Alpine Security Advisories — February 2019 — Alpine Security Advisories

Advisories

Product	Status	Vendor	Package	Ecosystem
ansible-0:2.6.14-1.el7ae.noarch as a component of Red Hat Ansible Engine 2.6 for RHEL 7 Server	fixed	Red Hat	ansible-0:2.6.14-1.el7ae.noarch as a component of Red Hat Ansible Engine 2.6 for RHEL 7 Server	—
ansible-0:2.6.14-1.el7ae.src as a component of Red Hat Ansible Engine 2.6 for RHEL 7 Server	fixed	Red Hat	ansible-0:2.6.14-1.el7ae.src as a component of Red Hat Ansible Engine 2.6 for RHEL 7 Server	—

Product	Status	Vendor	Package	Ecosystem
ansible-0:2.5.15-1.el7ae.noarch as a component of Red Hat Ansible Engine 2.5 for RHEL 7 Server	fixed	Red Hat	ansible-0:2.5.15-1.el7ae.noarch as a component of Red Hat Ansible Engine 2.5 for RHEL 7 Server	—
ansible-0:2.5.15-1.el7ae.src as a component of Red Hat Ansible Engine 2.5 for RHEL 7 Server	fixed	Red Hat	ansible-0:2.5.15-1.el7ae.src as a component of Red Hat Ansible Engine 2.5 for RHEL 7 Server	—
ansible-doc-0:2.5.15-1.el7ae.noarch as a component of Red Hat Ansible Engine 2.5 for RHEL 7 Server	fixed	Red Hat	ansible-doc-0:2.5.15-1.el7ae.noarch as a component of Red Hat Ansible Engine 2.5 for RHEL 7 Server	—

Product	Status	Vendor	Package	Ecosystem
ansible-0:2.7.8-1.el7ae.noarch as a component of Red Hat Ansible Engine 2.7 for RHEL 7 Server	fixed	Red Hat	ansible-0:2.7.8-1.el7ae.noarch as a component of Red Hat Ansible Engine 2.7 for RHEL 7 Server	—
ansible-0:2.7.8-1.el7ae.src as a component of Red Hat Ansible Engine 2.7 for RHEL 7 Server	fixed	Red Hat	ansible-0:2.7.8-1.el7ae.src as a component of Red Hat Ansible Engine 2.7 for RHEL 7 Server	—

Product	Status	Vendor	Package	Ecosystem
ansible-0:2.7.8-1.el7ae.noarch as a component of Red Hat Ansible Engine 2 for RHEL 7	fixed	Red Hat	ansible-0:2.7.8-1.el7ae.noarch as a component of Red Hat Ansible Engine 2 for RHEL 7	—
ansible-0:2.7.8-1.el7ae.src as a component of Red Hat Ansible Engine 2 for RHEL 7	fixed	Red Hat	ansible-0:2.7.8-1.el7ae.src as a component of Red Hat Ansible Engine 2 for RHEL 7	—

In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the ASN.1 BER and related dissectors could crash. This was addressed in epan/dissectors/packet-ber.c by preventing a buffer overflow associated with excessive digits in time values.

CVEs:CVE-2019-9209

Affected products

Product	Status	Vendor	Package	Ecosystem
wireshark	affected	alpine	wireshark	—

Upstream advisory

CVE-2019-9214

Docker Hub2019-02-28

In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the RPCAP dissector could crash. This was addressed in epan/dissectors/packet-rpcap.c by avoiding an attempted dereference of a NULL conversation.

CVEs:CVE-2019-9214

Affected products

Product	Status	Vendor	Package	Ecosystem
wireshark	affected	alpine	wireshark	—

Upstream advisory

CVE-2019-3828

Docker HubMEDIUM2019-02-27

Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path.

CVEs:CVE-2019-3828

Affected products

Product	Status	Vendor	Package	Ecosystem
ansible	affected	alpine	ansible	—
Ansible	affected	Red Hat	—	—
ansible-base	affected	alpine	ansible-base	—

Upstream advisory

CVE-2018-20797

Docker Hub2019-02-27

An issue was discovered in PoDoFo 0.9.6. There is an attempted excessive memory allocation in PoDoFo::podofo_calloc in base/PdfMemoryManagement.cpp when called from PoDoFo::PdfPredictorDecoder::PdfPredictorDecoder in base/PdfFiltersPrivate.cpp.

CVEs:CVE-2018-20797

Affected products

Product	Status	Vendor	Package	Ecosystem
podofo	affected	alpine	podofo	—

Upstream advisory

CVE-2019-9210

Docker Hub2019-02-27

In AdvanceCOMP 2.1, png_compress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. (There is also a heap-based buffer over-read.)

CVEs:CVE-2019-9210

Affected products

Product	Status	Vendor	Package	Ecosystem
advancecomp	affected	alpine	advancecomp	—

Upstream advisory

RHSA-2019:0420

RH-hardenedHIGH2019-02-26

Red Hat Security Advisory: polkit security update

CVEs:RHSA-2019:0420

Affected products

Upstream advisory

RHSA-2019:0415

RH-hardenedHIGH2019-02-26

Red Hat Security Advisory: kernel security and bug fix update

CVEs:RHSA-2019:0415

Affected products

Upstream advisory

RHSA-2019:0416

RH-hardenedMEDIUM2019-02-26

Red Hat Security Advisory: java-1.8.0-openjdk security update

CVEs:RHSA-2019:0416

Affected products

Upstream advisory

CVE-2019-5785

Docker Hub2019-02-26

Incorrect convexity calculations in Skia in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.

CVEs:CVE-2019-5785

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox-esr	affected	alpine	firefox-esr	—

Upstream advisory

RHSA-2019:0408

RH-hardenedHIGH2019-02-26

Red Hat Security Advisory: OpenShift Container Platform 3.4, 3.5, 3.6, and 3.7 security update

CVEs:RHSA-2019:0408

Affected products

Upstream advisory

CVE-2019-1559

Chainguard2019-02-26

0-byte record padding oracle

CVEs:CVE-2019-1559

Affected products

Product	Status	Vendor	Package	Ecosystem
mysql-8.0	affected	chainguard	mysql-8.0	—
openssl	affected	alpine	openssl	—

Upstream advisory

CVE-2019-9199

Docker Hub2019-02-26

PoDoFo::Impose::PdfTranslator::setSource() in pdftranslator.cpp in PoDoFo 0.9.6 has a NULL pointer dereference that can (for example) be triggered by sending a crafted PDF file to the podofoimpose binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.

CVEs:CVE-2019-9199

Affected products

Product	Status	Vendor	Package	Ecosystem
podofo	affected	alpine	podofo	—

Upstream advisory

RHSA-2019:0401

RH-hardenedHIGH2019-02-25

Red Hat Security Advisory: Container Development Kit 3.7.0-1 security update

CVEs:RHSA-2019:0401

Affected products

Product	Status	Vendor	Package	Ecosystem
Other	fixed	Red Hat	Other	—

Upstream advisory

CVE-2019-9151

Docker Hub2019-02-25

An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5VM_memcpyvv in H5VM.c when called from H5D__compact_readvv in H5Dcompact.c.

CVEs:CVE-2019-9151

Affected products

Product	Status	Vendor	Package	Ecosystem
hdf5	affected	alpine	hdf5	—

Upstream advisory

RHSA-2019:0396

RH-hardenedMEDIUM2019-02-25

Red Hat Security Advisory: chromium-browser security update

CVEs:RHSA-2019:0396

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser-0:72.0.3626.96-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)	fixed	Red Hat	chromium-browser-0:72.0.3626.96-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)	—
chromium-browser-0:72.0.3626.96-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)	fixed	Red Hat	chromium-browser-0:72.0.3626.96-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)	—
chromium-browser-0:72.0.3626.96-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)	fixed	Red Hat	chromium-browser-0:72.0.3626.96-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)	—
chromium-browser-0:72.0.3626.96-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)	fixed	Red Hat	chromium-browser-0:72.0.3626.96-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)	—
chromium-browser-0:72.0.3626.96-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)	fixed	Red Hat	chromium-browser-0:72.0.3626.96-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)	—
chromium-browser-0:72.0.3626.96-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)	fixed	Red Hat	chromium-browser-0:72.0.3626.96-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)	—
chromium-browser-debuginfo-0:72.0.3626.96-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)	fixed	Red Hat	chromium-browser-debuginfo-0:72.0.3626.96-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)	—
chromium-browser-debuginfo-0:72.0.3626.96-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)	fixed	Red Hat	chromium-browser-debuginfo-0:72.0.3626.96-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)	—
chromium-browser-debuginfo-0:72.0.3626.96-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)	fixed	Red Hat	chromium-browser-debuginfo-0:72.0.3626.96-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)	—
chromium-browser-debuginfo-0:72.0.3626.96-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)	fixed	Red Hat	chromium-browser-debuginfo-0:72.0.3626.96-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)	—
chromium-browser-debuginfo-0:72.0.3626.96-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)	fixed	Red Hat	chromium-browser-debuginfo-0:72.0.3626.96-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)	—
chromium-browser-debuginfo-0:72.0.3626.96-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)	fixed	Red Hat	chromium-browser-debuginfo-0:72.0.3626.96-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)	—

Upstream advisory

CVE-2018-20786

Docker Hub2019-02-24

libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (application crash), related to screen.c, state.c, and vterm.c.

CVEs:CVE-2018-20786

Affected products

Product	Status	Vendor	Package	Ecosystem
libvterm	affected	wolfi	libvterm	—
libvterm	affected	chainguard	libvterm	—
libvterm	affected	alpine	libvterm	—

Upstream advisory

CVE-2018-12546

Docker Hub2019-02-23

In Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) when a client publishes a retained message to a topic, then has its access to that topic revoked, the retained message will still be published to clients that subscribe to that topic in the future. In some applications this may result in clients being able cause effects that would otherwise not be allowed.

CVEs:CVE-2018-12546

Affected products

Product	Status	Vendor	Package	Ecosystem
mosquitto	affected	alpine	mosquitto	—

Upstream advisory

CVE-2018-12550

Docker Hub2019-02-23

When Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use an ACL file, and that ACL file is empty, or contains only comments or blank lines, then Mosquitto will treat this as though no ACL file has been defined and use a default allow policy. The new behaviour is to have an empty ACL file mean that all access is denied, which is not a useful configuration but is not unexpected.

CVEs:CVE-2018-12550

Affected products

Product	Status	Vendor	Package	Ecosystem
mosquitto	affected	alpine	mosquitto	—

Upstream advisory

CVE-2018-12551

Docker Hub2019-02-23

When Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use a password file for authentication, any malformed data in the password file will be treated as valid. This typically means that the malformed data becomes a username and no password. If this occurs, clients can circumvent authentication and get access to the broker by using the malformed username. In particular, a blank line will be treated as a valid empty username. Other security measures are unaffected. Users who hav

CVEs:CVE-2018-12551

Affected products

Product	Status	Vendor	Package	Ecosystem
mosquitto	affected	alpine	mosquitto	—

Upstream advisory

CVE-2019-9020

Docker Hub2019-02-22

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_decode() can lead to an invalid memory access (heap out of bounds read or read after free). This is related to xml_elem_parse_buf in ext/xmlrpc/libxmlrpc/xml_element.c.

CVEs:CVE-2019-9020

Affected products

Product	Status	Vendor	Package	Ecosystem
php7	affected	alpine	php7	—

Upstream advisory

CVE-2019-9021

Docker Hub2019-02-22

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A heap-based buffer over-read in PHAR reading functions in the PHAR extension may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse the file name, a different vulnerability than CVE-2018-20783. This is related to phar_detect_phar_fname_ext in ext/phar/phar.c.

CVEs:CVE-2019-9021

Affected products

Product	Status	Vendor	Package	Ecosystem
php7	affected	alpine	php7	—

Upstream advisory

CVE-2019-9022

Docker Hub2019-02-22

An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dns_get_record misparses a DNS response, which can allow a hostile DNS server to cause PHP to misuse memcpy, leading to read operations going past the buffer allocated for DNS data. This affects php_parserr in ext/standard/dns.c for DNS_CAA and DNS_ANY queries.

CVEs:CVE-2019-9022

Affected products

Product	Status	Vendor	Package	Ecosystem
php7	affected	alpine	php7	—

Upstream advisory

CVE-2019-9023

Docker Hub2019-02-22

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A number of heap-based buffer over-read instances are present in mbstring regular expression functions when supplied with invalid multibyte data. These occur in ext/mbstring/oniguruma/regcomp.c, ext/mbstring/oniguruma/regexec.c, ext/mbstring/oniguruma/regparse.c, ext/mbstring/oniguruma/enc/unicode.c, and ext/mbstring/oniguruma/src/utf32_be.c when a multibyte regular expression pattern co

CVEs:CVE-2019-9023

Affected products

Product	Status	Vendor	Package	Ecosystem
php7	affected	alpine	php7	—

Upstream advisory

CVE-2019-9024

Docker Hub2019-02-22

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. xmlrpc_decode() can allow a hostile XMLRPC server to cause PHP to read memory outside of allocated areas in base64_decode_xmlrpc in ext/xmlrpc/libxmlrpc/base64.c.

CVEs:CVE-2019-9024

Affected products

Product	Status	Vendor	Package	Ecosystem
php7	affected	alpine	php7	—

Upstream advisory

CVE-2019-8955

Docker Hub2019-02-21

In Tor before 0.3.3.12, 0.3.4.x before 0.3.4.11, 0.3.5.x before 0.3.5.8, and 0.4.x before 0.4.0.2-alpha, remote denial of service against Tor clients and relays can occur via memory exhaustion in the KIST cell scheduler.

CVEs:CVE-2019-8955

Affected products

Product	Status	Vendor	Package	Ecosystem
tor	affected	alpine	tor	—

Upstream advisory

CVE-2018-20783

Docker Hub2019-02-21

In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer over-read in PHAR reading functions may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse a .phar file. This is related to phar_parse_pharfile in ext/phar/phar.c.

CVEs:CVE-2018-20783

Affected products

Product	Status	Vendor	Package	Ecosystem
php7	affected	alpine	php7	—

Upstream advisory

CVE-2018-5817

Docker Hub2019-02-20

A type confusion error within the "unpacked_load_raw()" function within LibRaw versions prior to 0.19.1 (internal/dcraw_common.cpp) can be exploited to trigger an infinite loop.

CVEs:CVE-2018-5817

Affected products

Product	Status	Vendor	Package	Ecosystem
libraw	affected	alpine	libraw	—

Upstream advisory

CVE-2018-5818

Docker Hub2019-02-20

An error within the "parse_rollei()" function (internal/dcraw_common.cpp) within LibRaw versions prior to 0.19.1 can be exploited to trigger an infinite loop.

CVEs:CVE-2018-5818

Affected products

Product	Status	Vendor	Package	Ecosystem
libraw	affected	alpine	libraw	—

Upstream advisory

CVE-2018-5819

Docker Hub2019-02-20

An error within the "parse_sinar_ia()" function (internal/dcraw_common.cpp) within LibRaw versions prior to 0.19.1 can be exploited to exhaust available CPU resources.

CVEs:CVE-2018-5819

Affected products

Product	Status	Vendor	Package	Ecosystem
libraw	affected	alpine	libraw	—

Upstream advisory

CVE-2018-20030

Docker Hub2019-02-20

An error when processing the EXIF_IFD_INTEROPERABILITY and EXIF_IFD_EXIF tags within libexif version 0.6.21 can be exploited to exhaust available CPU resources.

CVEs:CVE-2018-20030

Affected products

Product	Status	Vendor	Package	Ecosystem
libexif	affected	alpine	libexif	—

Upstream advisory

RHBA-2019:0327

RH-hardenedLOW2019-02-20

Red Hat Bug Fix Advisory: OpenShift Container Platform 3.11 images update

CVEs:RHBA-2019:0327

Affected products

Upstream advisory

RHBA-2019:0326

RH-hardenedHIGH2019-02-20

Red Hat Bug Fix Advisory: OpenShift Container Platform 3.11 bug fix update

CVEs:RHBA-2019:0326

Affected products

Upstream advisory

RHSA-2019:0375

RH-hardenedHIGH2019-02-19

Red Hat Security Advisory: flatpak security update

CVEs:RHSA-2019:0375

Affected products

Upstream advisory

RHSA-2019:0374

RH-hardenedCRITICAL2019-02-19

Red Hat Security Advisory: firefox security update

CVEs:RHSA-2019:0374

Affected products

Upstream advisory

RHSA-2019:0373

RH-hardenedCRITICAL2019-02-19

Red Hat Security Advisory: firefox security update

CVEs:RHSA-2019:0373

Affected products

Upstream advisory

RHSA-2019:0380

RH-hardenedHIGH2019-02-19

Red Hat Security Advisory: Red Hat Single Sign-On 7.2.6 security update

CVEs:RHSA-2019:0380

Affected products

Product	Status	Vendor	Package	Ecosystem
Red Hat Single Sign-On 7.2.6 zip	fixed	Red Hat	Red Hat Single Sign-On 7.2.6 zip	—

Upstream advisory

RHSA-2019:0368

RH-hardenedHIGH2019-02-19

Red Hat Security Advisory: systemd security update

CVEs:RHSA-2019:0368

Affected products

Upstream advisory

CVE-2019-8904

Docker Hub2019-02-18

do_bid_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printf and file_vprintf.

CVEs:CVE-2019-8904

Affected products

Product	Status	Vendor	Package	Ecosystem
file	affected	alpine	file	—

Upstream advisory

CVE-2019-8905

Docker Hub2019-02-18

do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a different vulnerability than CVE-2018-10360.

CVEs:CVE-2019-8905

Affected products

Product	Status	Vendor	Package	Ecosystem
file	affected	alpine	file	—

Upstream advisory

CVE-2019-8906

Docker Hub2019-02-18

do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.

CVEs:CVE-2019-8906

Affected products

Product	Status	Vendor	Package	Ecosystem
file	affected	alpine	file	—

Upstream advisory

CVE-2019-8907

Docker Hub2019-02-18

do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact.

CVEs:CVE-2019-8907

Affected products

Product	Status	Vendor	Package	Ecosystem
file	affected	alpine	file	—

Upstream advisory

RHSA-2019:0367

RH-hardenedCRITICAL2019-02-18

Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 security update

CVEs:RHSA-2019:0367

Affected products

Upstream advisory

RHSA-2019:0366

RH-hardenedHIGH2019-02-18

Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 SP1 security update

CVEs:RHSA-2019:0366

Affected products

Product	Status	Vendor	Package	Ecosystem
Text-Only JBCS	fixed	Red Hat	Text-Only JBCS	—

Upstream advisory

RHSA-2019:0364

RH-hardenedHIGH2019-02-18

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.6 on RHEL 6 security update

CVEs:RHSA-2019:0364

Affected products

Upstream advisory

RHSA-2019:0365

RH-hardenedHIGH2019-02-18

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.6 for RHEL 7 security update

CVEs:RHSA-2019:0365

Affected products

Upstream advisory

RHSA-2019:0361

RH-hardenedHIGH2019-02-18

Red Hat Security Advisory: rhvm-appliance security update

CVEs:RHSA-2019:0361

Affected products

Product	Status	Vendor	Package	Ecosystem
rhvm-appliance-2:4.2-20190129.0.el7.noarch as a component of Red Hat Virtualization 4 Hypervisor for RHEL 7	fixed	Red Hat	rhvm-appliance-2:4.2-20190129.0.el7.noarch as a component of Red Hat Virtualization 4 Hypervisor for RHEL 7	—
rhvm-appliance-2:4.2-20190129.0.el7.noarch as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts	fixed	Red Hat	rhvm-appliance-2:4.2-20190129.0.el7.noarch as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts	—
rhvm-appliance-2:4.2-20190129.0.el7.src as a component of Red Hat Virtualization 4 Hypervisor for RHEL 7	fixed	Red Hat	rhvm-appliance-2:4.2-20190129.0.el7.src as a component of Red Hat Virtualization 4 Hypervisor for RHEL 7	—
rhvm-appliance-2:4.2-20190129.0.el7.src as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts	fixed	Red Hat	rhvm-appliance-2:4.2-20190129.0.el7.src as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts	—

Upstream advisory

CVE-2019-8423

Docker Hub2019-02-18

ZoneMinder through 1.32.3 has SQL Injection via the skins/classic/views/events.php filter[Query][terms][0][cnj] parameter.

CVEs:CVE-2019-8423

Affected products

Product	Status	Vendor	Package	Ecosystem
zoneminder	affected	alpine	zoneminder	—

Upstream advisory

CVE-2019-8376

Docker Hub2019-02-17

An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_layer4_v6() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.

CVEs:CVE-2019-8376

Affected products

Product	Status	Vendor	Package	Ecosystem
tcpreplay	affected	alpine	tcpreplay	—

Upstream advisory

CVE-2019-8377

Docker Hub2019-02-17

An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_ipv6_l4proto() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.

CVEs:CVE-2019-8377

Affected products

Product	Status	Vendor	Package	Ecosystem
tcpreplay	affected	alpine	tcpreplay	—

Upstream advisory

CVE-2019-8381

Docker Hub2019-02-17

An issue was discovered in Tcpreplay 4.3.1. An invalid memory access occurs in do_checksum in checksum.c. It can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.

CVEs:CVE-2019-8381

Affected products

Product	Status	Vendor	Package	Ecosystem
tcpreplay	affected	alpine	tcpreplay	—

Upstream advisory

CVE-2019-8354

Docker Hub2019-02-15

An issue was discovered in SoX 14.4.2. lsx_make_lpf in effect_i_dsp.c has an integer overflow on the result of multiplication fed into malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow.

CVEs:CVE-2019-8354

Affected products

Product	Status	Vendor	Package	Ecosystem
sox	affected	alpine	sox	—

Upstream advisory

CVE-2019-8355

Docker Hub2019-02-15

An issue was discovered in SoX 14.4.2. In xmalloc.h, there is an integer overflow on the result of multiplication fed into the lsx_valloc macro that wraps malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow in channels_start in remix.c.

CVEs:CVE-2019-8355

Affected products

Product	Status	Vendor	Package	Ecosystem
sox	affected	alpine	sox	—

Upstream advisory

CVE-2019-8356

Docker Hub2019-02-15

An issue was discovered in SoX 14.4.2. One of the arguments to bitrv2 in fft4g.c is not guarded, such that it can lead to write access outside of the statically declared array, aka a stack-based buffer overflow.

CVEs:CVE-2019-8356

Affected products

Product	Status	Vendor	Package	Ecosystem
sox	affected	alpine	sox	—

Upstream advisory

CVE-2019-8357

Docker Hub2019-02-15

An issue was discovered in SoX 14.4.2. lsx_make_lpf in effect_i_dsp.c allows a NULL pointer dereference.

CVEs:CVE-2019-8357

Affected products

Product	Status	Vendor	Package	Ecosystem
sox	affected	alpine	sox	—

Upstream advisory

RHSA-2019:0349

RH-hardenedHIGH2019-02-14

Red Hat Security Advisory: .NET Core on Red Hat Enterprise Linux security update for February 2019

CVEs:RHSA-2019:0349

Affected products

Upstream advisory

RHSA-2019:0348

RH-hardenedHIGH2019-02-14

Red Hat Security Advisory: flash-plugin security update

CVEs:RHSA-2019:0348

Affected products

Product	Status	Vendor	Package	Ecosystem
flash-plugin-0:32.0.0.142-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)	fixed	Red Hat	flash-plugin-0:32.0.0.142-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)	—
flash-plugin-0:32.0.0.142-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)	fixed	Red Hat	flash-plugin-0:32.0.0.142-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)	—
flash-plugin-0:32.0.0.142-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)	fixed	Red Hat	flash-plugin-0:32.0.0.142-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)	—

Upstream advisory

RHSA-2019:0342

RH-hardenedHIGH2019-02-13

Red Hat Security Advisory: redhat-virtualization-host security update

CVEs:RHSA-2019:0342

Affected products

Product	Status	Vendor	Package	Ecosystem
redhat-release-virtualization-host-0:4.2-8.1.el7.src as a component of RHEL 7-based RHEV-H for RHEV 4 (build requirements)	fixed	Red Hat	redhat-release-virtualization-host-0:4.2-8.1.el7.src as a component of RHEL 7-based RHEV-H for RHEV 4 (build requirements)	—
redhat-release-virtualization-host-0:4.2-8.1.el7.x86_64 as a component of RHEL 7-based RHEV-H for RHEV 4 (build requirements)	fixed	Red Hat	redhat-release-virtualization-host-0:4.2-8.1.el7.x86_64 as a component of RHEL 7-based RHEV-H for RHEV 4 (build requirements)	—
redhat-virtualization-host-0:4.2-20190129.0.el7_6.src as a component of Red Hat Virtualization 4 Hypervisor for RHEL 7	fixed	Red Hat	redhat-virtualization-host-0:4.2-20190129.0.el7_6.src as a component of Red Hat Virtualization 4 Hypervisor for RHEL 7	—
redhat-virtualization-host-image-update-0:4.2-20190129.0.el7_6.noarch as a component of Red Hat Virtualization 4 Hypervisor for RHEL 7	fixed	Red Hat	redhat-virtualization-host-image-update-0:4.2-20190129.0.el7_6.noarch as a component of Red Hat Virtualization 4 Hypervisor for RHEL 7	—
redhat-virtualization-host-image-update-placeholder-0:4.2-8.1.el7.noarch as a component of RHEL 7-based RHEV-H for RHEV 4 (build requirements)	fixed	Red Hat	redhat-virtualization-host-image-update-placeholder-0:4.2-8.1.el7.noarch as a component of RHEL 7-based RHEV-H for RHEV 4 (build requirements)	—

Upstream advisory

RHSA-2019:0324

RH-hardenedCRITICAL2019-02-12

Red Hat Security Advisory: kernel security and bug fix update

CVEs:RHSA-2019:0324

Affected products

Upstream advisory

RHSA-2019:0315

RH-hardenedCRITICAL2019-02-12

Red Hat Security Advisory: CloudForms 4.6.8 security, bug fix and enhancement update

CVEs:RHSA-2019:0315

Affected products

Upstream advisory

RHSA-2019:0309

RH-hardenedCRITICAL2019-02-12

Red Hat Security Advisory: chromium-browser security update

CVEs:RHSA-2019:0309

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser-0:72.0.3626.81-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)	fixed	Red Hat	chromium-browser-0:72.0.3626.81-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)	—
chromium-browser-0:72.0.3626.81-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)	fixed	Red Hat	chromium-browser-0:72.0.3626.81-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)	—
chromium-browser-0:72.0.3626.81-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)	fixed	Red Hat	chromium-browser-0:72.0.3626.81-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)	—
chromium-browser-0:72.0.3626.81-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)	fixed	Red Hat	chromium-browser-0:72.0.3626.81-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)	—
chromium-browser-0:72.0.3626.81-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)	fixed	Red Hat	chromium-browser-0:72.0.3626.81-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)	—
chromium-browser-0:72.0.3626.81-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)	fixed	Red Hat	chromium-browser-0:72.0.3626.81-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)	—
chromium-browser-debuginfo-0:72.0.3626.81-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)	fixed	Red Hat	chromium-browser-debuginfo-0:72.0.3626.81-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)	—
chromium-browser-debuginfo-0:72.0.3626.81-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)	fixed	Red Hat	chromium-browser-debuginfo-0:72.0.3626.81-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)	—
chromium-browser-debuginfo-0:72.0.3626.81-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)	fixed	Red Hat	chromium-browser-debuginfo-0:72.0.3626.81-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)	—
chromium-browser-debuginfo-0:72.0.3626.81-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)	fixed	Red Hat	chromium-browser-debuginfo-0:72.0.3626.81-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)	—
chromium-browser-debuginfo-0:72.0.3626.81-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)	fixed	Red Hat	chromium-browser-debuginfo-0:72.0.3626.81-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)	—
chromium-browser-debuginfo-0:72.0.3626.81-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)	fixed	Red Hat	chromium-browser-debuginfo-0:72.0.3626.81-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)	—

Upstream advisory

RHSA-2019:0304

RH-hardenedHIGH2019-02-11

Red Hat Security Advisory: docker security update

CVEs:RHSA-2019:0304

Affected products

Upstream advisory

RHSA-2019:0303

RH-hardenedHIGH2019-02-11

Red Hat Security Advisory: runc security update

CVEs:RHSA-2019:0303

Affected products

Product	Status	Vendor	Package	Ecosystem
runc-0:1.0.0-59.dev.git2abd837.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	runc-0:1.0.0-59.dev.git2abd837.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras	—
runc-0:1.0.0-59.dev.git2abd837.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	runc-0:1.0.0-59.dev.git2abd837.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras	—
runc-0:1.0.0-59.dev.git2abd837.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	runc-0:1.0.0-59.dev.git2abd837.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras	—
runc-0:1.0.0-59.dev.git2abd837.el7.src as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	runc-0:1.0.0-59.dev.git2abd837.el7.src as a component of Red Hat Enterprise Linux 7 Extras	—
runc-0:1.0.0-59.dev.git2abd837.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	runc-0:1.0.0-59.dev.git2abd837.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras	—
runc-debuginfo-0:1.0.0-59.dev.git2abd837.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	runc-debuginfo-0:1.0.0-59.dev.git2abd837.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras	—
runc-debuginfo-0:1.0.0-59.dev.git2abd837.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	runc-debuginfo-0:1.0.0-59.dev.git2abd837.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras	—
runc-debuginfo-0:1.0.0-59.dev.git2abd837.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	runc-debuginfo-0:1.0.0-59.dev.git2abd837.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras	—
runc-debuginfo-0:1.0.0-59.dev.git2abd837.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	runc-debuginfo-0:1.0.0-59.dev.git2abd837.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras	—

Upstream advisory

CVE-2019-6975

Docker Hub2019-02-11

Django 1.11.x before 1.11.19, 2.0.x before 2.0.11, and 2.1.x before 2.1.6 allows Uncontrolled Memory Consumption via a malicious attacker-supplied value to the django.utils.numberformat.format() function.

CVEs:CVE-2019-6975

Affected products

Product	Status	Vendor	Package	Ecosystem
py3-django	affected	alpine	py3-django	—
py-django	affected	alpine	py-django	—

Upstream advisory

CVE-2019-7664

Docker Hub2019-02-09

In elfutils 0.175, a negative-sized memcpy is attempted in elf_cvt_note in libelf/note_xlate.h because of an incorrect overflow check. Crafted elf input causes a segmentation fault, leading to denial of service (program crash).

CVEs:CVE-2019-7664

Affected products

Product	Status	Vendor	Package	Ecosystem
elfutils	affected	alpine	elfutils	—

Upstream advisory

CVE-2019-7665

Docker Hub2019-02-09

In elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32_xlatetom in elf32_xlatetom.c in libelf. A crafted ELF input can cause a segmentation fault leading to denial of service (program crash) because ebl_core_note does not reject malformed core file notes.

CVEs:CVE-2019-7665

Affected products

Product	Status	Vendor	Package	Ecosystem
elfutils	affected	alpine	elfutils	—

Upstream advisory

CVE-2019-5736

Chainguard2019-02-08

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related

CVEs:CVE-2019-5736

Affected products

Product	Status	Vendor	Package	Ecosystem
flatpak	affected	alpine	flatpak	—
lxc	affected	alpine	lxc	—
py3-docker	affected	chainguard	py3-docker	—
py3-docker	affected	wolfi	py3-docker	—
runc	affected	alpine	runc	—

Upstream advisory

CVE-2019-7637

Docker Hub2019-02-08

SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in SDL_FillRect in video/SDL_surface.c.

CVEs:CVE-2019-7637

Affected products

Product	Status	Vendor	Package	Ecosystem
sdl	affected	alpine	sdl	—
sdl2	affected	alpine	sdl2	—

Upstream advisory

CVE-2019-7635

Docker Hub2019-02-08

SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c.

CVEs:CVE-2019-7635

Affected products

Product	Status	Vendor	Package	Ecosystem
sdl	affected	alpine	sdl	—
sdl2	affected	alpine	sdl2	—

Upstream advisory

CVE-2019-7636

Docker Hub2019-02-08

SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c.

CVEs:CVE-2019-7636

Affected products

Product	Status	Vendor	Package	Ecosystem
sdl	affected	alpine	sdl	—
sdl2	affected	alpine	sdl2	—

Upstream advisory

CVE-2019-7638

Docker Hub2019-02-08

SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Map1toN in video/SDL_pixels.c.

CVEs:CVE-2019-7638

Affected products

Product	Status	Vendor	Package	Ecosystem
sdl	affected	alpine	sdl	—
sdl2	affected	alpine	sdl2	—

Upstream advisory

RHSA-2019:0212

RH-hardenedCRITICAL2019-02-07

Red Hat Security Advisory: CloudForms 4.7 security, bug fix and enhancement update

CVEs:RHSA-2019:0212

Affected products

Upstream advisory

CVE-2019-7572

Docker Hub2019-02-07

SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c.

CVEs:CVE-2019-7572

Affected products

Product	Status	Vendor	Package	Ecosystem
sdl	affected	alpine	sdl	—
sdl2	affected	alpine	sdl2	—

Upstream advisory

CVE-2019-7573

Docker Hub2019-02-07

SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (inside the wNumCoef loop).

CVEs:CVE-2019-7573

Affected products

Product	Status	Vendor	Package	Ecosystem
sdl	affected	alpine	sdl	—
sdl2	affected	alpine	sdl2	—

Upstream advisory

CVE-2019-7574

Docker Hub2019-02-07

SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c.

CVEs:CVE-2019-7574

Affected products

Product	Status	Vendor	Package	Ecosystem
sdl	affected	alpine	sdl	—
sdl2	affected	alpine	sdl2	—

Upstream advisory

CVE-2019-7575

Docker Hub2019-02-07

SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in MS_ADPCM_decode in audio/SDL_wave.c.

CVEs:CVE-2019-7575

Affected products

Product	Status	Vendor	Package	Ecosystem
sdl	affected	alpine	sdl	—
sdl2	affected	alpine	sdl2	—

Upstream advisory

CVE-2019-7576

Docker Hub2019-02-07

SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (outside the wNumCoef loop).

CVEs:CVE-2019-7576

Affected products

Product	Status	Vendor	Package	Ecosystem
sdl	affected	alpine	sdl	—
sdl2	affected	alpine	sdl2	—

Upstream advisory

CVE-2019-7577

Docker Hub2019-02-07

SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in SDL_LoadWAV_RW in audio/SDL_wave.c.

CVEs:CVE-2019-7577

Affected products

Product	Status	Vendor	Package	Ecosystem
sdl	affected	alpine	sdl	—

Upstream advisory

CVE-2019-7578

Docker Hub2019-02-07

SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c.

CVEs:CVE-2019-7578

Affected products

Product	Status	Vendor	Package	Ecosystem
sdl	affected	alpine	sdl	—
sdl2	affected	alpine	sdl2	—

Upstream advisory

CVE-2019-3820

Docker HubMEDIUM2019-02-06

It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions.

CVEs:CVE-2019-3820

Affected products

Product	Status	Vendor	Package	Ecosystem
gnome-shell	affected	alpine	gnome-shell	—

Upstream advisory

CVE-2019-3463

Docker Hub2019-02-06

Insufficient sanitization of arguments passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync operations, resulting in the execution of arbitrary shell commands.

CVEs:CVE-2019-3463

Affected products

Product	Status	Vendor	Package	Ecosystem
rssh	affected	alpine	rssh	—

Upstream advisory

CVE-2019-3464

Docker Hub2019-02-06

Insufficient sanitization of environment variables passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync operations, resulting in the execution of arbitrary shell commands.

CVEs:CVE-2019-3464

Affected products

Product	Status	Vendor	Package	Ecosystem
rssh	affected	alpine	rssh	—

Upstream advisory

CVE-2018-16890

Docker HubMEDIUM2019-02-05

libcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read. The function handling incoming NTLM type-2 messages (`lib/vauth/ntlm.c:ntlm_decode_type2_target`) does not validate incoming data correctly and is subject to an integer overflow vulnerability. Using that overflow, a malicious or broken NTLM server could trick libcurl to accept a bad length + offset combination that would lead to a buffer read out-of-bounds.

CVEs:CVE-2018-16890

Affected products

Product	Status	Vendor	Package	Ecosystem
curl	affected	alpine	curl	—

Upstream advisory

CVE-2019-3822

Docker HubHIGH2019-02-05

libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow. The function creating an outgoing NTLM type-3 header (`lib/vauth/ntlm.c:Curl_auth_create_ntlm_type3_message()`), generates the request HTTP header contents based on previously received data. The check that exists to prevent the local buffer from getting overflowed is implemented wrongly (using unsigned math) and as such it does not prevent the overflow from happening. This output data can grow larger t

CVEs:CVE-2019-3822

Affected products

Product	Status	Vendor	Package	Ecosystem
curl	affected	alpine	curl	—

Upstream advisory

CVE-2019-3823

Docker HubMEDIUM2019-02-05

libcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the code handling the end-of-response for SMTP. If the buffer passed to `smtp_endofresp()` isn't NUL terminated and contains no character ending the parsed number, and `len` is set to 5, then the `strtol()` call reads beyond the allocated buffer. The read contents will not be returned to the caller.

CVEs:CVE-2019-3823

Affected products

Product	Status	Vendor	Package	Ecosystem
curl	affected	alpine	curl	—

Upstream advisory

CVE-2018-18500

Docker Hub2019-02-05

A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a potentially exploitable crash. This vulnerability affects Thunderbird < 60.5, Firefox ESR < 60.5, and Firefox < 65.

CVEs:CVE-2018-18500

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox-esr	affected	alpine	firefox-esr	—

Upstream advisory

CVE-2018-18501

Docker Hub2019-02-05

Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 60.5, Firefox ESR < 60.5, and Firefox < 65.

CVEs:CVE-2018-18501

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox-esr	affected	alpine	firefox-esr	—

Upstream advisory

CVE-2018-18505

Docker Hub2019-02-05

An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the authentication not being correctly applied to later channels. This could allow for a sandbox escape through IPC channels due to lack of message validation in the listener process. This vulnerability a

CVEs:CVE-2018-18505

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox-esr	affected	alpine	firefox-esr	—

Upstream advisory

CVE-2018-18506

Docker Hub2019-02-05

When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is loaded locally, this PAC file can specify that requests to the localhost are to be sent through the proxy to another server. This behavior is disallowed by default when a proxy is manually configured, but when enabled could allow for attacks on services and tools that bind to the localhost for networked behavior if they are accessed through browsing. This vulnerability affects F

CVEs:CVE-2018-18506

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox-esr	affected	alpine	firefox-esr	—

Upstream advisory

CVE-2018-8791

Docker Hub2019-02-05

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpdr_process() that results in an information leak.

CVEs:CVE-2018-8791

Affected products

Product	Status	Vendor	Package	Ecosystem
rdesktop	affected	alpine	rdesktop	—

Upstream advisory

CVE-2018-8792

Docker Hub2019-02-05

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function cssp_read_tsrequest() that results in a Denial of Service (segfault).

CVEs:CVE-2018-8792

Affected products

Product	Status	Vendor	Package	Ecosystem
rdesktop	affected	alpine	rdesktop	—

Upstream advisory

CVE-2018-8793

Docker Hub2019-02-05

rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function cssp_read_tsrequest() that results in a memory corruption and probably even a remote code execution.

CVEs:CVE-2018-8793

Affected products

Product	Status	Vendor	Package	Ecosystem
rdesktop	affected	alpine	rdesktop	—

Upstream advisory

CVE-2018-8794

Docker Hub2019-02-05

rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to an Out-Of-Bounds Write in function process_bitmap_updates() and results in a memory corruption and possibly even a remote code execution.

CVEs:CVE-2018-8794

Affected products

Product	Status	Vendor	Package	Ecosystem
rdesktop	affected	alpine	rdesktop	—

Upstream advisory

CVE-2018-8795

Docker Hub2019-02-05

rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in function process_bitmap_updates() and results in a memory corruption and probably even a remote code execution.

CVEs:CVE-2018-8795

Affected products

Product	Status	Vendor	Package	Ecosystem
rdesktop	affected	alpine	rdesktop	—

Upstream advisory

CVE-2018-8796

Docker Hub2019-02-05

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function process_bitmap_updates() that results in a Denial of Service (segfault).

CVEs:CVE-2018-8796

Affected products

Product	Status	Vendor	Package	Ecosystem
rdesktop	affected	alpine	rdesktop	—

Upstream advisory

CVE-2018-8797

Docker Hub2019-02-05

rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function process_plane() that results in a memory corruption and probably even a remote code execution.

CVEs:CVE-2018-8797

Affected products

Product	Status	Vendor	Package	Ecosystem
rdesktop	affected	alpine	rdesktop	—

Upstream advisory

CVE-2018-8798

Docker Hub2019-02-05

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpsnd_process_ping() that results in an information leak.

CVEs:CVE-2018-8798

Affected products

Product	Status	Vendor	Package	Ecosystem
rdesktop	affected	alpine	rdesktop	—

Upstream advisory

CVE-2018-8799

Docker Hub2019-02-05

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function process_secondary_order() that results in a Denial of Service (segfault).

CVEs:CVE-2018-8799

Affected products

Product	Status	Vendor	Package	Ecosystem
rdesktop	affected	alpine	rdesktop	—

Upstream advisory

CVE-2018-8800

Docker Hub2019-02-05

rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function ui_clip_handle_data() that results in a memory corruption and probably even a remote code execution.

CVEs:CVE-2018-8800

Affected products

Product	Status	Vendor	Package	Ecosystem
rdesktop	affected	alpine	rdesktop	—

Upstream advisory

CVE-2018-11803

Docker Hub2019-02-05

Subversion's mod_dav_svn Apache HTTPD module versions 1.11.0 and 1.10.0 to 1.10.3 will crash after dereferencing an uninitialized pointer if the client omits the root path in a recursive directory listing operation.

CVEs:CVE-2018-11803

Affected products

Product	Status	Vendor	Package	Ecosystem
subversion	affected	alpine	subversion	—

Upstream advisory

RHSA-2019:0275

RH-hardenedHIGH2019-02-05

Red Hat Security Advisory: rh-haproxy18-haproxy security update

CVEs:RHSA-2019:0275

Affected products

Upstream advisory

CVE-2019-7395

Docker Hub2019-02-05

In ImageMagick before 7.0.8-25, a memory leak exists in WritePSDChannel in coders/psd.c.

CVEs:CVE-2019-7395

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick6	affected	alpine	imagemagick6	—

Upstream advisory

CVE-2019-7396

Docker Hub2019-02-05

In ImageMagick before 7.0.8-25, a memory leak exists in ReadSIXELImage in coders/sixel.c.

CVEs:CVE-2019-7396

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick6	affected	alpine	imagemagick6	—

Upstream advisory

CVE-2019-7397

Docker Hub2019-02-05

In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in WritePDFImage in coders/pdf.c.

CVEs:CVE-2019-7397

Affected products

Product	Status	Vendor	Package	Ecosystem
graphicsmagick	affected	alpine	graphicsmagick	—
imagemagick6	affected	alpine	imagemagick6	—

Upstream advisory

CVE-2019-7398

Docker Hub2019-02-05

In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c.

CVEs:CVE-2019-7398

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick6	affected	alpine	imagemagick6	—

Upstream advisory

RHSA-2019:0265

RH-hardenedMEDIUM2019-02-04

Red Hat Security Advisory: Red Hat Gluster Storage Web Administration security update

CVEs:RHSA-2019:0265

Affected products

Upstream advisory

RHSA-2019:0271

RH-hardenedHIGH2019-02-04

Red Hat Security Advisory: systemd security update

CVEs:RHSA-2019:0271

Affected products

Upstream advisory

CVE-2019-1000016

Docker Hub2019-02-04

FFMPEG version 4.1 contains a CWE-129: Improper Validation of Array Index vulnerability in libavcodec/cbs_av1.c that can result in Denial of service. This attack appears to be exploitable via specially crafted AV1 file has to be provided as input. This vulnerability appears to have been fixed in after commit b97a4b658814b2de8b9f2a3bce491c002d34de31.

CVEs:CVE-2019-1000016

Affected products

Product	Status	Vendor	Package	Ecosystem
ffmpeg	affected	alpine	ffmpeg	—
ffmpeg4	affected	alpine	ffmpeg4	—

Upstream advisory

CVE-2019-1000018

Docker Hub2019-02-04

rssh version 2.3.4 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in allowscp permission that can result in Local command execution. This attack appear to be exploitable via An authorized SSH user with the allowscp permission.

CVEs:CVE-2019-1000018

Affected products

Product	Status	Vendor	Package	Ecosystem
rssh	affected	alpine	rssh	—

Upstream advisory

RHSA-2019:0269

RH-hardenedCRITICAL2019-02-04

Red Hat Security Advisory: thunderbird security update

CVEs:RHSA-2019:0269

Affected products

Upstream advisory

RHSA-2019:0270

RH-hardenedCRITICAL2019-02-04

Red Hat Security Advisory: thunderbird security update

CVEs:RHSA-2019:0270

Affected products

Upstream advisory

CVE-2018-20751

Docker Hub2019-02-04

An issue was discovered in crop_page in PoDoFo 0.9.6. For a crafted PDF document, pPage->GetObject()->GetDictionary().AddKey(PdfName("MediaBox"),var) can be problematic due to the function GetObject() being called for the pPage NULL pointer object. The value of pPage at this point is 0x0, which causes a NULL pointer dereference.

CVEs:CVE-2018-20751

Affected products

Product	Status	Vendor	Package	Ecosystem
podofo	affected	alpine	podofo	—

Upstream advisory

CVE-2019-7325

Docker Hub2019-02-04

Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as multiple views under web/skins/classic/views insecurely utilize $_REQUEST['PHP_SELF'], without applying any proper filtration.

CVEs:CVE-2019-7325

Affected products

Product	Status	Vendor	Package	Ecosystem
zoneminder	affected	alpine	zoneminder	—

Upstream advisory

CVE-2019-7326

Docker Hub2019-02-04

Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'Host' parameter value in the view console (console.php) because proper filtration is omitted. This relates to the index.php?view=monitor Host Name field.

CVEs:CVE-2019-7326

Affected products

Product	Status	Vendor	Package	Ecosystem
zoneminder	affected	alpine	zoneminder	—

Upstream advisory

CVE-2019-7327

Docker Hub2019-02-04

Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'scale' parameter value in the view frame (frame.php) because proper filtration is omitted.

CVEs:CVE-2019-7327

Affected products

Product	Status	Vendor	Package	Ecosystem
zoneminder	affected	alpine	zoneminder	—

Upstream advisory

CVE-2019-7328

Docker Hub2019-02-04

CVEs:CVE-2019-7328

Affected products

Product	Status	Vendor	Package	Ecosystem
zoneminder	affected	alpine	zoneminder	—

Upstream advisory

CVE-2019-7329

Docker Hub2019-02-04

Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the form action on multiple views utilizes $_SERVER['PHP_SELF'] insecurely, mishandling any arbitrary input appended to the webroot URL, without any proper filtration, leading to XSS.

CVEs:CVE-2019-7329

Affected products

Product	Status	Vendor	Package	Ecosystem
zoneminder	affected	alpine	zoneminder	—

Upstream advisory

CVE-2019-7330

Docker Hub2019-02-04

Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'show' parameter value in the view frame (frame.php) because proper filtration is omitted.

CVEs:CVE-2019-7330

Affected products

Product	Status	Vendor	Package	Ecosystem
zoneminder	affected	alpine	zoneminder	—

Upstream advisory

CVE-2019-7331

Docker Hub2019-02-04

Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3 while editing an existing monitor field named "signal check color" (monitor.php). There exists no input validation or output filtration, leaving it vulnerable to HTML Injection and an XSS attack.

CVEs:CVE-2019-7331

Affected products

Product	Status	Vendor	Package	Ecosystem
zoneminder	affected	alpine	zoneminder	—

Upstream advisory

CVE-2019-7332

Docker Hub2019-02-04

Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'eid' (aka Event ID) parameter value in the view download (download.php) because proper filtration is omitted.

CVEs:CVE-2019-7332

Affected products

Product	Status	Vendor	Package	Ecosystem
zoneminder	affected	alpine	zoneminder	—

Upstream advisory

CVE-2019-7333

Docker Hub2019-02-04

Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'Exportfile' parameter value in the view download (download.php) because proper filtration is omitted.

CVEs:CVE-2019-7333

Affected products

Product	Status	Vendor	Package	Ecosystem
zoneminder	affected	alpine	zoneminder	—

Upstream advisory

CVE-2019-7334

Docker Hub2019-02-04

Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'Exportfile' parameter value in the view export (export.php) because proper filtration is omitted.

CVEs:CVE-2019-7334

Affected products

Product	Status	Vendor	Package	Ecosystem
zoneminder	affected	alpine	zoneminder	—

Upstream advisory

CVE-2019-7335

Docker Hub2019-02-04

Self - Stored XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in the view 'log' as it insecurely prints the 'Log Message' value on the web page without applying any proper filtration. This relates to the view=logs value.

CVEs:CVE-2019-7335

Affected products

Product	Status	Vendor	Package	Ecosystem
zoneminder	affected	alpine	zoneminder	—

Upstream advisory

CVE-2019-7336

Docker Hub2019-02-04

Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the view _monitor_filters.php contains takes in input from the user and saves it into the session, and retrieves it later (insecurely). The values of the MonitorName and Source parameters are being displayed without any output filtration being applied. This relates to the view=cycle value.

CVEs:CVE-2019-7336

Affected products

Product	Status	Vendor	Package	Ecosystem
zoneminder	affected	alpine	zoneminder	—

Upstream advisory

CVE-2019-7337

Docker Hub2019-02-04

Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3 as the view 'events' (events.php) insecurely displays the limit parameter value, without applying any proper output filtration. This issue exists because of the function sortHeader() in functions.php, which insecurely returns the value of the limit query string parameter without applying any filtration.

CVEs:CVE-2019-7337

Affected products

Product	Status	Vendor	Package	Ecosystem
zoneminder	affected	alpine	zoneminder	—

Upstream advisory

CVE-2019-7338

Docker Hub2019-02-04

Self - Stored XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in the view 'group' as it insecurely prints the 'Group Name' value on the web page without applying any proper filtration.

CVEs:CVE-2019-7338

Affected products

Product	Status	Vendor	Package	Ecosystem
zoneminder	affected	alpine	zoneminder	—

Upstream advisory

CVE-2019-7339

Docker Hub2019-02-04

POST - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'level' parameter value in the view log (log.php) because proper filtration is omitted.

CVEs:CVE-2019-7339

Affected products

Product	Status	Vendor	Package	Ecosystem
zoneminder	affected	alpine	zoneminder	—

Upstream advisory

CVE-2019-7340

Docker Hub2019-02-04

POST - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'filter[Query][terms][0][val]' parameter value in the view filter (filter.php) because proper filtration is omitted.

CVEs:CVE-2019-7340

Affected products

Product	Status	Vendor	Package	Ecosystem
zoneminder	affected	alpine	zoneminder	—

Upstream advisory

CVE-2019-7341

Docker Hub2019-02-04

Reflected - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'newMonitor[LinkedMonitors]' parameter value in the view monitor (monitor.php) because proper filtration is omitted.

CVEs:CVE-2019-7341

Affected products

Product	Status	Vendor	Package	Ecosystem
zoneminder	affected	alpine	zoneminder	—

Upstream advisory

CVE-2019-7342

Docker Hub2019-02-04

POST - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'filter[AutoExecuteCmd]' parameter value in the view filter (filter.php) because proper filtration is omitted.

CVEs:CVE-2019-7342

Affected products

Product	Status	Vendor	Package	Ecosystem
zoneminder	affected	alpine	zoneminder	—

Upstream advisory

CVE-2019-7343

Docker Hub2019-02-04

Reflected - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'newMonitor[Method]' parameter value in the view monitor (monitor.php) because proper filtration is omitted.

CVEs:CVE-2019-7343

Affected products

Product	Status	Vendor	Package	Ecosystem
zoneminder	affected	alpine	zoneminder	—

Upstream advisory

CVE-2019-7344

Docker Hub2019-02-04

Reflected XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in the view 'filter' as it insecurely prints the 'filter[Name]' (aka Filter name) value on the web page without applying any proper filtration.

CVEs:CVE-2019-7344

Affected products

Product	Status	Vendor	Package	Ecosystem
zoneminder	affected	alpine	zoneminder	—

Upstream advisory

CVE-2019-7345

Docker Hub2019-02-04

Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the view 'options' (options.php) does no input validation for the WEB_TITLE, HOME_URL, HOME_CONTENT, or WEB_CONSOLE_BANNER value, allowing an attacker to execute HTML or JavaScript code. This relates to functions.php.

CVEs:CVE-2019-7345

Affected products

Product	Status	Vendor	Package	Ecosystem
zoneminder	affected	alpine	zoneminder	—

Upstream advisory

CVE-2019-7346

Docker Hub2019-02-04

A CSRF check issue exists in ZoneMinder through 1.32.3 as whenever a CSRF check fails, a callback function is called displaying a "Try again" button, which allows resending the failed request, making the CSRF attack successful.

CVEs:CVE-2019-7346

Affected products

Product	Status	Vendor	Package	Ecosystem
zoneminder	affected	alpine	zoneminder	—

Upstream advisory

CVE-2019-7347

Docker Hub2019-02-04

A Time-of-check Time-of-use (TOCTOU) Race Condition exists in ZoneMinder through 1.32.3 as a session remains active for an authenticated user even after deletion from the users table. This allows a nonexistent user to access and modify records (add/delete Monitors, Users, etc.).

CVEs:CVE-2019-7347

Affected products

Product	Status	Vendor	Package	Ecosystem
zoneminder	affected	alpine	zoneminder	—

Upstream advisory

CVE-2019-7348

Docker Hub2019-02-04

Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'username' parameter value in the view user (user.php) because proper filtration is omitted.

CVEs:CVE-2019-7348

Affected products

Product	Status	Vendor	Package	Ecosystem
zoneminder	affected	alpine	zoneminder	—

Upstream advisory

CVE-2019-7349

Docker Hub2019-02-04

Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'newMonitor[V4LCapturesPerFrame]' parameter value in the view monitor (monitor.php) because proper filtration is omitted.

CVEs:CVE-2019-7349

Affected products

Product	Status	Vendor	Package	Ecosystem
zoneminder	affected	alpine	zoneminder	—

Upstream advisory

CVE-2019-7350

Docker Hub2019-02-04

Session fixation exists in ZoneMinder through 1.32.3, as an attacker can fixate his own session cookies to the next logged-in user, thereby hijacking the victim's account. This occurs because a set of multiple cookies (between 3 and 5) is being generated when a user successfully logs in, and these sets overlap for successive logins.

CVEs:CVE-2019-7350

Affected products

Product	Status	Vendor	Package	Ecosystem
zoneminder	affected	alpine	zoneminder	—

Upstream advisory

CVE-2019-7351

Docker Hub2019-02-04

Log Injection exists in ZoneMinder through 1.32.3, as an attacker can entice the victim to visit a specially crafted link, which in turn will inject a custom Log message provided by the attacker in the 'log' view page, as demonstrated by the message=User%20'admin'%20Logged%20in value.

CVEs:CVE-2019-7351

Affected products

Product	Status	Vendor	Package	Ecosystem
zoneminder	affected	alpine	zoneminder	—

Upstream advisory

CVE-2019-7352

Docker Hub2019-02-04

Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the view 'state' (aka Run State) (state.php) does no input validation to the value supplied to the 'New State' (aka newState) field, allowing an attacker to execute HTML or JavaScript code.

CVEs:CVE-2019-7352

Affected products

Product	Status	Vendor	Package	Ecosystem
zoneminder	affected	alpine	zoneminder	—

Upstream advisory

CVE-2019-3813

Docker Hub2019-02-04

Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by-one error in memslot_get_virt. This may lead to a denial of service, or, in the worst case, code-execution by unauthenticated attackers.

CVEs:CVE-2019-3813

Affected products

Product	Status	Vendor	Package	Ecosystem
spice	affected	alpine	spice	—

Upstream advisory

CVE-2019-7317

ChainguardMEDIUM2019-02-04

png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.

CVEs:CVE-2019-7317

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	chainguard	firefox	—
firefox	affected	wolfi	firefox	—
firefox-esr	affected	chainguard	firefox-esr	—
firefox-esr	affected	alpine	firefox-esr	—
libpng	affected	alpine	libpng	—
mysql-8.0	affected	chainguard	mysql-8.0	—
openjdk11	affected	alpine	openjdk11	—
openjdk-11-openj9	affected	chainguard	openjdk-11-openj9	—
openjdk-17-openj9	affected	chainguard	openjdk-17-openj9	—
openjdk-21-openj9	affected	chainguard	openjdk-21-openj9	—
openjdk8	affected	alpine	openjdk8	—
openjdk-8-openj9	affected	chainguard	openjdk-8-openj9	—
openjdk-9	affected	wolfi	openjdk-9	—
openjdk-9	affected	chainguard	openjdk-9	—

Upstream advisory

Product	Status	Vendor	Package	Ecosystem
docker-2:1.12.6-79.git5680db5.el7.src as a component of Red Hat OpenShift Container Platform 3.4	fixed	Red Hat	docker-2:1.12.6-79.git5680db5.el7.src as a component of Red Hat OpenShift Container Platform 3.4	—
docker-2:1.12.6-79.git5680db5.el7.src as a component of Red Hat OpenShift Container Platform 3.5	fixed	Red Hat	docker-2:1.12.6-79.git5680db5.el7.src as a component of Red Hat OpenShift Container Platform 3.5	—
docker-2:1.12.6-79.git5680db5.el7.src as a component of Red Hat OpenShift Container Platform 3.6	fixed	Red Hat	docker-2:1.12.6-79.git5680db5.el7.src as a component of Red Hat OpenShift Container Platform 3.6	—
docker-2:1.12.6-79.git5680db5.el7.src as a component of Red Hat OpenShift Container Platform 3.7	fixed	Red Hat	docker-2:1.12.6-79.git5680db5.el7.src as a component of Red Hat OpenShift Container Platform 3.7	—
docker-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.4	fixed	Red Hat	docker-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.4	—
docker-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.5	fixed	Red Hat	docker-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.5	—
docker-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6	fixed	Red Hat	docker-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6	—
docker-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7	fixed	Red Hat	docker-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7	—
docker-client-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.4	fixed	Red Hat	docker-client-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.4	—
docker-client-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.5	fixed	Red Hat	docker-client-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.5	—
docker-client-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6	fixed	Red Hat	docker-client-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6	—
docker-client-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7	fixed	Red Hat	docker-client-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7	—
docker-common-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.4	fixed	Red Hat	docker-common-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.4	—
docker-common-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.5	fixed	Red Hat	docker-common-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.5	—
docker-common-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6	fixed	Red Hat	docker-common-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6	—
docker-common-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7	fixed	Red Hat	docker-common-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7	—
docker-debuginfo-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.4	fixed	Red Hat	docker-debuginfo-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.4	—
docker-debuginfo-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.5	fixed	Red Hat	docker-debuginfo-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.5	—
docker-debuginfo-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6	fixed	Red Hat	docker-debuginfo-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6	—
docker-debuginfo-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7	fixed	Red Hat	docker-debuginfo-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7	—
docker-logrotate-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.4	fixed	Red Hat	docker-logrotate-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.4	—
docker-logrotate-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.5	fixed	Red Hat	docker-logrotate-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.5	—
docker-logrotate-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6	fixed	Red Hat	docker-logrotate-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6	—
docker-logrotate-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7	fixed	Red Hat	docker-logrotate-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7	—
docker-lvm-plugin-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.4	fixed	Red Hat	docker-lvm-plugin-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.4	—
docker-lvm-plugin-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.5	fixed	Red Hat	docker-lvm-plugin-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.5	—
docker-lvm-plugin-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6	fixed	Red Hat	docker-lvm-plugin-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6	—
docker-lvm-plugin-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7	fixed	Red Hat	docker-lvm-plugin-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7	—
docker-novolume-plugin-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.4	fixed	Red Hat	docker-novolume-plugin-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.4	—
docker-novolume-plugin-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.5	fixed	Red Hat	docker-novolume-plugin-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.5	—
docker-novolume-plugin-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6	fixed	Red Hat	docker-novolume-plugin-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6	—
docker-novolume-plugin-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7	fixed	Red Hat	docker-novolume-plugin-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7	—
docker-rhel-push-plugin-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.4	fixed	Red Hat	docker-rhel-push-plugin-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.4	—
docker-rhel-push-plugin-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.5	fixed	Red Hat	docker-rhel-push-plugin-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.5	—
docker-rhel-push-plugin-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6	fixed	Red Hat	docker-rhel-push-plugin-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6	—
docker-rhel-push-plugin-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7	fixed	Red Hat	docker-rhel-push-plugin-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7	—
docker-unit-test-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.4	fixed	Red Hat	docker-unit-test-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.4	—
docker-unit-test-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.5	fixed	Red Hat	docker-unit-test-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.5	—
docker-unit-test-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6	fixed	Red Hat	docker-unit-test-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6	—
docker-unit-test-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7	fixed	Red Hat	docker-unit-test-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7	—
docker-v1.10-migrator-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.4	fixed	Red Hat	docker-v1.10-migrator-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.4	—
docker-v1.10-migrator-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.5	fixed	Red Hat	docker-v1.10-migrator-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.5	—
docker-v1.10-migrator-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6	fixed	Red Hat	docker-v1.10-migrator-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6	—
docker-v1.10-migrator-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7	fixed	Red Hat	docker-v1.10-migrator-2:1.12.6-79.git5680db5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7	—

Product	Status	Vendor	Package	Ecosystem
firefox-0:60.5.1-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)	—
firefox-0:60.5.1-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)	—
firefox-0:60.5.1-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)	—
firefox-0:60.5.1-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)	—
firefox-0:60.5.1-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)	—
firefox-0:60.5.1-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)	—
firefox-0:60.5.1-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)	—
firefox-0:60.5.1-1.el7_6.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)	—
firefox-0:60.5.1-1.el7_6.i686 as a component of Red Hat Enterprise Linux Client (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.i686 as a component of Red Hat Enterprise Linux Client (v. 7)	—
firefox-0:60.5.1-1.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)	—
firefox-0:60.5.1-1.el7_6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)	—
firefox-0:60.5.1-1.el7_6.i686 as a component of Red Hat Enterprise Linux Server (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.i686 as a component of Red Hat Enterprise Linux Server (v. 7)	—
firefox-0:60.5.1-1.el7_6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)	—
firefox-0:60.5.1-1.el7_6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)	—
firefox-0:60.5.1-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)	—
firefox-0:60.5.1-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)	—
firefox-0:60.5.1-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)	—
firefox-0:60.5.1-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)	—
firefox-0:60.5.1-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)	—
firefox-0:60.5.1-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)	—
firefox-0:60.5.1-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)	—
firefox-0:60.5.1-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)	—
firefox-0:60.5.1-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)	—
firefox-0:60.5.1-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)	—
firefox-0:60.5.1-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)	—
firefox-0:60.5.1-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)	—
firefox-0:60.5.1-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)	—
firefox-0:60.5.1-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)	—
firefox-0:60.5.1-1.el7_6.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)	—
firefox-0:60.5.1-1.el7_6.s390x as a component of Red Hat Enterprise Linux Client (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.s390x as a component of Red Hat Enterprise Linux Client (v. 7)	—
firefox-0:60.5.1-1.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)	—
firefox-0:60.5.1-1.el7_6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)	—
firefox-0:60.5.1-1.el7_6.s390x as a component of Red Hat Enterprise Linux Server (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.s390x as a component of Red Hat Enterprise Linux Server (v. 7)	—
firefox-0:60.5.1-1.el7_6.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)	—
firefox-0:60.5.1-1.el7_6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)	—
firefox-0:60.5.1-1.el7_6.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)	—
firefox-0:60.5.1-1.el7_6.src as a component of Red Hat Enterprise Linux Client (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.src as a component of Red Hat Enterprise Linux Client (v. 7)	—
firefox-0:60.5.1-1.el7_6.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)	—
firefox-0:60.5.1-1.el7_6.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)	—
firefox-0:60.5.1-1.el7_6.src as a component of Red Hat Enterprise Linux Server (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.src as a component of Red Hat Enterprise Linux Server (v. 7)	—
firefox-0:60.5.1-1.el7_6.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)	—
firefox-0:60.5.1-1.el7_6.src as a component of Red Hat Enterprise Linux Workstation (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.src as a component of Red Hat Enterprise Linux Workstation (v. 7)	—
firefox-0:60.5.1-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)	—
firefox-0:60.5.1-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)	—
firefox-0:60.5.1-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)	—
firefox-0:60.5.1-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)	—
firefox-0:60.5.1-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)	—
firefox-0:60.5.1-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)	—
firefox-0:60.5.1-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)	fixed	Red Hat	firefox-0:60.5.1-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.i686 as a component of Red Hat Enterprise Linux Client (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.i686 as a component of Red Hat Enterprise Linux Client (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.i686 as a component of Red Hat Enterprise Linux Server (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.i686 as a component of Red Hat Enterprise Linux Server (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.s390x as a component of Red Hat Enterprise Linux Client (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.s390x as a component of Red Hat Enterprise Linux Client (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.s390x as a component of Red Hat Enterprise Linux Server (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.s390x as a component of Red Hat Enterprise Linux Server (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)	—
firefox-debuginfo-0:60.5.1-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)	—

Product	Status	Vendor	Package	Ecosystem
firefox-0:60.5.1-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)	—
firefox-0:60.5.1-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)	—
firefox-0:60.5.1-1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)	—
firefox-0:60.5.1-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)	—
firefox-0:60.5.1-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)	—
firefox-0:60.5.1-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)	—
firefox-0:60.5.1-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)	—
firefox-0:60.5.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)	—
firefox-0:60.5.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)	—
firefox-0:60.5.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)	—
firefox-0:60.5.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)	—
firefox-0:60.5.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)	—
firefox-0:60.5.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)	—
firefox-0:60.5.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)	—
firefox-0:60.5.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)	—
firefox-0:60.5.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)	—
firefox-0:60.5.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)	—
firefox-0:60.5.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)	—
firefox-0:60.5.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6)	—
firefox-0:60.5.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)	—
firefox-0:60.5.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)	—
firefox-0:60.5.1-1.el6_10.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)	—
firefox-0:60.5.1-1.el6_10.src as a component of Red Hat Enterprise Linux Desktop (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.src as a component of Red Hat Enterprise Linux Desktop (v. 6)	—
firefox-0:60.5.1-1.el6_10.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)	—
firefox-0:60.5.1-1.el6_10.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)	—
firefox-0:60.5.1-1.el6_10.src as a component of Red Hat Enterprise Linux Server (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.src as a component of Red Hat Enterprise Linux Server (v. 6)	—
firefox-0:60.5.1-1.el6_10.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)	—
firefox-0:60.5.1-1.el6_10.src as a component of Red Hat Enterprise Linux Workstation (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.src as a component of Red Hat Enterprise Linux Workstation (v. 6)	—
firefox-0:60.5.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)	—
firefox-0:60.5.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)	—
firefox-0:60.5.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)	—
firefox-0:60.5.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)	—
firefox-0:60.5.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)	—
firefox-0:60.5.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)	—
firefox-0:60.5.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)	fixed	Red Hat	firefox-0:60.5.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)	—
firefox-debuginfo-0:60.5.1-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)	—
firefox-debuginfo-0:60.5.1-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)	—
firefox-debuginfo-0:60.5.1-1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)	—
firefox-debuginfo-0:60.5.1-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)	—
firefox-debuginfo-0:60.5.1-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)	—
firefox-debuginfo-0:60.5.1-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)	—
firefox-debuginfo-0:60.5.1-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)	—
firefox-debuginfo-0:60.5.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)	—
firefox-debuginfo-0:60.5.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)	—
firefox-debuginfo-0:60.5.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)	—
firefox-debuginfo-0:60.5.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)	—
firefox-debuginfo-0:60.5.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)	—
firefox-debuginfo-0:60.5.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)	—
firefox-debuginfo-0:60.5.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)	—
firefox-debuginfo-0:60.5.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)	—
firefox-debuginfo-0:60.5.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)	—
firefox-debuginfo-0:60.5.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)	—
firefox-debuginfo-0:60.5.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)	—
firefox-debuginfo-0:60.5.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6)	—
firefox-debuginfo-0:60.5.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)	—
firefox-debuginfo-0:60.5.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)	—
firefox-debuginfo-0:60.5.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)	—
firefox-debuginfo-0:60.5.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)	—
firefox-debuginfo-0:60.5.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)	—
firefox-debuginfo-0:60.5.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)	—
firefox-debuginfo-0:60.5.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)	—
firefox-debuginfo-0:60.5.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)	—
firefox-debuginfo-0:60.5.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)	fixed	Red Hat	firefox-debuginfo-0:60.5.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)	—

Product	Status	Vendor	Package	Ecosystem
cfme-0:5.9.8.1-1.el7cf.src as a component of CloudForms Management Engine 5.9	fixed	Red Hat	cfme-0:5.9.8.1-1.el7cf.src as a component of CloudForms Management Engine 5.9	—
cfme-0:5.9.8.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9	fixed	Red Hat	cfme-0:5.9.8.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9	—
cfme-amazon-smartstate-0:5.9.8.1-1.el7cf.src as a component of CloudForms Management Engine 5.9	fixed	Red Hat	cfme-amazon-smartstate-0:5.9.8.1-1.el7cf.src as a component of CloudForms Management Engine 5.9	—
cfme-amazon-smartstate-0:5.9.8.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9	fixed	Red Hat	cfme-amazon-smartstate-0:5.9.8.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9	—
cfme-appliance-0:5.9.8.1-1.el7cf.src as a component of CloudForms Management Engine 5.9	fixed	Red Hat	cfme-appliance-0:5.9.8.1-1.el7cf.src as a component of CloudForms Management Engine 5.9	—
cfme-appliance-0:5.9.8.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9	fixed	Red Hat	cfme-appliance-0:5.9.8.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9	—
cfme-appliance-common-0:5.9.8.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9	fixed	Red Hat	cfme-appliance-common-0:5.9.8.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9	—
cfme-appliance-debuginfo-0:5.9.8.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9	fixed	Red Hat	cfme-appliance-debuginfo-0:5.9.8.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9	—
cfme-appliance-tools-0:5.9.8.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9	fixed	Red Hat	cfme-appliance-tools-0:5.9.8.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9	—
cfme-debuginfo-0:5.9.8.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9	fixed	Red Hat	cfme-debuginfo-0:5.9.8.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9	—
cfme-gemset-0:5.9.8.1-1.el7cf.src as a component of CloudForms Management Engine 5.9	fixed	Red Hat	cfme-gemset-0:5.9.8.1-1.el7cf.src as a component of CloudForms Management Engine 5.9	—
cfme-gemset-0:5.9.8.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9	fixed	Red Hat	cfme-gemset-0:5.9.8.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9	—
cfme-gemset-debuginfo-0:5.9.8.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9	fixed	Red Hat	cfme-gemset-debuginfo-0:5.9.8.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.9	—
dbus-api-service-0:1.0.1-3.2.el7cf.src as a component of CloudForms Management Engine 5.9	fixed	Red Hat	dbus-api-service-0:1.0.1-3.2.el7cf.src as a component of CloudForms Management Engine 5.9	—
dbus-api-service-0:1.0.1-3.2.el7cf.x86_64 as a component of CloudForms Management Engine 5.9	fixed	Red Hat	dbus-api-service-0:1.0.1-3.2.el7cf.x86_64 as a component of CloudForms Management Engine 5.9	—

Product	Status	Vendor	Package	Ecosystem
docker-2:1.13.1-91.git07f3374.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-2:1.13.1-91.git07f3374.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras	—
docker-2:1.13.1-91.git07f3374.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-2:1.13.1-91.git07f3374.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras	—
docker-2:1.13.1-91.git07f3374.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-2:1.13.1-91.git07f3374.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras	—
docker-2:1.13.1-91.git07f3374.el7.src as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-2:1.13.1-91.git07f3374.el7.src as a component of Red Hat Enterprise Linux 7 Extras	—
docker-2:1.13.1-91.git07f3374.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-2:1.13.1-91.git07f3374.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras	—
docker-client-2:1.13.1-91.git07f3374.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-client-2:1.13.1-91.git07f3374.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras	—
docker-client-2:1.13.1-91.git07f3374.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-client-2:1.13.1-91.git07f3374.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras	—
docker-client-2:1.13.1-91.git07f3374.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-client-2:1.13.1-91.git07f3374.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras	—
docker-client-2:1.13.1-91.git07f3374.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-client-2:1.13.1-91.git07f3374.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras	—
docker-common-2:1.13.1-91.git07f3374.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-common-2:1.13.1-91.git07f3374.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras	—
docker-common-2:1.13.1-91.git07f3374.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-common-2:1.13.1-91.git07f3374.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras	—
docker-common-2:1.13.1-91.git07f3374.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-common-2:1.13.1-91.git07f3374.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras	—
docker-common-2:1.13.1-91.git07f3374.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-common-2:1.13.1-91.git07f3374.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras	—
docker-debuginfo-2:1.13.1-91.git07f3374.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-debuginfo-2:1.13.1-91.git07f3374.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras	—
docker-debuginfo-2:1.13.1-91.git07f3374.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-debuginfo-2:1.13.1-91.git07f3374.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras	—
docker-debuginfo-2:1.13.1-91.git07f3374.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-debuginfo-2:1.13.1-91.git07f3374.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras	—
docker-debuginfo-2:1.13.1-91.git07f3374.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-debuginfo-2:1.13.1-91.git07f3374.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras	—
docker-logrotate-2:1.13.1-91.git07f3374.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-logrotate-2:1.13.1-91.git07f3374.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras	—
docker-logrotate-2:1.13.1-91.git07f3374.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-logrotate-2:1.13.1-91.git07f3374.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras	—
docker-logrotate-2:1.13.1-91.git07f3374.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-logrotate-2:1.13.1-91.git07f3374.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras	—
docker-logrotate-2:1.13.1-91.git07f3374.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-logrotate-2:1.13.1-91.git07f3374.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras	—
docker-lvm-plugin-2:1.13.1-91.git07f3374.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-lvm-plugin-2:1.13.1-91.git07f3374.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras	—
docker-lvm-plugin-2:1.13.1-91.git07f3374.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-lvm-plugin-2:1.13.1-91.git07f3374.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras	—
docker-lvm-plugin-2:1.13.1-91.git07f3374.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-lvm-plugin-2:1.13.1-91.git07f3374.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras	—
docker-lvm-plugin-2:1.13.1-91.git07f3374.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-lvm-plugin-2:1.13.1-91.git07f3374.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras	—
docker-novolume-plugin-2:1.13.1-91.git07f3374.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-novolume-plugin-2:1.13.1-91.git07f3374.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras	—
docker-novolume-plugin-2:1.13.1-91.git07f3374.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-novolume-plugin-2:1.13.1-91.git07f3374.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras	—
docker-novolume-plugin-2:1.13.1-91.git07f3374.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-novolume-plugin-2:1.13.1-91.git07f3374.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras	—
docker-novolume-plugin-2:1.13.1-91.git07f3374.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-novolume-plugin-2:1.13.1-91.git07f3374.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras	—
docker-rhel-push-plugin-2:1.13.1-91.git07f3374.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-rhel-push-plugin-2:1.13.1-91.git07f3374.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras	—
docker-rhel-push-plugin-2:1.13.1-91.git07f3374.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-rhel-push-plugin-2:1.13.1-91.git07f3374.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras	—
docker-rhel-push-plugin-2:1.13.1-91.git07f3374.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-rhel-push-plugin-2:1.13.1-91.git07f3374.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras	—
docker-rhel-push-plugin-2:1.13.1-91.git07f3374.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-rhel-push-plugin-2:1.13.1-91.git07f3374.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras	—
docker-v1.10-migrator-2:1.13.1-91.git07f3374.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-v1.10-migrator-2:1.13.1-91.git07f3374.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras	—
docker-v1.10-migrator-2:1.13.1-91.git07f3374.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-v1.10-migrator-2:1.13.1-91.git07f3374.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras	—
docker-v1.10-migrator-2:1.13.1-91.git07f3374.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-v1.10-migrator-2:1.13.1-91.git07f3374.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras	—
docker-v1.10-migrator-2:1.13.1-91.git07f3374.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras	fixed	Red Hat	docker-v1.10-migrator-2:1.13.1-91.git07f3374.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras	—

Product	Status	Vendor	Package	Ecosystem
rh-haproxy18-haproxy-0:1.8.4-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)	fixed	Red Hat	rh-haproxy18-haproxy-0:1.8.4-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)	—
rh-haproxy18-haproxy-0:1.8.4-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)	fixed	Red Hat	rh-haproxy18-haproxy-0:1.8.4-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)	—
rh-haproxy18-haproxy-0:1.8.4-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)	fixed	Red Hat	rh-haproxy18-haproxy-0:1.8.4-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)	—
rh-haproxy18-haproxy-0:1.8.4-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)	fixed	Red Hat	rh-haproxy18-haproxy-0:1.8.4-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)	—
rh-haproxy18-haproxy-0:1.8.4-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)	fixed	Red Hat	rh-haproxy18-haproxy-0:1.8.4-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)	—
rh-haproxy18-haproxy-0:1.8.4-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)	fixed	Red Hat	rh-haproxy18-haproxy-0:1.8.4-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)	—
rh-haproxy18-haproxy-0:1.8.4-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)	fixed	Red Hat	rh-haproxy18-haproxy-0:1.8.4-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)	—
rh-haproxy18-haproxy-0:1.8.4-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)	fixed	Red Hat	rh-haproxy18-haproxy-0:1.8.4-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)	—
rh-haproxy18-haproxy-0:1.8.4-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)	fixed	Red Hat	rh-haproxy18-haproxy-0:1.8.4-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)	—
rh-haproxy18-haproxy-0:1.8.4-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)	fixed	Red Hat	rh-haproxy18-haproxy-0:1.8.4-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)	—
rh-haproxy18-haproxy-debuginfo-0:1.8.4-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)	fixed	Red Hat	rh-haproxy18-haproxy-debuginfo-0:1.8.4-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)	—
rh-haproxy18-haproxy-debuginfo-0:1.8.4-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)	fixed	Red Hat	rh-haproxy18-haproxy-debuginfo-0:1.8.4-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)	—
rh-haproxy18-haproxy-debuginfo-0:1.8.4-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)	fixed	Red Hat	rh-haproxy18-haproxy-debuginfo-0:1.8.4-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)	—
rh-haproxy18-haproxy-debuginfo-0:1.8.4-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)	fixed	Red Hat	rh-haproxy18-haproxy-debuginfo-0:1.8.4-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)	—
rh-haproxy18-haproxy-debuginfo-0:1.8.4-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)	fixed	Red Hat	rh-haproxy18-haproxy-debuginfo-0:1.8.4-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)	—
rh-haproxy18-haproxy-syspaths-0:1.8.4-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)	fixed	Red Hat	rh-haproxy18-haproxy-syspaths-0:1.8.4-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)	—
rh-haproxy18-haproxy-syspaths-0:1.8.4-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)	fixed	Red Hat	rh-haproxy18-haproxy-syspaths-0:1.8.4-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)	—
rh-haproxy18-haproxy-syspaths-0:1.8.4-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)	fixed	Red Hat	rh-haproxy18-haproxy-syspaths-0:1.8.4-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)	—
rh-haproxy18-haproxy-syspaths-0:1.8.4-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)	fixed	Red Hat	rh-haproxy18-haproxy-syspaths-0:1.8.4-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)	—
rh-haproxy18-haproxy-syspaths-0:1.8.4-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)	fixed	Red Hat	rh-haproxy18-haproxy-syspaths-0:1.8.4-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)	—

Product	Status	Vendor	Package	Ecosystem
carbon-selinux-0:1.5.4-3.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration Node Agent on RHEL-7	fixed	Red Hat	carbon-selinux-0:1.5.4-3.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration Node Agent on RHEL-7	—
carbon-selinux-0:1.5.4-3.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	carbon-selinux-0:1.5.4-3.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—
graphite-web-0:1.1.4-1.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	graphite-web-0:1.1.4-1.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—
graphite-web-0:1.1.4-1.el7rhgs.src as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	graphite-web-0:1.1.4-1.el7rhgs.src as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—
python2-django-0:1.11.15-4.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	python2-django-0:1.11.15-4.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—
python2-django-doc-0:1.11.15-4.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	python2-django-doc-0:1.11.15-4.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—
python-cachetools-0:1.0.3-1.1.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	python-cachetools-0:1.0.3-1.1.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—
python-cachetools-0:1.0.3-1.1.el7rhgs.src as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	python-cachetools-0:1.0.3-1.1.el7rhgs.src as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—
python-carbon-0:1.1.4-1.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	python-carbon-0:1.1.4-1.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—
python-carbon-0:1.1.4-1.el7rhgs.src as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	python-carbon-0:1.1.4-1.el7rhgs.src as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—
python-django-0:1.11.15-4.el7rhgs.src as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	python-django-0:1.11.15-4.el7rhgs.src as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—
python-django-bash-completion-0:1.11.15-4.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	python-django-bash-completion-0:1.11.15-4.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—
python-django-tagging-0:0.4.6-1.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	python-django-tagging-0:0.4.6-1.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—
python-django-tagging-0:0.4.6-1.el7rhgs.src as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	python-django-tagging-0:0.4.6-1.el7rhgs.src as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—
python-scandir-0:1.3-1.el7rhgs.src as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	python-scandir-0:1.3-1.el7rhgs.src as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—
python-scandir-0:1.3-1.el7rhgs.x86_64 as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	python-scandir-0:1.3-1.el7rhgs.x86_64 as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—
python-scandir-debuginfo-0:1.3-1.el7rhgs.x86_64 as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	python-scandir-debuginfo-0:1.3-1.el7rhgs.x86_64 as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—
python-whisper-0:1.1.4-1.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	python-whisper-0:1.1.4-1.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—
python-whisper-0:1.1.4-1.el7rhgs.src as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	python-whisper-0:1.1.4-1.el7rhgs.src as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—
tendrl-ansible-0:1.6.3-11.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	tendrl-ansible-0:1.6.3-11.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—
tendrl-ansible-0:1.6.3-11.el7rhgs.src as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	tendrl-ansible-0:1.6.3-11.el7rhgs.src as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—
tendrl-api-0:1.6.3-10.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	tendrl-api-0:1.6.3-10.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—
tendrl-api-0:1.6.3-10.el7rhgs.src as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	tendrl-api-0:1.6.3-10.el7rhgs.src as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—
tendrl-api-httpd-0:1.6.3-10.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	tendrl-api-httpd-0:1.6.3-10.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—
tendrl-collectd-selinux-0:1.5.4-3.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration Node Agent on RHEL-7	fixed	Red Hat	tendrl-collectd-selinux-0:1.5.4-3.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration Node Agent on RHEL-7	—
tendrl-collectd-selinux-0:1.5.4-3.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	tendrl-collectd-selinux-0:1.5.4-3.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—
tendrl-commons-0:1.6.3-15.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration Node Agent on RHEL-7	fixed	Red Hat	tendrl-commons-0:1.6.3-15.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration Node Agent on RHEL-7	—
tendrl-commons-0:1.6.3-15.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	tendrl-commons-0:1.6.3-15.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—
tendrl-commons-0:1.6.3-15.el7rhgs.src as a component of Red Hat Gluster 3.4 Web Administration Node Agent on RHEL-7	fixed	Red Hat	tendrl-commons-0:1.6.3-15.el7rhgs.src as a component of Red Hat Gluster 3.4 Web Administration Node Agent on RHEL-7	—
tendrl-commons-0:1.6.3-15.el7rhgs.src as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	tendrl-commons-0:1.6.3-15.el7rhgs.src as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—
tendrl-grafana-plugins-0:1.6.3-20.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	tendrl-grafana-plugins-0:1.6.3-20.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—
tendrl-grafana-selinux-0:1.5.4-3.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration Node Agent on RHEL-7	fixed	Red Hat	tendrl-grafana-selinux-0:1.5.4-3.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration Node Agent on RHEL-7	—
tendrl-grafana-selinux-0:1.5.4-3.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	tendrl-grafana-selinux-0:1.5.4-3.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—
tendrl-monitoring-integration-0:1.6.3-20.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	tendrl-monitoring-integration-0:1.6.3-20.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—
tendrl-monitoring-integration-0:1.6.3-20.el7rhgs.src as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	tendrl-monitoring-integration-0:1.6.3-20.el7rhgs.src as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—
tendrl-node-agent-0:1.6.3-15.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration Node Agent on RHEL-7	fixed	Red Hat	tendrl-node-agent-0:1.6.3-15.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration Node Agent on RHEL-7	—
tendrl-node-agent-0:1.6.3-15.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	tendrl-node-agent-0:1.6.3-15.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—
tendrl-node-agent-0:1.6.3-15.el7rhgs.src as a component of Red Hat Gluster 3.4 Web Administration Node Agent on RHEL-7	fixed	Red Hat	tendrl-node-agent-0:1.6.3-15.el7rhgs.src as a component of Red Hat Gluster 3.4 Web Administration Node Agent on RHEL-7	—
tendrl-node-agent-0:1.6.3-15.el7rhgs.src as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	tendrl-node-agent-0:1.6.3-15.el7rhgs.src as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—
tendrl-selinux-0:1.5.4-3.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration Node Agent on RHEL-7	fixed	Red Hat	tendrl-selinux-0:1.5.4-3.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration Node Agent on RHEL-7	—
tendrl-selinux-0:1.5.4-3.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	tendrl-selinux-0:1.5.4-3.el7rhgs.noarch as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—
tendrl-selinux-0:1.5.4-3.el7rhgs.src as a component of Red Hat Gluster 3.4 Web Administration Node Agent on RHEL-7	fixed	Red Hat	tendrl-selinux-0:1.5.4-3.el7rhgs.src as a component of Red Hat Gluster 3.4 Web Administration Node Agent on RHEL-7	—
tendrl-selinux-0:1.5.4-3.el7rhgs.src as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	fixed	Red Hat	tendrl-selinux-0:1.5.4-3.el7rhgs.src as a component of Red Hat Gluster 3.4 Web Administration on RHEL-7	—

Product	Status	Vendor	Package	Ecosystem
thunderbird-0:60.5.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)	fixed	Red Hat	thunderbird-0:60.5.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)	—
thunderbird-0:60.5.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)	fixed	Red Hat	thunderbird-0:60.5.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)	—
thunderbird-0:60.5.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)	fixed	Red Hat	thunderbird-0:60.5.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)	—
thunderbird-0:60.5.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)	fixed	Red Hat	thunderbird-0:60.5.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)	—
thunderbird-0:60.5.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)	fixed	Red Hat	thunderbird-0:60.5.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)	—
thunderbird-0:60.5.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)	fixed	Red Hat	thunderbird-0:60.5.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)	—
thunderbird-0:60.5.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)	fixed	Red Hat	thunderbird-0:60.5.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)	—
thunderbird-0:60.5.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)	fixed	Red Hat	thunderbird-0:60.5.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)	—
thunderbird-0:60.5.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)	fixed	Red Hat	thunderbird-0:60.5.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)	—
thunderbird-0:60.5.0-1.el6_10.src as a component of Red Hat Enterprise Linux Desktop (v. 6)	fixed	Red Hat	thunderbird-0:60.5.0-1.el6_10.src as a component of Red Hat Enterprise Linux Desktop (v. 6)	—
thunderbird-0:60.5.0-1.el6_10.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)	fixed	Red Hat	thunderbird-0:60.5.0-1.el6_10.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)	—
thunderbird-0:60.5.0-1.el6_10.src as a component of Red Hat Enterprise Linux Workstation (v. 6)	fixed	Red Hat	thunderbird-0:60.5.0-1.el6_10.src as a component of Red Hat Enterprise Linux Workstation (v. 6)	—
thunderbird-0:60.5.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)	fixed	Red Hat	thunderbird-0:60.5.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)	—
thunderbird-0:60.5.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)	fixed	Red Hat	thunderbird-0:60.5.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)	—
thunderbird-0:60.5.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)	fixed	Red Hat	thunderbird-0:60.5.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)	—
thunderbird-debuginfo-0:60.5.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)	fixed	Red Hat	thunderbird-debuginfo-0:60.5.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)	—
thunderbird-debuginfo-0:60.5.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)	fixed	Red Hat	thunderbird-debuginfo-0:60.5.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)	—
thunderbird-debuginfo-0:60.5.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)	fixed	Red Hat	thunderbird-debuginfo-0:60.5.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)	—
thunderbird-debuginfo-0:60.5.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)	fixed	Red Hat	thunderbird-debuginfo-0:60.5.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)	—
thunderbird-debuginfo-0:60.5.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)	fixed	Red Hat	thunderbird-debuginfo-0:60.5.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)	—
thunderbird-debuginfo-0:60.5.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)	fixed	Red Hat	thunderbird-debuginfo-0:60.5.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)	—
thunderbird-debuginfo-0:60.5.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)	fixed	Red Hat	thunderbird-debuginfo-0:60.5.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)	—
thunderbird-debuginfo-0:60.5.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)	fixed	Red Hat	thunderbird-debuginfo-0:60.5.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)	—
thunderbird-debuginfo-0:60.5.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)	fixed	Red Hat	thunderbird-debuginfo-0:60.5.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)	—
thunderbird-debuginfo-0:60.5.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)	fixed	Red Hat	thunderbird-debuginfo-0:60.5.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)	—
thunderbird-debuginfo-0:60.5.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)	fixed	Red Hat	thunderbird-debuginfo-0:60.5.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)	—
thunderbird-debuginfo-0:60.5.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)	fixed	Red Hat	thunderbird-debuginfo-0:60.5.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)	—
thunderbird	affected	Red Hat	—	—

Product	Status	Vendor	Package	Ecosystem
thunderbird-0:60.5.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)	fixed	Red Hat	thunderbird-0:60.5.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)	—
thunderbird-0:60.5.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)	fixed	Red Hat	thunderbird-0:60.5.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)	—
thunderbird-0:60.5.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)	fixed	Red Hat	thunderbird-0:60.5.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)	—
thunderbird-0:60.5.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)	fixed	Red Hat	thunderbird-0:60.5.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)	—
thunderbird-0:60.5.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)	fixed	Red Hat	thunderbird-0:60.5.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)	—
thunderbird-0:60.5.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)	fixed	Red Hat	thunderbird-0:60.5.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)	—
thunderbird-0:60.5.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)	fixed	Red Hat	thunderbird-0:60.5.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)	—
thunderbird-0:60.5.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)	fixed	Red Hat	thunderbird-0:60.5.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)	—
thunderbird-0:60.5.0-1.el7_6.src as a component of Red Hat Enterprise Linux Client (v. 7)	fixed	Red Hat	thunderbird-0:60.5.0-1.el7_6.src as a component of Red Hat Enterprise Linux Client (v. 7)	—
thunderbird-0:60.5.0-1.el7_6.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)	fixed	Red Hat	thunderbird-0:60.5.0-1.el7_6.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)	—
thunderbird-0:60.5.0-1.el7_6.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)	fixed	Red Hat	thunderbird-0:60.5.0-1.el7_6.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)	—
thunderbird-0:60.5.0-1.el7_6.src as a component of Red Hat Enterprise Linux Workstation (v. 7)	fixed	Red Hat	thunderbird-0:60.5.0-1.el7_6.src as a component of Red Hat Enterprise Linux Workstation (v. 7)	—
thunderbird-0:60.5.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)	fixed	Red Hat	thunderbird-0:60.5.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)	—
thunderbird-0:60.5.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)	fixed	Red Hat	thunderbird-0:60.5.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)	—
thunderbird-0:60.5.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)	fixed	Red Hat	thunderbird-0:60.5.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)	—
thunderbird-0:60.5.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)	fixed	Red Hat	thunderbird-0:60.5.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)	—
thunderbird-debuginfo-0:60.5.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)	fixed	Red Hat	thunderbird-debuginfo-0:60.5.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)	—
thunderbird-debuginfo-0:60.5.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)	fixed	Red Hat	thunderbird-debuginfo-0:60.5.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)	—
thunderbird-debuginfo-0:60.5.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)	fixed	Red Hat	thunderbird-debuginfo-0:60.5.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)	—
thunderbird-debuginfo-0:60.5.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)	fixed	Red Hat	thunderbird-debuginfo-0:60.5.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)	—
thunderbird-debuginfo-0:60.5.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)	fixed	Red Hat	thunderbird-debuginfo-0:60.5.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)	—
thunderbird-debuginfo-0:60.5.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)	fixed	Red Hat	thunderbird-debuginfo-0:60.5.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)	—
thunderbird-debuginfo-0:60.5.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)	fixed	Red Hat	thunderbird-debuginfo-0:60.5.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)	—
thunderbird-debuginfo-0:60.5.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)	fixed	Red Hat	thunderbird-debuginfo-0:60.5.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)	—
thunderbird-debuginfo-0:60.5.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)	fixed	Red Hat	thunderbird-debuginfo-0:60.5.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)	—
thunderbird-debuginfo-0:60.5.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)	fixed	Red Hat	thunderbird-debuginfo-0:60.5.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)	—
thunderbird-debuginfo-0:60.5.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)	fixed	Red Hat	thunderbird-debuginfo-0:60.5.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)	—
thunderbird-debuginfo-0:60.5.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)	fixed	Red Hat	thunderbird-debuginfo-0:60.5.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)	—