsource-0:0.6.1-2.module+el8.3.0+129+2feafa46.x86_64.rpm","cjose-devel-0:0.6.1-2.module+el8.3.0+129+2feafa46.aarch64.rpm","cjose-devel-0:0.6.1-2.module+el8.3.0+129+2feafa46.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:3032","url":"https://access.redhat.com/errata/RHSA-2020:3032","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-3053.json b/data/advisories/2020/RLSA-2020-3053.json new file mode 100644 index 0000000..9f5f205 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-3053.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:3053","synopsis":"Moderate: container-tools:rhel8 security, bug fix, and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for python-podman-api, udica, toolbox, runc.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* QEMU: slirp: use-after-free in ip_reass() function in ip_input.c (CVE-2020-1983)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1703261","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1703261","description":""},{"ticket":"1782408","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1782408","description":""},{"ticket":"1784950","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1784950","description":""},{"ticket":"1785480","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1785480","description":""},{"ticket":"1806044","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1806044","description":""},{"ticket":"1807379","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1807379","description":""},{"ticket":"1808483","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1808483","description":""},{"ticket":"1809648","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1809648","description":""},{"ticket":"1810874","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1810874","description":""},{"ticket":"1811779","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1811779","description":""},{"ticket":"1815170","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1815170","description":""},{"ticket":"1815991","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1815991","description":""},{"ticket":"1822037","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1822037","description":""},{"ticket":"1826486","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1826486","description":""},{"ticket":"1829061","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1829061","description":""},{"ticket":"1829825","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1829825","description":""},{"ticket":"1833390","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1833390","description":""},{"ticket":"1836440","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1836440","description":""},{"ticket":"1838991","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1838991","description":""},{"ticket":"1839065","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1839065","description":""}],"cves":[{"name":"CVE-2020-1983","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1983","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"CWE-416"},{"name":"CVE-2021-20188","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20188","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.0","cwe":"CWE-863"}],"references":[],"publishedAt":"2020-07-21T15:01:40Z","rpms":{"Rocky Linux 8":{"nvras":["python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+770+e2f49861.noarch.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2.noarch.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+708+6758137d.noarch.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+770+e2f49861.src.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2.src.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+708+6758137d.src.rpm","runc-0:1.0.0-66.rc10.module+el8.5.0+770+e2f49861.aarch64.rpm","runc-0:1.0.0-66.rc10.module+el8.5.0+708+6758137d.aarch64.rpm","runc-0:1.0.0-66.rc10.module+el8.5.0+770+e2f49861.src.rpm","runc-0:1.0.0-66.rc10.module+el8.5.0+708+6758137d.src.rpm","runc-0:1.0.0-66.rc10.module+el8.5.0+770+e2f49861.x86_64.rpm","runc-0:1.0.0-66.rc10.module+el8.5.0+708+6758137d.x86_64.rpm","runc-debuginfo-0:1.0.0-66.rc10.module+el8.5.0+770+e2f49861.aarch64.rpm","runc-debuginfo-0:1.0.0-66.rc10.module+el8.5.0+708+6758137d.aarch64.rpm","runc-debuginfo-0:1.0.0-66.rc10.module+el8.5.0+770+e2f49861.x86_64.rpm","runc-debuginfo-0:1.0.0-66.rc10.module+el8.5.0+708+6758137d.x86_64.rpm","runc-debugsource-0:1.0.0-66.rc10.module+el8.5.0+770+e2f49861.aarch64.rpm","runc-debugsource-0:1.0.0-66.rc10.module+el8.5.0+708+6758137d.aarch64.rpm","runc-debugsource-0:1.0.0-66.rc10.module+el8.5.0+770+e2f49861.x86_64.rpm","runc-debugsource-0:1.0.0-66.rc10.module+el8.5.0+708+6758137d.x86_64.rpm","toolbox-0:0.0.7-1.module+el8.5.0+770+e2f49861.noarch.rpm","toolbox-0:0.0.7-1.module+el8.4.0+559+c02fa3b2.noarch.rpm","toolbox-0:0.0.7-1.module+el8.5.0+708+6758137d.noarch.rpm","toolbox-0:0.0.7-1.module+el8.5.0+770+e2f49861.src.rpm","toolbox-0:0.0.7-1.module+el8.4.0+559+c02fa3b2.src.rpm","toolbox-0:0.0.7-1.module+el8.5.0+708+6758137d.src.rpm","udica-0:0.2.1-2.module+el8.5.0+770+e2f49861.noarch.rpm","udica-0:0.2.1-2.module+el8.4.0+559+c02fa3b2.noarch.rpm","udica-0:0.2.1-2.module+el8.5.0+708+6758137d.noarch.rpm","udica-0:0.2.1-2.module+el8.5.0+770+e2f49861.src.rpm","udica-0:0.2.1-2.module+el8.4.0+559+c02fa3b2.src.rpm","udica-0:0.2.1-2.module+el8.5.0+708+6758137d.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:3053","url":"https://access.redhat.com/errata/RHSA-2020:3053","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-3176.json b/data/advisories/2020/RLSA-2020-3176.json new file mode 100644 index 0000000..94f1f2c --- /dev/null +++ b/data/advisories/2020/RLSA-2020-3176.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:3176","synopsis":"Important: postgresql-jdbc security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for postgresql-jdbc.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs to access a PostgreSQL database.\n\nSecurity Fix(es):\n\n* postgresql-jdbc: XML external entity (XXE) vulnerability in PgSQLXML (CVE-2020-13692)\n\nThis update introduces a backwards incompatible change required to resolve this issue. Refer to the Rocky Enterprise Software Foundation Knowledgebase article 5266441 linked to in the References section for information on how to re-enable the old insecure behavior.\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1852985","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1852985","description":""}],"cves":[{"name":"CVE-2020-13692","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13692","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H","cvss3BaseScore":"7.7","cwe":"CWE-611"}],"references":[],"publishedAt":"2020-07-28T12:19:54Z","rpms":{"Rocky Linux 8":{"nvras":["postgresql-jdbc-0:42.2.3-3.el8_2.noarch.rpm","postgresql-jdbc-0:42.2.3-3.el8_2.src.rpm","postgresql-jdbc-javadoc-0:42.2.3-3.el8_2.noarch.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:3176","url":"https://access.redhat.com/errata/RHSA-2020:3176","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-3185.json b/data/advisories/2020/RLSA-2020-3185.json new file mode 100644 index 0000000..fed5605 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-3185.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:3185","synopsis":"Important: python-pillow security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for python-pillow.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities.\n\nSecurity Fix(es):\n\n* python-pillow: out-of-bounds reads/writes in the parsing of SGI image files in expandrow/expandrow2 (CVE-2020-11538)\n\n* python-pillow: out-of-bounds read in ImagingFliDecode when loading FLI images (CVE-2020-5313)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1789532","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1789532","description":""},{"ticket":"1852814","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1852814","description":""}],"cves":[{"name":"CVE-2020-11538","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11538","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.1","cwe":"CWE-122"},{"name":"CVE-2020-5313","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-5313","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3BaseScore":"8.2","cwe":"CWE-125"}],"references":[],"publishedAt":"2020-07-28T13:17:06Z","rpms":{"Rocky Linux 8":{"nvras":["python3-pillow-0:5.1.1-12.el8_2.aarch64.rpm","python3-pillow-0:5.1.1-12.el8_2.x86_64.rpm","python3-pillow-debuginfo-0:5.1.1-12.el8_2.aarch64.rpm","python3-pillow-debuginfo-0:5.1.1-12.el8_2.x86_64.rpm","python-pillow-0:5.1.1-12.el8_2.src.rpm","python-pillow-debuginfo-0:5.1.1-12.el8_2.aarch64.rpm","python-pillow-debuginfo-0:5.1.1-12.el8_2.x86_64.rpm","python-pillow-debugsource-0:5.1.1-12.el8_2.aarch64.rpm","python-pillow-debugsource-0:5.1.1-12.el8_2.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:3185","url":"https://access.redhat.com/errata/RHSA-2020:3185","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-3280.json b/data/advisories/2020/RLSA-2020-3280.json new file mode 100644 index 0000000..a22ae96 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-3280.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:3280","synopsis":"Moderate: nss and nspr security, bug fix, and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for nspr.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.\n\nNetscape Portable Runtime (NSPR) provides platform independence for non-GUI operating system facilities.\n\nThe following packages have been upgraded to a later upstream version: nss (3.53.1), nspr (4.25.0). (BZ#1809549, BZ#1809550)\n\nSecurity Fix(es):\n\n* nss: UAF in sftk_FreeSession due to improper refcounting (CVE-2019-11756)\n\n* nss: Check length of inputs for cryptographic primitives (CVE-2019-17006)\n\n* nss: Side channel vulnerabilities during RSA key generation (CVE-2020-12402)\n\n* nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state (CVE-2019-17023)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Install of update of nss.x86_64 adds i686 into transaction (BZ#1663187)\n\n* NSS does not set downgrade sentinel in ServerHello.random for TLS 1.0 and TLS 1.1 (BZ#1691409)\n\n* TLS Keying Material Exporter is unsupported by command line tools (BZ#1691454)\n\n* TLS_AES_256_GCM_SHA384 is not marked as FIPS compatible (BZ#1711375)\n\n* Make TLS 1.3 work in FIPS mode (BZ#1724250)\n\n* NSS rejects records with large padding with SHA384 HMAC (BZ#1750921)\n\n* NSS missing IKEv1 Quick Mode KDF (BZ#1809637)\n\n* Name Constraints validation: CN treated as DNS name even when syntactically invalid as DNS name (BZ#1825270)\n\n* FIPS needs nss to restrict valid dh primes to those primes that are approved. (BZ#1854564)\n\n* nss needs to comply to the new SP800-56A rev 3 requirements (BZ#1855825)\n\nEnhancement(s):\n\n* [RFE] nss should use AES for storage of keys (BZ#1723819)","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1663187","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1663187","description":"* Install of update of nss.x86_64 adds i686 into transaction"},{"ticket":"1691454","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1691454","description":"* TLS Keying Material Exporter is unsupported by command line tools"},{"ticket":"1711375","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1711375","description":"* TLS_AES_256_GCM_SHA384 is not marked as FIPS compatible"},{"ticket":"1724250","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1724250","description":"* Make TLS 1.3 work in FIPS mode"},{"ticket":"1750921","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1750921","description":"* NSS rejects records with large padding with SHA384 HMAC"},{"ticket":"1774835","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1774835","description":""},{"ticket":"1775916","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1775916","description":""},{"ticket":"1791225","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1791225","description":""},{"ticket":"1809637","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1809637","description":"* NSS missing IKEv1 Quick Mode KDF"},{"ticket":"1825270","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1825270","description":"* Name Constraints validation: CN treated as DNS name even when syntactically invalid as DNS name"},{"ticket":"1826231","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1826231","description":""},{"ticket":"1854564","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1854564","description":"* FIPS needs nss to restrict valid dh primes to those primes that are approved."}],"cves":[{"name":"CVE-2019-11756","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11756","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.1","cwe":"CWE-416"},{"name":"CVE-2019-17006","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17006","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.1","cwe":"CWE-122"},{"name":"CVE-2019-17023","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17023","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3BaseScore":"5.3","cwe":"UNKNOWN"},{"name":"CVE-2020-12399","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12399","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3BaseScore":"4.4","cwe":"CWE-327"},{"name":"CVE-2020-12402","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12402","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3BaseScore":"4.4","cwe":"CWE-327"}],"references":[],"publishedAt":"2020-08-03T12:45:28Z","rpms":{"Rocky Linux 8":{"nvras":["nspr-0:4.25.0-2.el8_2.aarch64.rpm","nspr-0:4.25.0-2.el8_2.i686.rpm","nspr-0:4.25.0-2.el8_2.src.rpm","nspr-0:4.25.0-2.el8_2.x86_64.rpm","nspr-debuginfo-0:4.25.0-2.el8_2.aarch64.rpm","nspr-debuginfo-0:4.25.0-2.el8_2.i686.rpm","nspr-debuginfo-0:4.25.0-2.el8_2.x86_64.rpm","nspr-debugsource-0:4.25.0-2.el8_2.aarch64.rpm","nspr-debugsource-0:4.25.0-2.el8_2.i686.rpm","nspr-debugsource-0:4.25.0-2.el8_2.x86_64.rpm","nspr-devel-0:4.25.0-2.el8_2.aarch64.rpm","nspr-devel-0:4.25.0-2.el8_2.i686.rpm","nspr-devel-0:4.25.0-2.el8_2.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:3280","url":"https://access.redhat.com/errata/RHSA-2020:3280","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-3623.json b/data/advisories/2020/RLSA-2020-3623.json new file mode 100644 index 0000000..50ac1ea --- /dev/null +++ b/data/advisories/2020/RLSA-2020-3623.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:3623","synopsis":"Important: squid:4 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for libecap.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nSecurity Fix(es):\n\n* squid: HTTP Request Smuggling could result in cache poisoning (CVE-2020-15810)\n\n* squid: HTTP Request Splitting could result in cache poisoning (CVE-2020-15811)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1871700","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1871700","description":""},{"ticket":"1871702","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1871702","description":""}],"cves":[{"name":"CVE-2020-15810","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15810","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","cvss3BaseScore":"9.6","cwe":"CWE-444"},{"name":"CVE-2020-15811","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15811","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","cvss3BaseScore":"9.6","cwe":"CWE-444"}],"references":[],"publishedAt":"2020-09-03T12:36:52Z","rpms":{"Rocky Linux 8":{"nvras":["libecap-0:1.0.1-2.module+el8.4.0+404+316a0dc5.src.rpm","libecap-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm","libecap-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-debuginfo-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm","libecap-debuginfo-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-debugsource-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm","libecap-debugsource-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-devel-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm","libecap-devel-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:3623","url":"https://access.redhat.com/errata/RHSA-2020:3623","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-3654.json b/data/advisories/2020/RLSA-2020-3654.json new file mode 100644 index 0000000..bcf67e3 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-3654.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:3654","synopsis":"Moderate: libcroco security update","severity":"SEVERITY_MODERATE","topic":"An update is available for libcroco.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The libcroco is a standalone Cascading Style Sheet level 2 (CSS2) parsing and manipulation library. \n\nSecurity Fix(es):\n\n* libcroco: Stack overflow in function cr_parser_parse_any_core in cr-parser.c (CVE-2020-12825)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1835377","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1835377","description":""}],"cves":[{"name":"CVE-2020-12825","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12825","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","cvss3BaseScore":"7.1","cwe":"CWE-674->CWE-121"}],"references":[],"publishedAt":"2020-09-08T08:36:30Z","rpms":{"Rocky Linux 8":{"nvras":["libcroco-0:0.6.12-4.el8_2.1.aarch64.rpm","libcroco-0:0.6.12-4.el8_2.1.i686.rpm","libcroco-0:0.6.12-4.el8_2.1.src.rpm","libcroco-0:0.6.12-4.el8_2.1.x86_64.rpm","libcroco-debuginfo-0:0.6.12-4.el8_2.1.aarch64.rpm","libcroco-debuginfo-0:0.6.12-4.el8_2.1.i686.rpm","libcroco-debuginfo-0:0.6.12-4.el8_2.1.x86_64.rpm","libcroco-debugsource-0:0.6.12-4.el8_2.1.aarch64.rpm","libcroco-debugsource-0:0.6.12-4.el8_2.1.i686.rpm","libcroco-debugsource-0:0.6.12-4.el8_2.1.x86_64.rpm","libcroco-devel-0:0.6.12-4.el8_2.1.aarch64.rpm","libcroco-devel-0:0.6.12-4.el8_2.1.i686.rpm","libcroco-devel-0:0.6.12-4.el8_2.1.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:3654","url":"https://access.redhat.com/errata/RHSA-2020:3654","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-3662.json b/data/advisories/2020/RLSA-2020-3662.json new file mode 100644 index 0000000..6a05123 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-3662.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:3662","synopsis":"Moderate: php:7.3 security, bug fix, and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for php-pear, php-pecl-rrd, php, php-pecl-apcu, php-pecl-xdebug, libzip, php-pecl-zip.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.\n\nThe following packages have been upgraded to a later upstream version: php (7.3.20). (BZ#1856655)\n\nSecurity Fix(es):\n\n* php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers() (CVE-2019-11039)\n\n* php: Buffer over-read in exif_read_data() (CVE-2019-11040)\n\n* php: DirectoryIterator class accepts filenames with embedded \\0 byte and treats them as terminating at that byte (CVE-2019-11045)\n\n* php: Information disclosure in exif_read_data() (CVE-2019-11047)\n\n* php: Integer wraparounds when receiving multipart forms (CVE-2019-11048)\n\n* oniguruma: Use-after-free in onig_new_deluxe() in regext.c (CVE-2019-13224)\n\n* oniguruma: NULL pointer dereference in match_at() in regexec.c (CVE-2019-13225)\n\n* oniguruma: Stack exhaustion in regcomp.c because of recursion in regparse.c (CVE-2019-16163)\n\n* oniguruma: Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c (CVE-2019-19203)\n\n* oniguruma: Heap-based buffer over-read in function fetch_interval_quantifier in regparse.c (CVE-2019-19204)\n\n* pcre: Out of bounds read in JIT mode when \\X is used in non-UTF mode (CVE-2019-20454)\n\n* php: Out of bounds read in php_strip_tags_ex (CVE-2020-7059)\n\n* php: Global buffer-overflow in mbfl_filt_conv_big5_wchar function (CVE-2020-7060)\n\n* php: NULL pointer dereference in PHP session upload progress (CVE-2020-7062)\n\n* php: Files added to tar with Phar::buildFromIterator have all-access permissions (CVE-2020-7063)\n\n* php: Information disclosure in exif_read_data() function (CVE-2020-7064)\n\n* php: Using mb_strtolower() function with UTF-32LE encoding leads to potential code execution (CVE-2020-7065)\n\n* php: Heap buffer over-read in exif_scan_thumbnail() (CVE-2019-11041)\n\n* php: Heap buffer over-read in exif_process_user_comment() (CVE-2019-11042)\n\n* php: Out of bounds read when parsing EXIF information (CVE-2019-11050)\n\n* oniguruma: Heap-based buffer overflow in str_lower_case_match in regexec.c (CVE-2019-19246)\n\n* php: Information disclosure in function get_headers (CVE-2020-7066)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1724152","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1724152","description":""},{"ticket":"1724154","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1724154","description":""},{"ticket":"1728965","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1728965","description":""},{"ticket":"1728970","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1728970","description":""},{"ticket":"1735494","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1735494","description":""},{"ticket":"1739459","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1739459","description":""},{"ticket":"1739465","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1739465","description":""},{"ticket":"1768997","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1768997","description":""},{"ticket":"1777537","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1777537","description":""},{"ticket":"1786570","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1786570","description":""},{"ticket":"1786572","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1786572","description":""},{"ticket":"1788258","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1788258","description":""},{"ticket":"1797776","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1797776","description":""},{"ticket":"1797779","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1797779","description":""},{"ticket":"1802061","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1802061","description":""},{"ticket":"1802068","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1802068","description":""},{"ticket":"1808532","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1808532","description":""},{"ticket":"1808536","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1808536","description":""},{"ticket":"1820601","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1820601","description":""},{"ticket":"1820604","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1820604","description":""},{"ticket":"1820627","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1820627","description":""},{"ticket":"1837842","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1837842","description":""}],"cves":[{"name":"CVE-2019-11039","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11039","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3BaseScore":"6.5","cwe":"CWE-190->CWE-125"},{"name":"CVE-2019-11040","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11040","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3BaseScore":"6.5","cwe":"CWE-125"},{"name":"CVE-2019-11041","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11041","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3BaseScore":"3.7","cwe":"CWE-120"},{"name":"CVE-2019-11042","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11042","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3BaseScore":"3.7","cwe":"CWE-120"},{"name":"CVE-2019-11045","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11045","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3BaseScore":"5.9","cwe":"CWE-170"},{"name":"CVE-2019-11047","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11047","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3BaseScore":"6.5","cwe":"CWE-125"},{"name":"CVE-2019-11048","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11048","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-190"},{"name":"CVE-2019-11050","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11050","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3BaseScore":"6.5","cwe":"CWE-125"},{"name":"CVE-2019-13224","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13224","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H","cvss3BaseScore":"6.8","cwe":"CWE-416"},{"name":"CVE-2019-13225","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13225","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3BaseScore":"5.3","cwe":"CWE-476->CWE-400"},{"name":"CVE-2019-16163","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16163","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"CWE-674->CWE-121"},{"name":"CVE-2019-19203","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19203","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-125"},{"name":"CVE-2019-19204","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19204","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-125"},{"name":"CVE-2019-19246","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19246","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3BaseScore":"4.8","cwe":"CWE-125"},{"name":"CVE-2019-20454","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20454","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-125"},{"name":"CVE-2020-7059","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7059","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3BaseScore":"6.5","cwe":"CWE-119"},{"name":"CVE-2020-7060","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7060","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3BaseScore":"6.5","cwe":"CWE-119"},{"name":"CVE-2020-7062","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7062","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-476"},{"name":"CVE-2020-7063","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7063","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3BaseScore":"5.5","cwe":"CWE-284"},{"name":"CVE-2020-7064","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7064","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3BaseScore":"5.4","cwe":"CWE-200"},{"name":"CVE-2020-7065","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7065","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"(CWE-787|CWE-121)"},{"name":"CVE-2020-7066","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7066","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3BaseScore":"4.3","cwe":"CWE-200"}],"references":[],"publishedAt":"2020-09-08T08:38:31Z","rpms":{"Rocky Linux 8":{"nvras":["apcu-panel-0:5.1.17-1.module+el8.4.0+414+2e7afcdd.noarch.rpm","libzip-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","libzip-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.src.rpm","libzip-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","libzip-debuginfo-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","libzip-debuginfo-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","libzip-debugsource-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","libzip-debugsource-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","libzip-devel-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","libzip-devel-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","libzip-tools-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","libzip-tools-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","libzip-tools-debuginfo-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","libzip-tools-debuginfo-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.src.rpm","php-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-bcmath-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-bcmath-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-bcmath-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-bcmath-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-cli-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-cli-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-cli-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-cli-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-common-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-common-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-common-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-common-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-dba-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-dba-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-dba-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-dba-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-dbg-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-dbg-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-dbg-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-dbg-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-debugsource-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-debugsource-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-devel-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-devel-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-embedded-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-embedded-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-embedded-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-embedded-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-enchant-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-enchant-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-enchant-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-enchant-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-fpm-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-fpm-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-fpm-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-fpm-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-gd-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-gd-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-gd-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-gd-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-gmp-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-gmp-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-gmp-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-gmp-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-intl-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-intl-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-intl-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-intl-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-json-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-json-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-json-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-json-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-ldap-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-ldap-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-ldap-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-ldap-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-mbstring-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-mbstring-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-mbstring-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-mbstring-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-mysqlnd-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-mysqlnd-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-mysqlnd-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-mysqlnd-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-odbc-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-odbc-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-odbc-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-odbc-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-opcache-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-opcache-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-opcache-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-opcache-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-pdo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-pdo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-pdo-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-pdo-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-pear-1:1.10.9-1.module+el8.4.0+414+2e7afcdd.noarch.rpm","php-pear-1:1.10.9-1.module+el8.4.0+414+2e7afcdd.src.rpm","php-pecl-apcu-0:5.1.17-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-pecl-apcu-0:5.1.17-1.module+el8.4.0+414+2e7afcdd.src.rpm","php-pecl-apcu-0:5.1.17-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-pecl-apcu-debuginfo-0:5.1.17-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-pecl-apcu-debuginfo-0:5.1.17-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-pecl-apcu-debugsource-0:5.1.17-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-pecl-apcu-debugsource-0:5.1.17-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-pecl-apcu-devel-0:5.1.17-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-pecl-apcu-devel-0:5.1.17-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-pecl-rrd-0:2.0.1-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-pgsql-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-pecl-rrd-0:2.0.1-1.module+el8.4.0+414+2e7afcdd.src.rpm","php-pecl-rrd-0:2.0.1-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-pecl-rrd-debuginfo-0:2.0.1-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-pecl-rrd-debuginfo-0:2.0.1-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-pecl-rrd-debugsource-0:2.0.1-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-pecl-rrd-debugsource-0:2.0.1-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-pecl-xdebug-0:2.8.0-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-pecl-xdebug-0:2.8.0-1.module+el8.4.0+414+2e7afcdd.src.rpm","php-pecl-xdebug-0:2.8.0-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-pecl-xdebug-debuginfo-0:2.8.0-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-pecl-xdebug-debuginfo-0:2.8.0-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-pecl-xdebug-debugsource-0:2.8.0-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-pecl-xdebug-debugsource-0:2.8.0-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-pecl-zip-0:1.15.4-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-pecl-zip-0:1.15.4-1.module+el8.4.0+414+2e7afcdd.src.rpm","php-pecl-zip-0:1.15.4-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-pecl-zip-debuginfo-0:1.15.4-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-pecl-zip-debuginfo-0:1.15.4-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-pecl-zip-debugsource-0:1.15.4-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-pecl-zip-debugsource-0:1.15.4-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-pgsql-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-pgsql-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-pgsql-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-process-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-process-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-process-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-process-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-recode-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-recode-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-recode-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-recode-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-snmp-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-snmp-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-snmp-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-snmp-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-soap-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-soap-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-soap-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-soap-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-xml-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-xml-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-xml-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-xml-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-xmlrpc-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-xmlrpc-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-xmlrpc-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-xmlrpc-debuginfo-0:7.3.20-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:3662","url":"https://access.redhat.com/errata/RHSA-2020:3662","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-3732.json b/data/advisories/2020/RLSA-2020-3732.json new file mode 100644 index 0000000..8208012 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-3732.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:3732","synopsis":"Important: mysql:8.0 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for mecab-ipadic, mecab, mysql.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.\n\nThe following packages have been upgraded to a later upstream version: mysql (8.0.21).\n\nSecurity Fix(es):\n\n* mysql: Server: Security: Privileges multiple unspecified vulnerabilities (CVE-2020-14663, CVE-2020-14678, CVE-2020-14697, CVE-2020-2761, CVE-2020-2774, CVE-2020-2779, CVE-2020-2853, CVE-2020-14586, CVE-2020-14702)\n\n* mysql: Server: Security: Encryption multiple unspecified vulnerabilities (CVE-2019-2914, CVE-2019-2957)\n\n* mysql: InnoDB multiple unspecified vulnerabilities (CVE-2019-2938, CVE-2019-2963, CVE-2019-2968, CVE-2019-3018, CVE-2020-2577, CVE-2020-2589, CVE-2020-2760, CVE-2020-2762, CVE-2020-2814, CVE-2020-2893, CVE-2020-2895, CVE-2020-14568, CVE-2020-14623, CVE-2020-14633, CVE-2020-14634)\n\n* mysql: Server: PS multiple unspecified vulnerabilities (CVE-2019-2946, CVE-2020-2925)\n\n* mysql: Server: Replication multiple unspecified vulnerabilities (CVE-2019-2960, CVE-2020-2759, CVE-2020-2763, CVE-2020-14567)\n\n* mysql: Server: Optimizer multiple unspecified vulnerabilities (CVE-2019-2966, CVE-2019-2967, CVE-2019-2974, CVE-2019-2982, CVE-2019-2991, CVE-2019-2998, CVE-2020-2579, CVE-2020-2660, CVE-2020-2679, CVE-2020-2686, CVE-2020-2765, CVE-2020-2892, CVE-2020-2897, CVE-2020-2901, CVE-2020-2904, CVE-2020-2923, CVE-2020-2924, CVE-2020-2928, CVE-2020-14539, CVE-2020-14547, CVE-2020-14597, CVE-2020-14614, CVE-2020-14654, CVE-2020-14680, CVE-2020-14725)\n\n* mysql: Server: C API multiple unspecified vulnerabilities (CVE-2019-2993, CVE-2019-3011)\n\n* mysql: Server: DDL multiple unspecified vulnerabilities (CVE-2019-2997, CVE-2020-2580)\n\n* mysql: Server: Parser multiple unspecified vulnerabilities (CVE-2019-3004, CVE-2020-2627, CVE-2020-2930, CVE-2020-14619)\n\n* mysql: Server: Connection unspecified vulnerability (CVE-2019-3009)\n\n* mysql: Server: Options multiple unspecified vulnerabilities (CVE-2020-2584, CVE-2020-14632)\n\n* mysql: Server: DML multiple unspecified vulnerabilities (CVE-2020-2588, CVE-2020-2780, CVE-2020-14540, CVE-2020-14575, CVE-2020-14620)\n\n* mysql: C API multiple unspecified vulnerabilities (CVE-2020-2752, CVE-2020-2922, CVE-2020-14550, CVE-2020-2570, CVE-2020-2573, CVE-2020-2574)\n\n* mysql: Server: Logging unspecified vulnerability (CVE-2020-2770)\n\n* mysql: Server: Memcached unspecified vulnerability (CVE-2020-2804)\n\n* mysql: Server: Stored Procedure unspecified vulnerability (CVE-2020-2812)\n\n* mysql: Server: Information Schema multiple unspecified vulnerabilities (CVE-2020-2896, CVE-2020-14559, CVE-2020-2694)\n\n* mysql: Server: Charsets unspecified vulnerability (CVE-2020-2898)\n\n* mysql: Server: Connection Handling unspecified vulnerability (CVE-2020-2903)\n\n* mysql: Server: Group Replication Plugin unspecified vulnerability (CVE-2020-2921)\n\n* mysql: Server: Group Replication GCS unspecified vulnerability (CVE-2020-2926)\n\n* mysql: Server: Pluggable Auth unspecified vulnerability (CVE-2020-14553)\n\n* mysql: Server: UDF unspecified vulnerability (CVE-2020-14576)\n\n* mysql: Server: JSON unspecified vulnerability (CVE-2020-14624)\n\n* mysql: Server: Security: Audit unspecified vulnerability (CVE-2020-14631)\n\n* mysql: Server: Security: Roles multiple unspecified vulnerabilities (CVE-2020-14641, CVE-2020-14643, CVE-2020-14651)\n\n* mysql: Server: Locking unspecified vulnerability (CVE-2020-14656)\n\n* mysql: Information Schema unspecified vulnerability (CVE-2019-2911)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1764675","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1764675","description":""},{"ticket":"1764676","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1764676","description":""},{"ticket":"1764680","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1764680","description":""},{"ticket":"1764681","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1764681","description":""},{"ticket":"1764684","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1764684","description":""},{"ticket":"1764685","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1764685","description":""},{"ticket":"1764686","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1764686","description":""},{"ticket":"1764687","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1764687","description":""},{"ticket":"1764688","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1764688","description":""},{"ticket":"1764689","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1764689","description":""},{"ticket":"1764691","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1764691","description":""},{"ticket":"1764692","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1764692","description":""},{"ticket":"1764693","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1764693","description":""},{"ticket":"1764694","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1764694","description":""},{"ticket":"1764695","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1764695","description":""},{"ticket":"1764696","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1764696","description":""},{"ticket":"1764698","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1764698","description":""},{"ticket":"1764699","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1764699","description":""},{"ticket":"1764700","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1764700","description":""},{"ticket":"1764701","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1764701","description":""},{"ticket":"1796880","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1796880","description":""},{"ticket":"1796881","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1796881","description":""},{"ticket":"1796882","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1796882","description":""},{"ticket":"1796883","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1796883","description":""},{"ticket":"1796884","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1796884","description":""},{"ticket":"1796885","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1796885","description":""},{"ticket":"1796886","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1796886","description":""},{"ticket":"1796887","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1796887","description":""},{"ticket":"1796888","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1796888","description":""},{"ticket":"1796889","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1796889","description":""},{"ticket":"1796905","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1796905","description":""},{"ticket":"1798559","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1798559","description":""},{"ticket":"1798576","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1798576","description":""},{"ticket":"1798587","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1798587","description":""},{"ticket":"1830048","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1830048","description":""},{"ticket":"1830049","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1830049","description":""},{"ticket":"1830050","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1830050","description":""},{"ticket":"1830051","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1830051","description":""},{"ticket":"1830052","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1830052","description":""},{"ticket":"1830053","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1830053","description":""},{"ticket":"1830054","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1830054","description":""},{"ticket":"1830055","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1830055","description":""},{"ticket":"1830056","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1830056","description":""},{"ticket":"1830058","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1830058","description":""},{"ticket":"1830059","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1830059","description":""},{"ticket":"1830060","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1830060","description":""},{"ticket":"1830061","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1830061","description":""},{"ticket":"1830062","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1830062","description":""},{"ticket":"1830064","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1830064","description":""},{"ticket":"1830066","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1830066","description":""},{"ticket":"1830067","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1830067","description":""},{"ticket":"1830068","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1830068","description":""},{"ticket":"1830069","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1830069","description":""},{"ticket":"1830070","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1830070","description":""},{"ticket":"1830071","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1830071","description":""},{"ticket":"1830072","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1830072","description":""},{"ticket":"1830073","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1830073","description":""},{"ticket":"1830074","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1830074","description":""},{"ticket":"1830075","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1830075","description":""},{"ticket":"1830076","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1830076","description":""},{"ticket":"1830077","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1830077","description":""},{"ticket":"1830078","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1830078","description":""},{"ticket":"1830079","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1830079","description":""},{"ticket":"1830082","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1830082","description":""},{"ticket":"1835849","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1835849","description":""},{"ticket":"1835850","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1835850","description":""},{"ticket":"1865945","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1865945","description":""},{"ticket":"1865947","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1865947","description":""},{"ticket":"1865948","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1865948","description":""},{"ticket":"1865949","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1865949","description":""},{"ticket":"1865950","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1865950","description":""},{"ticket":"1865951","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1865951","description":""},{"ticket":"1865952","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1865952","description":""},{"ticket":"1865953","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1865953","description":""},{"ticket":"1865954","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1865954","description":""},{"ticket":"1865955","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1865955","description":""},{"ticket":"1865956","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1865956","description":""},{"ticket":"1865958","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1865958","description":""},{"ticket":"1865959","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1865959","description":""},{"ticket":"1865960","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1865960","description":""},{"ticket":"1865961","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1865961","description":""},{"ticket":"1865962","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1865962","description":""},{"ticket":"1865963","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1865963","description":""},{"ticket":"1865964","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1865964","description":""},{"ticket":"1865965","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1865965","description":""},{"ticket":"1865966","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1865966","description":""},{"ticket":"1865967","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1865967","description":""},{"ticket":"1865968","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1865968","description":""},{"ticket":"1865969","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1865969","description":""},{"ticket":"1865970","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1865970","description":""},{"ticket":"1865971","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1865971","description":""},{"ticket":"1865972","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1865972","description":""},{"ticket":"1865973","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1865973","description":""},{"ticket":"1865974","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1865974","description":""},{"ticket":"1865975","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1865975","description":""},{"ticket":"1865976","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1865976","description":""},{"ticket":"1865977","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1865977","description":""},{"ticket":"1865982","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1865982","description":""},{"ticket":"1874040","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1874040","description":""}],"cves":[{"name":"CVE-2019-2911","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2911","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cvss3BaseScore":"2.7","cwe":"UNKNOWN"},{"name":"CVE-2019-2914","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2914","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2019-2938","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2938","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.4","cwe":"UNKNOWN"},{"name":"CVE-2019-2946","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2946","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2019-2957","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2957","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2960","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2960","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2963","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2963","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2966","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2966","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2019-2967","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2967","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2019-2968","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2968","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2974","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2974","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2019-2982","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2982","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2991","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2991","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3BaseScore":"5.5","cwe":"UNKNOWN"},{"name":"CVE-2019-2993","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2993","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"5.3","cwe":"UNKNOWN"},{"name":"CVE-2019-2997","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2997","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-2998","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2998","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2019-3004","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3004","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2019-3009","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3009","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.4","cwe":"UNKNOWN"},{"name":"CVE-2019-3011","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3011","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2019-3018","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3018","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.4","cwe":"UNKNOWN"},{"name":"CVE-2020-14539","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14539","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2020-14540","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14540","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-14547","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14547","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-14550","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14550","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"5.3","cwe":"UNKNOWN"},{"name":"CVE-2020-14553","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14553","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3BaseScore":"4.3","cwe":"UNKNOWN"},{"name":"CVE-2020-14559","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14559","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3BaseScore":"4.3","cwe":"UNKNOWN"},{"name":"CVE-2020-14567","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14567","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-14568","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14568","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-14575","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14575","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-14576","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14576","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2020-14586","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14586","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-14597","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14597","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-14614","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14614","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-14619","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14619","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2020-14620","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14620","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-14623","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14623","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-14624","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14624","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-14631","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14631","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-14632","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14632","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-14633","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14633","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","cvss3BaseScore":"2.7","cwe":"UNKNOWN"},{"name":"CVE-2020-14634","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14634","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cvss3BaseScore":"2.7","cwe":"UNKNOWN"},{"name":"CVE-2020-14641","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14641","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-14643","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14643","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3BaseScore":"5.5","cwe":"UNKNOWN"},{"name":"CVE-2020-14651","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14651","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3BaseScore":"5.5","cwe":"UNKNOWN"},{"name":"CVE-2020-14654","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14654","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-14656","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14656","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-14663","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14663","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.2","cwe":"UNKNOWN"},{"name":"CVE-2020-14678","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14678","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.2","cwe":"UNKNOWN"},{"name":"CVE-2020-14680","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14680","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2020-14697","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14697","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.2","cwe":"UNKNOWN"},{"name":"CVE-2020-14702","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14702","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-14725","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14725","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-14799","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14799","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-2570","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2570","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"5.9","cwe":"CWE-400"},{"name":"CVE-2020-2573","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2573","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"5.9","cwe":"CWE-400"},{"name":"CVE-2020-2574","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2574","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"5.9","cwe":"CWE-400"},{"name":"CVE-2020-2577","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2577","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-2579","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2579","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2020-2580","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2580","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-2584","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2584","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3BaseScore":"4.4","cwe":"UNKNOWN"},{"name":"CVE-2020-2588","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2588","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-2589","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2589","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-2627","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2627","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2020-2660","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2660","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-2679","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2679","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-2686","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2686","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2020-2694","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2694","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3BaseScore":"3.1","cwe":"UNKNOWN"},{"name":"CVE-2020-2752","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2752","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"5.3","cwe":"UNKNOWN"},{"name":"CVE-2020-2759","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2759","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-2760","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2760","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3BaseScore":"5.5","cwe":"UNKNOWN"},{"name":"CVE-2020-2761","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2761","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-2762","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2762","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-2763","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2763","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-2765","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2765","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-2770","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2770","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-2774","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2774","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-2779","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2779","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-2780","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2780","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2020-2804","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2804","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"5.9","cwe":"UNKNOWN"},{"name":"CVE-2020-2812","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2812","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-2814","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2814","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-2853","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2853","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-2892","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2892","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-2893","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2893","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-2895","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2895","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-2896","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2896","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-2897","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2897","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-2898","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2898","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-2901","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2901","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-2903","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2903","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-2904","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2904","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-2921","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2921","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.4","cwe":"UNKNOWN"},{"name":"CVE-2020-2922","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2922","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3BaseScore":"3.7","cwe":"UNKNOWN"},{"name":"CVE-2020-2923","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2923","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-2924","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2924","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-2925","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2925","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-2926","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2926","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.4","cwe":"UNKNOWN"},{"name":"CVE-2020-2928","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2928","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2020-2930","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2930","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.4","cwe":"UNKNOWN"},{"name":"CVE-2021-1998","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-1998","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L","cvss3BaseScore":"3.8","cwe":"UNKNOWN"},{"name":"CVE-2021-2006","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-2006","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"5.3","cwe":"UNKNOWN"},{"name":"CVE-2021-2007","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-2007","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3BaseScore":"3.7","cwe":"UNKNOWN"},{"name":"CVE-2021-2009","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-2009","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2021-2012","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-2012","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2021-2016","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-2016","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"},{"name":"CVE-2021-2019","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-2019","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cvss3BaseScore":"2.7","cwe":"UNKNOWN"},{"name":"CVE-2021-2020","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-2020","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2021-2144","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-2144","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.2","cwe":"UNKNOWN"},{"name":"CVE-2021-2160","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-2160","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"4.9","cwe":"UNKNOWN"}],"references":[],"publishedAt":"2020-09-14T12:23:24Z","rpms":{"Rocky Linux 8":{"nvras":["mecab-0:0.996-1.module+el8.3.0+242+87d3366a.9.aarch64.rpm","mecab-0:0.996-1.module+el8.3.0+242+87d3366a.9.src.rpm","mecab-0:0.996-1.module+el8.3.0+242+87d3366a.9.x86_64.rpm","mecab-debuginfo-0:0.996-1.module+el8.3.0+242+87d3366a.9.aarch64.rpm","mecab-debuginfo-0:0.996-1.module+el8.3.0+242+87d3366a.9.x86_64.rpm","mecab-debugsource-0:0.996-1.module+el8.3.0+242+87d3366a.9.aarch64.rpm","mecab-debugsource-0:0.996-1.module+el8.3.0+242+87d3366a.9.x86_64.rpm","mecab-ipadic-0:2.7.0.20070801-16.module+el8.3.0+242+87d3366a.aarch64.rpm","mecab-ipadic-0:2.7.0.20070801-16.module+el8.3.0+242+87d3366a.src.rpm","mecab-ipadic-0:2.7.0.20070801-16.module+el8.3.0+242+87d3366a.x86_64.rpm","mecab-ipadic-EUCJP-0:2.7.0.20070801-16.module+el8.3.0+242+87d3366a.aarch64.rpm","mecab-ipadic-EUCJP-0:2.7.0.20070801-16.module+el8.3.0+242+87d3366a.x86_64.rpm","mysql-0:8.0.21-1.module+el8.3.0+242+87d3366a.aarch64.rpm","mysql-0:8.0.21-1.module+el8.3.0+242+87d3366a.src.rpm","mysql-0:8.0.21-1.module+el8.3.0+242+87d3366a.x86_64.rpm","mysql-common-0:8.0.21-1.module+el8.3.0+242+87d3366a.aarch64.rpm","mysql-common-0:8.0.21-1.module+el8.3.0+242+87d3366a.x86_64.rpm","mysql-debuginfo-0:8.0.21-1.module+el8.3.0+242+87d3366a.aarch64.rpm","mysql-debuginfo-0:8.0.21-1.module+el8.3.0+242+87d3366a.x86_64.rpm","mysql-debugsource-0:8.0.21-1.module+el8.3.0+242+87d3366a.aarch64.rpm","mysql-debugsource-0:8.0.21-1.module+el8.3.0+242+87d3366a.x86_64.rpm","mysql-devel-0:8.0.21-1.module+el8.3.0+242+87d3366a.aarch64.rpm","mysql-devel-0:8.0.21-1.module+el8.3.0+242+87d3366a.x86_64.rpm","mysql-devel-debuginfo-0:8.0.21-1.module+el8.3.0+242+87d3366a.aarch64.rpm","mysql-devel-debuginfo-0:8.0.21-1.module+el8.3.0+242+87d3366a.x86_64.rpm","mysql-errmsg-0:8.0.21-1.module+el8.3.0+242+87d3366a.aarch64.rpm","mysql-errmsg-0:8.0.21-1.module+el8.3.0+242+87d3366a.x86_64.rpm","mysql-libs-0:8.0.21-1.module+el8.3.0+242+87d3366a.aarch64.rpm","mysql-libs-0:8.0.21-1.module+el8.3.0+242+87d3366a.x86_64.rpm","mysql-libs-debuginfo-0:8.0.21-1.module+el8.3.0+242+87d3366a.aarch64.rpm","mysql-libs-debuginfo-0:8.0.21-1.module+el8.3.0+242+87d3366a.x86_64.rpm","mysql-server-0:8.0.21-1.module+el8.3.0+242+87d3366a.aarch64.rpm","mysql-server-0:8.0.21-1.module+el8.3.0+242+87d3366a.x86_64.rpm","mysql-server-debuginfo-0:8.0.21-1.module+el8.3.0+242+87d3366a.aarch64.rpm","mysql-server-debuginfo-0:8.0.21-1.module+el8.3.0+242+87d3366a.x86_64.rpm","mysql-test-0:8.0.21-1.module+el8.3.0+242+87d3366a.aarch64.rpm","mysql-test-0:8.0.21-1.module+el8.3.0+242+87d3366a.x86_64.rpm","mysql-test-debuginfo-0:8.0.21-1.module+el8.3.0+242+87d3366a.aarch64.rpm","mysql-test-debuginfo-0:8.0.21-1.module+el8.3.0+242+87d3366a.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:3732","url":"https://access.redhat.com/errata/RHSA-2020:3732","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4059.json b/data/advisories/2020/RLSA-2020-4059.json new file mode 100644 index 0000000..45d0d08 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4059.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4059","synopsis":"Important: virt:rhel security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for libiscsi, netcf, sgabios.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:Rocky Linux module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.\n\nSecurity Fix(es):\n\n* QEMU: usb: out-of-bounds r/w access issue while processing usb packets (CVE-2020-14364)\n\n* QEMU: slirp: networking out-of-bounds read information disclosure vulnerability (CVE-2020-10756)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1835986","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1835986","description":""},{"ticket":"1869201","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1869201","description":""}],"cves":[{"name":"CVE-2020-10756","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10756","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3BaseScore":"6.5","cwe":"CWE-125"},{"name":"CVE-2020-14364","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14364","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3BaseScore":"5.0","cwe":"CWE-125->CWE-787"}],"references":[],"publishedAt":"2020-09-29T08:09:34Z","rpms":{"Rocky Linux 8":{"nvras":["libiscsi-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-0:1.18.0-8.module+el8.7.0+1084+97b81f61.src.rpm","libiscsi-0:1.18.0-8.module+el8.4.0+534+4680a14e.src.rpm","libiscsi-0:1.18.0-8.module+el8.6.0+847+b490afdd.src.rpm","libiscsi-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-devel-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-devel-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-devel-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-utils-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-utils-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-utils-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-0:0.2.8-12.module+el8.7.0+1084+97b81f61.src.rpm","netcf-0:0.2.8-12.module+el8.4.0+534+4680a14e.src.rpm","netcf-0:0.2.8-12.module+el8.6.0+847+b490afdd.src.rpm","netcf-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-debugsource-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-debugsource-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-debugsource-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-devel-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-devel-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-devel-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-devel-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-devel-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-devel-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-devel-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-devel-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-devel-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-libs-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-libs-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-libs-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-libs-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-libs-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-libs-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-libs-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-libs-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-libs-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","sgabios-1:0.20170427git-3.module+el8.7.0+1084+97b81f61.i686.rpm","sgabios-1:0.20170427git-3.module+el8.4.0+534+4680a14e.i686.rpm","sgabios-1:0.20170427git-3.module+el8.6.0+847+b490afdd.i686.rpm","sgabios-1:0.20170427git-3.module+el8.7.0+1084+97b81f61.src.rpm","sgabios-1:0.20170427git-3.module+el8.4.0+534+4680a14e.src.rpm","sgabios-1:0.20170427git-3.module+el8.6.0+847+b490afdd.src.rpm","sgabios-1:0.20170427git-3.module+el8.7.0+1084+97b81f61.x86_64.rpm","sgabios-1:0.20170427git-3.module+el8.4.0+534+4680a14e.x86_64.rpm","sgabios-1:0.20170427git-3.module+el8.6.0+847+b490afdd.x86_64.rpm","sgabios-bin-1:0.20170427git-3.module+el8.7.0+1084+97b81f61.noarch.rpm","sgabios-bin-1:0.20170427git-3.module+el8.4.0+534+4680a14e.noarch.rpm","sgabios-bin-1:0.20170427git-3.module+el8.6.0+847+b490afdd.noarch.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4059","url":"https://access.redhat.com/errata/RHSA-2020:4059","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4272.json b/data/advisories/2020/RLSA-2020-4272.json new file mode 100644 index 0000000..44b02de --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4272.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4272","synopsis":"Moderate: nodejs:12 security and bug fix update","severity":"SEVERITY_MODERATE","topic":"An update is available for nodejs-nodemon, nodejs-packaging.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nThe following packages have been upgraded to a later upstream version: nodejs (12.18.4).\n\nSecurity Fix(es):\n\n* nodejs-dot-prop: prototype pollution (CVE-2020-8116)\n\n* nodejs: HTTP request smuggling due to CR-to-Hyphen conversion (CVE-2020-8201)\n\n* npm: Sensitive information exposure through logs (CVE-2020-15095)\n\n* libuv: buffer overflow in realpath (CVE-2020-8252)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* The nodejs:12/development module is not installable (BZ#1883966)","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1856875","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1856875","description":""},{"ticket":"1868196","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1868196","description":""},{"ticket":"1879311","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1879311","description":""},{"ticket":"1879315","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1879315","description":""},{"ticket":"1883966","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1883966","description":"* The nodejs:12/development module is not installable"}],"cves":[{"name":"CVE-2020-15095","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15095","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3BaseScore":"4.4","cwe":"CWE-532"},{"name":"CVE-2020-8116","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8116","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3BaseScore":"7.3","cwe":"CWE-471"},{"name":"CVE-2020-8201","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8201","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3BaseScore":"7.4","cwe":"CWE-444"},{"name":"CVE-2020-8252","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8252","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.8","cwe":"CWE-131->CWE-122"}],"references":[],"publishedAt":"2020-10-19T07:13:10Z","rpms":{"Rocky Linux 8":{"nvras":["nodejs-nodemon-0:1.18.3-1.module+el8.3.0+101+f84c7154.noarch.rpm","nodejs-nodemon-0:1.18.3-1.module+el8.3.0+101+f84c7154.src.rpm","nodejs-packaging-0:17-3.module+el8.3.0+101+f84c7154.noarch.rpm","nodejs-packaging-0:17-3.module+el8.3.0+101+f84c7154.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4272","url":"https://access.redhat.com/errata/RHSA-2020:4272","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4436.json b/data/advisories/2020/RLSA-2020-4436.json new file mode 100644 index 0000000..7a1b05a --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4436.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4436","synopsis":"Low: gnome-software and fwupd security, bug fix, and enhancement update","severity":"SEVERITY_LOW","topic":"An update is available for appstream-data, libxmlb.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The gnome-software packages contain an application that makes it easy to add, remove, and update software in the GNOME desktop.\n\nThe appstream-data package provides the distribution specific AppStream metadata required for the GNOME and KDE software centers. \n\nThe fwupd packages provide a service that allows session software to update device firmware.\n\nThe following packages have been upgraded to a later upstream version: gnome-software (3.36.1), fwupd (1.4.2).\n\nSecurity Fix(es):\n\n* fwupd: Possible bypass in signature verification (CVE-2020-10759)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1797932","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1797932","description":""},{"ticket":"1815502","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1815502","description":""},{"ticket":"1839774","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1839774","description":""},{"ticket":"1844316","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1844316","description":""},{"ticket":"1844488","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1844488","description":""},{"ticket":"1845714","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1845714","description":""}],"cves":[{"name":"CVE-2020-10759","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10759","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N","cvss3BaseScore":"5.7","cwe":"CWE-347"}],"references":[],"publishedAt":"2020-11-03T12:04:30Z","rpms":{"Rocky Linux 8":{"nvras":["appstream-data-0:8-20200724.el8.noarch.rpm","appstream-data-0:8-20200724.el8.src.rpm","libxmlb-0:0.1.15-1.el8.aarch64.rpm","libxmlb-0:0.1.15-1.el8.i686.rpm","libxmlb-0:0.1.15-1.el8.src.rpm","libxmlb-0:0.1.15-1.el8.x86_64.rpm","libxmlb-debuginfo-0:0.1.15-1.el8.aarch64.rpm","libxmlb-debuginfo-0:0.1.15-1.el8.i686.rpm","libxmlb-debuginfo-0:0.1.15-1.el8.x86_64.rpm","libxmlb-debugsource-0:0.1.15-1.el8.aarch64.rpm","libxmlb-debugsource-0:0.1.15-1.el8.i686.rpm","libxmlb-debugsource-0:0.1.15-1.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4436","url":"https://access.redhat.com/errata/RHSA-2020:4436","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4451.json b/data/advisories/2020/RLSA-2020-4451.json new file mode 100644 index 0000000..64ab62a --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4451.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4451","synopsis":"Moderate: GNOME security, bug fix, and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for xdg-desktop-portal-gtk, tracker, LibRaw, vte291, gnome-remote-desktop, PackageKit, pipewire, pipewire0.2, potrace, gtk3, dleyna-renderer, libsoup, pygobject3, webrtc-audio-processing, frei0r-plugins, gnome-session, gsettings-desktop-schemas.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"GNOME is the default desktop environment of Rocky Linux.\n\nThe following packages have been upgraded to a later upstream version: gnome-remote-desktop (0.1.8), pipewire (0.3.6), vte291 (0.52.4), webkit2gtk3 (2.28.4), xdg-desktop-portal (1.6.0), xdg-desktop-portal-gtk (1.6.0). (BZ#1775345, BZ#1779691, BZ#1817143, BZ#1832347, BZ#1837406)\n\nSecurity Fix(es):\n\n* webkitgtk: Multiple security issues (CVE-2019-8625, CVE-2019-8710, CVE-2019-8720, CVE-2019-8743, CVE-2019-8764, CVE-2019-8766, CVE-2019-8769, CVE-2019-8771, CVE-2019-8782, CVE-2019-8783, CVE-2019-8808, CVE-2019-8811, CVE-2019-8812, CVE-2019-8813, CVE-2019-8814, CVE-2019-8815, CVE-2019-8816, CVE-2019-8819, CVE-2019-8820, CVE-2019-8823, CVE-2019-8835, CVE-2019-8844, CVE-2019-8846, CVE-2020-3862, CVE-2020-3864, CVE-2020-3865, CVE-2020-3867, CVE-2020-3868, CVE-2020-3885, CVE-2020-3894, CVE-2020-3895, CVE-2020-3897, CVE-2020-3899, CVE-2020-3900, CVE-2020-3901, CVE-2020-3902, CVE-2020-9802, CVE-2020-9803, CVE-2020-9805, CVE-2020-9806, CVE-2020-9807, CVE-2020-9843, CVE-2020-9850, CVE-2020-9862, CVE-2020-9893, CVE-2020-9894, CVE-2020-9895, CVE-2020-9915, CVE-2020-9925, CVE-2020-10018, CVE-2020-11793)\n\n* gnome-settings-daemon: Rocky Enterprise Software Foundation Customer Portal password logged and passed as command line argument when user registers through GNOME control center (CVE-2020-14391)\n\n* LibRaw: lack of thumbnail size range check can lead to buffer overflow (CVE-2020-15503)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1207179","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1207179","description":""},{"ticket":"1566027","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1566027","description":""},{"ticket":"1569868","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1569868","description":""},{"ticket":"1652178","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1652178","description":""},{"ticket":"1656262","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1656262","description":""},{"ticket":"1668895","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1668895","description":""},{"ticket":"1692536","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1692536","description":""},{"ticket":"1706008","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1706008","description":""},{"ticket":"1706076","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1706076","description":""},{"ticket":"1715845","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1715845","description":""},{"ticket":"1719937","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1719937","description":""},{"ticket":"1758891","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1758891","description":""},{"ticket":"1775345","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1775345","description":"The following packages have been upgraded to a later upstream version: gnome-remote-desktop (0.1.8), pipewire (0.3.6), vte291 (0.52.4), webkit2gtk3 (2.28.4), xdg-desktop-portal (1.6.0), xdg-desktop-portal-gtk (1.6.0). (BZ#1775345, BZ#1779691, BZ#1817143, BZ#1832347, BZ#1837406)"},{"ticket":"1778579","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1778579","description":""},{"ticket":"1779691","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1779691","description":""},{"ticket":"1794045","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1794045","description":""},{"ticket":"1804719","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1804719","description":""},{"ticket":"1805929","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1805929","description":""},{"ticket":"1811721","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1811721","description":""},{"ticket":"1814820","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1814820","description":""},{"ticket":"1816070","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1816070","description":""},{"ticket":"1816678","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1816678","description":""},{"ticket":"1816684","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1816684","description":""},{"ticket":"1816686","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1816686","description":""},{"ticket":"1817143","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1817143","description":""},{"ticket":"1820759","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1820759","description":""},{"ticket":"1820760","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1820760","description":""},{"ticket":"1824362","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1824362","description":""},{"ticket":"1827030","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1827030","description":""},{"ticket":"1829369","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1829369","description":""},{"ticket":"1832347","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1832347","description":""},{"ticket":"1833158","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1833158","description":""},{"ticket":"1837381","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1837381","description":""},{"ticket":"1837406","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1837406","description":""},{"ticket":"1837413","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1837413","description":""},{"ticket":"1837648","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1837648","description":""},{"ticket":"1840080","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1840080","description":""},{"ticket":"1840788","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1840788","description":""},{"ticket":"1843486","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1843486","description":""},{"ticket":"1844578","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1844578","description":""},{"ticket":"1846191","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1846191","description":""},{"ticket":"1847051","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1847051","description":""},{"ticket":"1847061","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1847061","description":""},{"ticket":"1847062","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1847062","description":""},{"ticket":"1847203","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1847203","description":""},{"ticket":"1853477","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1853477","description":""},{"ticket":"1854734","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1854734","description":""},{"ticket":"1866332","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1866332","description":""},{"ticket":"1868260","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1868260","description":""},{"ticket":"1872270","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1872270","description":""},{"ticket":"1873093","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1873093","description":""},{"ticket":"1873963","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1873963","description":""},{"ticket":"1876462","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1876462","description":""},{"ticket":"1876463","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1876463","description":""},{"ticket":"1876465","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1876465","description":""},{"ticket":"1876468","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1876468","description":""},{"ticket":"1876470","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1876470","description":""},{"ticket":"1876472","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1876472","description":""},{"ticket":"1876473","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1876473","description":""},{"ticket":"1876476","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1876476","description":""},{"ticket":"1876516","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1876516","description":""},{"ticket":"1876518","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1876518","description":""},{"ticket":"1876521","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1876521","description":""},{"ticket":"1876522","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1876522","description":""},{"ticket":"1876523","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1876523","description":""},{"ticket":"1876536","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1876536","description":""},{"ticket":"1876537","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1876537","description":""},{"ticket":"1876540","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1876540","description":""},{"ticket":"1876543","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1876543","description":""},{"ticket":"1876545","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1876545","description":""},{"ticket":"1876548","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1876548","description":""},{"ticket":"1876549","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1876549","description":""},{"ticket":"1876550","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1876550","description":""},{"ticket":"1876552","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1876552","description":""},{"ticket":"1876553","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1876553","description":""},{"ticket":"1876554","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1876554","description":""},{"ticket":"1876555","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1876555","description":""},{"ticket":"1876556","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1876556","description":""},{"ticket":"1876590","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1876590","description":""},{"ticket":"1876591","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1876591","description":""},{"ticket":"1876594","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1876594","description":""},{"ticket":"1876607","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1876607","description":""},{"ticket":"1876611","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1876611","description":""},{"ticket":"1876617","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1876617","description":""},{"ticket":"1876619","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1876619","description":""},{"ticket":"1877853","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1877853","description":""},{"ticket":"1879532","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1879532","description":""},{"ticket":"1879535","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1879535","description":""},{"ticket":"1879536","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1879536","description":""},{"ticket":"1879538","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1879538","description":""},{"ticket":"1879540","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1879540","description":""},{"ticket":"1879541","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1879541","description":""},{"ticket":"1879545","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1879545","description":""},{"ticket":"1879557","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1879557","description":""},{"ticket":"1879559","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1879559","description":""},{"ticket":"1879563","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1879563","description":""},{"ticket":"1879564","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1879564","description":""},{"ticket":"1879566","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1879566","description":""},{"ticket":"1879568","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1879568","description":""},{"ticket":"1880339","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1880339","description":""}],"cves":[{"name":"CVE-2019-8625","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8625","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"UNKNOWN"},{"name":"CVE-2019-8710","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8710","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8720","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8720","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8743","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8743","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8764","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8764","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"UNKNOWN"},{"name":"CVE-2019-8766","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8766","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8769","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8769","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3BaseScore":"4.3","cwe":"UNKNOWN"},{"name":"CVE-2019-8771","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8771","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3BaseScore":"5.4","cwe":"UNKNOWN"},{"name":"CVE-2019-8782","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8782","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8783","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8783","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8808","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8808","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8811","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8811","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8812","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8812","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8813","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8813","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"UNKNOWN"},{"name":"CVE-2019-8814","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8814","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8815","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8815","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8816","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8816","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8819","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8819","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8820","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8820","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8823","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8823","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2019-8835","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8835","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.1","cwe":"CWE-119"},{"name":"CVE-2019-8844","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8844","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.1","cwe":"CWE-119"},{"name":"CVE-2019-8846","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8846","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.1","cwe":"CWE-416"},{"name":"CVE-2020-10018","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10018","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.5","cwe":"CWE-400"},{"name":"CVE-2020-11793","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11793","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"CWE-416"},{"name":"CVE-2020-14391","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14391","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3BaseScore":"5.0","cwe":"CWE-522"},{"name":"CVE-2020-15503","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15503","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-120"},{"name":"CVE-2020-3862","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3862","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2020-3864","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3864","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.5","cwe":"UNKNOWN"},{"name":"CVE-2020-3865","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3865","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2020-3867","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3867","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"UNKNOWN"},{"name":"CVE-2020-3868","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3868","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2020-3885","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3885","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3BaseScore":"4.3","cwe":"UNKNOWN"},{"name":"CVE-2020-3894","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3894","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3BaseScore":"3.1","cwe":"UNKNOWN"},{"name":"CVE-2020-3895","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3895","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2020-3897","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3897","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2020-3899","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3899","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2020-3900","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3900","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2020-3901","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3901","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"UNKNOWN"},{"name":"CVE-2020-3902","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3902","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"UNKNOWN"},{"name":"CVE-2020-9802","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9802","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"CWE-841"},{"name":"CVE-2020-9803","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9803","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"CWE-20->CWE-119"},{"name":"CVE-2020-9805","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9805","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3BaseScore":"7.1","cwe":"CWE-841->CWE-79"},{"name":"CVE-2020-9806","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9806","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"CWE-119"},{"name":"CVE-2020-9807","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9807","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"CWE-119"},{"name":"CVE-2020-9843","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9843","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3BaseScore":"7.1","cwe":"CWE-20->CWE-79"},{"name":"CVE-2020-9850","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9850","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3BaseScore":"7.3","cwe":"CWE-841"},{"name":"CVE-2020-9862","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9862","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.8","cwe":"CWE-77"},{"name":"CVE-2020-9893","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9893","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"CWE-119->CWE-416"},{"name":"CVE-2020-9894","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9894","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"9.8","cwe":"CWE-20->CWE-125"},{"name":"CVE-2020-9895","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9895","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"9.8","cwe":"CWE-416"},{"name":"CVE-2020-9915","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9915","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3BaseScore":"6.3","cwe":"CWE-284"},{"name":"CVE-2020-9925","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9925","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3BaseScore":"7.1","cwe":"CWE-841->CWE-79"},{"name":"CVE-2020-9952","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9952","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3BaseScore":"7.1","cwe":"CWE-20->CWE-79"},{"name":"CVE-2021-30666","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30666","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"CWE-20"},{"name":"CVE-2021-30761","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30761","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"CWE-20"},{"name":"CVE-2021-30762","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30762","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"CWE-20"}],"references":[],"publishedAt":"2020-11-03T12:05:56Z","rpms":{"Rocky Linux 8":{"nvras":["dleyna-renderer-0:0.6.0-3.el8.src.rpm","dleyna-renderer-0:0.6.0-3.el8.x86_64.rpm","dleyna-renderer-debuginfo-0:0.6.0-3.el8.x86_64.rpm","dleyna-renderer-debugsource-0:0.6.0-3.el8.x86_64.rpm","frei0r-devel-0:1.6.1-7.el8.aarch64.rpm","frei0r-devel-0:1.6.1-7.el8.i686.rpm","frei0r-devel-0:1.6.1-7.el8.x86_64.rpm","frei0r-plugins-0:1.6.1-7.el8.aarch64.rpm","frei0r-plugins-0:1.6.1-7.el8.i686.rpm","frei0r-plugins-0:1.6.1-7.el8.src.rpm","frei0r-plugins-0:1.6.1-7.el8.x86_64.rpm","frei0r-plugins-debuginfo-0:1.6.1-7.el8.aarch64.rpm","frei0r-plugins-debuginfo-0:1.6.1-7.el8.i686.rpm","frei0r-plugins-debuginfo-0:1.6.1-7.el8.x86_64.rpm","frei0r-plugins-debugsource-0:1.6.1-7.el8.aarch64.rpm","frei0r-plugins-debugsource-0:1.6.1-7.el8.i686.rpm","frei0r-plugins-debugsource-0:1.6.1-7.el8.x86_64.rpm","frei0r-plugins-opencv-0:1.6.1-7.el8.aarch64.rpm","frei0r-plugins-opencv-0:1.6.1-7.el8.x86_64.rpm","frei0r-plugins-opencv-debuginfo-0:1.6.1-7.el8.aarch64.rpm","frei0r-plugins-opencv-debuginfo-0:1.6.1-7.el8.x86_64.rpm","gnome-remote-desktop-0:0.1.8-3.el8.aarch64.rpm","gnome-remote-desktop-0:0.1.8-3.el8.src.rpm","gnome-remote-desktop-0:0.1.8-3.el8.x86_64.rpm","gnome-remote-desktop-debuginfo-0:0.1.8-3.el8.aarch64.rpm","gnome-remote-desktop-debuginfo-0:0.1.8-3.el8.x86_64.rpm","gnome-remote-desktop-debugsource-0:0.1.8-3.el8.aarch64.rpm","gnome-remote-desktop-debugsource-0:0.1.8-3.el8.x86_64.rpm","gnome-session-0:3.28.1-10.el8.aarch64.rpm","gnome-session-0:3.28.1-10.el8.src.rpm","gnome-session-0:3.28.1-10.el8.x86_64.rpm","gnome-session-debuginfo-0:3.28.1-10.el8.aarch64.rpm","gnome-session-debuginfo-0:3.28.1-10.el8.x86_64.rpm","gnome-session-debugsource-0:3.28.1-10.el8.aarch64.rpm","gnome-session-debugsource-0:3.28.1-10.el8.x86_64.rpm","gnome-session-wayland-session-0:3.28.1-10.el8.aarch64.rpm","gnome-session-wayland-session-0:3.28.1-10.el8.x86_64.rpm","gnome-session-xsession-0:3.28.1-10.el8.aarch64.rpm","gnome-session-xsession-0:3.28.1-10.el8.x86_64.rpm","gsettings-desktop-schemas-0:3.32.0-5.el8.aarch64.rpm","gsettings-desktop-schemas-0:3.32.0-5.el8.i686.rpm","gsettings-desktop-schemas-0:3.32.0-5.el8.src.rpm","gsettings-desktop-schemas-0:3.32.0-5.el8.x86_64.rpm","gsettings-desktop-schemas-devel-0:3.32.0-5.el8.aarch64.rpm","gsettings-desktop-schemas-devel-0:3.32.0-5.el8.i686.rpm","gsettings-desktop-schemas-devel-0:3.32.0-5.el8.x86_64.rpm","gtk3-0:3.22.30-6.el8.aarch64.rpm","gtk3-0:3.22.30-6.el8.i686.rpm","gtk3-0:3.22.30-6.el8.src.rpm","gtk3-0:3.22.30-6.el8.x86_64.rpm","gtk3-debuginfo-0:3.22.30-6.el8.aarch64.rpm","gtk3-debuginfo-0:3.22.30-6.el8.i686.rpm","gtk3-debuginfo-0:3.22.30-6.el8.x86_64.rpm","gtk3-debugsource-0:3.22.30-6.el8.aarch64.rpm","gtk3-debugsource-0:3.22.30-6.el8.i686.rpm","gtk3-debugsource-0:3.22.30-6.el8.x86_64.rpm","gtk3-devel-0:3.22.30-6.el8.aarch64.rpm","gtk3-devel-0:3.22.30-6.el8.i686.rpm","gtk3-devel-0:3.22.30-6.el8.x86_64.rpm","gtk3-devel-debuginfo-0:3.22.30-6.el8.aarch64.rpm","gtk3-devel-debuginfo-0:3.22.30-6.el8.i686.rpm","gtk3-devel-debuginfo-0:3.22.30-6.el8.x86_64.rpm","gtk3-immodule-xim-0:3.22.30-6.el8.aarch64.rpm","gtk3-immodule-xim-0:3.22.30-6.el8.x86_64.rpm","gtk3-immodule-xim-debuginfo-0:3.22.30-6.el8.aarch64.rpm","gtk3-immodule-xim-debuginfo-0:3.22.30-6.el8.x86_64.rpm","gtk-update-icon-cache-0:3.22.30-6.el8.aarch64.rpm","gtk-update-icon-cache-0:3.22.30-6.el8.x86_64.rpm","gtk-update-icon-cache-debuginfo-0:3.22.30-6.el8.aarch64.rpm","gtk-update-icon-cache-debuginfo-0:3.22.30-6.el8.x86_64.rpm","LibRaw-0:0.19.5-2.el8.i686.rpm","LibRaw-0:0.19.5-2.el8.src.rpm","LibRaw-0:0.19.5-2.el8.x86_64.rpm","LibRaw-debuginfo-0:0.19.5-2.el8.i686.rpm","LibRaw-debuginfo-0:0.19.5-2.el8.x86_64.rpm","LibRaw-debugsource-0:0.19.5-2.el8.i686.rpm","LibRaw-debugsource-0:0.19.5-2.el8.x86_64.rpm","LibRaw-devel-0:0.19.5-2.el8.i686.rpm","LibRaw-devel-0:0.19.5-2.el8.x86_64.rpm","libsoup-0:2.62.3-2.el8.aarch64.rpm","libsoup-0:2.62.3-2.el8.i686.rpm","libsoup-0:2.62.3-2.el8.src.rpm","libsoup-0:2.62.3-2.el8.x86_64.rpm","libsoup-debuginfo-0:2.62.3-2.el8.aarch64.rpm","libsoup-debuginfo-0:2.62.3-2.el8.i686.rpm","libsoup-debuginfo-0:2.62.3-2.el8.x86_64.rpm","libsoup-debugsource-0:2.62.3-2.el8.aarch64.rpm","libsoup-debugsource-0:2.62.3-2.el8.i686.rpm","libsoup-debugsource-0:2.62.3-2.el8.x86_64.rpm","libsoup-devel-0:2.62.3-2.el8.aarch64.rpm","libsoup-devel-0:2.62.3-2.el8.i686.rpm","libsoup-devel-0:2.62.3-2.el8.x86_64.rpm","PackageKit-0:1.1.12-6.el8.aarch64.rpm","PackageKit-0:1.1.12-6.el8.src.rpm","PackageKit-0:1.1.12-6.el8.x86_64.rpm","PackageKit-command-not-found-0:1.1.12-6.el8.aarch64.rpm","PackageKit-command-not-found-0:1.1.12-6.el8.x86_64.rpm","PackageKit-command-not-found-debuginfo-0:1.1.12-6.el8.aarch64.rpm","PackageKit-command-not-found-debuginfo-0:1.1.12-6.el8.x86_64.rpm","PackageKit-cron-0:1.1.12-6.el8.aarch64.rpm","PackageKit-cron-0:1.1.12-6.el8.x86_64.rpm","PackageKit-debuginfo-0:1.1.12-6.el8.aarch64.rpm","PackageKit-debuginfo-0:1.1.12-6.el8.i686.rpm","PackageKit-debuginfo-0:1.1.12-6.el8.x86_64.rpm","PackageKit-debugsource-0:1.1.12-6.el8.aarch64.rpm","PackageKit-debugsource-0:1.1.12-6.el8.i686.rpm","PackageKit-debugsource-0:1.1.12-6.el8.x86_64.rpm","PackageKit-glib-0:1.1.12-6.el8.aarch64.rpm","PackageKit-glib-0:1.1.12-6.el8.i686.rpm","PackageKit-glib-0:1.1.12-6.el8.x86_64.rpm","PackageKit-glib-debuginfo-0:1.1.12-6.el8.aarch64.rpm","PackageKit-glib-debuginfo-0:1.1.12-6.el8.i686.rpm","PackageKit-glib-debuginfo-0:1.1.12-6.el8.x86_64.rpm","PackageKit-glib-devel-0:1.1.12-6.el8.aarch64.rpm","PackageKit-glib-devel-0:1.1.12-6.el8.i686.rpm","PackageKit-glib-devel-0:1.1.12-6.el8.x86_64.rpm","PackageKit-gstreamer-plugin-0:1.1.12-6.el8.aarch64.rpm","PackageKit-gstreamer-plugin-0:1.1.12-6.el8.x86_64.rpm","PackageKit-gstreamer-plugin-debuginfo-0:1.1.12-6.el8.aarch64.rpm","PackageKit-gstreamer-plugin-debuginfo-0:1.1.12-6.el8.x86_64.rpm","PackageKit-gtk3-module-0:1.1.12-6.el8.aarch64.rpm","PackageKit-gtk3-module-0:1.1.12-6.el8.i686.rpm","PackageKit-gtk3-module-0:1.1.12-6.el8.x86_64.rpm","PackageKit-gtk3-module-debuginfo-0:1.1.12-6.el8.aarch64.rpm","PackageKit-gtk3-module-debuginfo-0:1.1.12-6.el8.i686.rpm","PackageKit-gtk3-module-debuginfo-0:1.1.12-6.el8.x86_64.rpm","pipewire0.2-0:0.2.7-6.el8.src.rpm","pipewire0.2-debugsource-0:0.2.7-6.el8.aarch64.rpm","pipewire0.2-debugsource-0:0.2.7-6.el8.i686.rpm","pipewire0.2-debugsource-0:0.2.7-6.el8.x86_64.rpm","pipewire0.2-devel-0:0.2.7-6.el8.aarch64.rpm","pipewire0.2-devel-0:0.2.7-6.el8.i686.rpm","pipewire0.2-devel-0:0.2.7-6.el8.x86_64.rpm","pipewire0.2-libs-0:0.2.7-6.el8.aarch64.rpm","pipewire0.2-libs-0:0.2.7-6.el8.i686.rpm","pipewire0.2-libs-0:0.2.7-6.el8.x86_64.rpm","pipewire0.2-libs-debuginfo-0:0.2.7-6.el8.aarch64.rpm","pipewire0.2-libs-debuginfo-0:0.2.7-6.el8.i686.rpm","pipewire0.2-libs-debuginfo-0:0.2.7-6.el8.x86_64.rpm","pipewire-0:0.3.6-1.el8.aarch64.rpm","pipewire-0:0.3.6-1.el8.i686.rpm","pipewire-0:0.3.6-1.el8.src.rpm","pipewire-0:0.3.6-1.el8.x86_64.rpm","pipewire-debuginfo-0:0.3.6-1.el8.aarch64.rpm","pipewire-debuginfo-0:0.3.6-1.el8.i686.rpm","pipewire-debuginfo-0:0.3.6-1.el8.x86_64.rpm","pipewire-debugsource-0:0.3.6-1.el8.aarch64.rpm","pipewire-debugsource-0:0.3.6-1.el8.i686.rpm","pipewire-debugsource-0:0.3.6-1.el8.x86_64.rpm","pipewire-devel-0:0.3.6-1.el8.aarch64.rpm","pipewire-devel-0:0.3.6-1.el8.i686.rpm","pipewire-devel-0:0.3.6-1.el8.x86_64.rpm","pipewire-doc-0:0.3.6-1.el8.aarch64.rpm","pipewire-doc-0:0.3.6-1.el8.x86_64.rpm","pipewire-libs-0:0.3.6-1.el8.aarch64.rpm","pipewire-libs-0:0.3.6-1.el8.i686.rpm","pipewire-libs-0:0.3.6-1.el8.x86_64.rpm","pipewire-libs-debuginfo-0:0.3.6-1.el8.aarch64.rpm","pipewire-libs-debuginfo-0:0.3.6-1.el8.i686.rpm","pipewire-libs-debuginfo-0:0.3.6-1.el8.x86_64.rpm","pipewire-utils-0:0.3.6-1.el8.aarch64.rpm","pipewire-utils-0:0.3.6-1.el8.x86_64.rpm","pipewire-utils-debuginfo-0:0.3.6-1.el8.aarch64.rpm","pipewire-utils-debuginfo-0:0.3.6-1.el8.x86_64.rpm","potrace-0:1.15-3.el8.aarch64.rpm","potrace-0:1.15-3.el8.i686.rpm","potrace-0:1.15-3.el8.src.rpm","potrace-0:1.15-3.el8.x86_64.rpm","potrace-debuginfo-0:1.15-3.el8.aarch64.rpm","potrace-debuginfo-0:1.15-3.el8.i686.rpm","potrace-debuginfo-0:1.15-3.el8.x86_64.rpm","potrace-debugsource-0:1.15-3.el8.aarch64.rpm","potrace-debugsource-0:1.15-3.el8.i686.rpm","potrace-debugsource-0:1.15-3.el8.x86_64.rpm","pygobject3-0:3.28.3-2.el8.src.rpm","pygobject3-debuginfo-0:3.28.3-2.el8.aarch64.rpm","pygobject3-debuginfo-0:3.28.3-2.el8.i686.rpm","pygobject3-debuginfo-0:3.28.3-2.el8.x86_64.rpm","pygobject3-debugsource-0:3.28.3-2.el8.aarch64.rpm","pygobject3-debugsource-0:3.28.3-2.el8.i686.rpm","pygobject3-debugsource-0:3.28.3-2.el8.x86_64.rpm","pygobject3-devel-0:3.28.3-2.el8.aarch64.rpm","pygobject3-devel-0:3.28.3-2.el8.i686.rpm","pygobject3-devel-0:3.28.3-2.el8.x86_64.rpm","python3-gobject-0:3.28.3-2.el8.aarch64.rpm","python3-gobject-0:3.28.3-2.el8.i686.rpm","python3-gobject-0:3.28.3-2.el8.x86_64.rpm","python3-gobject-base-0:3.28.3-2.el8.aarch64.rpm","python3-gobject-base-0:3.28.3-2.el8.i686.rpm","python3-gobject-base-0:3.28.3-2.el8.x86_64.rpm","python3-gobject-base-debuginfo-0:3.28.3-2.el8.aarch64.rpm","python3-gobject-base-debuginfo-0:3.28.3-2.el8.i686.rpm","python3-gobject-base-debuginfo-0:3.28.3-2.el8.x86_64.rpm","python3-gobject-debuginfo-0:3.28.3-2.el8.aarch64.rpm","python3-gobject-debuginfo-0:3.28.3-2.el8.i686.rpm","python3-gobject-debuginfo-0:3.28.3-2.el8.x86_64.rpm","tracker-0:2.1.5-2.el8.aarch64.rpm","tracker-0:2.1.5-2.el8.i686.rpm","tracker-0:2.1.5-2.el8.src.rpm","tracker-0:2.1.5-2.el8.x86_64.rpm","tracker-debuginfo-0:2.1.5-2.el8.aarch64.rpm","tracker-debuginfo-0:2.1.5-2.el8.i686.rpm","tracker-debuginfo-0:2.1.5-2.el8.x86_64.rpm","tracker-debugsource-0:2.1.5-2.el8.aarch64.rpm","tracker-debugsource-0:2.1.5-2.el8.i686.rpm","tracker-debugsource-0:2.1.5-2.el8.x86_64.rpm","tracker-devel-0:2.1.5-2.el8.aarch64.rpm","tracker-devel-0:2.1.5-2.el8.i686.rpm","tracker-devel-0:2.1.5-2.el8.x86_64.rpm","vte291-0:0.52.4-2.el8.aarch64.rpm","vte291-0:0.52.4-2.el8.i686.rpm","vte291-0:0.52.4-2.el8.src.rpm","vte291-0:0.52.4-2.el8.x86_64.rpm","vte291-debuginfo-0:0.52.4-2.el8.aarch64.rpm","vte291-debuginfo-0:0.52.4-2.el8.i686.rpm","vte291-debuginfo-0:0.52.4-2.el8.x86_64.rpm","vte291-debugsource-0:0.52.4-2.el8.aarch64.rpm","vte291-debugsource-0:0.52.4-2.el8.i686.rpm","vte291-debugsource-0:0.52.4-2.el8.x86_64.rpm","vte291-devel-0:0.52.4-2.el8.aarch64.rpm","vte291-devel-0:0.52.4-2.el8.i686.rpm","vte291-devel-0:0.52.4-2.el8.x86_64.rpm","vte291-devel-debuginfo-0:0.52.4-2.el8.aarch64.rpm","vte291-devel-debuginfo-0:0.52.4-2.el8.i686.rpm","vte291-devel-debuginfo-0:0.52.4-2.el8.x86_64.rpm","vte-profile-0:0.52.4-2.el8.aarch64.rpm","vte-profile-0:0.52.4-2.el8.x86_64.rpm","webrtc-audio-processing-0:0.3-9.el8.aarch64.rpm","webrtc-audio-processing-0:0.3-9.el8.i686.rpm","webrtc-audio-processing-0:0.3-9.el8.src.rpm","webrtc-audio-processing-0:0.3-9.el8.x86_64.rpm","webrtc-audio-processing-debuginfo-0:0.3-9.el8.aarch64.rpm","webrtc-audio-processing-debuginfo-0:0.3-9.el8.i686.rpm","webrtc-audio-processing-debuginfo-0:0.3-9.el8.x86_64.rpm","webrtc-audio-processing-debugsource-0:0.3-9.el8.aarch64.rpm","webrtc-audio-processing-debugsource-0:0.3-9.el8.i686.rpm","webrtc-audio-processing-debugsource-0:0.3-9.el8.x86_64.rpm","xdg-desktop-portal-gtk-0:1.6.0-1.el8.aarch64.rpm","xdg-desktop-portal-gtk-0:1.6.0-1.el8.src.rpm","xdg-desktop-portal-gtk-0:1.6.0-1.el8.x86_64.rpm","xdg-desktop-portal-gtk-debuginfo-0:1.6.0-1.el8.aarch64.rpm","xdg-desktop-portal-gtk-debuginfo-0:1.6.0-1.el8.x86_64.rpm","xdg-desktop-portal-gtk-debugsource-0:1.6.0-1.el8.aarch64.rpm","xdg-desktop-portal-gtk-debugsource-0:1.6.0-1.el8.x86_64.rpm","PackageKit-0:1.1.12-6.el8.0.2.aarch64.rpm","PackageKit-0:1.1.12-6.el8.0.2.src.rpm","PackageKit-0:1.1.12-6.el8.0.2.x86_64.rpm","PackageKit-command-not-found-0:1.1.12-6.el8.0.2.aarch64.rpm","PackageKit-command-not-found-0:1.1.12-6.el8.0.2.x86_64.rpm","PackageKit-command-not-found-debuginfo-0:1.1.12-6.el8.0.2.aarch64.rpm","PackageKit-command-not-found-debuginfo-0:1.1.12-6.el8.0.2.x86_64.rpm","PackageKit-cron-0:1.1.12-6.el8.0.2.aarch64.rpm","PackageKit-cron-0:1.1.12-6.el8.0.2.x86_64.rpm","PackageKit-debuginfo-0:1.1.12-6.el8.0.2.aarch64.rpm","PackageKit-debuginfo-0:1.1.12-6.el8.0.2.i686.rpm","PackageKit-debuginfo-0:1.1.12-6.el8.0.2.x86_64.rpm","PackageKit-debugsource-0:1.1.12-6.el8.0.2.aarch64.rpm","PackageKit-debugsource-0:1.1.12-6.el8.0.2.i686.rpm","PackageKit-debugsource-0:1.1.12-6.el8.0.2.x86_64.rpm","PackageKit-glib-0:1.1.12-6.el8.0.2.aarch64.rpm","PackageKit-glib-0:1.1.12-6.el8.0.2.i686.rpm","PackageKit-glib-0:1.1.12-6.el8.0.2.x86_64.rpm","PackageKit-glib-debuginfo-0:1.1.12-6.el8.0.2.aarch64.rpm","PackageKit-glib-debuginfo-0:1.1.12-6.el8.0.2.i686.rpm","PackageKit-glib-debuginfo-0:1.1.12-6.el8.0.2.x86_64.rpm","PackageKit-glib-devel-0:1.1.12-6.el8.0.2.aarch64.rpm","PackageKit-glib-devel-0:1.1.12-6.el8.0.2.i686.rpm","PackageKit-glib-devel-0:1.1.12-6.el8.0.2.x86_64.rpm","PackageKit-gstreamer-plugin-0:1.1.12-6.el8.0.2.aarch64.rpm","PackageKit-gstreamer-plugin-0:1.1.12-6.el8.0.2.x86_64.rpm","PackageKit-gstreamer-plugin-debuginfo-0:1.1.12-6.el8.0.2.aarch64.rpm","PackageKit-gstreamer-plugin-debuginfo-0:1.1.12-6.el8.0.2.x86_64.rpm","PackageKit-gtk3-module-0:1.1.12-6.el8.0.2.aarch64.rpm","PackageKit-gtk3-module-0:1.1.12-6.el8.0.2.i686.rpm","PackageKit-gtk3-module-0:1.1.12-6.el8.0.2.x86_64.rpm","PackageKit-gtk3-module-debuginfo-0:1.1.12-6.el8.0.2.aarch64.rpm","PackageKit-gtk3-module-debuginfo-0:1.1.12-6.el8.0.2.i686.rpm","PackageKit-gtk3-module-debuginfo-0:1.1.12-6.el8.0.2.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4451","url":"https://access.redhat.com/errata/RHSA-2020:4451","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4453.json b/data/advisories/2020/RLSA-2020-4453.json new file mode 100644 index 0000000..d15ab41 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4453.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4453","synopsis":"Moderate: vim security update","severity":"SEVERITY_MODERATE","topic":"An update is available for vim.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Vim (Vi IMproved) is an updated and improved version of the vi editor.\n\nSecurity Fix(es):\n\n* vim: users can execute arbitrary OS commands via scripting interfaces in the rvim restricted mode (CVE-2019-20807)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1745476","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1745476","description":""},{"ticket":"1842658","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1842658","description":""}],"cves":[{"name":"CVE-2019-20807","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20807","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3BaseScore":"5.3","cwe":"CWE-78"}],"references":[],"publishedAt":"2020-11-03T12:06:10Z","rpms":{"Rocky Linux 8":{"nvras":["vim-2:8.0.1763-15.el8.src.rpm","vim-common-2:8.0.1763-15.el8.aarch64.rpm","vim-common-2:8.0.1763-15.el8.x86_64.rpm","vim-common-debuginfo-2:8.0.1763-15.el8.aarch64.rpm","vim-common-debuginfo-2:8.0.1763-15.el8.x86_64.rpm","vim-debuginfo-2:8.0.1763-15.el8.aarch64.rpm","vim-debuginfo-2:8.0.1763-15.el8.x86_64.rpm","vim-debugsource-2:8.0.1763-15.el8.aarch64.rpm","vim-debugsource-2:8.0.1763-15.el8.x86_64.rpm","vim-enhanced-2:8.0.1763-15.el8.aarch64.rpm","vim-enhanced-2:8.0.1763-15.el8.x86_64.rpm","vim-enhanced-debuginfo-2:8.0.1763-15.el8.aarch64.rpm","vim-enhanced-debuginfo-2:8.0.1763-15.el8.x86_64.rpm","vim-filesystem-2:8.0.1763-15.el8.noarch.rpm","vim-minimal-2:8.0.1763-15.el8.aarch64.rpm","vim-minimal-2:8.0.1763-15.el8.x86_64.rpm","vim-minimal-debuginfo-2:8.0.1763-15.el8.aarch64.rpm","vim-minimal-debuginfo-2:8.0.1763-15.el8.x86_64.rpm","vim-X11-2:8.0.1763-15.el8.aarch64.rpm","vim-X11-2:8.0.1763-15.el8.x86_64.rpm","vim-X11-debuginfo-2:8.0.1763-15.el8.aarch64.rpm","vim-X11-debuginfo-2:8.0.1763-15.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4453","url":"https://access.redhat.com/errata/RHSA-2020:4453","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4469.json b/data/advisories/2020/RLSA-2020-4469.json new file mode 100644 index 0000000..04ca30f --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4469.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4469","synopsis":"Low: cups security and bug fix update","severity":"SEVERITY_LOW","topic":"An update is available for cups.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.\n\nSecurity Fix(es):\n\n* cups: heap based buffer overflow in libcups's ppdFindOption() in ppd-mark.c (CVE-2020-3898)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1689207","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1689207","description":""},{"ticket":"1775590","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1775590","description":""},{"ticket":"1784884","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1784884","description":""},{"ticket":"1809002","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1809002","description":""},{"ticket":"1822135","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1822135","description":""},{"ticket":"1823964","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1823964","description":""},{"ticket":"1838449","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1838449","description":""}],"cves":[{"name":"CVE-2020-3898","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3898","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3BaseScore":"4.5","cwe":"CWE-125"}],"references":[],"publishedAt":"2020-11-03T12:07:34Z","rpms":{"Rocky Linux 8":{"nvras":["cups-1:2.2.6-38.el8.aarch64.rpm","cups-1:2.2.6-38.el8.src.rpm","cups-1:2.2.6-38.el8.x86_64.rpm","cups-client-1:2.2.6-38.el8.aarch64.rpm","cups-client-1:2.2.6-38.el8.x86_64.rpm","cups-client-debuginfo-1:2.2.6-38.el8.aarch64.rpm","cups-client-debuginfo-1:2.2.6-38.el8.x86_64.rpm","cups-debuginfo-1:2.2.6-38.el8.aarch64.rpm","cups-debuginfo-1:2.2.6-38.el8.i686.rpm","cups-debuginfo-1:2.2.6-38.el8.x86_64.rpm","cups-debugsource-1:2.2.6-38.el8.aarch64.rpm","cups-debugsource-1:2.2.6-38.el8.i686.rpm","cups-debugsource-1:2.2.6-38.el8.x86_64.rpm","cups-devel-1:2.2.6-38.el8.aarch64.rpm","cups-devel-1:2.2.6-38.el8.i686.rpm","cups-devel-1:2.2.6-38.el8.x86_64.rpm","cups-filesystem-1:2.2.6-38.el8.noarch.rpm","cups-ipptool-1:2.2.6-38.el8.aarch64.rpm","cups-ipptool-1:2.2.6-38.el8.x86_64.rpm","cups-ipptool-debuginfo-1:2.2.6-38.el8.aarch64.rpm","cups-ipptool-debuginfo-1:2.2.6-38.el8.x86_64.rpm","cups-libs-1:2.2.6-38.el8.aarch64.rpm","cups-libs-1:2.2.6-38.el8.i686.rpm","cups-libs-1:2.2.6-38.el8.x86_64.rpm","cups-libs-debuginfo-1:2.2.6-38.el8.aarch64.rpm","cups-libs-debuginfo-1:2.2.6-38.el8.i686.rpm","cups-libs-debuginfo-1:2.2.6-38.el8.x86_64.rpm","cups-lpd-1:2.2.6-38.el8.aarch64.rpm","cups-lpd-1:2.2.6-38.el8.x86_64.rpm","cups-lpd-debuginfo-1:2.2.6-38.el8.aarch64.rpm","cups-lpd-debuginfo-1:2.2.6-38.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4469","url":"https://access.redhat.com/errata/RHSA-2020:4469","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4482.json b/data/advisories/2020/RLSA-2020-4482.json new file mode 100644 index 0000000..de2b029 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4482.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4482","synopsis":"Moderate: libgcrypt security, bug fix, and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for libgcrypt.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The libgcrypt library provides general-purpose implementations of various cryptographic algorithms.\n\nThe following packages have been upgraded to a later upstream version: libgcrypt (1.8.5). (BZ#1764918)\n\nSecurity Fix(es):\n\n* libgcrypt: ECDSA timing attack allowing private key leak (CVE-2019-13627)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1762741","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1762741","description":""},{"ticket":"1762765","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1762765","description":""},{"ticket":"1764018","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1764018","description":""}],"cves":[{"name":"CVE-2019-13627","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13627","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3BaseScore":"6.3","cwe":"CWE-362"}],"references":[],"publishedAt":"2020-11-03T12:08:44Z","rpms":{"Rocky Linux 8":{"nvras":["libgcrypt-0:1.8.5-4.el8.aarch64.rpm","libgcrypt-0:1.8.5-4.el8.i686.rpm","libgcrypt-0:1.8.5-4.el8.src.rpm","libgcrypt-0:1.8.5-4.el8.x86_64.rpm","libgcrypt-debuginfo-0:1.8.5-4.el8.aarch64.rpm","libgcrypt-debuginfo-0:1.8.5-4.el8.i686.rpm","libgcrypt-debuginfo-0:1.8.5-4.el8.x86_64.rpm","libgcrypt-debugsource-0:1.8.5-4.el8.aarch64.rpm","libgcrypt-debugsource-0:1.8.5-4.el8.i686.rpm","libgcrypt-debugsource-0:1.8.5-4.el8.x86_64.rpm","libgcrypt-devel-0:1.8.5-4.el8.aarch64.rpm","libgcrypt-devel-0:1.8.5-4.el8.i686.rpm","libgcrypt-devel-0:1.8.5-4.el8.x86_64.rpm","libgcrypt-devel-debuginfo-0:1.8.5-4.el8.aarch64.rpm","libgcrypt-devel-debuginfo-0:1.8.5-4.el8.i686.rpm","libgcrypt-devel-debuginfo-0:1.8.5-4.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4482","url":"https://access.redhat.com/errata/RHSA-2020:4482","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4484.json b/data/advisories/2020/RLSA-2020-4484.json new file mode 100644 index 0000000..b42101e --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4484.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4484","synopsis":"Moderate: expat security update","severity":"SEVERITY_MODERATE","topic":"An update is available for expat.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Expat is a C library for parsing XML documents.\n\nSecurity Fix(es):\n\n* expat: large number of colons in input makes parser consume high amount of resources, leading to DoS (CVE-2018-20843)\n\n* expat: heap-based buffer over-read via crafted XML input (CVE-2019-15903)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1723723","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1723723","description":""},{"ticket":"1752592","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1752592","description":""}],"cves":[{"name":"CVE-2018-20843","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20843","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-400"},{"name":"CVE-2019-15903","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15903","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"(CWE-122|CWE-125)"}],"references":[],"publishedAt":"2020-11-03T12:09:00Z","rpms":{"Rocky Linux 8":{"nvras":["expat-0:2.2.5-4.el8.aarch64.rpm","expat-0:2.2.5-4.el8.i686.rpm","expat-0:2.2.5-4.el8.src.rpm","expat-0:2.2.5-4.el8.x86_64.rpm","expat-debuginfo-0:2.2.5-4.el8.aarch64.rpm","expat-debuginfo-0:2.2.5-4.el8.i686.rpm","expat-debuginfo-0:2.2.5-4.el8.x86_64.rpm","expat-debugsource-0:2.2.5-4.el8.aarch64.rpm","expat-debugsource-0:2.2.5-4.el8.i686.rpm","expat-debugsource-0:2.2.5-4.el8.x86_64.rpm","expat-devel-0:2.2.5-4.el8.aarch64.rpm","expat-devel-0:2.2.5-4.el8.i686.rpm","expat-devel-0:2.2.5-4.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4484","url":"https://access.redhat.com/errata/RHSA-2020:4484","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4490.json b/data/advisories/2020/RLSA-2020-4490.json new file mode 100644 index 0000000..68681f3 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4490.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4490","synopsis":"Moderate: gnupg2 security, bug fix, and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for gnupg2.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards.\n\nThe following packages have been upgraded to a later upstream version: gnupg2 (2.2.20). (BZ#1663944)\n\nSecurity Fix(es):\n\n* GnuPG: interaction between the sks-keyserver code and GnuPG allows for a Certificate Spamming Attack which leads to persistent DoS (CVE-2019-13050)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1726146","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1726146","description":""}],"cves":[{"name":"CVE-2018-1000858","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000858","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3BaseScore":"5.4","cwe":"CWE-352"},{"name":"CVE-2019-13050","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13050","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"CWE-297"}],"references":[],"publishedAt":"2020-11-03T12:09:29Z","rpms":{"Rocky Linux 8":{"nvras":["gnupg2-0:2.2.20-2.el8.aarch64.rpm","gnupg2-0:2.2.20-2.el8.src.rpm","gnupg2-0:2.2.20-2.el8.x86_64.rpm","gnupg2-debuginfo-0:2.2.20-2.el8.aarch64.rpm","gnupg2-debuginfo-0:2.2.20-2.el8.x86_64.rpm","gnupg2-debugsource-0:2.2.20-2.el8.aarch64.rpm","gnupg2-debugsource-0:2.2.20-2.el8.x86_64.rpm","gnupg2-smime-0:2.2.20-2.el8.aarch64.rpm","gnupg2-smime-0:2.2.20-2.el8.x86_64.rpm","gnupg2-smime-debuginfo-0:2.2.20-2.el8.aarch64.rpm","gnupg2-smime-debuginfo-0:2.2.20-2.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4490","url":"https://access.redhat.com/errata/RHSA-2020:4490","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4497.json b/data/advisories/2020/RLSA-2020-4497.json new file mode 100644 index 0000000..514f975 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4497.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4497","synopsis":"Moderate: cyrus-sasl security, bug fix, and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for cyrus-sasl.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The cyrus-sasl packages contain the Cyrus implementation of Simple Authentication and Security Layer (SASL). SASL is a method for adding authentication support to connection-based protocols.\n\nSecurity Fix(es):\n\n* cyrus-sasl: denial of service in _sasl_add_string function (CVE-2019-19906)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1791854","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1791854","description":""},{"ticket":"1817054","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1817054","description":""},{"ticket":"1822133","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1822133","description":""}],"cves":[{"name":"CVE-2019-19906","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19906","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-400"}],"references":[],"publishedAt":"2020-11-03T12:10:00Z","rpms":{"Rocky Linux 8":{"nvras":["cyrus-sasl-0:2.1.27-5.el8.aarch64.rpm","cyrus-sasl-0:2.1.27-5.el8.i686.rpm","cyrus-sasl-0:2.1.27-5.el8.src.rpm","cyrus-sasl-0:2.1.27-5.el8.x86_64.rpm","cyrus-sasl-debuginfo-0:2.1.27-5.el8.aarch64.rpm","cyrus-sasl-debuginfo-0:2.1.27-5.el8.i686.rpm","cyrus-sasl-debuginfo-0:2.1.27-5.el8.x86_64.rpm","cyrus-sasl-debugsource-0:2.1.27-5.el8.aarch64.rpm","cyrus-sasl-debugsource-0:2.1.27-5.el8.i686.rpm","cyrus-sasl-debugsource-0:2.1.27-5.el8.x86_64.rpm","cyrus-sasl-devel-0:2.1.27-5.el8.aarch64.rpm","cyrus-sasl-devel-0:2.1.27-5.el8.i686.rpm","cyrus-sasl-devel-0:2.1.27-5.el8.x86_64.rpm","cyrus-sasl-devel-debuginfo-0:2.1.27-5.el8.aarch64.rpm","cyrus-sasl-devel-debuginfo-0:2.1.27-5.el8.i686.rpm","cyrus-sasl-devel-debuginfo-0:2.1.27-5.el8.x86_64.rpm","cyrus-sasl-gs2-0:2.1.27-5.el8.aarch64.rpm","cyrus-sasl-gs2-0:2.1.27-5.el8.i686.rpm","cyrus-sasl-gs2-0:2.1.27-5.el8.x86_64.rpm","cyrus-sasl-gs2-debuginfo-0:2.1.27-5.el8.aarch64.rpm","cyrus-sasl-gs2-debuginfo-0:2.1.27-5.el8.i686.rpm","cyrus-sasl-gs2-debuginfo-0:2.1.27-5.el8.x86_64.rpm","cyrus-sasl-gssapi-0:2.1.27-5.el8.aarch64.rpm","cyrus-sasl-gssapi-0:2.1.27-5.el8.i686.rpm","cyrus-sasl-gssapi-0:2.1.27-5.el8.x86_64.rpm","cyrus-sasl-gssapi-debuginfo-0:2.1.27-5.el8.aarch64.rpm","cyrus-sasl-gssapi-debuginfo-0:2.1.27-5.el8.i686.rpm","cyrus-sasl-gssapi-debuginfo-0:2.1.27-5.el8.x86_64.rpm","cyrus-sasl-ldap-0:2.1.27-5.el8.aarch64.rpm","cyrus-sasl-ldap-0:2.1.27-5.el8.i686.rpm","cyrus-sasl-ldap-0:2.1.27-5.el8.x86_64.rpm","cyrus-sasl-ldap-debuginfo-0:2.1.27-5.el8.aarch64.rpm","cyrus-sasl-ldap-debuginfo-0:2.1.27-5.el8.i686.rpm","cyrus-sasl-ldap-debuginfo-0:2.1.27-5.el8.x86_64.rpm","cyrus-sasl-lib-0:2.1.27-5.el8.aarch64.rpm","cyrus-sasl-lib-0:2.1.27-5.el8.i686.rpm","cyrus-sasl-lib-0:2.1.27-5.el8.x86_64.rpm","cyrus-sasl-lib-debuginfo-0:2.1.27-5.el8.aarch64.rpm","cyrus-sasl-lib-debuginfo-0:2.1.27-5.el8.i686.rpm","cyrus-sasl-lib-debuginfo-0:2.1.27-5.el8.x86_64.rpm","cyrus-sasl-md5-0:2.1.27-5.el8.aarch64.rpm","cyrus-sasl-md5-0:2.1.27-5.el8.i686.rpm","cyrus-sasl-md5-0:2.1.27-5.el8.x86_64.rpm","cyrus-sasl-md5-debuginfo-0:2.1.27-5.el8.aarch64.rpm","cyrus-sasl-md5-debuginfo-0:2.1.27-5.el8.i686.rpm","cyrus-sasl-md5-debuginfo-0:2.1.27-5.el8.x86_64.rpm","cyrus-sasl-ntlm-0:2.1.27-5.el8.aarch64.rpm","cyrus-sasl-ntlm-0:2.1.27-5.el8.i686.rpm","cyrus-sasl-ntlm-0:2.1.27-5.el8.x86_64.rpm","cyrus-sasl-ntlm-debuginfo-0:2.1.27-5.el8.aarch64.rpm","cyrus-sasl-ntlm-debuginfo-0:2.1.27-5.el8.i686.rpm","cyrus-sasl-ntlm-debuginfo-0:2.1.27-5.el8.x86_64.rpm","cyrus-sasl-plain-0:2.1.27-5.el8.aarch64.rpm","cyrus-sasl-plain-0:2.1.27-5.el8.i686.rpm","cyrus-sasl-plain-0:2.1.27-5.el8.x86_64.rpm","cyrus-sasl-plain-debuginfo-0:2.1.27-5.el8.aarch64.rpm","cyrus-sasl-plain-debuginfo-0:2.1.27-5.el8.i686.rpm","cyrus-sasl-plain-debuginfo-0:2.1.27-5.el8.x86_64.rpm","cyrus-sasl-scram-0:2.1.27-5.el8.aarch64.rpm","cyrus-sasl-scram-0:2.1.27-5.el8.i686.rpm","cyrus-sasl-scram-0:2.1.27-5.el8.x86_64.rpm","cyrus-sasl-scram-debuginfo-0:2.1.27-5.el8.aarch64.rpm","cyrus-sasl-scram-debuginfo-0:2.1.27-5.el8.i686.rpm","cyrus-sasl-scram-debuginfo-0:2.1.27-5.el8.x86_64.rpm","cyrus-sasl-sql-0:2.1.27-5.el8.aarch64.rpm","cyrus-sasl-sql-0:2.1.27-5.el8.i686.rpm","cyrus-sasl-sql-0:2.1.27-5.el8.x86_64.rpm","cyrus-sasl-sql-debuginfo-0:2.1.27-5.el8.aarch64.rpm","cyrus-sasl-sql-debuginfo-0:2.1.27-5.el8.i686.rpm","cyrus-sasl-sql-debuginfo-0:2.1.27-5.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4497","url":"https://access.redhat.com/errata/RHSA-2020:4497","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4539.json b/data/advisories/2020/RLSA-2020-4539.json new file mode 100644 index 0000000..cf7e106 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4539.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4539","synopsis":"Moderate: pcre2 security and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for pcre2.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The pcre2 package contains a new generation of the Perl Compatible Regular Expression libraries for implementing regular expression pattern matching using the same syntax and semantics as Perl. \n\nSecurity Fix(es):\n\n* pcre: Out of bounds read in JIT mode when \\X is used in non-UTF mode (CVE-2019-20454)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1735494","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1735494","description":""},{"ticket":"1822698","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1822698","description":""}],"cves":[{"name":"CVE-2019-20454","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20454","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-125"}],"references":[],"publishedAt":"2020-11-03T12:13:54Z","rpms":{"Rocky Linux 8":{"nvras":["pcre2-0:10.32-2.el8.aarch64.rpm","pcre2-0:10.32-2.el8.i686.rpm","pcre2-0:10.32-2.el8.src.rpm","pcre2-0:10.32-2.el8.x86_64.rpm","pcre2-debuginfo-0:10.32-2.el8.aarch64.rpm","pcre2-debuginfo-0:10.32-2.el8.i686.rpm","pcre2-debuginfo-0:10.32-2.el8.x86_64.rpm","pcre2-debugsource-0:10.32-2.el8.aarch64.rpm","pcre2-debugsource-0:10.32-2.el8.i686.rpm","pcre2-debugsource-0:10.32-2.el8.x86_64.rpm","pcre2-devel-0:10.32-2.el8.aarch64.rpm","pcre2-devel-0:10.32-2.el8.i686.rpm","pcre2-devel-0:10.32-2.el8.x86_64.rpm","pcre2-tools-0:10.32-2.el8.aarch64.rpm","pcre2-tools-0:10.32-2.el8.x86_64.rpm","pcre2-tools-debuginfo-0:10.32-2.el8.aarch64.rpm","pcre2-tools-debuginfo-0:10.32-2.el8.x86_64.rpm","pcre2-utf16-0:10.32-2.el8.aarch64.rpm","pcre2-utf16-0:10.32-2.el8.i686.rpm","pcre2-utf16-0:10.32-2.el8.x86_64.rpm","pcre2-utf16-debuginfo-0:10.32-2.el8.aarch64.rpm","pcre2-utf16-debuginfo-0:10.32-2.el8.i686.rpm","pcre2-utf16-debuginfo-0:10.32-2.el8.x86_64.rpm","pcre2-utf32-0:10.32-2.el8.aarch64.rpm","pcre2-utf32-0:10.32-2.el8.i686.rpm","pcre2-utf32-0:10.32-2.el8.x86_64.rpm","pcre2-utf32-debuginfo-0:10.32-2.el8.aarch64.rpm","pcre2-utf32-debuginfo-0:10.32-2.el8.i686.rpm","pcre2-utf32-debuginfo-0:10.32-2.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4539","url":"https://access.redhat.com/errata/RHSA-2020:4539","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4545.json b/data/advisories/2020/RLSA-2020-4545.json new file mode 100644 index 0000000..5701685 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4545.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4545","synopsis":"Moderate: libssh security, bug fix, and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for libssh.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.\n\nThe following packages have been upgraded to a later upstream version: libssh (0.9.4). (BZ#1804797)\n\nSecurity Fix(es):\n\n* libssh: denial of service when handling AES-CTR (or DES) ciphers (CVE-2020-1730)\n\n* libssh: unsanitized location in scp could lead to unwanted command execution (CVE-2019-14889)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1733914","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1733914","description":""},{"ticket":"1772523","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1772523","description":""},{"ticket":"1801998","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1801998","description":""},{"ticket":"1804797","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1804797","description":"The following packages have been upgraded to a later upstream version: libssh (0.9.4)."},{"ticket":"1821339","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1821339","description":""},{"ticket":"1849071","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1849071","description":""}],"cves":[{"name":"CVE-2019-14889","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14889","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.1","cwe":"CWE-78"},{"name":"CVE-2020-1730","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1730","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"5.3","cwe":"CWE-476"}],"references":[],"publishedAt":"2020-11-03T12:14:19Z","rpms":{"Rocky Linux 8":{"nvras":["libssh-0:0.9.4-2.el8.aarch64.rpm","libssh-0:0.9.4-2.el8.i686.rpm","libssh-0:0.9.4-2.el8.src.rpm","libssh-0:0.9.4-2.el8.x86_64.rpm","libssh-config-0:0.9.4-2.el8.noarch.rpm","libssh-debuginfo-0:0.9.4-2.el8.aarch64.rpm","libssh-debuginfo-0:0.9.4-2.el8.i686.rpm","libssh-debuginfo-0:0.9.4-2.el8.x86_64.rpm","libssh-debugsource-0:0.9.4-2.el8.aarch64.rpm","libssh-debugsource-0:0.9.4-2.el8.i686.rpm","libssh-debugsource-0:0.9.4-2.el8.x86_64.rpm","libssh-devel-0:0.9.4-2.el8.aarch64.rpm","libssh-devel-0:0.9.4-2.el8.i686.rpm","libssh-devel-0:0.9.4-2.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4545","url":"https://access.redhat.com/errata/RHSA-2020:4545","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4628.json b/data/advisories/2020/RLSA-2020-4628.json new file mode 100644 index 0000000..3dcc14f --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4628.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4628","synopsis":"Low: libreoffice security, bug fix, and enhancement update","severity":"SEVERITY_LOW","topic":"An update is available for libcmis.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.\n\nThe following packages have been upgraded to a later upstream version: libreoffice (6.3.6.2), libcmis (0.5.2), liborcus (0.14.1). (BZ#1796893)\n\nSecurity Fix(es):\n\n* libreoffice: 'stealth mode' remote resource restrictions bypass (CVE-2020-12802)\n\n* libreoffice: forms allowed to be submitted to any URI could result in local file overwrite (CVE-2020-12803)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1796893","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1796893","description":"The following packages have been upgraded to a later upstream version: libreoffice (6.3.6.2), libcmis (0.5.2), liborcus (0.14.1)."},{"ticket":"1819798","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1819798","description":""},{"ticket":"1824876","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1824876","description":""},{"ticket":"1841907","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1841907","description":""},{"ticket":"1848346","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1848346","description":""},{"ticket":"1850226","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1850226","description":""}],"cves":[{"name":"CVE-2020-12802","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12802","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3BaseScore":"5.3","cwe":"CWE-200"},{"name":"CVE-2020-12803","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12803","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3BaseScore":"5.5","cwe":"CWE-284"}],"references":[],"publishedAt":"2020-11-03T12:21:42Z","rpms":{"Rocky Linux 8":{"nvras":["libcmis-0:0.5.2-1.el8.i686.rpm","libcmis-0:0.5.2-1.el8.src.rpm","libcmis-0:0.5.2-1.el8.x86_64.rpm","libcmis-debuginfo-0:0.5.2-1.el8.i686.rpm","libcmis-debuginfo-0:0.5.2-1.el8.x86_64.rpm","libcmis-debugsource-0:0.5.2-1.el8.i686.rpm","libcmis-debugsource-0:0.5.2-1.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4628","url":"https://access.redhat.com/errata/RHSA-2020:4628","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4629.json b/data/advisories/2020/RLSA-2020-4629.json new file mode 100644 index 0000000..604756c --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4629.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4629","synopsis":"Moderate: libvpx security update","severity":"SEVERITY_MODERATE","topic":"An update is available for libvpx.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.\n\nSecurity Fix(es):\n\n* libvpx: Double free in ParseContentEncodingEntry() in mkvparser.cc (CVE-2019-2126)\n\n* libvpx: Out of bounds read in vp8_norm table (CVE-2019-9232)\n\n* libvpx: Resource exhaustion after memory leak in mkvparser.cc (CVE-2019-9371)\n\n* libvpx: Use-after-free in vp8_deblock() in vp8/common/postproc.c (CVE-2019-9433)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1788966","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1788966","description":""},{"ticket":"1788994","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1788994","description":""},{"ticket":"1789004","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1789004","description":""},{"ticket":"1789008","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1789008","description":""}],"cves":[{"name":"CVE-2019-2126","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2126","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"CWE-672"},{"name":"CVE-2019-9232","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9232","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3BaseScore":"7.5","cwe":"CWE-125"},{"name":"CVE-2019-9371","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9371","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"CWE-400"},{"name":"CVE-2019-9433","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9433","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3BaseScore":"6.5","cwe":"CWE-416->CWE-200"}],"references":[],"publishedAt":"2020-11-03T12:21:50Z","rpms":{"Rocky Linux 8":{"nvras":["libvpx-0:1.7.0-8.el8.aarch64.rpm","libvpx-0:1.7.0-8.el8.i686.rpm","libvpx-0:1.7.0-8.el8.src.rpm","libvpx-0:1.7.0-8.el8.x86_64.rpm","libvpx-debuginfo-0:1.7.0-8.el8.aarch64.rpm","libvpx-debuginfo-0:1.7.0-8.el8.i686.rpm","libvpx-debuginfo-0:1.7.0-8.el8.x86_64.rpm","libvpx-debugsource-0:1.7.0-8.el8.aarch64.rpm","libvpx-debugsource-0:1.7.0-8.el8.i686.rpm","libvpx-debugsource-0:1.7.0-8.el8.x86_64.rpm","libvpx-devel-0:1.7.0-8.el8.aarch64.rpm","libvpx-devel-0:1.7.0-8.el8.i686.rpm","libvpx-devel-0:1.7.0-8.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4629","url":"https://access.redhat.com/errata/RHSA-2020:4629","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4634.json b/data/advisories/2020/RLSA-2020-4634.json new file mode 100644 index 0000000..bf2af99 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4634.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4634","synopsis":"Moderate: libtiff security update","severity":"SEVERITY_MODERATE","topic":"An update is available for libtiff.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.\n\nSecurity Fix(es):\n\n* libtiff: integer overflow leading to heap-based buffer overflow in tif_getimage.c (CVE-2019-17546)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1765705","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1765705","description":""}],"cves":[{"name":"CVE-2019-17546","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17546","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"CWE-190->CWE-122"}],"references":[],"publishedAt":"2020-11-03T12:22:21Z","rpms":{"Rocky Linux 8":{"nvras":["libtiff-0:4.0.9-18.el8.aarch64.rpm","libtiff-0:4.0.9-18.el8.i686.rpm","libtiff-0:4.0.9-18.el8.src.rpm","libtiff-0:4.0.9-18.el8.x86_64.rpm","libtiff-debuginfo-0:4.0.9-18.el8.aarch64.rpm","libtiff-debuginfo-0:4.0.9-18.el8.i686.rpm","libtiff-debuginfo-0:4.0.9-18.el8.x86_64.rpm","libtiff-debugsource-0:4.0.9-18.el8.aarch64.rpm","libtiff-debugsource-0:4.0.9-18.el8.i686.rpm","libtiff-debugsource-0:4.0.9-18.el8.x86_64.rpm","libtiff-devel-0:4.0.9-18.el8.aarch64.rpm","libtiff-devel-0:4.0.9-18.el8.i686.rpm","libtiff-devel-0:4.0.9-18.el8.x86_64.rpm","libtiff-tools-0:4.0.9-18.el8.aarch64.rpm","libtiff-tools-0:4.0.9-18.el8.x86_64.rpm","libtiff-tools-debuginfo-0:4.0.9-18.el8.aarch64.rpm","libtiff-tools-debuginfo-0:4.0.9-18.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4634","url":"https://access.redhat.com/errata/RHSA-2020:4634","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4638.json b/data/advisories/2020/RLSA-2020-4638.json new file mode 100644 index 0000000..bbd00f0 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4638.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4638","synopsis":"Low: sysstat security update","severity":"SEVERITY_LOW","topic":"An update is available for sysstat.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The sysstat packages provide the sar and iostat commands. These commands enable system monitoring of disk, network, and other I/O activity.\n\nSecurity Fix(es):\n\n* sysstat: memory corruption due to an integer overflow in remap_struct in sa_common.c (CVE-2019-16167)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1768970","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1768970","description":""}],"cves":[{"name":"CVE-2019-16167","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16167","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3BaseScore":"5.5","cwe":"CWE-190"}],"references":[],"publishedAt":"2020-11-03T12:22:41Z","rpms":{"Rocky Linux 8":{"nvras":["sysstat-0:11.7.3-5.el8.aarch64.rpm","sysstat-0:11.7.3-5.el8.src.rpm","sysstat-0:11.7.3-5.el8.x86_64.rpm","sysstat-debuginfo-0:11.7.3-5.el8.aarch64.rpm","sysstat-debuginfo-0:11.7.3-5.el8.x86_64.rpm","sysstat-debugsource-0:11.7.3-5.el8.aarch64.rpm","sysstat-debugsource-0:11.7.3-5.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4638","url":"https://access.redhat.com/errata/RHSA-2020:4638","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4641.json b/data/advisories/2020/RLSA-2020-4641.json new file mode 100644 index 0000000..b81f824 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4641.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4641","synopsis":"Moderate: python38:3.8 security, bug fix, and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for python-psycopg2, python-urllib3, PyYAML, python-jinja2, python-requests, mod_wsgi, python-asn1crypto, python3x-pip, python-chardet, python-markupsafe, Cython, python-psutil, babel, python-wheel, python-pysocks, python-pycparser, python3x-setuptools, python-cffi, pytz, python-cryptography, scipy, python-idna, numpy.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.\n\nThe following packages have been upgraded to a later upstream version: python38 (3.8.3). (BZ#1847416)\n\nSecurity Fix(es):\n\n* PyYAML: command execution through python/object/apply constructor in FullLoader (CVE-2019-20477)\n\n* python: infinite loop in the tarfile module via crafted TAR archive (CVE-2019-20907)\n\n* PyYAML: arbitrary command execution through python/object/new when FullLoader is used (CVE-2020-1747)\n\n* python: wrong backtracking in urllib.request.AbstractBasicAuthHandler allows for a ReDoS (CVE-2020-8492)\n\n* python: DoS via inefficiency in IPv{4,6}Interface classes (CVE-2020-14422)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1806005","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1806005","description":""},{"ticket":"1807367","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1807367","description":""},{"ticket":"1809065","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1809065","description":""},{"ticket":"1815643","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1815643","description":""},{"ticket":"1847416","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1847416","description":"The following packages have been upgraded to a later upstream version: python38 (3.8.3)."},{"ticket":"1854926","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1854926","description":""},{"ticket":"1856481","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1856481","description":""}],"cves":[{"name":"CVE-2019-20477","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20477","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"9.8","cwe":"CWE-502"},{"name":"CVE-2019-20907","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20907","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-20->CWE-835"},{"name":"CVE-2020-14422","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14422","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"5.9","cwe":"CWE-400"},{"name":"CVE-2020-1747","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1747","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"9.8","cwe":"CWE-20"},{"name":"CVE-2020-8492","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8492","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"CWE-400"}],"references":[],"publishedAt":"2020-11-03T12:23:02Z","rpms":{"Rocky Linux 8":{"nvras":["babel-0:2.7.0-10.module+el8.4.0+570+c2eaf144.src.rpm","Cython-0:0.29.14-4.module+el8.4.0+570+c2eaf144.src.rpm","Cython-debugsource-0:0.29.14-4.module+el8.4.0+570+c2eaf144.aarch64.rpm","Cython-debugsource-0:0.29.14-4.module+el8.4.0+570+c2eaf144.x86_64.rpm","mod_wsgi-0:4.6.8-3.module+el8.4.0+570+c2eaf144.src.rpm","numpy-0:1.17.3-5.module+el8.4.0+570+c2eaf144.src.rpm","numpy-debugsource-0:1.17.3-5.module+el8.4.0+570+c2eaf144.aarch64.rpm","numpy-debugsource-0:1.17.3-5.module+el8.4.0+570+c2eaf144.x86_64.rpm","python38-asn1crypto-0:1.2.0-3.module+el8.4.0+570+c2eaf144.noarch.rpm","python38-babel-0:2.7.0-10.module+el8.4.0+570+c2eaf144.noarch.rpm","python38-cffi-0:1.13.2-3.module+el8.4.0+570+c2eaf144.aarch64.rpm","python38-cffi-0:1.13.2-3.module+el8.4.0+570+c2eaf144.x86_64.rpm","python38-cffi-debuginfo-0:1.13.2-3.module+el8.4.0+570+c2eaf144.aarch64.rpm","python38-cffi-debuginfo-0:1.13.2-3.module+el8.4.0+570+c2eaf144.x86_64.rpm","python38-chardet-0:3.0.4-19.module+el8.4.0+570+c2eaf144.noarch.rpm","python38-cryptography-0:2.8-3.module+el8.5.0+672+ab6eb015.aarch64.rpm","python38-cryptography-0:2.8-3.module+el8.4.0+570+c2eaf144.aarch64.rpm","python38-cryptography-0:2.8-3.module+el8.5.0+672+ab6eb015.x86_64.rpm","python38-cryptography-0:2.8-3.module+el8.4.0+570+c2eaf144.x86_64.rpm","python38-cryptography-debuginfo-0:2.8-3.module+el8.5.0+672+ab6eb015.aarch64.rpm","python38-cryptography-debuginfo-0:2.8-3.module+el8.4.0+570+c2eaf144.aarch64.rpm","python38-cryptography-debuginfo-0:2.8-3.module+el8.5.0+672+ab6eb015.x86_64.rpm","python38-cryptography-debuginfo-0:2.8-3.module+el8.4.0+570+c2eaf144.x86_64.rpm","python38-Cython-0:0.29.14-4.module+el8.4.0+570+c2eaf144.aarch64.rpm","python38-Cython-0:0.29.14-4.module+el8.4.0+570+c2eaf144.x86_64.rpm","python38-Cython-debuginfo-0:0.29.14-4.module+el8.4.0+570+c2eaf144.aarch64.rpm","python38-Cython-debuginfo-0:0.29.14-4.module+el8.4.0+570+c2eaf144.x86_64.rpm","python38-idna-0:2.8-6.module+el8.4.0+570+c2eaf144.noarch.rpm","python38-jinja2-0:2.10.3-4.module+el8.4.0+570+c2eaf144.noarch.rpm","python38-markupsafe-0:1.1.1-6.module+el8.4.0+570+c2eaf144.aarch64.rpm","python38-markupsafe-0:1.1.1-6.module+el8.4.0+570+c2eaf144.x86_64.rpm","python38-markupsafe-debuginfo-0:1.1.1-6.module+el8.4.0+570+c2eaf144.aarch64.rpm","python38-markupsafe-debuginfo-0:1.1.1-6.module+el8.4.0+570+c2eaf144.x86_64.rpm","python38-mod_wsgi-0:4.6.8-3.module+el8.4.0+570+c2eaf144.aarch64.rpm","python38-mod_wsgi-0:4.6.8-3.module+el8.4.0+570+c2eaf144.x86_64.rpm","python38-numpy-0:1.17.3-5.module+el8.4.0+570+c2eaf144.aarch64.rpm","python38-numpy-0:1.17.3-5.module+el8.4.0+570+c2eaf144.x86_64.rpm","python38-numpy-debuginfo-0:1.17.3-5.module+el8.4.0+570+c2eaf144.aarch64.rpm","python38-numpy-debuginfo-0:1.17.3-5.module+el8.4.0+570+c2eaf144.x86_64.rpm","python38-numpy-doc-0:1.17.3-5.module+el8.4.0+570+c2eaf144.noarch.rpm","python38-numpy-f2py-0:1.17.3-5.module+el8.4.0+570+c2eaf144.aarch64.rpm","python38-numpy-f2py-0:1.17.3-5.module+el8.4.0+570+c2eaf144.x86_64.rpm","python38-pip-0:19.3.1-1.module+el8.4.0+570+c2eaf144.noarch.rpm","python38-pip-wheel-0:19.3.1-1.module+el8.4.0+570+c2eaf144.noarch.rpm","python38-psutil-0:5.6.4-3.module+el8.4.0+570+c2eaf144.aarch64.rpm","python38-psutil-0:5.6.4-3.module+el8.4.0+570+c2eaf144.x86_64.rpm","python38-psutil-debuginfo-0:5.6.4-3.module+el8.4.0+570+c2eaf144.aarch64.rpm","python38-psutil-debuginfo-0:5.6.4-3.module+el8.4.0+570+c2eaf144.x86_64.rpm","python38-psycopg2-0:2.8.4-4.module+el8.6.0+794+eba84017.aarch64.rpm","python38-pytz-0:2019.3-3.module+el8.4.0+570+c2eaf144.noarch.rpm","python38-psycopg2-0:2.8.4-4.module+el8.4.0+570+c2eaf144.aarch64.rpm","python38-psycopg2-0:2.8.4-4.module+el8.6.0+794+eba84017.x86_64.rpm","python38-psycopg2-0:2.8.4-4.module+el8.4.0+570+c2eaf144.x86_64.rpm","python38-psycopg2-debuginfo-0:2.8.4-4.module+el8.6.0+794+eba84017.aarch64.rpm","python38-psycopg2-debuginfo-0:2.8.4-4.module+el8.4.0+570+c2eaf144.aarch64.rpm","python38-psycopg2-debuginfo-0:2.8.4-4.module+el8.6.0+794+eba84017.x86_64.rpm","python38-psycopg2-debuginfo-0:2.8.4-4.module+el8.4.0+570+c2eaf144.x86_64.rpm","python38-psycopg2-doc-0:2.8.4-4.module+el8.6.0+794+eba84017.aarch64.rpm","python38-psycopg2-doc-0:2.8.4-4.module+el8.4.0+570+c2eaf144.aarch64.rpm","python38-psycopg2-doc-0:2.8.4-4.module+el8.6.0+794+eba84017.x86_64.rpm","python38-psycopg2-doc-0:2.8.4-4.module+el8.4.0+570+c2eaf144.x86_64.rpm","python38-psycopg2-tests-0:2.8.4-4.module+el8.6.0+794+eba84017.aarch64.rpm","python38-psycopg2-tests-0:2.8.4-4.module+el8.4.0+570+c2eaf144.aarch64.rpm","python38-psycopg2-tests-0:2.8.4-4.module+el8.6.0+794+eba84017.x86_64.rpm","python38-psycopg2-tests-0:2.8.4-4.module+el8.4.0+570+c2eaf144.x86_64.rpm","python38-pycparser-0:2.19-3.module+el8.4.0+570+c2eaf144.noarch.rpm","python38-pysocks-0:1.7.1-4.module+el8.4.0+570+c2eaf144.noarch.rpm","python38-pyyaml-0:5.3.1-1.module+el8.4.0+570+c2eaf144.aarch64.rpm","python38-pyyaml-0:5.3.1-1.module+el8.4.0+570+c2eaf144.x86_64.rpm","python38-pyyaml-debuginfo-0:5.3.1-1.module+el8.4.0+570+c2eaf144.aarch64.rpm","python38-pyyaml-debuginfo-0:5.3.1-1.module+el8.4.0+570+c2eaf144.x86_64.rpm","python38-requests-0:2.22.0-9.module+el8.4.0+570+c2eaf144.noarch.rpm","python38-scipy-0:1.3.1-4.module+el8.5.0+672+ab6eb015.aarch64.rpm","python38-scipy-0:1.3.1-4.module+el8.4.0+570+c2eaf144.aarch64.rpm","python38-scipy-0:1.3.1-4.module+el8.5.0+672+ab6eb015.x86_64.rpm","python38-scipy-0:1.3.1-4.module+el8.4.0+570+c2eaf144.x86_64.rpm","python38-scipy-debuginfo-0:1.3.1-4.module+el8.5.0+672+ab6eb015.aarch64.rpm","python38-scipy-debuginfo-0:1.3.1-4.module+el8.4.0+570+c2eaf144.aarch64.rpm","python38-scipy-debuginfo-0:1.3.1-4.module+el8.5.0+672+ab6eb015.x86_64.rpm","python38-scipy-debuginfo-0:1.3.1-4.module+el8.4.0+570+c2eaf144.x86_64.rpm","python38-setuptools-0:41.6.0-4.module+el8.4.0+570+c2eaf144.noarch.rpm","python38-setuptools-wheel-0:41.6.0-4.module+el8.4.0+570+c2eaf144.noarch.rpm","python38-urllib3-0:1.25.7-4.module+el8.4.0+570+c2eaf144.noarch.rpm","python38-wheel-0:0.33.6-5.module+el8.4.0+570+c2eaf144.noarch.rpm","python38-wheel-wheel-0:0.33.6-5.module+el8.4.0+570+c2eaf144.noarch.rpm","python3x-pip-0:19.3.1-1.module+el8.4.0+570+c2eaf144.src.rpm","python3x-setuptools-0:41.6.0-4.module+el8.4.0+570+c2eaf144.src.rpm","python-asn1crypto-0:1.2.0-3.module+el8.4.0+570+c2eaf144.src.rpm","python-cffi-0:1.13.2-3.module+el8.4.0+570+c2eaf144.src.rpm","python-cffi-debugsource-0:1.13.2-3.module+el8.4.0+570+c2eaf144.aarch64.rpm","python-cffi-debugsource-0:1.13.2-3.module+el8.4.0+570+c2eaf144.x86_64.rpm","python-chardet-0:3.0.4-19.module+el8.4.0+570+c2eaf144.src.rpm","python-cryptography-0:2.8-3.module+el8.5.0+672+ab6eb015.src.rpm","python-cryptography-0:2.8-3.module+el8.4.0+570+c2eaf144.src.rpm","python-cryptography-debugsource-0:2.8-3.module+el8.5.0+672+ab6eb015.aarch64.rpm","python-cryptography-debugsource-0:2.8-3.module+el8.4.0+570+c2eaf144.aarch64.rpm","python-cryptography-debugsource-0:2.8-3.module+el8.5.0+672+ab6eb015.x86_64.rpm","python-cryptography-debugsource-0:2.8-3.module+el8.4.0+570+c2eaf144.x86_64.rpm","python-idna-0:2.8-6.module+el8.4.0+570+c2eaf144.src.rpm","python-jinja2-0:2.10.3-4.module+el8.4.0+570+c2eaf144.src.rpm","python-markupsafe-0:1.1.1-6.module+el8.4.0+570+c2eaf144.src.rpm","python-markupsafe-debugsource-0:1.1.1-6.module+el8.4.0+570+c2eaf144.aarch64.rpm","python-markupsafe-debugsource-0:1.1.1-6.module+el8.4.0+570+c2eaf144.x86_64.rpm","python-psutil-0:5.6.4-3.module+el8.4.0+570+c2eaf144.src.rpm","python-psutil-debugsource-0:5.6.4-3.module+el8.4.0+570+c2eaf144.aarch64.rpm","python-psutil-debugsource-0:5.6.4-3.module+el8.4.0+570+c2eaf144.x86_64.rpm","python-psycopg2-0:2.8.4-4.module+el8.6.0+794+eba84017.src.rpm","python-psycopg2-0:2.8.4-4.module+el8.4.0+570+c2eaf144.src.rpm","python-psycopg2-debugsource-0:2.8.4-4.module+el8.6.0+794+eba84017.aarch64.rpm","python-psycopg2-debugsource-0:2.8.4-4.module+el8.4.0+570+c2eaf144.aarch64.rpm","python-psycopg2-debugsource-0:2.8.4-4.module+el8.6.0+794+eba84017.x86_64.rpm","python-psycopg2-debugsource-0:2.8.4-4.module+el8.4.0+570+c2eaf144.x86_64.rpm","python-pycparser-0:2.19-3.module+el8.4.0+570+c2eaf144.src.rpm","python-pysocks-0:1.7.1-4.module+el8.4.0+570+c2eaf144.src.rpm","python-requests-0:2.22.0-9.module+el8.4.0+570+c2eaf144.src.rpm","python-urllib3-0:1.25.7-4.module+el8.4.0+570+c2eaf144.src.rpm","python-wheel-0:0.33.6-5.module+el8.4.0+570+c2eaf144.src.rpm","pytz-0:2019.3-3.module+el8.4.0+570+c2eaf144.src.rpm","PyYAML-0:5.3.1-1.module+el8.4.0+570+c2eaf144.src.rpm","PyYAML-debugsource-0:5.3.1-1.module+el8.4.0+570+c2eaf144.aarch64.rpm","PyYAML-debugsource-0:5.3.1-1.module+el8.4.0+570+c2eaf144.x86_64.rpm","scipy-0:1.3.1-4.module+el8.5.0+672+ab6eb015.src.rpm","scipy-0:1.3.1-4.module+el8.4.0+570+c2eaf144.src.rpm","scipy-debugsource-0:1.3.1-4.module+el8.5.0+672+ab6eb015.aarch64.rpm","scipy-debugsource-0:1.3.1-4.module+el8.4.0+570+c2eaf144.aarch64.rpm","scipy-debugsource-0:1.3.1-4.module+el8.5.0+672+ab6eb015.x86_64.rpm","scipy-debugsource-0:1.3.1-4.module+el8.4.0+570+c2eaf144.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4641","url":"https://access.redhat.com/errata/RHSA-2020:4641","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4647.json b/data/advisories/2020/RLSA-2020-4647.json new file mode 100644 index 0000000..958cd5e --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4647.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4647","synopsis":"Moderate: freerdp and vinagre security, bug fix, and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for vinagre.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.\n\nThe vinagre packages provide the Vinagre remote desktop viewer for the GNOME desktop.\n\nThe following packages have been upgraded to a later upstream version: freerdp (2.1.1). (BZ#1834287)\n\nSecurity Fix(es):\n\n* freerdp: Out of bound read in cliprdr_server_receive_capabilities (CVE-2020-11018)\n\n* freerdp: Out of bound read/write in usb redirection channel (CVE-2020-11039)\n\n* freerdp: out-of-bounds read in update_read_icon_info function (CVE-2020-11042)\n\n* freerdp: out-of-bounds read in autodetect_recv_bandwidth_measure_results function (CVE-2020-11047)\n\n* freerdp: Out-of-bounds read in ntlm_read_ChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlm_message.c. (CVE-2020-13396)\n\n* freerdp: Out-of-bounds read in security_fips_decrypt in libfreerdp/core/security.c (CVE-2020-13397)\n\n* freerdp: Out of bound read in update_recv could result in a crash (CVE-2020-11019)\n\n* freerdp: Integer overflow in VIDEO channel (CVE-2020-11038)\n\n* freerdp: Out of bound access in clear_decompress_subcode_rlex (CVE-2020-11040)\n\n* freerdp: Unchecked read of array offset in rdpsnd_recv_wave2_pdu (CVE-2020-11041)\n\n* freerdp: out of bound read in rfx_process_message_tileset (CVE-2020-11043)\n\n* freerdp: double free in update_read_cache_bitmap_v3_order function (CVE-2020-11044)\n\n* freerdp: out of bounds read in update_read_bitmap_data function (CVE-2020-11045)\n\n* freerdp: out of bounds seek in update_read_synchronize function could lead out of bounds read (CVE-2020-11046)\n\n* freerdp: out-of-bounds read could result in aborting the session (CVE-2020-11048)\n\n* freerdp: out-of-bound read of client memory that is then passed on to the protocol parser (CVE-2020-11049)\n\n* freerdp: stream out-of-bounds seek in rdp_read_font_capability_set could lead to out-of-bounds read (CVE-2020-11058)\n\n* freerdp: out-of-bounds read in cliprdr_read_format_list function (CVE-2020-11085)\n\n* freerdp: out-of-bounds read in ntlm_read_ntlm_v2_client_challenge function (CVE-2020-11086)\n\n* freerdp: out-of-bounds read in ntlm_read_AuthenticateMessage (CVE-2020-11087)\n\n* freerdp: out-of-bounds read in ntlm_read_NegotiateMessage (CVE-2020-11088)\n\n* freerdp: out-of-bounds read in irp functions (CVE-2020-11089)\n\n* freerdp: out-of-bounds read in gdi.c (CVE-2020-11522)\n\n* freerdp: out-of-bounds read in bitmap.c (CVE-2020-11525)\n\n* freerdp: Stream pointer out of bounds in update_recv_secondary_order could lead out of bounds read later (CVE-2020-11526)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1761144","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1761144","description":""},{"ticket":"1803054","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1803054","description":""},{"ticket":"1834287","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1834287","description":"The following packages have been upgraded to a later upstream version: freerdp (2.1.1)."},{"ticket":"1835382","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1835382","description":""},{"ticket":"1835391","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1835391","description":""},{"ticket":"1835399","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1835399","description":""},{"ticket":"1835403","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1835403","description":""},{"ticket":"1835762","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1835762","description":""},{"ticket":"1835766","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1835766","description":""},{"ticket":"1835772","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1835772","description":""},{"ticket":"1835779","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1835779","description":""},{"ticket":"1836223","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1836223","description":""},{"ticket":"1836239","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1836239","description":""},{"ticket":"1836247","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1836247","description":""},{"ticket":"1839744","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1839744","description":""},{"ticket":"1841189","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1841189","description":""},{"ticket":"1841196","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1841196","description":""},{"ticket":"1844161","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1844161","description":""},{"ticket":"1844166","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1844166","description":""},{"ticket":"1844171","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1844171","description":""},{"ticket":"1844177","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1844177","description":""},{"ticket":"1844184","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1844184","description":""},{"ticket":"1848008","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1848008","description":""},{"ticket":"1848012","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1848012","description":""},{"ticket":"1848018","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1848018","description":""},{"ticket":"1848022","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1848022","description":""},{"ticket":"1848029","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1848029","description":""},{"ticket":"1848034","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1848034","description":""},{"ticket":"1848038","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1848038","description":""}],"cves":[{"name":"CVE-2020-11018","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11018","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"CWE-125"},{"name":"CVE-2020-11019","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11019","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"CWE-20->CWE-125"},{"name":"CVE-2020-11038","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11038","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3BaseScore":"5.4","cwe":"CWE-190->CWE-787"},{"name":"CVE-2020-11039","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11039","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L","cvss3BaseScore":"6.8","cwe":"CWE-20->CWE-190->CWE-770->(CWE-125|CWE-787)"},{"name":"CVE-2020-11040","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11040","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"2.7","cwe":"CWE-125"},{"name":"CVE-2020-11041","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11041","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"2.7","cwe":"CWE-129->CWE-125"},{"name":"CVE-2020-11042","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11042","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H","cvss3BaseScore":"5.9","cwe":"CWE-125"},{"name":"CVE-2020-11043","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11043","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"2.7","cwe":"CWE-20->CWE-805->CWE-125"},{"name":"CVE-2020-11044","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11044","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"2.2","cwe":"CWE-672"},{"name":"CVE-2020-11045","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11045","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-125"},{"name":"CVE-2020-11046","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11046","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"2.2","cwe":"CWE-119->CWE-125"},{"name":"CVE-2020-11047","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11047","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H","cvss3BaseScore":"5.9","cwe":"CWE-125"},{"name":"CVE-2020-11048","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11048","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"2.2","cwe":"CWE-125"},{"name":"CVE-2020-11049","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11049","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"2.2","cwe":"CWE-125"},{"name":"CVE-2020-11058","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11058","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"2.2","cwe":"CWE-119->CWE-125"},{"name":"CVE-2020-11085","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11085","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.5","cwe":"CWE-805->CWE-125"},{"name":"CVE-2020-11086","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11086","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3BaseScore":"5.4","cwe":"CWE-125"},{"name":"CVE-2020-11087","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11087","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3BaseScore":"5.4","cwe":"CWE-20->CWE-125"},{"name":"CVE-2020-11088","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11088","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3BaseScore":"5.4","cwe":"CWE-125"},{"name":"CVE-2020-11089","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11089","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3BaseScore":"5.5","cwe":"CWE-125"},{"name":"CVE-2020-11522","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11522","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"2.2","cwe":"CWE-125"},{"name":"CVE-2020-11525","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11525","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"2.2","cwe":"CWE-125"},{"name":"CVE-2020-11526","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11526","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"2.2","cwe":"CWE-125"},{"name":"CVE-2020-13396","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13396","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","cvss3BaseScore":"7.1","cwe":"CWE-125"},{"name":"CVE-2020-13397","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13397","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","cvss3BaseScore":"6.1","cwe":"CWE-476"}],"references":[],"publishedAt":"2020-11-03T12:23:37Z","rpms":{"Rocky Linux 8":{"nvras":["vinagre-debugsource-0:3.22.0-23.el8.x86_64.rpm","vinagre-0:3.22.0-23.el8.aarch64.rpm","vinagre-0:3.22.0-23.el8.src.rpm","vinagre-0:3.22.0-23.el8.x86_64.rpm","vinagre-debuginfo-0:3.22.0-23.el8.aarch64.rpm","vinagre-debuginfo-0:3.22.0-23.el8.x86_64.rpm","vinagre-debugsource-0:3.22.0-23.el8.aarch64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4647","url":"https://access.redhat.com/errata/RHSA-2020:4647","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4649.json b/data/advisories/2020/RLSA-2020-4649.json new file mode 100644 index 0000000..f80504c --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4649.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4649","synopsis":"Low: evolution security and bug fix update","severity":"SEVERITY_LOW","topic":"An update is available for bogofilter, evolution-mapi.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Evolution is a GNOME application that provides integrated email, calendar, contact management, and communications functionality.\n\nThe evolution-data-server packages provide a unified back end for applications which interact with contacts, tasks and calendar information. Evolution Data Server was originally developed as a back end for the Evolution information management application, but is now used by various other applications.\n\nOpenChange provides libraries to access Microsoft Exchange servers using native protocols.\n\nSecurity Fix(es):\n\n* evolution-data-server: Response injection via STARTTLS in SMTP and POP3 (CVE-2020-14928)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1825447","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1825447","description":""},{"ticket":"1836165","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1836165","description":""},{"ticket":"1836279","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1836279","description":""},{"ticket":"1857470","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1857470","description":""}],"cves":[{"name":"CVE-2020-14928","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14928","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3BaseScore":"5.3","cwe":"CWE-20"}],"references":[],"publishedAt":"2020-11-03T12:23:41Z","rpms":{"Rocky Linux 8":{"nvras":["bogofilter-0:1.2.5-2.el8.aarch64.rpm","bogofilter-0:1.2.5-2.el8.src.rpm","bogofilter-0:1.2.5-2.el8.x86_64.rpm","bogofilter-debuginfo-0:1.2.5-2.el8.aarch64.rpm","bogofilter-debuginfo-0:1.2.5-2.el8.x86_64.rpm","bogofilter-debugsource-0:1.2.5-2.el8.aarch64.rpm","bogofilter-debugsource-0:1.2.5-2.el8.x86_64.rpm","evolution-mapi-0:3.28.3-3.el8.aarch64.rpm","evolution-mapi-0:3.28.3-3.el8.src.rpm","evolution-mapi-0:3.28.3-3.el8.x86_64.rpm","evolution-mapi-debuginfo-0:3.28.3-3.el8.aarch64.rpm","evolution-mapi-debuginfo-0:3.28.3-3.el8.x86_64.rpm","evolution-mapi-debugsource-0:3.28.3-3.el8.aarch64.rpm","evolution-mapi-debugsource-0:3.28.3-3.el8.x86_64.rpm","evolution-mapi-langpacks-0:3.28.3-3.el8.noarch.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4649","url":"https://access.redhat.com/errata/RHSA-2020:4649","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4654.json b/data/advisories/2020/RLSA-2020-4654.json new file mode 100644 index 0000000..4b81e8c --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4654.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4654","synopsis":"Moderate: python27:2.7 security update","severity":"SEVERITY_MODERATE","topic":"An update is available for python-pymongo, python2-rpm-macros, python-sqlalchemy, python-docutils, pytest, python-psycopg2, python-PyMySQL, python-lxml, PyYAML, python-pytest-mock, python-attrs, python-jinja2, python-docs, python-requests, python-mock, python-ipaddress, python-funcsigs, python-py, python2-pip, python-chardet, python-markupsafe, python-pluggy, python-pygments, Cython, python-virtualenv, babel, python-dns, python-wheel, python-pysocks, python-coverage, python-setuptools_scm, pytz, python-nose, scipy, python-idna.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL.\n\nSecurity Fix(es):\n\n* python: infinite loop in the tarfile module via crafted TAR archive (CVE-2019-20907)\n\n* python-pip: directory traversal in _download_http_url() function in src/pip/_internal/download.py (CVE-2019-20916)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1856481","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1856481","description":""},{"ticket":"1868135","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1868135","description":""}],"cves":[{"name":"CVE-2019-20907","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20907","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-20->CWE-835"},{"name":"CVE-2019-20916","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20916","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.0","cwe":"CWE-22"}],"references":[],"publishedAt":"2020-11-03T12:24:08Z","rpms":{"Rocky Linux 8":{"nvras":["babel-0:2.5.1-9.module+el8.4.0+403+9ae17a31.noarch.rpm","babel-0:2.5.1-9.module+el8.4.0+403+9ae17a31.src.rpm","Cython-0:0.28.1-7.module+el8.5.0+706+735ec4b3.src.rpm","Cython-0:0.28.1-7.module+el8.4.0+403+9ae17a31.src.rpm","Cython-debugsource-0:0.28.1-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","Cython-debugsource-0:0.28.1-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","Cython-debugsource-0:0.28.1-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","Cython-debugsource-0:0.28.1-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","pytest-0:3.4.2-13.module+el8.5.0+706+735ec4b3.src.rpm","pytest-0:3.4.2-13.module+el8.4.0+403+9ae17a31.src.rpm","python2-attrs-0:17.4.0-10.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-attrs-0:17.4.0-10.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-babel-0:2.5.1-9.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-bson-0:3.6.1-11.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-bson-0:3.6.1-11.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-bson-debuginfo-0:3.6.1-11.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-bson-debuginfo-0:3.6.1-11.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-chardet-0:3.0.4-10.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-chardet-0:3.0.4-10.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-coverage-0:4.5.1-4.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-coverage-0:4.5.1-4.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-coverage-0:4.5.1-4.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-coverage-0:4.5.1-4.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-coverage-debuginfo-0:4.5.1-4.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-coverage-debuginfo-0:4.5.1-4.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-coverage-debuginfo-0:4.5.1-4.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-coverage-debuginfo-0:4.5.1-4.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-Cython-0:0.28.1-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-Cython-0:0.28.1-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-Cython-0:0.28.1-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-Cython-0:0.28.1-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-Cython-debuginfo-0:0.28.1-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-Cython-debuginfo-0:0.28.1-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-Cython-debuginfo-0:0.28.1-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-Cython-debuginfo-0:0.28.1-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-dns-0:1.15.0-10.module+el8.7.0+1062+663ba31c.noarch.rpm","python2-dns-0:1.15.0-10.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-docs-0:2.7.16-2.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-docs-info-0:2.7.16-2.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-docutils-0:0.14-12.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-funcsigs-0:1.0.2-13.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-idna-0:2.5-7.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-idna-0:2.5-7.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-ipaddress-0:1.0.18-6.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-jinja2-0:2.10-8.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-markupsafe-0:0.23-19.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-markupsafe-0:0.23-19.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-markupsafe-0:0.23-19.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-markupsafe-0:0.23-19.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-mock-0:2.0.0-13.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-nose-0:1.3.7-30.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-pip-0:9.0.3-18.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-pip-0:9.0.3-18.module+el8.4.0+403+9ae17a31.src.rpm","python2-pip-wheel-0:9.0.3-18.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-pluggy-0:0.6.0-8.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-pluggy-0:0.6.0-8.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-psycopg2-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-psycopg2-0:2.7.5-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-psycopg2-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-psycopg2-0:2.7.5-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-psycopg2-debug-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-psycopg2-debug-0:2.7.5-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-psycopg2-debug-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-psycopg2-debug-0:2.7.5-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-psycopg2-debug-debuginfo-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-psycopg2-debug-debuginfo-0:2.7.5-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-psycopg2-debug-debuginfo-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-psycopg2-debug-debuginfo-0:2.7.5-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-psycopg2-debuginfo-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-psycopg2-debuginfo-0:2.7.5-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-psycopg2-debuginfo-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-psycopg2-debuginfo-0:2.7.5-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-psycopg2-tests-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-psycopg2-tests-0:2.7.5-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-psycopg2-tests-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-psycopg2-tests-0:2.7.5-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-py-0:1.5.3-6.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-py-0:1.5.3-6.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-pygments-0:2.2.0-20.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-pymongo-0:3.6.1-11.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-pymongo-0:3.6.1-11.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-pymongo-debuginfo-0:3.6.1-11.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-pymongo-debuginfo-0:3.6.1-11.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-pymongo-gridfs-0:3.6.1-11.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-pymongo-gridfs-0:3.6.1-11.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-PyMySQL-0:0.8.0-10.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-PyMySQL-0:0.8.0-10.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-pysocks-0:1.6.8-6.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-pysocks-0:1.6.8-6.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-pytest-0:3.4.2-13.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-pytest-0:3.4.2-13.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-pytest-mock-0:1.9.0-4.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-pytz-0:2017.2-12.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-pytz-0:2017.2-12.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-pyyaml-0:3.12-16.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-pyyaml-0:3.12-16.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-pyyaml-0:3.12-16.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-pyyaml-0:3.12-16.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-pyyaml-debuginfo-0:3.12-16.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-pyyaml-debuginfo-0:3.12-16.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-pyyaml-debuginfo-0:3.12-16.module+el8.5.0+706+735ec4b3.x86_64.rpm","python2-pyyaml-debuginfo-0:3.12-16.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-requests-0:2.20.0-3.module+el8.5.0+706+735ec4b3.noarch.rpm","python2-requests-0:2.20.0-3.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-rpm-macros-0:3-38.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-rpm-macros-0:3-38.module+el8.4.0+403+9ae17a31.src.rpm","python2-scipy-0:1.0.0-20.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-scipy-0:1.0.0-20.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-scipy-debuginfo-0:1.0.0-20.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-scipy-debuginfo-0:1.0.0-20.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-setuptools_scm-0:1.15.7-6.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-sqlalchemy-0:1.3.2-2.module+el8.4.0+403+9ae17a31.aarch64.rpm","python2-sqlalchemy-0:1.3.2-2.module+el8.4.0+403+9ae17a31.x86_64.rpm","python2-virtualenv-0:15.1.0-19.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-wheel-1:0.31.1-2.module+el8.4.0+403+9ae17a31.noarch.rpm","python2-wheel-wheel-1:0.31.1-2.module+el8.4.0+403+9ae17a31.noarch.rpm","python-attrs-0:17.4.0-10.module+el8.5.0+706+735ec4b3.src.rpm","python-attrs-0:17.4.0-10.module+el8.4.0+403+9ae17a31.src.rpm","python-chardet-0:3.0.4-10.module+el8.5.0+706+735ec4b3.src.rpm","python-chardet-0:3.0.4-10.module+el8.4.0+403+9ae17a31.src.rpm","python-coverage-0:4.5.1-4.module+el8.5.0+706+735ec4b3.src.rpm","python-coverage-0:4.5.1-4.module+el8.4.0+403+9ae17a31.src.rpm","python-coverage-debugsource-0:4.5.1-4.module+el8.5.0+706+735ec4b3.aarch64.rpm","python-coverage-debugsource-0:4.5.1-4.module+el8.4.0+403+9ae17a31.aarch64.rpm","python-coverage-debugsource-0:4.5.1-4.module+el8.5.0+706+735ec4b3.x86_64.rpm","python-coverage-debugsource-0:4.5.1-4.module+el8.4.0+403+9ae17a31.x86_64.rpm","python-dns-0:1.15.0-10.module+el8.7.0+1062+663ba31c.src.rpm","python-dns-0:1.15.0-10.el8.src.rpm","python-dns-0:1.15.0-10.module+el8.4.0+403+9ae17a31.src.rpm","python-docs-0:2.7.16-2.module+el8.4.0+403+9ae17a31.src.rpm","python-docutils-0:0.14-12.module+el8.4.0+403+9ae17a31.src.rpm","python-docutils-0:0.14-12.module+el8.3.0+120+426d8baf.src.rpm","python-funcsigs-0:1.0.2-13.module+el8.4.0+403+9ae17a31.src.rpm","python-idna-0:2.5-7.module+el8.5.0+706+735ec4b3.src.rpm","python-idna-0:2.5-7.module+el8.4.0+403+9ae17a31.src.rpm","python-ipaddress-0:1.0.18-6.module+el8.4.0+403+9ae17a31.src.rpm","python-jinja2-0:2.10-8.module+el8.4.0+403+9ae17a31.src.rpm","python-lxml-0:4.2.3-3.el8.src.rpm","python-markupsafe-0:0.23-19.el8.src.rpm","python-mock-0:2.0.0-13.module+el8.4.0+403+9ae17a31.src.rpm","python-nose-0:1.3.7-30.module+el8.3.0+120+426d8baf.src.rpm","python-nose-docs-0:1.3.7-30.module+el8.3.0+120+426d8baf.noarch.rpm","python-pluggy-0:0.6.0-8.module+el8.5.0+706+735ec4b3.src.rpm","python-pluggy-0:0.6.0-8.module+el8.4.0+403+9ae17a31.src.rpm","python-psycopg2-0:2.7.5-7.el8.src.rpm","python-psycopg2-debuginfo-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python-psycopg2-debuginfo-0:2.7.5-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python-psycopg2-debuginfo-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python-psycopg2-debuginfo-0:2.7.5-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python-psycopg2-debugsource-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python-psycopg2-debugsource-0:2.7.5-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python-psycopg2-debugsource-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python-psycopg2-debugsource-0:2.7.5-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python-psycopg2-doc-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm","python-psycopg2-doc-0:2.7.5-7.module+el8.4.0+403+9ae17a31.aarch64.rpm","python-psycopg2-doc-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm","python-psycopg2-doc-0:2.7.5-7.module+el8.4.0+403+9ae17a31.x86_64.rpm","python-py-0:1.5.3-6.module+el8.5.0+706+735ec4b3.src.rpm","python-py-0:1.5.3-6.module+el8.4.0+403+9ae17a31.src.rpm","python-pygments-0:2.2.0-20.module+el8.3.0+120+426d8baf.src.rpm","python-pymongo-0:3.6.1-11.module+el8.3.0+120+426d8baf.src.rpm","python-pymongo-debuginfo-0:3.6.1-11.module+el8.3.0+120+426d8baf.aarch64.rpm","python-pymongo-debuginfo-0:3.6.1-11.module+el8.3.0+120+426d8baf.x86_64.rpm","python-requests-0:2.20.0-3.module+el8.5.0+706+735ec4b3.src.rpm","python-pymongo-debugsource-0:3.6.1-11.module+el8.3.0+120+426d8baf.aarch64.rpm","python-pymongo-debugsource-0:3.6.1-11.module+el8.3.0+120+426d8baf.x86_64.rpm","python-PyMySQL-0:0.8.0-10.module+el8.5.0+706+735ec4b3.src.rpm","python-PyMySQL-0:0.8.0-10.module+el8.3.0+120+426d8baf.src.rpm","python-pysocks-0:1.6.8-6.module+el8.5.0+706+735ec4b3.src.rpm","python-pysocks-0:1.6.8-6.module+el8.4.0+403+9ae17a31.src.rpm","python-pytest-mock-0:1.9.0-4.module+el8.4.0+403+9ae17a31.src.rpm","python-requests-0:2.20.0-3.module+el8.4.0+403+9ae17a31.src.rpm","python-setuptools_scm-0:1.15.7-6.module+el8.4.0+403+9ae17a31.src.rpm","python-sqlalchemy-0:1.3.2-2.module+el8.4.0+403+9ae17a31.src.rpm","python-sqlalchemy-0:1.3.2-2.module+el8.3.0+120+426d8baf.src.rpm","python-sqlalchemy-doc-0:1.3.2-2.module+el8.4.0+403+9ae17a31.noarch.rpm","python-sqlalchemy-doc-0:1.3.2-2.module+el8.3.0+120+426d8baf.noarch.rpm","python-virtualenv-0:15.1.0-19.module+el8.3.0+120+426d8baf.src.rpm","python-wheel-1:0.31.1-2.module+el8.3.0+120+426d8baf.src.rpm","pytz-0:2017.2-12.module+el8.5.0+706+735ec4b3.src.rpm","pytz-0:2017.2-12.module+el8.4.0+403+9ae17a31.src.rpm","PyYAML-0:3.12-16.module+el8.5.0+706+735ec4b3.src.rpm","PyYAML-0:3.12-16.module+el8.4.0+403+9ae17a31.src.rpm","PyYAML-debugsource-0:3.12-16.module+el8.5.0+706+735ec4b3.aarch64.rpm","PyYAML-debugsource-0:3.12-16.module+el8.4.0+403+9ae17a31.aarch64.rpm","PyYAML-debugsource-0:3.12-16.module+el8.5.0+706+735ec4b3.x86_64.rpm","PyYAML-debugsource-0:3.12-16.module+el8.4.0+403+9ae17a31.x86_64.rpm","scipy-0:1.0.0-20.module+el8.3.0+120+426d8baf.src.rpm","scipy-debugsource-0:1.0.0-20.module+el8.3.0+120+426d8baf.aarch64.rpm","scipy-debugsource-0:1.0.0-20.module+el8.3.0+120+426d8baf.x86_64.rpm","python-markupsafe-0:0.23-19.module+el8.5.0+706+735ec4b3.src.rpm","python-psycopg2-0:2.7.5-7.module+el8.5.0+706+735ec4b3.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4654","url":"https://access.redhat.com/errata/RHSA-2020:4654","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4659.json b/data/advisories/2020/RLSA-2020-4659.json new file mode 100644 index 0000000..e7eb7bd --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4659.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4659","synopsis":"Moderate: gd security update","severity":"SEVERITY_MODERATE","topic":"An update is available for gd.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"GD is an open source code library for the dynamic creation of images by programmers. GD creates PNG, JPEG, GIF, WebP, XPM, BMP images, among other formats. \n\nSecurity Fix(es):\n\n* gd: Heap-based buffer overflow in gdImageColorMatch() in gd_color_match.c (CVE-2019-6977)\n\n* gd: NULL pointer dereference in gdImageClone (CVE-2018-14553)\n\n* gd: Double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c (CVE-2019-6978)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1600727","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1600727","description":""},{"ticket":"1671390","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1671390","description":""},{"ticket":"1672207","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1672207","description":""}],"cves":[{"name":"CVE-2018-14553","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14553","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H","cvss3BaseScore":"7.4","cwe":"CWE-119"},{"name":"CVE-2019-6977","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6977","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3BaseScore":"6.3","cwe":"CWE-122"},{"name":"CVE-2019-6978","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6978","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"5.3","cwe":"CWE-416"}],"references":[],"publishedAt":"2020-11-03T12:24:40Z","rpms":{"Rocky Linux 8":{"nvras":["gd-debuginfo-0:2.2.5-7.el8.i686.rpm","gd-0:2.2.5-7.el8.aarch64.rpm","gd-0:2.2.5-7.el8.i686.rpm","gd-0:2.2.5-7.el8.src.rpm","gd-0:2.2.5-7.el8.x86_64.rpm","gd-debuginfo-0:2.2.5-7.el8.aarch64.rpm","gd-debuginfo-0:2.2.5-7.el8.x86_64.rpm","gd-debugsource-0:2.2.5-7.el8.aarch64.rpm","gd-debugsource-0:2.2.5-7.el8.i686.rpm","gd-debugsource-0:2.2.5-7.el8.x86_64.rpm","gd-devel-0:2.2.5-7.el8.aarch64.rpm","gd-devel-0:2.2.5-7.el8.i686.rpm","gd-devel-0:2.2.5-7.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4659","url":"https://access.redhat.com/errata/RHSA-2020:4659","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4670.json b/data/advisories/2020/RLSA-2020-4670.json new file mode 100644 index 0000000..2da0303 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4670.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4670","synopsis":"Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for python-jwcrypto, custodia, python-qrcode, python-yubico, python-kdcproxy, pyusb.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. \n\nThe following packages have been upgraded to a later upstream version: ipa (4.8.7), softhsm (2.6.0), opendnssec (2.1.6). (BZ#1759888, BZ#1818765, BZ#1818877)\n\nSecurity Fix(es):\n\n* js-jquery: Cross-site scripting via cross-domain ajax requests (CVE-2015-9251)\n\n* bootstrap: XSS in the data-target attribute (CVE-2016-10735)\n\n* bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute (CVE-2018-14040)\n\n* bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip (CVE-2018-14042)\n\n* bootstrap: XSS in the tooltip data-viewport attribute (CVE-2018-20676)\n\n* bootstrap: XSS in the affix configuration target property (CVE-2018-20677)\n\n* bootstrap: XSS in the tooltip or popover data-template attribute (CVE-2019-8331)\n\n* js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection (CVE-2019-11358)\n\n* jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method (CVE-2020-11022)\n\n* ipa: No password length restriction leads to denial of service (CVE-2020-1722)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1399546","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1399546","description":""},{"ticket":"1430365","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1430365","description":""},{"ticket":"1488732","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1488732","description":""},{"ticket":"1585020","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1585020","description":""},{"ticket":"1601614","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1601614","description":""},{"ticket":"1601617","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1601617","description":""},{"ticket":"1651577","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1651577","description":""},{"ticket":"1668082","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1668082","description":""},{"ticket":"1668089","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1668089","description":""},{"ticket":"1668097","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1668097","description":""},{"ticket":"1686454","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1686454","description":""},{"ticket":"1701233","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1701233","description":""},{"ticket":"1701972","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1701972","description":""},{"ticket":"1746830","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1746830","description":""},{"ticket":"1750893","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1750893","description":""},{"ticket":"1751295","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1751295","description":""},{"ticket":"1757045","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1757045","description":""},{"ticket":"1759888","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1759888","description":"The following packages have been upgraded to a later upstream version: ipa (4.8.7), softhsm (2.6.0), opendnssec (2.1.6). (BZ#1759888, BZ#1818765, BZ#1818877)"},{"ticket":"1768156","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1768156","description":""},{"ticket":"1777806","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1777806","description":""},{"ticket":"1793071","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1793071","description":""},{"ticket":"1801698","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1801698","description":""},{"ticket":"1802471","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1802471","description":""},{"ticket":"1809835","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1809835","description":""},{"ticket":"1810154","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1810154","description":""},{"ticket":"1810179","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1810179","description":""},{"ticket":"1813330","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1813330","description":""},{"ticket":"1816784","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1816784","description":""},{"ticket":"1818765","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1818765","description":""},{"ticket":"1818877","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1818877","description":""},{"ticket":"1828406","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1828406","description":""},{"ticket":"1831732","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1831732","description":""},{"ticket":"1831935","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1831935","description":""},{"ticket":"1832331","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1832331","description":""},{"ticket":"1833266","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1833266","description":""},{"ticket":"1834264","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1834264","description":""},{"ticket":"1834909","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1834909","description":""},{"ticket":"1845211","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1845211","description":""},{"ticket":"1845537","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1845537","description":""},{"ticket":"1845596","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1845596","description":""},{"ticket":"1846352","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1846352","description":""},{"ticket":"1846434","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1846434","description":""},{"ticket":"1847999","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1847999","description":""},{"ticket":"1849914","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1849914","description":""},{"ticket":"1851411","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1851411","description":""},{"ticket":"1852244","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1852244","description":""},{"ticket":"1853263","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1853263","description":""},{"ticket":"1857157","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1857157","description":""},{"ticket":"1858318","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1858318","description":""},{"ticket":"1859213","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1859213","description":""},{"ticket":"1863079","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1863079","description":""},{"ticket":"1863616","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1863616","description":""},{"ticket":"1866291","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1866291","description":""},{"ticket":"1866938","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1866938","description":""},{"ticket":"1868432","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1868432","description":""},{"ticket":"1869311","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1869311","description":""},{"ticket":"1870202","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1870202","description":""},{"ticket":"1874015","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1874015","description":""},{"ticket":"1875348","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1875348","description":""},{"ticket":"1879604","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1879604","description":""}],"cves":[{"name":"CVE-2015-9251","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9251","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-79"},{"name":"CVE-2016-10735","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10735","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-79"},{"name":"CVE-2018-14040","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14040","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-79"},{"name":"CVE-2018-14042","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14042","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-79"},{"name":"CVE-2018-20676","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20676","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-79"},{"name":"CVE-2018-20677","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20677","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-79"},{"name":"CVE-2019-11358","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11358","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3BaseScore":"5.6","cwe":"CWE-79"},{"name":"CVE-2019-8331","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8331","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-79"},{"name":"CVE-2020-11022","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11022","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-79"},{"name":"CVE-2020-1722","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1722","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3BaseScore":"5.3","cwe":"CWE-400"}],"references":[],"publishedAt":"2020-11-03T12:25:36Z","rpms":{"Rocky Linux 8":{"nvras":["custodia-0:0.6.0-3.module+el8.4.0+429+6bd33fea.noarch.rpm","custodia-0:0.6.0-3.module+el8.4.0+429+6bd33fea.src.rpm","python3-custodia-0:0.6.0-3.module+el8.4.0+429+6bd33fea.noarch.rpm","python3-jwcrypto-0:0.5.0-1.module+el8.4.0+429+6bd33fea.noarch.rpm","python3-kdcproxy-0:0.4-5.module+el8.3.0+244+0b2ae752.noarch.rpm","python3-pyusb-0:1.0.0-9.module+el8.4.0+429+6bd33fea.noarch.rpm","python3-qrcode-0:5.1-12.module+el8.4.0+429+6bd33fea.noarch.rpm","python3-qrcode-core-0:5.1-12.module+el8.4.0+429+6bd33fea.noarch.rpm","python3-yubico-0:1.3.2-9.module+el8.4.0+429+6bd33fea.noarch.rpm","python-jwcrypto-0:0.5.0-1.module+el8.4.0+429+6bd33fea.src.rpm","python-kdcproxy-0:0.4-5.module+el8.3.0+244+0b2ae752.src.rpm","python-qrcode-0:5.1-12.module+el8.4.0+429+6bd33fea.src.rpm","python-yubico-0:1.3.2-9.module+el8.4.0+429+6bd33fea.src.rpm","pyusb-0:1.0.0-9.module+el8.4.0+429+6bd33fea.src.rpm","python3-jwcrypto-0:0.5.0-1.1.module+el8.7.0+1074+aae18f3a.noarch.rpm","python3-pyusb-0:1.0.0-9.1.module+el8.7.0+1074+aae18f3a.noarch.rpm","python3-yubico-0:1.3.2-9.1.module+el8.7.0+1074+aae18f3a.noarch.rpm","python-jwcrypto-0:0.5.0-1.1.module+el8.7.0+1074+aae18f3a.src.rpm","python-yubico-0:1.3.2-9.1.module+el8.7.0+1074+aae18f3a.src.rpm","pyusb-0:1.0.0-9.1.module+el8.7.0+1074+aae18f3a.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4670","url":"https://access.redhat.com/errata/RHSA-2020:4670","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4676.json b/data/advisories/2020/RLSA-2020-4676.json new file mode 100644 index 0000000..9e3e256 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4676.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4676","synopsis":"Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for libnbd, nbdkit, libguestfs-winsupport, supermin, libiscsi, hivex, netcf, perl-Sys-Virt, seabios, sgabios, libvirt-dbus, libvirt-python.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:Rocky Linux module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.\n\nThe following packages have been upgraded to a later upstream version: hivex (1.3.18), libguestfs (1.40.2), libguestfs-winsupport (8.2), libvirt (6.0.0), libvirt-dbus (1.3.0), libvirt-python (6.0.0), nbdkit (1.16.2), perl-Sys-Virt (6.0.0), qemu-kvm (4.2.0), seabios (1.13.0), SLOF (20191022). (BZ#1810193, BZ#1844296)\n\nSecurity Fix(es):\n\n* libvirt: leak of /dev/mapper/control into QEMU guests (CVE-2020-14339)\n\n* QEMU: Slirp: use-after-free during packet reassembly (CVE-2019-15890)\n\n* libvirt: Potential DoS by holding a monitor job while querying QEMU guest-agent (CVE-2019-20485)\n\n* QEMU: slirp: use-after-free in ip_reass() function in ip_input.c (CVE-2020-1983)\n\n* libvirt: Potential denial of service via active pool without target path (CVE-2020-10703)\n\n* libvirt: leak of sensitive cookie information via dumpxml (CVE-2020-14301)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1518042","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1518042","description":""},{"ticket":"1664324","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1664324","description":""},{"ticket":"1715039","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1715039","description":""},{"ticket":"1717394","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1717394","description":""},{"ticket":"1727865","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1727865","description":""},{"ticket":"1749716","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1749716","description":""},{"ticket":"1756946","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1756946","description":""},{"ticket":"1759849","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1759849","description":""},{"ticket":"1763191","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1763191","description":""},{"ticket":"1790189","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1790189","description":""},{"ticket":"1805998","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1805998","description":""},{"ticket":"1807057","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1807057","description":""},{"ticket":"1809740","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1809740","description":""},{"ticket":"1810193","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1810193","description":"The following packages have been upgraded to a later upstream version: hivex (1.3.18), libguestfs (1.40.2), libguestfs-winsupport (8.2), libvirt (6.0.0), libvirt-dbus (1.3.0), libvirt-python (6.0.0), nbdkit (1.16.2), perl-Sys-Virt (6.0.0), qemu-kvm (4.2.0), seabios (1.13.0), SLOF (20191022). (BZ#1810193, BZ#1844296)"},{"ticket":"1811539","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1811539","description":""},{"ticket":"1816650","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1816650","description":""},{"ticket":"1828681","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1828681","description":""},{"ticket":"1829825","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1829825","description":""},{"ticket":"1844296","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1844296","description":""},{"ticket":"1845459","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1845459","description":""},{"ticket":"1848640","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1848640","description":""},{"ticket":"1849997","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1849997","description":""},{"ticket":"1854380","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1854380","description":""},{"ticket":"1857779","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1857779","description":""},{"ticket":"1860069","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1860069","description":""},{"ticket":"1867847","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1867847","description":""}],"cves":[{"name":"CVE-2019-15890","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15890","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3BaseScore":"5.6","cwe":"CWE-416"},{"name":"CVE-2019-20485","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20485","cvss3ScoringVector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3BaseScore":"5.8","cwe":"CWE-400"},{"name":"CVE-2020-10703","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10703","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"CWE-476"},{"name":"CVE-2020-14301","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14301","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3BaseScore":"6.5","cwe":"CWE-212"},{"name":"CVE-2020-14339","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14339","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"CWE-772"},{"name":"CVE-2020-1983","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1983","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"CWE-416"}],"references":[],"publishedAt":"2020-11-03T12:26:07Z","rpms":{"Rocky Linux 8":{"nvras":["hivex-0:1.3.18-20.module+el8.4.0+534+4680a14e.aarch64.rpm","hivex-0:1.3.18-20.module+el8.4.0+534+4680a14e.i686.rpm","hivex-0:1.3.18-20.module+el8.4.0+534+4680a14e.src.rpm","hivex-0:1.3.18-20.module+el8.4.0+534+4680a14e.x86_64.rpm","hivex-debuginfo-0:1.3.18-20.module+el8.4.0+534+4680a14e.aarch64.rpm","hivex-debuginfo-0:1.3.18-20.module+el8.4.0+534+4680a14e.i686.rpm","hivex-debuginfo-0:1.3.18-20.module+el8.4.0+534+4680a14e.x86_64.rpm","hivex-debugsource-0:1.3.18-20.module+el8.4.0+534+4680a14e.aarch64.rpm","hivex-debugsource-0:1.3.18-20.module+el8.4.0+534+4680a14e.i686.rpm","hivex-debugsource-0:1.3.18-20.module+el8.4.0+534+4680a14e.x86_64.rpm","hivex-devel-0:1.3.18-20.module+el8.4.0+534+4680a14e.aarch64.rpm","hivex-devel-0:1.3.18-20.module+el8.4.0+534+4680a14e.i686.rpm","hivex-devel-0:1.3.18-20.module+el8.4.0+534+4680a14e.x86_64.rpm","libguestfs-winsupport-0:8.2-1.module+el8.4.0+534+4680a14e.aarch64.rpm","libguestfs-winsupport-0:8.2-1.module+el8.4.0+534+4680a14e.i686.rpm","libguestfs-winsupport-0:8.2-1.module+el8.4.0+534+4680a14e.src.rpm","libguestfs-winsupport-0:8.2-1.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-0:1.18.0-8.module+el8.7.0+1084+97b81f61.src.rpm","libiscsi-0:1.18.0-8.module+el8.4.0+534+4680a14e.src.rpm","libiscsi-0:1.18.0-8.module+el8.6.0+847+b490afdd.src.rpm","libiscsi-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-debugsource-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-devel-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-devel-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-devel-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-devel-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-utils-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-utils-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-utils-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-utils-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.aarch64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.aarch64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.aarch64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.i686.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.i686.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.i686.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.7.0+1084+97b81f61.x86_64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.4.0+534+4680a14e.x86_64.rpm","libiscsi-utils-debuginfo-0:1.18.0-8.module+el8.6.0+847+b490afdd.x86_64.rpm","libnbd-0:1.2.2-1.module+el8.4.0+534+4680a14e.aarch64.rpm","libnbd-0:1.2.2-1.module+el8.4.0+534+4680a14e.i686.rpm","libnbd-0:1.2.2-1.module+el8.4.0+534+4680a14e.src.rpm","libnbd-0:1.2.2-1.module+el8.4.0+534+4680a14e.x86_64.rpm","libnbd-debuginfo-0:1.2.2-1.module+el8.4.0+534+4680a14e.aarch64.rpm","libnbd-debuginfo-0:1.2.2-1.module+el8.4.0+534+4680a14e.i686.rpm","libnbd-debuginfo-0:1.2.2-1.module+el8.4.0+534+4680a14e.x86_64.rpm","libnbd-debugsource-0:1.2.2-1.module+el8.4.0+534+4680a14e.aarch64.rpm","libnbd-debugsource-0:1.2.2-1.module+el8.4.0+534+4680a14e.i686.rpm","libnbd-debugsource-0:1.2.2-1.module+el8.4.0+534+4680a14e.x86_64.rpm","libnbd-devel-0:1.2.2-1.module+el8.4.0+534+4680a14e.aarch64.rpm","libnbd-devel-0:1.2.2-1.module+el8.4.0+534+4680a14e.i686.rpm","libnbd-devel-0:1.2.2-1.module+el8.4.0+534+4680a14e.x86_64.rpm","libvirt-dbus-0:1.3.0-2.module+el8.7.0+1084+97b81f61.aarch64.rpm","libvirt-dbus-0:1.3.0-2.module+el8.4.0+534+4680a14e.aarch64.rpm","libvirt-dbus-0:1.3.0-2.module+el8.6.0+847+b490afdd.aarch64.rpm","libvirt-dbus-0:1.3.0-2.module+el8.7.0+1084+97b81f61.i686.rpm","libvirt-dbus-0:1.3.0-2.module+el8.4.0+534+4680a14e.i686.rpm","libvirt-dbus-0:1.3.0-2.module+el8.6.0+847+b490afdd.i686.rpm","libvirt-dbus-0:1.3.0-2.module+el8.7.0+1084+97b81f61.src.rpm","libvirt-dbus-0:1.3.0-2.module+el8.4.0+534+4680a14e.src.rpm","libvirt-dbus-0:1.3.0-2.module+el8.6.0+847+b490afdd.src.rpm","libvirt-dbus-0:1.3.0-2.module+el8.7.0+1084+97b81f61.x86_64.rpm","libvirt-dbus-0:1.3.0-2.module+el8.4.0+534+4680a14e.x86_64.rpm","libvirt-dbus-0:1.3.0-2.module+el8.6.0+847+b490afdd.x86_64.rpm","libvirt-dbus-debuginfo-0:1.3.0-2.module+el8.7.0+1084+97b81f61.aarch64.rpm","libvirt-dbus-debuginfo-0:1.3.0-2.module+el8.4.0+534+4680a14e.aarch64.rpm","libvirt-dbus-debuginfo-0:1.3.0-2.module+el8.6.0+847+b490afdd.aarch64.rpm","libvirt-dbus-debuginfo-0:1.3.0-2.module+el8.7.0+1084+97b81f61.i686.rpm","libvirt-dbus-debuginfo-0:1.3.0-2.module+el8.4.0+534+4680a14e.i686.rpm","libvirt-dbus-debuginfo-0:1.3.0-2.module+el8.6.0+847+b490afdd.i686.rpm","libvirt-dbus-debuginfo-0:1.3.0-2.module+el8.7.0+1084+97b81f61.x86_64.rpm","libvirt-dbus-debuginfo-0:1.3.0-2.module+el8.4.0+534+4680a14e.x86_64.rpm","libvirt-dbus-debuginfo-0:1.3.0-2.module+el8.6.0+847+b490afdd.x86_64.rpm","libvirt-dbus-debugsource-0:1.3.0-2.module+el8.7.0+1084+97b81f61.aarch64.rpm","libvirt-dbus-debugsource-0:1.3.0-2.module+el8.4.0+534+4680a14e.aarch64.rpm","libvirt-dbus-debugsource-0:1.3.0-2.module+el8.6.0+847+b490afdd.aarch64.rpm","libvirt-dbus-debugsource-0:1.3.0-2.module+el8.7.0+1084+97b81f61.i686.rpm","libvirt-dbus-debugsource-0:1.3.0-2.module+el8.4.0+534+4680a14e.i686.rpm","libvirt-dbus-debugsource-0:1.3.0-2.module+el8.6.0+847+b490afdd.i686.rpm","libvirt-dbus-debugsource-0:1.3.0-2.module+el8.7.0+1084+97b81f61.x86_64.rpm","libvirt-dbus-debugsource-0:1.3.0-2.module+el8.4.0+534+4680a14e.x86_64.rpm","libvirt-dbus-debugsource-0:1.3.0-2.module+el8.6.0+847+b490afdd.x86_64.rpm","libvirt-python-0:6.0.0-1.module+el8.4.0+534+4680a14e.src.rpm","libvirt-python-debugsource-0:6.0.0-1.module+el8.4.0+534+4680a14e.aarch64.rpm","libvirt-python-debugsource-0:6.0.0-1.module+el8.4.0+534+4680a14e.i686.rpm","libvirt-python-debugsource-0:6.0.0-1.module+el8.4.0+534+4680a14e.x86_64.rpm","nbdfuse-0:1.2.2-1.module+el8.4.0+534+4680a14e.aarch64.rpm","nbdfuse-0:1.2.2-1.module+el8.4.0+534+4680a14e.i686.rpm","nbdfuse-0:1.2.2-1.module+el8.4.0+534+4680a14e.x86_64.rpm","nbdfuse-debuginfo-0:1.2.2-1.module+el8.4.0+534+4680a14e.aarch64.rpm","nbdfuse-debuginfo-0:1.2.2-1.module+el8.4.0+534+4680a14e.i686.rpm","nbdfuse-debuginfo-0:1.2.2-1.module+el8.4.0+534+4680a14e.x86_64.rpm","nbdkit-0:1.16.2-4.module+el8.4.0+534+4680a14e.aarch64.rpm","nbdkit-0:1.16.2-4.module+el8.4.0+534+4680a14e.src.rpm","nbdkit-0:1.16.2-4.module+el8.4.0+534+4680a14e.x86_64.rpm","nbdkit-bash-completion-0:1.16.2-4.module+el8.4.0+534+4680a14e.noarch.rpm","nbdkit-basic-filters-0:1.16.2-4.module+el8.4.0+534+4680a14e.aarch64.rpm","nbdkit-basic-filters-0:1.16.2-4.module+el8.4.0+534+4680a14e.x86_64.rpm","nbdkit-basic-filters-debuginfo-0:1.16.2-4.module+el8.4.0+534+4680a14e.aarch64.rpm","nbdkit-basic-filters-debuginfo-0:1.16.2-4.module+el8.4.0+534+4680a14e.x86_64.rpm","nbdkit-basic-plugins-0:1.16.2-4.module+el8.4.0+534+4680a14e.aarch64.rpm","nbdkit-basic-plugins-0:1.16.2-4.module+el8.4.0+534+4680a14e.x86_64.rpm","nbdkit-basic-plugins-debuginfo-0:1.16.2-4.module+el8.4.0+534+4680a14e.aarch64.rpm","nbdkit-basic-plugins-debuginfo-0:1.16.2-4.module+el8.4.0+534+4680a14e.x86_64.rpm","nbdkit-curl-plugin-0:1.16.2-4.module+el8.4.0+534+4680a14e.aarch64.rpm","nbdkit-curl-plugin-0:1.16.2-4.module+el8.4.0+534+4680a14e.x86_64.rpm","nbdkit-curl-plugin-debuginfo-0:1.16.2-4.module+el8.4.0+534+4680a14e.aarch64.rpm","nbdkit-curl-plugin-debuginfo-0:1.16.2-4.module+el8.4.0+534+4680a14e.x86_64.rpm","nbdkit-debuginfo-0:1.16.2-4.module+el8.4.0+534+4680a14e.aarch64.rpm","nbdkit-debuginfo-0:1.16.2-4.module+el8.4.0+534+4680a14e.x86_64.rpm","nbdkit-debugsource-0:1.16.2-4.module+el8.4.0+534+4680a14e.aarch64.rpm","nbdkit-debugsource-0:1.16.2-4.module+el8.4.0+534+4680a14e.x86_64.rpm","nbdkit-devel-0:1.16.2-4.module+el8.4.0+534+4680a14e.aarch64.rpm","nbdkit-devel-0:1.16.2-4.module+el8.4.0+534+4680a14e.x86_64.rpm","nbdkit-example-plugins-0:1.16.2-4.module+el8.4.0+534+4680a14e.aarch64.rpm","nbdkit-example-plugins-0:1.16.2-4.module+el8.4.0+534+4680a14e.x86_64.rpm","nbdkit-example-plugins-debuginfo-0:1.16.2-4.module+el8.4.0+534+4680a14e.aarch64.rpm","nbdkit-example-plugins-debuginfo-0:1.16.2-4.module+el8.4.0+534+4680a14e.x86_64.rpm","nbdkit-gzip-plugin-0:1.16.2-4.module+el8.4.0+534+4680a14e.aarch64.rpm","nbdkit-gzip-plugin-0:1.16.2-4.module+el8.4.0+534+4680a14e.x86_64.rpm","nbdkit-gzip-plugin-debuginfo-0:1.16.2-4.module+el8.4.0+534+4680a14e.aarch64.rpm","nbdkit-gzip-plugin-debuginfo-0:1.16.2-4.module+el8.4.0+534+4680a14e.x86_64.rpm","nbdkit-linuxdisk-plugin-0:1.16.2-4.module+el8.4.0+534+4680a14e.aarch64.rpm","nbdkit-linuxdisk-plugin-0:1.16.2-4.module+el8.4.0+534+4680a14e.x86_64.rpm","nbdkit-linuxdisk-plugin-debuginfo-0:1.16.2-4.module+el8.4.0+534+4680a14e.aarch64.rpm","nbdkit-linuxdisk-plugin-debuginfo-0:1.16.2-4.module+el8.4.0+534+4680a14e.x86_64.rpm","nbdkit-python-plugin-0:1.16.2-4.module+el8.4.0+534+4680a14e.aarch64.rpm","nbdkit-python-plugin-0:1.16.2-4.module+el8.4.0+534+4680a14e.x86_64.rpm","nbdkit-python-plugin-debuginfo-0:1.16.2-4.module+el8.4.0+534+4680a14e.aarch64.rpm","nbdkit-python-plugin-debuginfo-0:1.16.2-4.module+el8.4.0+534+4680a14e.x86_64.rpm","nbdkit-server-0:1.16.2-4.module+el8.4.0+534+4680a14e.aarch64.rpm","nbdkit-server-0:1.16.2-4.module+el8.4.0+534+4680a14e.x86_64.rpm","nbdkit-server-debuginfo-0:1.16.2-4.module+el8.4.0+534+4680a14e.aarch64.rpm","nbdkit-server-debuginfo-0:1.16.2-4.module+el8.4.0+534+4680a14e.x86_64.rpm","nbdkit-ssh-plugin-0:1.16.2-4.module+el8.4.0+534+4680a14e.aarch64.rpm","nbdkit-ssh-plugin-0:1.16.2-4.module+el8.4.0+534+4680a14e.x86_64.rpm","nbdkit-ssh-plugin-debuginfo-0:1.16.2-4.module+el8.4.0+534+4680a14e.aarch64.rpm","nbdkit-ssh-plugin-debuginfo-0:1.16.2-4.module+el8.4.0+534+4680a14e.x86_64.rpm","nbdkit-vddk-plugin-0:1.16.2-4.module+el8.4.0+534+4680a14e.x86_64.rpm","nbdkit-vddk-plugin-debuginfo-0:1.16.2-4.module+el8.4.0+534+4680a14e.x86_64.rpm","nbdkit-xz-filter-0:1.16.2-4.module+el8.4.0+534+4680a14e.aarch64.rpm","nbdkit-xz-filter-0:1.16.2-4.module+el8.4.0+534+4680a14e.x86_64.rpm","nbdkit-xz-filter-debuginfo-0:1.16.2-4.module+el8.4.0+534+4680a14e.aarch64.rpm","nbdkit-xz-filter-debuginfo-0:1.16.2-4.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-0:0.2.8-12.module+el8.7.0+1084+97b81f61.src.rpm","netcf-0:0.2.8-12.module+el8.4.0+534+4680a14e.src.rpm","netcf-0:0.2.8-12.module+el8.6.0+847+b490afdd.src.rpm","netcf-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-debugsource-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-debugsource-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-debugsource-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-debugsource-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-devel-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-devel-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-devel-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-devel-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-devel-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-devel-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-devel-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-devel-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-devel-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-libs-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-libs-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-libs-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-libs-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-libs-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-libs-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-libs-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-libs-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-libs-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.aarch64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.aarch64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.aarch64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.i686.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.i686.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.i686.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.7.0+1084+97b81f61.x86_64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.4.0+534+4680a14e.x86_64.rpm","netcf-libs-debuginfo-0:0.2.8-12.module+el8.6.0+847+b490afdd.x86_64.rpm","ocaml-hivex-0:1.3.18-20.module+el8.4.0+534+4680a14e.aarch64.rpm","ocaml-hivex-0:1.3.18-20.module+el8.4.0+534+4680a14e.i686.rpm","ocaml-hivex-0:1.3.18-20.module+el8.4.0+534+4680a14e.x86_64.rpm","ocaml-hivex-debuginfo-0:1.3.18-20.module+el8.4.0+534+4680a14e.aarch64.rpm","ocaml-hivex-debuginfo-0:1.3.18-20.module+el8.4.0+534+4680a14e.i686.rpm","ocaml-hivex-debuginfo-0:1.3.18-20.module+el8.4.0+534+4680a14e.x86_64.rpm","ocaml-hivex-devel-0:1.3.18-20.module+el8.4.0+534+4680a14e.aarch64.rpm","ocaml-hivex-devel-0:1.3.18-20.module+el8.4.0+534+4680a14e.i686.rpm","ocaml-hivex-devel-0:1.3.18-20.module+el8.4.0+534+4680a14e.x86_64.rpm","ocaml-libnbd-0:1.2.2-1.module+el8.4.0+534+4680a14e.aarch64.rpm","ocaml-libnbd-0:1.2.2-1.module+el8.4.0+534+4680a14e.i686.rpm","ocaml-libnbd-0:1.2.2-1.module+el8.4.0+534+4680a14e.x86_64.rpm","ocaml-libnbd-debuginfo-0:1.2.2-1.module+el8.4.0+534+4680a14e.aarch64.rpm","ocaml-libnbd-debuginfo-0:1.2.2-1.module+el8.4.0+534+4680a14e.i686.rpm","ocaml-libnbd-debuginfo-0:1.2.2-1.module+el8.4.0+534+4680a14e.x86_64.rpm","ocaml-libnbd-devel-0:1.2.2-1.module+el8.4.0+534+4680a14e.aarch64.rpm","ocaml-libnbd-devel-0:1.2.2-1.module+el8.4.0+534+4680a14e.i686.rpm","ocaml-libnbd-devel-0:1.2.2-1.module+el8.4.0+534+4680a14e.x86_64.rpm","perl-hivex-0:1.3.18-20.module+el8.4.0+534+4680a14e.aarch64.rpm","perl-hivex-0:1.3.18-20.module+el8.4.0+534+4680a14e.i686.rpm","perl-hivex-0:1.3.18-20.module+el8.4.0+534+4680a14e.x86_64.rpm","perl-hivex-debuginfo-0:1.3.18-20.module+el8.4.0+534+4680a14e.aarch64.rpm","perl-hivex-debuginfo-0:1.3.18-20.module+el8.4.0+534+4680a14e.i686.rpm","perl-hivex-debuginfo-0:1.3.18-20.module+el8.4.0+534+4680a14e.x86_64.rpm","perl-Sys-Virt-0:6.0.0-1.module+el8.4.0+534+4680a14e.aarch64.rpm","perl-Sys-Virt-0:6.0.0-1.module+el8.4.0+534+4680a14e.i686.rpm","perl-Sys-Virt-0:6.0.0-1.module+el8.4.0+534+4680a14e.src.rpm","perl-Sys-Virt-0:6.0.0-1.module+el8.4.0+534+4680a14e.x86_64.rpm","perl-Sys-Virt-debuginfo-0:6.0.0-1.module+el8.4.0+534+4680a14e.aarch64.rpm","perl-Sys-Virt-debuginfo-0:6.0.0-1.module+el8.4.0+534+4680a14e.i686.rpm","perl-Sys-Virt-debuginfo-0:6.0.0-1.module+el8.4.0+534+4680a14e.x86_64.rpm","perl-Sys-Virt-debugsource-0:6.0.0-1.module+el8.4.0+534+4680a14e.aarch64.rpm","perl-Sys-Virt-debugsource-0:6.0.0-1.module+el8.4.0+534+4680a14e.i686.rpm","perl-Sys-Virt-debugsource-0:6.0.0-1.module+el8.4.0+534+4680a14e.x86_64.rpm","python3-hivex-0:1.3.18-20.module+el8.4.0+534+4680a14e.aarch64.rpm","python3-hivex-0:1.3.18-20.module+el8.4.0+534+4680a14e.i686.rpm","python3-hivex-0:1.3.18-20.module+el8.4.0+534+4680a14e.x86_64.rpm","python3-hivex-debuginfo-0:1.3.18-20.module+el8.4.0+534+4680a14e.aarch64.rpm","python3-hivex-debuginfo-0:1.3.18-20.module+el8.4.0+534+4680a14e.i686.rpm","python3-hivex-debuginfo-0:1.3.18-20.module+el8.4.0+534+4680a14e.x86_64.rpm","python3-libnbd-0:1.2.2-1.module+el8.4.0+534+4680a14e.aarch64.rpm","python3-libnbd-0:1.2.2-1.module+el8.4.0+534+4680a14e.i686.rpm","python3-libnbd-0:1.2.2-1.module+el8.4.0+534+4680a14e.x86_64.rpm","python3-libnbd-debuginfo-0:1.2.2-1.module+el8.4.0+534+4680a14e.aarch64.rpm","python3-libnbd-debuginfo-0:1.2.2-1.module+el8.4.0+534+4680a14e.i686.rpm","python3-libnbd-debuginfo-0:1.2.2-1.module+el8.4.0+534+4680a14e.x86_64.rpm","python3-libvirt-0:6.0.0-1.module+el8.4.0+534+4680a14e.aarch64.rpm","python3-libvirt-0:6.0.0-1.module+el8.4.0+534+4680a14e.i686.rpm","python3-libvirt-0:6.0.0-1.module+el8.4.0+534+4680a14e.x86_64.rpm","python3-libvirt-debuginfo-0:6.0.0-1.module+el8.4.0+534+4680a14e.aarch64.rpm","python3-libvirt-debuginfo-0:6.0.0-1.module+el8.4.0+534+4680a14e.i686.rpm","python3-libvirt-debuginfo-0:6.0.0-1.module+el8.4.0+534+4680a14e.x86_64.rpm","ruby-hivex-0:1.3.18-20.module+el8.4.0+534+4680a14e.aarch64.rpm","ruby-hivex-0:1.3.18-20.module+el8.4.0+534+4680a14e.i686.rpm","ruby-hivex-0:1.3.18-20.module+el8.4.0+534+4680a14e.x86_64.rpm","ruby-hivex-debuginfo-0:1.3.18-20.module+el8.4.0+534+4680a14e.aarch64.rpm","ruby-hivex-debuginfo-0:1.3.18-20.module+el8.4.0+534+4680a14e.i686.rpm","ruby-hivex-debuginfo-0:1.3.18-20.module+el8.4.0+534+4680a14e.x86_64.rpm","seabios-0:1.13.0-2.module+el8.4.0+534+4680a14e.src.rpm","seabios-0:1.13.0-2.module+el8.4.0+534+4680a14e.x86_64.rpm","seabios-bin-0:1.13.0-2.module+el8.4.0+534+4680a14e.noarch.rpm","seavgabios-bin-0:1.13.0-2.module+el8.4.0+534+4680a14e.noarch.rpm","sgabios-1:0.20170427git-3.module+el8.7.0+1084+97b81f61.i686.rpm","sgabios-1:0.20170427git-3.module+el8.4.0+534+4680a14e.i686.rpm","sgabios-1:0.20170427git-3.module+el8.6.0+847+b490afdd.i686.rpm","sgabios-1:0.20170427git-3.module+el8.7.0+1084+97b81f61.src.rpm","sgabios-1:0.20170427git-3.module+el8.4.0+534+4680a14e.src.rpm","sgabios-1:0.20170427git-3.module+el8.6.0+847+b490afdd.src.rpm","sgabios-1:0.20170427git-3.module+el8.7.0+1084+97b81f61.x86_64.rpm","sgabios-1:0.20170427git-3.module+el8.4.0+534+4680a14e.x86_64.rpm","sgabios-1:0.20170427git-3.module+el8.6.0+847+b490afdd.x86_64.rpm","sgabios-bin-1:0.20170427git-3.module+el8.7.0+1084+97b81f61.noarch.rpm","sgabios-bin-1:0.20170427git-3.module+el8.4.0+534+4680a14e.noarch.rpm","sgabios-bin-1:0.20170427git-3.module+el8.6.0+847+b490afdd.noarch.rpm","supermin-0:5.1.19-10.module+el8.4.0+534+4680a14e.aarch64.rpm","supermin-0:5.1.19-10.module+el8.4.0+534+4680a14e.src.rpm","supermin-0:5.1.19-10.module+el8.4.0+534+4680a14e.x86_64.rpm","supermin-debuginfo-0:5.1.19-10.module+el8.4.0+534+4680a14e.aarch64.rpm","supermin-debuginfo-0:5.1.19-10.module+el8.4.0+534+4680a14e.x86_64.rpm","supermin-debugsource-0:5.1.19-10.module+el8.4.0+534+4680a14e.aarch64.rpm","supermin-debugsource-0:5.1.19-10.module+el8.4.0+534+4680a14e.x86_64.rpm","supermin-devel-0:5.1.19-10.module+el8.4.0+534+4680a14e.aarch64.rpm","supermin-devel-0:5.1.19-10.module+el8.4.0+534+4680a14e.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4676","url":"https://access.redhat.com/errata/RHSA-2020:4676","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4689.json b/data/advisories/2020/RLSA-2020-4689.json new file mode 100644 index 0000000..8a33dbd --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4689.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4689","synopsis":"Moderate: openwsman security update","severity":"SEVERITY_MODERATE","topic":"An update is available for openwsman.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Openwsman is a project intended to provide an open source implementation of the Web Services Management specification (WS-Management) and to expose system management information on the Linux operating system using the WS-Management protocol. WS-Management is based on a suite of web services specifications and usage requirements that cover all system management aspects.\n\nSecurity Fix(es):\n\n* openwsman: Infinite loop in process_connection() allows denial of service (CVE-2019-3833)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1674478","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1674478","description":""}],"cves":[{"name":"CVE-2019-3833","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3833","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-835"}],"references":[],"publishedAt":"2020-11-03T12:27:08Z","rpms":{"Rocky Linux 8":{"nvras":["libwsman1-0:2.6.5-7.el8_3.aarch64.rpm","libwsman1-0:2.6.5-7.el8_3.i686.rpm","libwsman1-0:2.6.5-7.el8_3.x86_64.rpm","libwsman1-debuginfo-0:2.6.5-7.el8_3.aarch64.rpm","libwsman1-debuginfo-0:2.6.5-7.el8_3.i686.rpm","libwsman1-debuginfo-0:2.6.5-7.el8_3.x86_64.rpm","libwsman-devel-0:2.6.5-7.el8_3.aarch64.rpm","libwsman-devel-0:2.6.5-7.el8_3.i686.rpm","libwsman-devel-0:2.6.5-7.el8_3.x86_64.rpm","openwsman-0:2.6.5-7.el8_3.src.rpm","openwsman-client-0:2.6.5-7.el8_3.aarch64.rpm","openwsman-client-0:2.6.5-7.el8_3.i686.rpm","openwsman-client-0:2.6.5-7.el8_3.x86_64.rpm","openwsman-client-debuginfo-0:2.6.5-7.el8_3.aarch64.rpm","openwsman-client-debuginfo-0:2.6.5-7.el8_3.i686.rpm","openwsman-client-debuginfo-0:2.6.5-7.el8_3.x86_64.rpm","openwsman-debuginfo-0:2.6.5-7.el8_3.aarch64.rpm","openwsman-debuginfo-0:2.6.5-7.el8_3.i686.rpm","openwsman-debuginfo-0:2.6.5-7.el8_3.x86_64.rpm","openwsman-debugsource-0:2.6.5-7.el8_3.aarch64.rpm","openwsman-debugsource-0:2.6.5-7.el8_3.i686.rpm","openwsman-debugsource-0:2.6.5-7.el8_3.x86_64.rpm","openwsman-python3-0:2.6.5-7.el8_3.aarch64.rpm","openwsman-python3-0:2.6.5-7.el8_3.x86_64.rpm","openwsman-python3-debuginfo-0:2.6.5-7.el8_3.aarch64.rpm","openwsman-python3-debuginfo-0:2.6.5-7.el8_3.x86_64.rpm","openwsman-server-0:2.6.5-7.el8_3.aarch64.rpm","openwsman-server-0:2.6.5-7.el8_3.i686.rpm","openwsman-server-0:2.6.5-7.el8_3.x86_64.rpm","openwsman-server-debuginfo-0:2.6.5-7.el8_3.aarch64.rpm","openwsman-server-debuginfo-0:2.6.5-7.el8_3.i686.rpm","openwsman-server-debuginfo-0:2.6.5-7.el8_3.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4689","url":"https://access.redhat.com/errata/RHSA-2020:4689","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4690.json b/data/advisories/2020/RLSA-2020-4690.json new file mode 100644 index 0000000..eee9259 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4690.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4690","synopsis":"Moderate: qt5-qtbase and qt5-qtwebsockets security and bug fix update","severity":"SEVERITY_MODERATE","topic":"An update is available for qt5-qtwebsockets.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. \n\nSecurity Fix(es):\n\n* qt: XML entity expansion vulnerability (CVE-2015-9541)\n\n* qt5-qtwebsockets: websocket implementation allows only limited size for frames and messages therefore attacker can cause DOS (CVE-2018-21035)\n\n* qt: files placed by attacker can influence the working directory and lead to malicious code execution (CVE-2020-0569)\n\n* qt: files placed by attacker can influence the working directory and lead to malicious code execution (CVE-2020-0570)\n\n* qt5: incorrectly calls SSL_shutdown() in OpenSSL mid-handshake causing denial of service in TLS applications (CVE-2020-13962)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1800600","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1800600","description":""},{"ticket":"1800604","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1800604","description":""},{"ticket":"1801369","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1801369","description":""},{"ticket":"1810964","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1810964","description":""},{"ticket":"1832857","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1832857","description":""},{"ticket":"1849734","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1849734","description":""}],"cves":[{"name":"CVE-2015-9541","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9541","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-776"},{"name":"CVE-2018-21035","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-21035","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-400"},{"name":"CVE-2020-0569","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0569","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.3","cwe":"CWE-73"},{"name":"CVE-2020-0570","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0570","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.3","cwe":"CWE-73"},{"name":"CVE-2020-13962","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13962","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-391"}],"references":[],"publishedAt":"2020-11-03T12:27:18Z","rpms":{"Rocky Linux 8":{"nvras":["qt5-qtwebsockets-0:5.12.5-2.el8.aarch64.rpm","qt5-qtwebsockets-0:5.12.5-2.el8.i686.rpm","qt5-qtwebsockets-0:5.12.5-2.el8.src.rpm","qt5-qtwebsockets-0:5.12.5-2.el8.x86_64.rpm","qt5-qtwebsockets-debuginfo-0:5.12.5-2.el8.aarch64.rpm","qt5-qtwebsockets-debuginfo-0:5.12.5-2.el8.i686.rpm","qt5-qtwebsockets-debuginfo-0:5.12.5-2.el8.x86_64.rpm","qt5-qtwebsockets-debugsource-0:5.12.5-2.el8.aarch64.rpm","qt5-qtwebsockets-debugsource-0:5.12.5-2.el8.i686.rpm","qt5-qtwebsockets-debugsource-0:5.12.5-2.el8.x86_64.rpm","qt5-qtwebsockets-devel-0:5.12.5-2.el8.aarch64.rpm","qt5-qtwebsockets-devel-0:5.12.5-2.el8.i686.rpm","qt5-qtwebsockets-devel-0:5.12.5-2.el8.x86_64.rpm","qt5-qtwebsockets-devel-debuginfo-0:5.12.5-2.el8.aarch64.rpm","qt5-qtwebsockets-devel-debuginfo-0:5.12.5-2.el8.i686.rpm","qt5-qtwebsockets-devel-debuginfo-0:5.12.5-2.el8.x86_64.rpm","qt5-qtwebsockets-examples-0:5.12.5-2.el8.aarch64.rpm","qt5-qtwebsockets-examples-0:5.12.5-2.el8.x86_64.rpm","qt5-qtwebsockets-examples-debuginfo-0:5.12.5-2.el8.aarch64.rpm","qt5-qtwebsockets-examples-debuginfo-0:5.12.5-2.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4690","url":"https://access.redhat.com/errata/RHSA-2020:4690","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4694.json b/data/advisories/2020/RLSA-2020-4694.json new file mode 100644 index 0000000..3607cc3 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4694.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4694","synopsis":"Moderate: container-tools:rhel8 security, bug fix, and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for python-podman-api, libslirp, toolbox.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters (CVE-2020-10749)\n\n* QEMU: slirp: networking out-of-bounds read information disclosure vulnerability (CVE-2020-10756)\n\n* golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash (CVE-2020-14040)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1682970","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1682970","description":""},{"ticket":"1752079","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1752079","description":""},{"ticket":"1785242","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1785242","description":""},{"ticket":"1800815","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1800815","description":""},{"ticket":"1801874","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1801874","description":""},{"ticket":"1804193","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1804193","description":""},{"ticket":"1804195","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1804195","description":""},{"ticket":"1813845","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1813845","description":""},{"ticket":"1814928","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1814928","description":""},{"ticket":"1818694","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1818694","description":""},{"ticket":"1821193","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1821193","description":""},{"ticket":"1822038","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1822038","description":""},{"ticket":"1825789","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1825789","description":""},{"ticket":"1827794","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1827794","description":""},{"ticket":"1833220","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1833220","description":""},{"ticket":"1835986","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1835986","description":""},{"ticket":"1837755","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1837755","description":""},{"ticket":"1847544","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1847544","description":""},{"ticket":"1849557","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1849557","description":""},{"ticket":"1850230","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1850230","description":""},{"ticket":"1853230","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1853230","description":""},{"ticket":"1853652","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1853652","description":""},{"ticket":"1857606","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1857606","description":""},{"ticket":"1858862","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1858862","description":""},{"ticket":"1860126","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1860126","description":""},{"ticket":"1866153","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1866153","description":""},{"ticket":"1866833","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1866833","description":""},{"ticket":"1867447","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1867447","description":""},{"ticket":"1868612","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1868612","description":""},{"ticket":"1872263","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1872263","description":""},{"ticket":"1877463","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1877463","description":""},{"ticket":"1879622","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1879622","description":""}],"cves":[{"name":"CVE-2020-10749","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10749","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3BaseScore":"6.0","cwe":"CWE-300"},{"name":"CVE-2020-10756","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10756","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3BaseScore":"6.5","cwe":"CWE-125"},{"name":"CVE-2020-14040","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14040","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-835"}],"references":[],"publishedAt":"2020-11-03T12:27:37Z","rpms":{"Rocky Linux 8":{"nvras":["libslirp-0:4.3.1-1.module+el8.7.0+1076+9b1c11c1.aarch64.rpm","libslirp-0:4.3.1-1.module+el8.4.0+556+40122d08.aarch64.rpm","libslirp-0:4.3.1-1.module+el8.5.0+709+440d5e7e.aarch64.rpm","libslirp-0:4.3.1-1.module+el8.6.0+783+10209741.aarch64.rpm","libslirp-0:4.3.1-1.module+el8.7.0+1076+9b1c11c1.src.rpm","libslirp-0:4.3.1-1.module+el8.4.0+556+40122d08.src.rpm","libslirp-0:4.3.1-1.module+el8.5.0+709+440d5e7e.src.rpm","libslirp-0:4.3.1-1.module+el8.6.0+783+10209741.src.rpm","libslirp-0:4.3.1-1.module+el8.7.0+1076+9b1c11c1.x86_64.rpm","libslirp-0:4.3.1-1.module+el8.4.0+556+40122d08.x86_64.rpm","libslirp-0:4.3.1-1.module+el8.5.0+709+440d5e7e.x86_64.rpm","libslirp-0:4.3.1-1.module+el8.6.0+783+10209741.x86_64.rpm","libslirp-debuginfo-0:4.3.1-1.module+el8.7.0+1076+9b1c11c1.aarch64.rpm","libslirp-debuginfo-0:4.3.1-1.module+el8.4.0+556+40122d08.aarch64.rpm","libslirp-debuginfo-0:4.3.1-1.module+el8.5.0+709+440d5e7e.aarch64.rpm","libslirp-debuginfo-0:4.3.1-1.module+el8.6.0+783+10209741.aarch64.rpm","libslirp-debuginfo-0:4.3.1-1.module+el8.7.0+1076+9b1c11c1.x86_64.rpm","libslirp-debuginfo-0:4.3.1-1.module+el8.4.0+556+40122d08.x86_64.rpm","libslirp-debuginfo-0:4.3.1-1.module+el8.5.0+709+440d5e7e.x86_64.rpm","libslirp-debuginfo-0:4.3.1-1.module+el8.6.0+783+10209741.x86_64.rpm","libslirp-debugsource-0:4.3.1-1.module+el8.7.0+1076+9b1c11c1.aarch64.rpm","libslirp-debugsource-0:4.3.1-1.module+el8.4.0+556+40122d08.aarch64.rpm","libslirp-debugsource-0:4.3.1-1.module+el8.5.0+709+440d5e7e.aarch64.rpm","libslirp-debugsource-0:4.3.1-1.module+el8.6.0+783+10209741.aarch64.rpm","libslirp-debugsource-0:4.3.1-1.module+el8.7.0+1076+9b1c11c1.x86_64.rpm","libslirp-debugsource-0:4.3.1-1.module+el8.4.0+556+40122d08.x86_64.rpm","libslirp-debugsource-0:4.3.1-1.module+el8.5.0+709+440d5e7e.x86_64.rpm","libslirp-debugsource-0:4.3.1-1.module+el8.6.0+783+10209741.x86_64.rpm","libslirp-devel-0:4.3.1-1.module+el8.7.0+1076+9b1c11c1.aarch64.rpm","libslirp-devel-0:4.3.1-1.module+el8.4.0+556+40122d08.aarch64.rpm","libslirp-devel-0:4.3.1-1.module+el8.5.0+709+440d5e7e.aarch64.rpm","libslirp-devel-0:4.3.1-1.module+el8.6.0+783+10209741.aarch64.rpm","libslirp-devel-0:4.3.1-1.module+el8.7.0+1076+9b1c11c1.x86_64.rpm","libslirp-devel-0:4.3.1-1.module+el8.4.0+556+40122d08.x86_64.rpm","libslirp-devel-0:4.3.1-1.module+el8.5.0+709+440d5e7e.x86_64.rpm","libslirp-devel-0:4.3.1-1.module+el8.6.0+783+10209741.x86_64.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+770+e2f49861.noarch.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2.noarch.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+708+6758137d.noarch.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+770+e2f49861.src.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2.src.rpm","python-podman-api-0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+708+6758137d.src.rpm","toolbox-0:0.0.8-1.module+el8.4.0+556+40122d08.noarch.rpm","toolbox-0:0.0.8-1.module+el8.4.0+556+40122d08.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4694","url":"https://access.redhat.com/errata/RHSA-2020:4694","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4709.json b/data/advisories/2020/RLSA-2020-4709.json new file mode 100644 index 0000000..0ebcacc --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4709.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4709","synopsis":"Moderate: librsvg2 security update","severity":"SEVERITY_MODERATE","topic":"An update is available for librsvg2.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The librsvg2 packages provide a Scalable Vector Graphics (SVG) library based on the libart library.\n\nSecurity Fix(es):\n\n* librsvg: Resource exhaustion via crafted SVG file with nested patterns (CVE-2019-20446)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1797608","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1797608","description":""}],"cves":[{"name":"CVE-2019-20446","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20446","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"CWE-400"}],"references":[],"publishedAt":"2020-11-03T12:29:09Z","rpms":{"Rocky Linux 8":{"nvras":["librsvg2-0:2.42.7-4.el8.aarch64.rpm","librsvg2-0:2.42.7-4.el8.i686.rpm","librsvg2-0:2.42.7-4.el8.src.rpm","librsvg2-0:2.42.7-4.el8.x86_64.rpm","librsvg2-debuginfo-0:2.42.7-4.el8.aarch64.rpm","librsvg2-debuginfo-0:2.42.7-4.el8.i686.rpm","librsvg2-debuginfo-0:2.42.7-4.el8.x86_64.rpm","librsvg2-debugsource-0:2.42.7-4.el8.aarch64.rpm","librsvg2-debugsource-0:2.42.7-4.el8.i686.rpm","librsvg2-debugsource-0:2.42.7-4.el8.x86_64.rpm","librsvg2-devel-0:2.42.7-4.el8.aarch64.rpm","librsvg2-devel-0:2.42.7-4.el8.i686.rpm","librsvg2-devel-0:2.42.7-4.el8.x86_64.rpm","librsvg2-tools-0:2.42.7-4.el8.aarch64.rpm","librsvg2-tools-0:2.42.7-4.el8.x86_64.rpm","librsvg2-tools-debuginfo-0:2.42.7-4.el8.aarch64.rpm","librsvg2-tools-debuginfo-0:2.42.7-4.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4709","url":"https://access.redhat.com/errata/RHSA-2020:4709","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4712.json b/data/advisories/2020/RLSA-2020-4712.json new file mode 100644 index 0000000..7bede01 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4712.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4712","synopsis":"Moderate: subversion:1.10 security update","severity":"SEVERITY_MODERATE","topic":"An update is available for utf8proc, libserf.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Subversion (SVN) is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes.\n\nSecurity Fix(es):\n\n* subversion: remotely triggerable DoS vulnerability in svnserve 'get-deleted-rev' (CVE-2018-11782)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1733088","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1733088","description":""}],"cves":[{"name":"CVE-2018-11782","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11782","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"CWE-617"}],"references":[],"publishedAt":"2020-11-03T12:29:29Z","rpms":{"Rocky Linux 8":{"nvras":["libserf-0:1.3.9-9.module+el8.7.0+1065+42200b2e.aarch64.rpm","libserf-0:1.3.9-9.module+el8.4.0+407+38733e5a.aarch64.rpm","libserf-0:1.3.9-9.module+el8.7.0+1065+42200b2e.src.rpm","libserf-0:1.3.9-9.module+el8.4.0+407+38733e5a.src.rpm","libserf-0:1.3.9-9.module+el8.7.0+1065+42200b2e.x86_64.rpm","libserf-0:1.3.9-9.module+el8.4.0+407+38733e5a.x86_64.rpm","libserf-debuginfo-0:1.3.9-9.module+el8.7.0+1065+42200b2e.aarch64.rpm","libserf-debuginfo-0:1.3.9-9.module+el8.4.0+407+38733e5a.aarch64.rpm","libserf-debuginfo-0:1.3.9-9.module+el8.7.0+1065+42200b2e.x86_64.rpm","libserf-debuginfo-0:1.3.9-9.module+el8.4.0+407+38733e5a.x86_64.rpm","libserf-debugsource-0:1.3.9-9.module+el8.7.0+1065+42200b2e.aarch64.rpm","libserf-debugsource-0:1.3.9-9.module+el8.4.0+407+38733e5a.aarch64.rpm","libserf-debugsource-0:1.3.9-9.module+el8.7.0+1065+42200b2e.x86_64.rpm","libserf-debugsource-0:1.3.9-9.module+el8.4.0+407+38733e5a.x86_64.rpm","utf8proc-0:2.1.1-5.module+el8.4.0+407+38733e5a.aarch64.rpm","utf8proc-0:2.1.1-5.module+el8.4.0+407+38733e5a.src.rpm","utf8proc-0:2.1.1-5.module+el8.4.0+407+38733e5a.x86_64.rpm","utf8proc-debuginfo-0:2.1.1-5.module+el8.4.0+407+38733e5a.aarch64.rpm","utf8proc-debuginfo-0:2.1.1-5.module+el8.4.0+407+38733e5a.x86_64.rpm","utf8proc-debugsource-0:2.1.1-5.module+el8.4.0+407+38733e5a.aarch64.rpm","utf8proc-debugsource-0:2.1.1-5.module+el8.4.0+407+38733e5a.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4712","url":"https://access.redhat.com/errata/RHSA-2020:4712","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4743.json b/data/advisories/2020/RLSA-2020-4743.json new file mode 100644 index 0000000..a722443 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4743.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4743","synopsis":"Moderate: squid:4 security, bug fix, and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for libecap.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nThe following packages have been upgraded to a later upstream version: squid (4.11). (BZ#1829467)\n\nSecurity Fix(es):\n\n* squid: Improper input validation in request allows for proxy manipulation (CVE-2019-12520)\n\n* squid: Off-by-one error in addStackElement allows for heap buffer overflow and crash (CVE-2019-12521)\n\n* squid: Improper input validation in URI processor (CVE-2019-12523)\n\n* squid: Improper access restriction in url_regex may lead to security bypass (CVE-2019-12524)\n\n* squid: Heap overflow issue in URN processing (CVE-2019-12526)\n\n* squid: Information Disclosure issue in FTP Gateway (CVE-2019-12528)\n\n* squid: Out of bounds read in Proxy-Authorization header causes DoS (CVE-2019-12529)\n\n* squid: Denial of service in cachemgr.cgi (CVE-2019-12854)\n\n* squid: Buffer overflow in URI processor (CVE-2019-18676)\n\n* squid: Cross-Site Request Forgery issue in HTTP Request processing (CVE-2019-18677)\n\n* squid: HTTP Request Splitting issue in HTTP message processing (CVE-2019-18678)\n\n* squid: Information Disclosure issue in HTTP Digest Authentication (CVE-2019-18679)\n\n* squid: Mishandled HTML in the host parameter to cachemgr.cgi results in insecure behaviour (CVE-2019-18860)\n\n* squid: Improper input validation issues in HTTP Request processing (CVE-2020-8449)\n\n* squid: Buffer overflow in reverse-proxy configurations (CVE-2020-8450)\n\n* squid: DoS in TLS handshake (CVE-2020-14058)\n\n* squid: Request smuggling and poisoning attack against the HTTP cache (CVE-2020-15049)\n\n* squid: Improper input validation could result in a DoS (CVE-2020-24606)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1730523","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1730523","description":""},{"ticket":"1730528","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1730528","description":""},{"ticket":"1770349","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1770349","description":""},{"ticket":"1770356","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1770356","description":""},{"ticket":"1770360","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1770360","description":""},{"ticket":"1770365","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1770365","description":""},{"ticket":"1770371","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1770371","description":""},{"ticket":"1770375","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1770375","description":""},{"ticket":"1798534","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1798534","description":""},{"ticket":"1798540","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1798540","description":""},{"ticket":"1798552","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1798552","description":""},{"ticket":"1817121","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1817121","description":""},{"ticket":"1827558","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1827558","description":""},{"ticket":"1827562","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1827562","description":""},{"ticket":"1827570","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1827570","description":""},{"ticket":"1852550","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1852550","description":""},{"ticket":"1852554","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1852554","description":""},{"ticket":"1871705","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1871705","description":""}],"cves":[{"name":"CVE-2019-12520","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12520","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3BaseScore":"7.4","cwe":"CWE-20"},{"name":"CVE-2019-12521","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12521","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"5.9","cwe":"CWE-122"},{"name":"CVE-2019-12523","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12523","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3BaseScore":"7.4","cwe":"CWE-20"},{"name":"CVE-2019-12524","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12524","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3BaseScore":"5.3","cwe":"CWE-20"},{"name":"CVE-2019-12526","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12526","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.1","cwe":"CWE-119"},{"name":"CVE-2019-12528","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12528","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3BaseScore":"5.9","cwe":"CWE-200"},{"name":"CVE-2019-12529","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12529","cvss3ScoringVector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"4.3","cwe":"CWE-119"},{"name":"CVE-2019-12854","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12854","cvss3ScoringVector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"4.3","cwe":"CWE-400"},{"name":"CVE-2019-18676","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18676","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"5.9","cwe":"CWE-20->CWE-119"},{"name":"CVE-2019-18677","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18677","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3BaseScore":"7.4","cwe":"CWE-79"},{"name":"CVE-2019-18678","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18678","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","cvss3BaseScore":"6.8","cwe":"CWE-20"},{"name":"CVE-2019-18679","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18679","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3BaseScore":"5.9","cwe":"CWE-200"},{"name":"CVE-2019-18860","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18860","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-20->CWE-79"},{"name":"CVE-2020-14058","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14058","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3BaseScore":"7.7","cwe":"CWE-676"},{"name":"CVE-2020-15049","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15049","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3BaseScore":"8.5","cwe":"CWE-444"},{"name":"CVE-2020-24606","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24606","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-20"},{"name":"CVE-2020-8449","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8449","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3BaseScore":"4.8","cwe":"CWE-20"},{"name":"CVE-2020-8450","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8450","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"5.9","cwe":"CWE-119"}],"references":[],"publishedAt":"2020-11-03T12:32:17Z","rpms":{"Rocky Linux 8":{"nvras":["libecap-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-0:1.0.1-2.module+el8.4.0+404+316a0dc5.src.rpm","libecap-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm","libecap-debuginfo-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-debuginfo-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm","libecap-debugsource-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-debugsource-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm","libecap-devel-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-devel-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4743","url":"https://access.redhat.com/errata/RHSA-2020:4743","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4751.json b/data/advisories/2020/RLSA-2020-4751.json new file mode 100644 index 0000000..f782d36 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4751.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4751","synopsis":"Moderate: httpd:2.4 security, bug fix, and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for mod_md.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.\n\nThe following packages have been upgraded to a later upstream version: mod_http2 (1.15.7). (BZ#1814236)\n\nSecurity Fix(es):\n\n* httpd: memory corruption on early pushes (CVE-2019-10081)\n\n* httpd: read-after-free in h2 connection shutdown (CVE-2019-10082)\n\n* httpd: null-pointer dereference in mod_remoteip (CVE-2019-10097)\n\n* httpd: mod_rewrite configurations vulnerable to open redirect (CVE-2020-1927)\n\n* httpd: mod_http2: DoS via slow, unneeded request bodies (CVE-2018-17189)\n\n* httpd: mod_http2: read-after-free on a string compare (CVE-2019-0196)\n\n* httpd: mod_http2: possible crash on late upgrade (CVE-2019-0197)\n\n* httpd: limited cross-site scripting in mod_proxy error page (CVE-2019-10092)\n\n* httpd: mod_rewrite potential open redirect (CVE-2019-10098)\n\n* httpd: mod_proxy_ftp use of uninitialized value (CVE-2020-1934)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1209162","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1209162","description":""},{"ticket":"1668497","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1668497","description":""},{"ticket":"1695030","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1695030","description":""},{"ticket":"1695042","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1695042","description":""},{"ticket":"1743956","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1743956","description":""},{"ticket":"1743959","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1743959","description":""},{"ticket":"1743966","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1743966","description":""},{"ticket":"1743974","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1743974","description":""},{"ticket":"1743996","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1743996","description":""},{"ticket":"1771847","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1771847","description":""},{"ticket":"1814236","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1814236","description":"The following packages have been upgraded to a later upstream version: mod_http2 (1.15.7)."},{"ticket":"1820761","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1820761","description":""},{"ticket":"1820772","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1820772","description":""},{"ticket":"1832844","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1832844","description":""}],"cves":[{"name":"CVE-2018-17189","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17189","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"4.3","cwe":"CWE-400"},{"name":"CVE-2019-0196","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0196","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"5.3","cwe":"CWE-416"},{"name":"CVE-2019-0197","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0197","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3BaseScore":"4.2","cwe":"CWE-444"},{"name":"CVE-2019-10081","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10081","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"5.3","cwe":"CWE-400"},{"name":"CVE-2019-10082","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10082","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3BaseScore":"6.5","cwe":"UNKNOWN"},{"name":"CVE-2019-10092","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10092","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"4.7","cwe":"CWE-79"},{"name":"CVE-2019-10097","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10097","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"6.6","cwe":"(CWE-120|CWE-416)"},{"name":"CVE-2019-10098","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10098","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3BaseScore":"3.7","cwe":"UNKNOWN"},{"name":"CVE-2020-1927","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1927","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-601"},{"name":"CVE-2020-1934","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1934","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3BaseScore":"3.7","cwe":"CWE-456"}],"references":[],"publishedAt":"2020-11-03T12:33:02Z","rpms":{"Rocky Linux 8":{"nvras":["mod_md-1:2.0.8-8.module+el8.5.0+695+1fa8055e.aarch64.rpm","mod_md-1:2.0.8-8.module+el8.4.0+553+7a69454b.aarch64.rpm","mod_md-1:2.0.8-8.module+el8.5.0+695+1fa8055e.src.rpm","mod_md-1:2.0.8-8.module+el8.4.0+553+7a69454b.src.rpm","mod_md-1:2.0.8-8.module+el8.5.0+695+1fa8055e.x86_64.rpm","mod_md-1:2.0.8-8.module+el8.4.0+553+7a69454b.x86_64.rpm","mod_md-debuginfo-1:2.0.8-8.module+el8.5.0+695+1fa8055e.aarch64.rpm","mod_md-debuginfo-1:2.0.8-8.module+el8.4.0+553+7a69454b.aarch64.rpm","mod_md-debuginfo-1:2.0.8-8.module+el8.5.0+695+1fa8055e.x86_64.rpm","mod_md-debuginfo-1:2.0.8-8.module+el8.4.0+553+7a69454b.x86_64.rpm","mod_md-debugsource-1:2.0.8-8.module+el8.5.0+695+1fa8055e.aarch64.rpm","mod_md-debugsource-1:2.0.8-8.module+el8.4.0+553+7a69454b.aarch64.rpm","mod_md-debugsource-1:2.0.8-8.module+el8.5.0+695+1fa8055e.x86_64.rpm","mod_md-debugsource-1:2.0.8-8.module+el8.4.0+553+7a69454b.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4751","url":"https://access.redhat.com/errata/RHSA-2020:4751","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4756.json b/data/advisories/2020/RLSA-2020-4756.json new file mode 100644 index 0000000..d4bd87d --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4756.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4756","synopsis":"Moderate: varnish:6 security, bug fix, and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for varnish, varnish-modules.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up.\n\nThe following packages have been upgraded to a later upstream version: varnish (6.0.6). (BZ#1795673)\n\nSecurity Fix(es):\n\n* varnish: denial of service handling certain crafted HTTP/1 requests (CVE-2019-15892)\n\n* varnish: remote clients may cause Varnish to assert and restart which could result in DoS (CVE-2020-11653)\n\n* varnish: not clearing pointer between two client requests leads to information disclosure (CVE-2019-20637)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1756079","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1756079","description":""},{"ticket":"1772362","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1772362","description":""},{"ticket":"1813867","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1813867","description":""}],"cves":[{"name":"CVE-2019-15892","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15892","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-20"},{"name":"CVE-2019-20637","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20637","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3BaseScore":"3.1","cwe":"CWE-200"},{"name":"CVE-2020-11653","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11653","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-400"}],"references":[],"publishedAt":"2020-11-03T12:33:31Z","rpms":{"Rocky Linux 8":{"nvras":["varnish-0:6.0.6-2.module+el8.3.0+179+20b582cc.aarch64.rpm","varnish-0:6.0.6-2.module+el8.3.0+179+20b582cc.src.rpm","varnish-0:6.0.6-2.module+el8.3.0+179+20b582cc.x86_64.rpm","varnish-devel-0:6.0.6-2.module+el8.3.0+179+20b582cc.aarch64.rpm","varnish-devel-0:6.0.6-2.module+el8.3.0+179+20b582cc.x86_64.rpm","varnish-docs-0:6.0.6-2.module+el8.3.0+179+20b582cc.aarch64.rpm","varnish-docs-0:6.0.6-2.module+el8.3.0+179+20b582cc.x86_64.rpm","varnish-modules-0:0.15.0-5.module+el8.3.0+179+20b582cc.aarch64.rpm","varnish-modules-0:0.15.0-5.module+el8.3.0+179+20b582cc.src.rpm","varnish-modules-0:0.15.0-5.module+el8.3.0+179+20b582cc.x86_64.rpm","varnish-modules-debuginfo-0:0.15.0-5.module+el8.3.0+179+20b582cc.aarch64.rpm","varnish-modules-debuginfo-0:0.15.0-5.module+el8.3.0+179+20b582cc.x86_64.rpm","varnish-modules-debugsource-0:0.15.0-5.module+el8.3.0+179+20b582cc.aarch64.rpm","varnish-modules-debugsource-0:0.15.0-5.module+el8.3.0+179+20b582cc.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4756","url":"https://access.redhat.com/errata/RHSA-2020:4756","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4760.json b/data/advisories/2020/RLSA-2020-4760.json new file mode 100644 index 0000000..e169cd1 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4760.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4760","synopsis":"Moderate: tcpdump security, bug fix, and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for tcpdump.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.\n\nThe following packages have been upgraded to a later upstream version: tcpdump (4.9.3). (BZ#1804063)\n\nSecurity Fix(es):\n\n* tcpdump: SMB data printing mishandled (CVE-2018-10103)\n\n* tcpdump: SMB data printing mishandled (CVE-2018-10105)\n\n* tcpdump: Out of bounds read/write in get_next_file() in tcpdump.c (CVE-2018-14879)\n\n* tcpdump: Buffer over-read in ldp_tlv_print() function in print-ldp.c (CVE-2018-14461)\n\n* tcpdump: Buffer over-read in icmp_print() function in print-icmp.c (CVE-2018-14462)\n\n* tcpdump: Buffer over-read in vrrp_print() function in print-vrrp.c (CVE-2018-14463)\n\n* tcpdump: Buffer over-read in lmp_print_data_link_subobjs() function in print-lmp.c (CVE-2018-14464)\n\n* tcpdump: Buffer over-read in rsvp_obj_print() function in print-rsvp.c (CVE-2018-14465)\n\n* tcpdump: Buffer over-read in print-icmp6.c (CVE-2018-14466)\n\n* tcpdump: Buffer over-read in bgp_capabilities_print() in print-bgp.c (CVE-2018-14467)\n\n* tcpdump: Buffer over-read in mfr_print() function in print-fr.c (CVE-2018-14468)\n\n* tcpdump: Buffer over-read in ikev1_n_print() function in print-isakmp.c (CVE-2018-14469)\n\n* tcpdump: Buffer over-read in babel_print_v2() in print-babel.c (CVE-2018-14470)\n\n* tcpdump: Buffer over-read in ospf6_print_lshdr() function in print-ospf6.c (CVE-2018-14880)\n\n* tcpdump: Buffer over-read in bgp_capabilities_print() function in print-bgp.c (CVE-2018-14881)\n\n* tcpdump: Buffer over-read in function rpl_dio_printopt in print-icmp6.c (CVE-2018-14882)\n\n* tcpdump: Buffer over-read in print-802_11.c (CVE-2018-16227)\n\n* tcpdump: Access to uninitialized buffer in print_prefix() function in print-hncp.c (CVE-2018-16228)\n\n* tcpdump: Buffer over-read in dccp_print_option() function in print-dccp.c (CVE-2018-16229)\n\n* tcpdump: Buffer over-read in bgp_attr_print() function in print-bgp.c (CVE-2018-16230)\n\n* tcpdump: Resource exhaustion in bgp_attr_print() function in print-bgp.c (CVE-2018-16300)\n\n* tcpdump: Buffer over-read in print_trans() function in print-smb.c (CVE-2018-16451)\n\n* tcpdump: Resource exhaustion in smb_fdata() funtion in smbutil.c (CVE-2018-16452)\n\n* tcpdump: Buffer overflow in lmp_print_data_link_subobjs() in print-lmp.c (CVE-2019-15166)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1760430","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1760430","description":""},{"ticket":"1760445","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1760445","description":""},{"ticket":"1760447","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1760447","description":""},{"ticket":"1760449","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1760449","description":""},{"ticket":"1760453","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1760453","description":""},{"ticket":"1760455","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1760455","description":""},{"ticket":"1760457","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1760457","description":""},{"ticket":"1760458","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1760458","description":""},{"ticket":"1760461","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1760461","description":""},{"ticket":"1760463","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1760463","description":""},{"ticket":"1760464","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1760464","description":""},{"ticket":"1760468","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1760468","description":""},{"ticket":"1760504","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1760504","description":""},{"ticket":"1760505","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1760505","description":""},{"ticket":"1760506","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1760506","description":""},{"ticket":"1760507","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1760507","description":""},{"ticket":"1760509","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1760509","description":""},{"ticket":"1760512","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1760512","description":""},{"ticket":"1760513","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1760513","description":""},{"ticket":"1760514","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1760514","description":""},{"ticket":"1760516","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1760516","description":""},{"ticket":"1760517","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1760517","description":""},{"ticket":"1760518","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1760518","description":""},{"ticket":"1760520","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1760520","description":""},{"ticket":"1804063","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1804063","description":"The following packages have been upgraded to a later upstream version: tcpdump (4.9.3)."}],"cves":[{"name":"CVE-2018-10103","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10103","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"9.8","cwe":"CWE-20"},{"name":"CVE-2018-10105","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10105","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"9.8","cwe":"CWE-20"},{"name":"CVE-2018-14461","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14461","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-125"},{"name":"CVE-2018-14462","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14462","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-125"},{"name":"CVE-2018-14463","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14463","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-125"},{"name":"CVE-2018-14464","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14464","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-125"},{"name":"CVE-2018-14465","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14465","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-125"},{"name":"CVE-2018-14466","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14466","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-125"},{"name":"CVE-2018-14467","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14467","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-125"},{"name":"CVE-2018-14468","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14468","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-125"},{"name":"CVE-2018-14469","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14469","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-125"},{"name":"CVE-2018-14470","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14470","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-125"},{"name":"CVE-2018-14879","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14879","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.0","cwe":"CWE-119"},{"name":"CVE-2018-14880","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14880","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-125"},{"name":"CVE-2018-14881","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14881","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-125"},{"name":"CVE-2018-14882","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14882","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-125"},{"name":"CVE-2018-16227","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16227","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-125"},{"name":"CVE-2018-16228","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16228","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-665"},{"name":"CVE-2018-16229","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16229","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-125"},{"name":"CVE-2018-16230","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16230","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-125"},{"name":"CVE-2018-16300","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16300","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-400"},{"name":"CVE-2018-16451","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16451","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-125"},{"name":"CVE-2018-16452","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16452","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-400"},{"name":"CVE-2019-15166","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15166","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-119"}],"references":[],"publishedAt":"2020-11-03T12:33:49Z","rpms":{"Rocky Linux 8":{"nvras":["tcpdump-14:4.9.3-1.el8.aarch64.rpm","tcpdump-14:4.9.3-1.el8.src.rpm","tcpdump-14:4.9.3-1.el8.x86_64.rpm","tcpdump-debuginfo-14:4.9.3-1.el8.aarch64.rpm","tcpdump-debuginfo-14:4.9.3-1.el8.x86_64.rpm","tcpdump-debugsource-14:4.9.3-1.el8.aarch64.rpm","tcpdump-debugsource-14:4.9.3-1.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4760","url":"https://access.redhat.com/errata/RHSA-2020:4760","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4799.json b/data/advisories/2020/RLSA-2020-4799.json new file mode 100644 index 0000000..66f36da --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4799.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4799","synopsis":"Moderate: freeradius:3.0 security and bug fix update","severity":"SEVERITY_MODERATE","topic":"An update is available for freeradius.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network.\n\nSecurity Fix(es):\n\n* freeradius: eap-pwd: DoS issues due to multithreaded BN_CTX access (CVE-2019-17185)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1672285","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1672285","description":""},{"ticket":"1805975","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1805975","description":""},{"ticket":"1816680","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1816680","description":""},{"ticket":"1859527","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1859527","description":""}],"cves":[{"name":"CVE-2019-17185","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17185","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-567"}],"references":[],"publishedAt":"2020-11-03T12:37:04Z","rpms":{"Rocky Linux 8":{"nvras":["freeradius-0:3.0.20-3.module+el8.4.0+576+2d493411.aarch64.rpm","freeradius-0:3.0.20-3.module+el8.4.0+576+2d493411.src.rpm","freeradius-0:3.0.20-3.module+el8.4.0+576+2d493411.x86_64.rpm","freeradius-debuginfo-0:3.0.20-3.module+el8.4.0+576+2d493411.aarch64.rpm","freeradius-debuginfo-0:3.0.20-3.module+el8.4.0+576+2d493411.x86_64.rpm","freeradius-debugsource-0:3.0.20-3.module+el8.4.0+576+2d493411.aarch64.rpm","freeradius-debugsource-0:3.0.20-3.module+el8.4.0+576+2d493411.x86_64.rpm","freeradius-devel-0:3.0.20-3.module+el8.4.0+576+2d493411.aarch64.rpm","freeradius-devel-0:3.0.20-3.module+el8.4.0+576+2d493411.x86_64.rpm","freeradius-doc-0:3.0.20-3.module+el8.4.0+576+2d493411.aarch64.rpm","freeradius-doc-0:3.0.20-3.module+el8.4.0+576+2d493411.x86_64.rpm","freeradius-krb5-0:3.0.20-3.module+el8.4.0+576+2d493411.aarch64.rpm","freeradius-krb5-0:3.0.20-3.module+el8.4.0+576+2d493411.x86_64.rpm","freeradius-krb5-debuginfo-0:3.0.20-3.module+el8.4.0+576+2d493411.aarch64.rpm","freeradius-krb5-debuginfo-0:3.0.20-3.module+el8.4.0+576+2d493411.x86_64.rpm","freeradius-ldap-0:3.0.20-3.module+el8.4.0+576+2d493411.aarch64.rpm","freeradius-ldap-0:3.0.20-3.module+el8.4.0+576+2d493411.x86_64.rpm","freeradius-ldap-debuginfo-0:3.0.20-3.module+el8.4.0+576+2d493411.aarch64.rpm","freeradius-ldap-debuginfo-0:3.0.20-3.module+el8.4.0+576+2d493411.x86_64.rpm","freeradius-mysql-0:3.0.20-3.module+el8.4.0+576+2d493411.aarch64.rpm","freeradius-mysql-0:3.0.20-3.module+el8.4.0+576+2d493411.x86_64.rpm","freeradius-mysql-debuginfo-0:3.0.20-3.module+el8.4.0+576+2d493411.aarch64.rpm","freeradius-mysql-debuginfo-0:3.0.20-3.module+el8.4.0+576+2d493411.x86_64.rpm","freeradius-perl-0:3.0.20-3.module+el8.4.0+576+2d493411.aarch64.rpm","freeradius-perl-0:3.0.20-3.module+el8.4.0+576+2d493411.x86_64.rpm","freeradius-perl-debuginfo-0:3.0.20-3.module+el8.4.0+576+2d493411.aarch64.rpm","freeradius-perl-debuginfo-0:3.0.20-3.module+el8.4.0+576+2d493411.x86_64.rpm","freeradius-postgresql-0:3.0.20-3.module+el8.4.0+576+2d493411.aarch64.rpm","freeradius-postgresql-0:3.0.20-3.module+el8.4.0+576+2d493411.x86_64.rpm","freeradius-postgresql-debuginfo-0:3.0.20-3.module+el8.4.0+576+2d493411.aarch64.rpm","freeradius-postgresql-debuginfo-0:3.0.20-3.module+el8.4.0+576+2d493411.x86_64.rpm","freeradius-rest-0:3.0.20-3.module+el8.4.0+576+2d493411.aarch64.rpm","freeradius-rest-0:3.0.20-3.module+el8.4.0+576+2d493411.x86_64.rpm","freeradius-rest-debuginfo-0:3.0.20-3.module+el8.4.0+576+2d493411.aarch64.rpm","freeradius-rest-debuginfo-0:3.0.20-3.module+el8.4.0+576+2d493411.x86_64.rpm","freeradius-sqlite-0:3.0.20-3.module+el8.4.0+576+2d493411.aarch64.rpm","freeradius-sqlite-0:3.0.20-3.module+el8.4.0+576+2d493411.x86_64.rpm","freeradius-sqlite-debuginfo-0:3.0.20-3.module+el8.4.0+576+2d493411.aarch64.rpm","freeradius-sqlite-debuginfo-0:3.0.20-3.module+el8.4.0+576+2d493411.x86_64.rpm","freeradius-unixODBC-0:3.0.20-3.module+el8.4.0+576+2d493411.aarch64.rpm","freeradius-unixODBC-0:3.0.20-3.module+el8.4.0+576+2d493411.x86_64.rpm","freeradius-unixODBC-debuginfo-0:3.0.20-3.module+el8.4.0+576+2d493411.aarch64.rpm","freeradius-unixODBC-debuginfo-0:3.0.20-3.module+el8.4.0+576+2d493411.x86_64.rpm","freeradius-utils-0:3.0.20-3.module+el8.4.0+576+2d493411.aarch64.rpm","freeradius-utils-0:3.0.20-3.module+el8.4.0+576+2d493411.x86_64.rpm","freeradius-utils-debuginfo-0:3.0.20-3.module+el8.4.0+576+2d493411.aarch64.rpm","freeradius-utils-debuginfo-0:3.0.20-3.module+el8.4.0+576+2d493411.x86_64.rpm","python3-freeradius-0:3.0.20-3.module+el8.4.0+576+2d493411.aarch64.rpm","python3-freeradius-0:3.0.20-3.module+el8.4.0+576+2d493411.x86_64.rpm","python3-freeradius-debuginfo-0:3.0.20-3.module+el8.4.0+576+2d493411.aarch64.rpm","python3-freeradius-debuginfo-0:3.0.20-3.module+el8.4.0+576+2d493411.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4799","url":"https://access.redhat.com/errata/RHSA-2020:4799","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4807.json b/data/advisories/2020/RLSA-2020-4807.json new file mode 100644 index 0000000..90be375 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4807.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4807","synopsis":"Moderate: prometheus-jmx-exporter security update","severity":"SEVERITY_MODERATE","topic":"An update is available for prometheus-jmx-exporter.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Prometheus JMX Exporter is a JMX to Prometheus exporter: a collector that can be configured to scrape and expose MBeans of a JMX target.\n\nSecurity Fix(es):\n\n* snakeyaml: Billion laughs attack via alias feature (CVE-2017-18640)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1785376","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1785376","description":""}],"cves":[{"name":"CVE-2017-18640","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18640","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","cvss3BaseScore":"7.6","cwe":"CWE-776->CWE-122"}],"references":[],"publishedAt":"2020-11-03T12:37:53Z","rpms":{"Rocky Linux 8":{"nvras":["prometheus-jmx-exporter-0:0.12.0-6.el8.noarch.rpm","prometheus-jmx-exporter-0:0.12.0-6.el8.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4807","url":"https://access.redhat.com/errata/RHSA-2020:4807","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4820.json b/data/advisories/2020/RLSA-2020-4820.json new file mode 100644 index 0000000..a5cd9d1 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4820.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4820","synopsis":"Moderate: file-roller security update","severity":"SEVERITY_MODERATE","topic":"An update is available for file-roller.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"File Roller is an application for creating and viewing archives files, such as tar or zip files.\n\nSecurity Fix(es):\n\n* file-roller: path traversal vulnerability via a specially crafted filename contained in malicious archive (CVE-2019-16680)\n\n* file-roller: directory traversal via directory symlink pointing outside of the target directory (CVE-2020-11736)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1767594","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1767594","description":""},{"ticket":"1824985","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1824985","description":""}],"cves":[{"name":"CVE-2019-16680","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16680","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3BaseScore":"4.3","cwe":"CWE-22"},{"name":"CVE-2020-11736","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11736","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L","cvss3BaseScore":"3.9","cwe":"CWE-22"}],"references":[],"publishedAt":"2020-11-03T12:38:46Z","rpms":{"Rocky Linux 8":{"nvras":["file-roller-0:3.28.1-3.el8.aarch64.rpm","file-roller-0:3.28.1-3.el8.src.rpm","file-roller-0:3.28.1-3.el8.x86_64.rpm","file-roller-debuginfo-0:3.28.1-3.el8.aarch64.rpm","file-roller-debuginfo-0:3.28.1-3.el8.x86_64.rpm","file-roller-debugsource-0:3.28.1-3.el8.aarch64.rpm","file-roller-debugsource-0:3.28.1-3.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4820","url":"https://access.redhat.com/errata/RHSA-2020:4820","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4827.json b/data/advisories/2020/RLSA-2020-4827.json new file mode 100644 index 0000000..1bf5536 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4827.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4827","synopsis":"Moderate: oniguruma security update","severity":"SEVERITY_MODERATE","topic":"An update is available for oniguruma.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Oniguruma is a regular expressions library that supports a variety of character encodings. \n\nSecurity Fix(es):\n\n* oniguruma: NULL pointer dereference in match_at() in regexec.c (CVE-2019-13225)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1728965","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1728965","description":""}],"cves":[{"name":"CVE-2019-13225","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13225","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3BaseScore":"5.3","cwe":"CWE-476->CWE-400"}],"references":[],"publishedAt":"2020-11-03T12:39:14Z","rpms":{"Rocky Linux 8":{"nvras":["oniguruma-0:6.8.2-2.el8.x86_64.rpm","oniguruma-debuginfo-0:6.8.2-2.el8.aarch64.rpm","oniguruma-0:6.8.2-2.el8.aarch64.rpm","oniguruma-0:6.8.2-2.el8.i686.rpm","oniguruma-0:6.8.2-2.el8.src.rpm","oniguruma-debuginfo-0:6.8.2-2.el8.i686.rpm","oniguruma-debuginfo-0:6.8.2-2.el8.x86_64.rpm","oniguruma-debugsource-0:6.8.2-2.el8.aarch64.rpm","oniguruma-debugsource-0:6.8.2-2.el8.i686.rpm","oniguruma-debugsource-0:6.8.2-2.el8.x86_64.rpm","oniguruma-devel-0:6.8.2-2.el8.aarch64.rpm","oniguruma-devel-0:6.8.2-2.el8.i686.rpm","oniguruma-devel-0:6.8.2-2.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4827","url":"https://access.redhat.com/errata/RHSA-2020:4827","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}} \ No newline at end of file diff --git a/data/advisories/2020/RLSA-2020-4847.json b/data/advisories/2020/RLSA-2020-4847.json new file mode 100644 index 0000000..62855a5 --- /dev/null +++ b/data/advisories/2020/RLSA-2020-4847.json @@ -0,0 +1 @@ +{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4847","synopsis":"Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for jackson-core, ldapjdk, glassfish-jaxb-api, glassfish-fastinfoset, xalan-j2, apache-commons-net, xmlstreambuffer, jackson-annotations, jackson-databind, pki-servlet-engine, apache-commons-lang, jackson-module-jaxb-annotations, apache-commons-collections, javassist, python-nss, bea-stax, velocity, xml-commons-apis, resteasy, xsom, slf4j, jackson-jaxrs-providers, stax-ex, xerces-j2, jakarta-commons-httpclient, glassfish-jaxb, xml-commons-resolver, relaxngDatatype.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The Public Key Infrastructure (PKI) Core contains fundamental packages required by Rocky Enterprise Software Foundation Certificate System.\n\nSecurity Fix(es):\n\n* jquery: Cross-site scripting via cross-domain ajax requests (CVE-2015-9251)\n\n* bootstrap: XSS in the data-target attribute (CVE-2016-10735)\n\n* bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute (CVE-2018-14040)\n\n* bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip (CVE-2018-14042)\n\n* bootstrap: XSS in the tooltip or popover data-template attribute (CVE-2019-8331)\n\n* jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection (CVE-2019-11358)\n\n* jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method (CVE-2020-11022)\n\n* jquery: Passing HTML containing