CVE-2016-10745
Jinja2 sandbox escape vulnerability
In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used 8.6
In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.
- Record
CVE-2016-10745- CVSS 3.0
- 8.6 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-134
- Updated
- 2026-11-02
CVE ListNo score
In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.
- Record
CVE-2016-10745- Updated
- 2026-11-02
EUVDEUVD-2019-0069No score
In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.
- Record
EUVD-2019-0069- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hj2j-77xm-mc5v 7.7
Jinja2 sandbox escape vulnerability
In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.
- Record
GHSA-hj2j-77xm-mc5v- CVSS 4.0
- 7.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N - CVSS 3.0
- 8.6 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N - Weakness
- CWE-134
- Updated
- 2026-11-02
OSV 8.6
In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.
- Record
CVE-2016-10745- CVSS 3.0
- 8.6 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2016-10745 8.6
In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.
- Record
DEBIAN-CVE-2016-10745- CVSS 3.0
- 8.6 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N - Updated
- 2026-11-02
Show 22 moreShow less
OSVGHSA-hj2j-77xm-mc5v 7.7
Jinja2 sandbox escape vulnerability
In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.
- Record
GHSA-hj2j-77xm-mc5v- CVSS 4.0
- 7.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N - CVSS 3.0
- 8.6 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N - Weakness
- CWE-134
- Updated
- 2026-11-02
OSVRHSA-2019:1022 9.0
Red Hat Security Advisory: python-jinja2 security update
- Record
RHSA-2019:1022- CVSS 3.0
- 9.0 Critical
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2019:1237 9.0
Red Hat Security Advisory: rh-python35-python-jinja2 security update
- Record
RHSA-2019:1237- CVSS 3.0
- 9.0 Critical
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2019:1260 9.0
Red Hat Security Advisory: python27-python and python27-python-jinja2 security and bug fix update
- Record
RHSA-2019:1260- CVSS 3.0
- 9.0 Critical
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2019:3172 9.0
Red Hat Security Advisory: Red Hat Satellite 6 security, bug fix, and enhancement update
- Record
RHSA-2019:3172- CVSS 3.0
- 9.0 Critical
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2019:3964 9.0
Red Hat Security Advisory: python-jinja2 security update
- Record
RHSA-2019:3964- CVSS 3.0
- 9.0 Critical
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2019:4062 9.0
Red Hat Security Advisory: python-jinja2 security update
- Record
RHSA-2019:4062- CVSS 3.0
- 9.0 Critical
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2016-10745 8.6
In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.
- Record
UBUNTU-CVE-2016-10745- CVSS 3.0
- 8.6 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N - Updated
- 2026-11-02
OSVMGASA-2019-0177No score
Updated python-jinja2 packages fix security vulnerability
Sandbox escape due to information disclosure via str.format (CVE-2016-10745). str.format_map allows sandbox escape (CVE-2019-10906).
- Record
MGASA-2019-0177- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:1395-1No score
Security update for python-Jinja2
This update for python-Jinja2 to version 2.10.1 fixes the following issues:
Security issues fixed:
- CVE-2019-8341: Fixed a command injection in from_string() (bsc#1125815).
- CVE-2019-10906: Fixed a sandbox escape due to information disclosure via str.format (bsc#1132323).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2019:1395-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11208-1No score
python36-Jinja2-3.0.1-3.2 on GA media
These are all security issues fixed in the python36-Jinja2-3.0.1-3.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11208-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:13930-1No score
python310-Jinja2-3.1.4-1.1 on GA media
These are all security issues fixed in the python310-Jinja2-3.1.4-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13930-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:11992-1No score
python313-Jinja2-3.1.6-2.4 on GA media
These are all security issues fixed in the python313-Jinja2-3.1.6-2.4 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:11992-1- Updated
- 2026-11-02
OSVPYSEC-2019-220No score
In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.
- Record
PYSEC-2019-220- Updated
- 2026-11-02
OSVSUSE-FU-2022:0444-1No score
Feature update for venv-salt-minion
This feature update for venv-salt-minion provides the following changes:
- Introduce
venv-salt-minion. - Track already fixed issues.
- Record
SUSE-FU-2022:0444-1- Updated
- 2026-11-02
OSVSUSE-FU-2022:0445-1No score
Feature update for venv-salt-minion
This feature update for venv-salt-minion provides the following changes:
- Introduce
venv-salt-minion. - Mention fixed issues provided with the bundle.
- Record
SUSE-FU-2022:0445-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:1156-1No score
Security update for python-Jinja2
This update for python-Jinja2 to version 2.10.1 fixes the following issues:
Security issues fixed:
- CVE-2019-8341: Fixed a command injection in from_string() (bsc#1125815).
- CVE-2019-10906: Fixed a sandbox escape due to information disclosure via str.format (bsc#1132323).
- Record
SUSE-SU-2019:1156-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:1323-1No score
Security update for python-Jinja2
This update for python-Jinja2 fixes the following issues:
Security issue fixed:
- CVE-2016-10745: Fixed a sandbox escape caused by an information disclosure via str.format
- Record
SUSE-SU-2019:1323-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:1554-1No score
Security update for python-Jinja2
This update for python-Jinja2 fixes the following issues:
Security issues fixed:
- CVE-2016-10745: Fixed a sandbox escape caused by an information disclosure via str.format (bsc#1132174).
- CVE-2019-10906: Fixed a sandbox escape due to information disclosure via str.format (bsc#1132323).
- CVE-2019-8341: Fixed command injection in function from_string (bsc#1125815).
- Record
SUSE-SU-2019:1554-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:3897-1No score
Security update for ardana-cassandra, ardana-mq, ardana-osconfig, ardana-tempest, crowbar-core, crowbar-openstack, grafana, influxdb, openstack-cinder, openstack-heat, openstack-heat-gbp, openstack-heat-templates, openstack-horizon-plugin-gbp-ui, openstack-ironic-python-agent, openstack-manila, openstack-neutron, openstack-neutron-gbp, openstack-neutron-vpnaas, openstack-nova, python-Jinja2, python-pysaml2, python-pytest, python-urllib3, release-notes-suse-openstack-cloud, spark
This update for ardana-cassandra, ardana-mq, ardana-osconfig, ardana-tempest, crowbar-core, crowbar-openstack, grafana, influxdb, openstack-cinder, openstack-heat, openstack-heat-gbp, openstack-heat-templates, openstack-horizon-plugin-gbp-ui, openstack-ironic-python-agent, openstack-manila, openstack-neutron, openstack-neutron-gbp, openstack-neutron-vpnaas, openstack-nova, python-Jinja2, python-pysaml2, python-pytest, python-urllib3, release-notes-suse-openstack-cloud, spark fixes the following issues:
Security changes included on this update:
grafana:
- CVE-2020-24303: Fixed an XXS with series overides. (bsc#1178243)
influxdb:
- CVE-2019-20933: Fixed an authentication bypass. (bsc#1178988)
python-Jinja2:
- CVE-2019-10906,CVE-2019-8341,CVE-2016-10745: 'SandboxedEnvironment' securely handles 'str.format_map' in order to prevent code execution through untrusted format strings. (bsc#1132323, bsc#1125815, bsc#1132174)
python-pysaml2:
- CVE-2020-5390: Fixed an issue where there was no check that the signature in a SAML document is enveloped. (bsc#1160851)
python-urllib3:
- CVE-2020-26137: Fixed a CRLF injection via HTTP request method. (bsc#1177120)
Non-security changes included in this update:
Changes in ardana-cassandra:
- Update to version 9.0+git.1600802664.7e480a2:
- Remove freezer related backup/restore code (SOC-7751)
Changes in ardana-mq:
- Update to version 9.0+git.1605174486.a78ddce:
- Re-enable mirroring of fanout and reply queues (bsc#1177611)
Changes in ardana-osconfig:
- Update to version 9.0+git.1601621747.a87e5a0:
- HOS8 check needs to be a shell rather than command (SOC-11184)
Changes in ardana-tempest:
Update to version 9.0+git.1603378983.fc0bca9:
- Enable VPNaaS testing (SOC-8764)
Update to version 9.0+git.1599855218.875b2f3:
- unblacklist some revert tests (SOC-9178)
Changes in crowbar-core:
Update to version 6.0+git.1606314264.bf9ada813:
- ntp: Do not use rate-limiting (bsc#1179161)
Update to version 6.0+git.1600414599.150832ca2:
- Ignore CVE-2020-15169 (SOC-11391)
Changes in crowbar-openstack:
Update to version 6.0+git.1604573541.bb18c172d:
- rabbitmq: Fix crm running check (SOC-11240)
Update to version 6.0+git.1604491402.b4dbba849:
- Remove aspiers from CODEOWNERS
- Remove cmurphy from CODEOWNERS
Changes in grafana:
- Fix bsc#1178243 CVE-2020-24303 by adding 25401-Fix-XSS-vulnerability-with-series-overrides.patch
Changes in influxdb:
- Add CVE-2019-20933.patch (bsc#1178988, CVE-2019-20933) to fix authentication bypass
- Declare license files correctly
Changes in openstack-cinder:
Update to version cinder-13.0.10.dev20:
- PowerMax Driver - Legacy volumes fail to live migrate
Update to version cinder-13.0.10.dev19:
- RBD: Cleanup temporary file during exception
Update to version cinder-13.0.10.dev17:
- Remove experimental job legacy-tempest-dsvm-zeromq-multibackend
Changes in openstack-cinder:
Update to version cinder-13.0.10.dev20:
- PowerMax Driver - Legacy volumes fail to live migrate
Update to version cinder-13.0.10.dev19:
- RBD: Cleanup temporary file during exception
Update to version cinder-13.0.10.dev17:
- Remove experimental job legacy-tempest-dsvm-zeromq-multibackend
Changes in openstack-heat:
Update to version openstack-heat-11.0.4.dev4:
- Check external resources after creation
Update to version openstack-heat-11.0.4.dev2:
- Don't store signal_url for ec2 signaling of deployments
- Allow scale-down of ASG as part of update 11.0.3
Changes in openstack-heat:
Update to version openstack-heat-11.0.4.dev4:
- Check external resources after creation
Update to version openstack-heat-11.0.4.dev2:
- Don't store signal_url for ec2 signaling of deployments
- Allow scale-down of ASG as part of update 11.0.3
Changes in openstack-heat-gbp:
Update to version group-based-policy-automation-12.0.1.dev2:
- Add support for victoria
Update to version group-based-policy-automation-12.0.1.dev1: *…
- Record
SUSE-SU-2020:3897-1- Updated
- 2026-11-02
OSVUSN-4011-1No score
jinja2 vulnerabilities
Olivier Dony discovered that Jinja incorrectly handled str.format. An attacker could possibly use this issue to escape the sandbox. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-10745)
Brian Welch discovered that Jinja incorrectly handled str.format_map. An attacker could possibly use this issue to escape the sandbox. (CVE-2019-10906)
- Record
USN-4011-1- Updated
- 2026-11-02
OSVUSN-4011-2No score
jinja2 vulnerabilities
USN-4011-1 fixed several vulnerabilities in Jinja2. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.
Original advisory details:
Olivier Dony discovered that Jinja incorrectly handled str.format. An attacker could possibly use this issue to escape the sandbox. (CVE-2016-10745)
Brian Welch discovered that Jinja incorrectly handled str.format_map. An attacker could possibly use this issue to escape the sandbox. (CVE-2019-10906)
- Record
USN-4011-2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
jinja2PyPI | before 2.8.1 | 2.8.1 |
jinja2Debian:12 | before 2.9.4-1 | 2.9.4-1 |
jinja2Debian:13 | before 2.9.4-1 | 2.9.4-1 |
jinja2Debian:14 | before 2.9.4-1 | 2.9.4-1 |
jinja2PyPI | before 2.8.1, plus listed versions 2.02.0rc12.12.1.12.2 Show 17 moreShow less2.2.12.32.3.12.42.4.12.52.5.12.5.22.5.32.5.42.5.52.62.72.7.12.7.22.7.32.8 | 2.8.1 |
python-jinja2Mageia:6 From an advisory covering 2 CVEs | before 2.10.1-1.mga6 | 2.10.1-1.mga6 |
python-jinja2Red Hat:enterprise_linux:7::client | before 0:2.7.2-3.el7_6 | 0:2.7.2-3.el7_6 |
python-jinja2Red Hat:enterprise_linux:7::computenode | before 0:2.7.2-3.el7_6 | 0:2.7.2-3.el7_6 |
python-jinja2Red Hat:enterprise_linux:7::server | before 0:2.7.2-3.el7_6 | 0:2.7.2-3.el7_6 |
python-jinja2Red Hat:enterprise_linux:7::workstation | before 0:2.7.2-3.el7_6 | 0:2.7.2-3.el7_6 |
Show 290 moreShow less
| Package | Affected | Fixed |
|---|---|---|
rh-python35-python-jinja2Red Hat:rhel_software_collections:3::el6 From an advisory covering 2 CVEs | before 0:2.8.1-2.el6 | 0:2.8.1-2.el6 |
rh-python35-python-jinja2Red Hat:rhel_software_collections:3::el7 From an advisory covering 2 CVEs | before 0:2.8.1-2.el7 | 0:2.8.1-2.el7 |
python27-pythonRed Hat:rhel_software_collections:3::el6 From an advisory covering 6 CVEs | before 0:2.7.16-4.el6 | 0:2.7.16-4.el6 |
python27-python-debugRed Hat:rhel_software_collections:3::el6 From an advisory covering 6 CVEs | before 0:2.7.16-4.el6 | 0:2.7.16-4.el6 |
python27-python-debuginfoRed Hat:rhel_software_collections:3::el6 From an advisory covering 6 CVEs | before 0:2.7.16-4.el6 | 0:2.7.16-4.el6 |
python27-python-develRed Hat:rhel_software_collections:3::el6 From an advisory covering 6 CVEs | before 0:2.7.16-4.el6 | 0:2.7.16-4.el6 |
python27-python-jinja2Red Hat:rhel_software_collections:3::el6 From an advisory covering 6 CVEs | before 0:2.6-12.el6 | 0:2.6-12.el6 |
python27-python-libsRed Hat:rhel_software_collections:3::el6 From an advisory covering 6 CVEs | before 0:2.7.16-4.el6 | 0:2.7.16-4.el6 |
python27-python-testRed Hat:rhel_software_collections:3::el6 From an advisory covering 6 CVEs | before 0:2.7.16-4.el6 | 0:2.7.16-4.el6 |
python27-python-toolsRed Hat:rhel_software_collections:3::el6 From an advisory covering 6 CVEs | before 0:2.7.16-4.el6 | 0:2.7.16-4.el6 |
python27-tkinterRed Hat:rhel_software_collections:3::el6 From an advisory covering 6 CVEs | before 0:2.7.16-4.el6 | 0:2.7.16-4.el6 |
python27-pythonRed Hat:rhel_software_collections:3::el7 From an advisory covering 6 CVEs | before 0:2.7.16-4.el7 | 0:2.7.16-4.el7 |
python27-python-debugRed Hat:rhel_software_collections:3::el7 From an advisory covering 6 CVEs | before 0:2.7.16-4.el7 | 0:2.7.16-4.el7 |
python27-python-debuginfoRed Hat:rhel_software_collections:3::el7 From an advisory covering 6 CVEs | before 0:2.7.16-4.el7 | 0:2.7.16-4.el7 |
python27-python-develRed Hat:rhel_software_collections:3::el7 From an advisory covering 6 CVEs | before 0:2.7.16-4.el7 | 0:2.7.16-4.el7 |
python27-python-jinja2Red Hat:rhel_software_collections:3::el7 From an advisory covering 6 CVEs | before 0:2.6-15.el7 | 0:2.6-15.el7 |
python27-python-libsRed Hat:rhel_software_collections:3::el7 From an advisory covering 6 CVEs | before 0:2.7.16-4.el7 | 0:2.7.16-4.el7 |
python27-python-testRed Hat:rhel_software_collections:3::el7 From an advisory covering 6 CVEs | before 0:2.7.16-4.el7 | 0:2.7.16-4.el7 |
python27-python-toolsRed Hat:rhel_software_collections:3::el7 From an advisory covering 6 CVEs | before 0:2.7.16-4.el7 | 0:2.7.16-4.el7 |
python27-tkinterRed Hat:rhel_software_collections:3::el7 From an advisory covering 6 CVEs | before 0:2.7.16-4.el7 | 0:2.7.16-4.el7 |
ansible-runnerRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.3.4-2.el7ar | 0:1.3.4-2.el7ar |
ansiblerole-foreman_scap_clientRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.0.3-1.el7sat | 0:0.0.3-1.el7sat |
ansiblerole-insights-clientRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.6-2.el7sat | 0:1.6-2.el7sat |
createrepo_cRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.7.4-1.el7sat | 0:0.7.4-1.el7sat |
createrepo_c-debuginfoRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.7.4-1.el7sat | 0:0.7.4-1.el7sat |
createrepo_c-libsRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.7.4-1.el7sat | 0:0.7.4-1.el7sat |
foremanRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.22.0.32-1.el7sat | 0:1.22.0.32-1.el7sat |
foreman-bootloaders-redhatRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:201901011200-1.el7sat | 0:201901011200-1.el7sat |
foreman-bootloaders-redhat-tftpbootRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:201901011200-1.el7sat | 0:201901011200-1.el7sat |
foreman-debugRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.22.0.32-1.el7sat | 0:1.22.0.32-1.el7sat |
foreman-discovery-imageRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 1:3.5.4-6.el7sat | 1:3.5.4-6.el7sat |
foreman-installerRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 1:1.22.0.16-1.el7sat | 1:1.22.0.16-1.el7sat |
foreman-installer-katelloRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 1:1.22.0.16-1.el7sat | 1:1.22.0.16-1.el7sat |
foreman-proxyRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.22.0.2-1.el7sat | 0:1.22.0.2-1.el7sat |
foreman-proxy-contentRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:3.12.0-2.el7sat | 0:3.12.0-2.el7sat |
foreman-proxy-journaldRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.22.0.2-1.el7sat | 0:1.22.0.2-1.el7sat |
foreman-selinuxRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.22.0-1.el7sat | 0:1.22.0-1.el7sat |
futureRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.16.0-11.el7sat | 0:0.16.0-11.el7sat |
goferRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.12.5-5.el7sat | 0:2.12.5-5.el7sat |
hfsplus-toolsRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:332.14-12.el7 | 0:332.14-12.el7 |
hfsplus-tools-debuginfoRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:332.14-12.el7 | 0:332.14-12.el7 |
katelloRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:3.12.0-2.el7sat | 0:3.12.0-2.el7sat |
katello-certs-toolsRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.6.0-1.el7sat | 0:2.6.0-1.el7sat |
katello-client-bootstrapRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.7.3-1.el7sat | 0:1.7.3-1.el7sat |
katello-commonRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:3.12.0-2.el7sat | 0:3.12.0-2.el7sat |
katello-debugRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:3.12.0-2.el7sat | 0:3.12.0-2.el7sat |
katello-selinuxRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:3.1.1-2.el7sat | 0:3.1.1-2.el7sat |
katello-serviceRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:3.12.0-2.el7sat | 0:3.12.0-2.el7sat |
koboRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.5.1-1.el7sat | 0:0.5.1-1.el7sat |
libmodulemdRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.7.0-1.pulp.el7sat | 0:1.7.0-1.pulp.el7sat |
libmodulemd-debuginfoRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.7.0-1.pulp.el7sat | 0:1.7.0-1.pulp.el7sat |
libsolvRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.7.4-3.pulp.el7sat | 0:0.7.4-3.pulp.el7sat |
libsolv-debuginfoRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.7.4-3.pulp.el7sat | 0:0.7.4-3.pulp.el7sat |
libwebsocketsRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.4.2-2.el7 | 0:2.4.2-2.el7 |
libwebsockets-debuginfoRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.4.2-2.el7 | 0:2.4.2-2.el7 |
livecd-toolsRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 1:20.4-1.6.el7sat | 1:20.4-1.6.el7sat |
mod_xsendfileRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.12-11.el7sat | 0:0.12-11.el7sat |
mod_xsendfile-debuginfoRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.12-11.el7sat | 0:0.12-11.el7sat |
ostreeRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2017.1-2.atomic.el7 | 0:2017.1-2.atomic.el7 |
ostree-debuginfoRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2017.1-2.atomic.el7 | 0:2017.1-2.atomic.el7 |
pulpRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.19.1.1-1.el7sat | 0:2.19.1.1-1.el7sat |
pulp-admin-clientRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.19.1.1-1.el7sat | 0:2.19.1.1-1.el7sat |
pulp-dockerRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:3.2.3.1-2.el7sat | 0:3.2.3.1-2.el7sat |
pulp-docker-admin-extensionsRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:3.2.3.1-2.el7sat | 0:3.2.3.1-2.el7sat |
pulp-docker-pluginsRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:3.2.3.1-2.el7sat | 0:3.2.3.1-2.el7sat |
pulp-katelloRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.0.3-1.el7sat | 0:1.0.3-1.el7sat |
pulp-maintenanceRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.19.1.1-1.el7sat | 0:2.19.1.1-1.el7sat |
pulp-nodes-childRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.19.1.1-1.el7sat | 0:2.19.1.1-1.el7sat |
pulp-nodes-commonRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.19.1.1-1.el7sat | 0:2.19.1.1-1.el7sat |
pulp-nodes-parentRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.19.1.1-1.el7sat | 0:2.19.1.1-1.el7sat |
pulp-ostreeRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.3.1-2.el7sat | 0:1.3.1-2.el7sat |
pulp-ostree-admin-extensionsRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.3.1-2.el7sat | 0:1.3.1-2.el7sat |
pulp-ostree-pluginsRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.3.1-2.el7sat | 0:1.3.1-2.el7sat |
pulp-puppetRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.19.1-2.el7sat | 0:2.19.1-2.el7sat |
pulp-puppet-admin-extensionsRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.19.1-2.el7sat | 0:2.19.1-2.el7sat |
pulp-puppet-pluginsRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.19.1-2.el7sat | 0:2.19.1-2.el7sat |
pulp-rpmRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.19.1.1-2.el7sat | 0:2.19.1.1-2.el7sat |
pulp-rpm-admin-extensionsRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.19.1.1-2.el7sat | 0:2.19.1.1-2.el7sat |
pulp-rpm-pluginsRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.19.1.1-2.el7sat | 0:2.19.1.1-2.el7sat |
pulp-selinuxRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.19.1.1-1.el7sat | 0:2.19.1.1-1.el7sat |
pulp-serverRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.19.1.1-1.el7sat | 0:2.19.1.1-1.el7sat |
puppet-agentRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:5.5.12-1.el7sat | 0:5.5.12-1.el7sat |
puppet-agent-oauthRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.5.1-3.el7sat | 0:0.5.1-3.el7sat |
puppet-foreman_scap_clientRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.3.19-2.el7sat | 0:0.3.19-2.el7sat |
puppetlabs-stdlibRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:4.25.1-2.el7sat | 0:4.25.1-2.el7sat |
puppetserverRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:5.3.8-1.el7sat | 0:5.3.8-1.el7sat |
pycairoRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.16.3-9.el7sat | 0:1.16.3-9.el7sat |
pycairo-debuginfoRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.16.3-9.el7sat | 0:1.16.3-9.el7sat |
pygobject3Red Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:3.28.3-2.el7sat | 0:3.28.3-2.el7sat |
pygobject3-debuginfoRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:3.28.3-2.el7sat | 0:3.28.3-2.el7sat |
python-amqpRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.2.2-5.el7sat | 0:2.2.2-5.el7sat |
python-anyjsonRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.3.3-11.el7sat | 0:0.3.3-11.el7sat |
python-billiardRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 1:3.5.0.3-3.el7sat | 1:3.5.0.3-3.el7sat |
python-billiard-debuginfoRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 1:3.5.0.3-3.el7sat | 1:3.5.0.3-3.el7sat |
python-blinkerRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.3-2.el7sat | 0:1.3-2.el7sat |
python-bsonRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:3.2-2.el7sat | 0:3.2-2.el7sat |
python-celeryRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:4.0.2-9.el7sat | 0:4.0.2-9.el7sat |
python-clickRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:6.7-9.el7sat | 0:6.7-9.el7sat |
python-craneRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:3.3.1-9.el7sat | 0:3.3.1-9.el7sat |
python-daemonRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.1.2-7.el7at | 0:2.1.2-7.el7at |
python-djangoRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.11.13-1.el7sat | 0:1.11.13-1.el7sat |
python-flaskRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 1:0.12.2-4.el7sat | 1:0.12.2-4.el7sat |
python-gnupgRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.3.7-1.el7ui | 0:0.3.7-1.el7ui |
python-goferRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.12.5-5.el7sat | 0:2.12.5-5.el7sat |
python-gofer-qpidRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.12.5-5.el7sat | 0:2.12.5-5.el7sat |
python-imgcreateRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 1:20.4-1.6.el7sat | 1:20.4-1.6.el7sat |
python-isodateRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.5.4-12.el7sat | 0:0.5.4-12.el7sat |
python-itsdangerousRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.24-15.el7sat | 0:0.24-15.el7sat |
python-jinja2Red Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.10-10.el7sat | 0:2.10-10.el7sat |
python-kidRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.9.6-11.el7sat | 0:0.9.6-11.el7sat |
python-kombuRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 10:4.0.2-13.el7sat | 10:4.0.2-13.el7sat |
python-lockfileRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 1:0.11.0-10.el7ar | 1:0.11.0-10.el7ar |
python-markupsafeRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.23-21.el7sat | 0:0.23-21.el7sat |
python-markupsafe-debuginfoRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.23-21.el7sat | 0:0.23-21.el7sat |
python-mongoengineRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.10.5-2.el7sat | 0:0.10.5-2.el7sat |
python-nectarRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.6.0-1.el7sat | 0:1.6.0-1.el7sat |
python-oauth2Red Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.5.211-8.el7sat | 0:1.5.211-8.el7sat |
python-okaaraRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.0.37-2.el7sat | 0:1.0.37-2.el7sat |
python-pexpectRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:4.6-1.el7at | 0:4.6-1.el7at |
python-psutilRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:5.0.1-3.el7sat | 0:5.0.1-3.el7sat |
python-psutil-debuginfoRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:5.0.1-3.el7sat | 0:5.0.1-3.el7sat |
python-ptyprocessRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.5.2-3.el7at | 0:0.5.2-3.el7at |
python-pulp-agent-libRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.19.1.1-1.el7sat | 0:2.19.1.1-1.el7sat |
python-pulp-bindingsRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.19.1.1-1.el7sat | 0:2.19.1.1-1.el7sat |
python-pulp-client-libRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.19.1.1-1.el7sat | 0:2.19.1.1-1.el7sat |
python-pulp-commonRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.19.1.1-1.el7sat | 0:2.19.1.1-1.el7sat |
python-pulp-docker-commonRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:3.2.3.1-2.el7sat | 0:3.2.3.1-2.el7sat |
python-pulp-integrityRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.19.1.1-2.el7sat | 0:2.19.1.1-2.el7sat |
python-pulp-oid_validationRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.19.1.1-1.el7sat | 0:2.19.1.1-1.el7sat |
python-pulp-ostree-commonRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.3.1-2.el7sat | 0:1.3.1-2.el7sat |
python-pulp-puppet-commonRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.19.1-2.el7sat | 0:2.19.1-2.el7sat |
python-pulp-repoauthRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.19.1.1-1.el7sat | 0:2.19.1.1-1.el7sat |
python-pulp-rpm-commonRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.19.1.1-2.el7sat | 0:2.19.1.1-2.el7sat |
python-pulp-streamerRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.19.1.1-1.el7sat | 0:2.19.1.1-1.el7sat |
python-pycurlRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:7.43.0.2-4.el7sat | 0:7.43.0.2-4.el7sat |
python-pycurl-debuginfoRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:7.43.0.2-4.el7sat | 0:7.43.0.2-4.el7sat |
python-pymongoRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:3.2-2.el7sat | 0:3.2-2.el7sat |
python-pymongo-debuginfoRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:3.2-2.el7sat | 0:3.2-2.el7sat |
python-pymongo-gridfsRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:3.2-2.el7sat | 0:3.2-2.el7sat |
python-qpidRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.35.0-5.el7 | 0:1.35.0-5.el7 |
python-qpid-protonRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.28.0-1.el7 | 0:0.28.0-1.el7 |
python-qpid-qmfRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.36.0-28.el7amq | 0:1.36.0-28.el7amq |
python-saslwrapperRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.22-5.el7sat | 0:0.22-5.el7sat |
python-semantic_versionRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.2.0-6.el7sat | 0:2.2.0-6.el7sat |
python-simplejsonRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:3.2.0-1.el7sat | 0:3.2.0-1.el7sat |
python-simplejson-debuginfoRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:3.2.0-1.el7sat | 0:3.2.0-1.el7sat |
python-twistedRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:16.4.1-12.el7sat | 0:16.4.1-12.el7sat |
python-twisted-debuginfoRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:16.4.1-12.el7sat | 0:16.4.1-12.el7sat |
python-vineRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 10:1.1.3-6.el7sat | 10:1.1.3-6.el7sat |
python-werkzeugRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.12.2-5.el7sat | 0:0.12.2-5.el7sat |
python-zope-interfaceRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:4.0.5-4.el7 | 0:4.0.5-4.el7 |
python-zope-interface-debuginfoRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:4.0.5-4.el7 | 0:4.0.5-4.el7 |
python2-amqpRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.2.2-5.el7sat | 0:2.2.2-5.el7sat |
python2-ansible-runnerRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.3.4-2.el7ar | 0:1.3.4-2.el7ar |
python2-anyjsonRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.3.3-11.el7sat | 0:0.3.3-11.el7sat |
python2-billiardRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 1:3.5.0.3-3.el7sat | 1:3.5.0.3-3.el7sat |
python2-celeryRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:4.0.2-9.el7sat | 0:4.0.2-9.el7sat |
python2-clickRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:6.7-9.el7sat | 0:6.7-9.el7sat |
python2-craneRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:3.3.1-9.el7sat | 0:3.3.1-9.el7sat |
python2-daemonRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.1.2-7.el7at | 0:2.1.2-7.el7at |
python2-djangoRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.11.13-1.el7sat | 0:1.11.13-1.el7sat |
python2-flaskRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 1:0.12.2-4.el7sat | 1:0.12.2-4.el7sat |
python2-futureRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.16.0-11.el7sat | 0:0.16.0-11.el7sat |
python2-gobjectRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:3.28.3-2.el7sat | 0:3.28.3-2.el7sat |
python2-gobject-baseRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:3.28.3-2.el7sat | 0:3.28.3-2.el7sat |
python2-isodateRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.5.4-12.el7sat | 0:0.5.4-12.el7sat |
python2-itsdangerousRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.24-15.el7sat | 0:0.24-15.el7sat |
python2-jinja2Red Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.10-10.el7sat | 0:2.10-10.el7sat |
python2-kombuRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 10:4.0.2-13.el7sat | 10:4.0.2-13.el7sat |
python2-lockfileRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 1:0.11.0-10.el7ar | 1:0.11.0-10.el7ar |
python2-markupsafeRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.23-21.el7sat | 0:0.23-21.el7sat |
python2-nectarRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.6.0-1.el7sat | 0:1.6.0-1.el7sat |
python2-okaaraRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.0.37-2.el7sat | 0:1.0.37-2.el7sat |
python2-pexpectRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:4.6-1.el7at | 0:4.6-1.el7at |
python2-ptyprocessRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.5.2-3.el7at | 0:0.5.2-3.el7at |
python2-pycurlRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:7.43.0.2-4.el7sat | 0:7.43.0.2-4.el7sat |
python2-solvRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.7.4-3.pulp.el7sat | 0:0.7.4-3.pulp.el7sat |
python2-twistedRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:16.4.1-12.el7sat | 0:16.4.1-12.el7sat |
python2-vineRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 10:1.1.3-6.el7sat | 10:1.1.3-6.el7sat |
python2-werkzeugRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.12.2-5.el7sat | 0:0.12.2-5.el7sat |
qpid-cppRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.36.0-28.el7amq | 0:1.36.0-28.el7amq |
qpid-cpp-clientRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.36.0-28.el7amq | 0:1.36.0-28.el7amq |
qpid-cpp-debuginfoRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.36.0-28.el7amq | 0:1.36.0-28.el7amq |
qpid-cpp-serverRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.36.0-28.el7amq | 0:1.36.0-28.el7amq |
qpid-cpp-server-linearstoreRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.36.0-28.el7amq | 0:1.36.0-28.el7amq |
qpid-dispatchRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.5.0-4.el7 | 0:1.5.0-4.el7 |
qpid-dispatch-debuginfoRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.5.0-4.el7 | 0:1.5.0-4.el7 |
qpid-dispatch-routerRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.5.0-4.el7 | 0:1.5.0-4.el7 |
qpid-dispatch-toolsRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.5.0-4.el7 | 0:1.5.0-4.el7 |
qpid-protonRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.28.0-1.el7 | 0:0.28.0-1.el7 |
qpid-proton-cRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.28.0-1.el7 | 0:0.28.0-1.el7 |
qpid-proton-debuginfoRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.28.0-1.el7 | 0:0.28.0-1.el7 |
qpid-qmfRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.36.0-28.el7amq | 0:1.36.0-28.el7amq |
qpid-toolsRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.36.0-28.el7amq | 0:1.36.0-28.el7amq |
redhat-access-insights-puppetRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.0.0-1.el7sat | 0:1.0.0-1.el7sat |
repoviewRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.6.6-11.el7sat | 0:0.6.6-11.el7sat |
rubygem-ansiRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.4.3-3.el7sat | 0:1.4.3-3.el7sat |
rubygem-bundler_extRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.4.1-3.el7sat | 0:0.4.1-3.el7sat |
rubygem-clampRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.1.2-2.el7sat | 0:1.1.2-2.el7sat |
rubygem-concurrent-rubyRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 1:1.1.4-2.el7sat | 1:1.1.4-2.el7sat |
rubygem-faradayRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.15.4-1.el7sat | 0:0.15.4-1.el7sat |
rubygem-faraday_middlewareRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:0.13.1-1.el7sat | 0:0.13.1-1.el7sat |
rubygem-fast_gettextRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.1.0-4.el7sat | 0:1.1.0-4.el7sat |
rubygem-ffiRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.4.0-3.el7sat | 0:1.4.0-3.el7sat |
rubygem-ffi-debuginfoRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.4.0-3.el7sat | 0:1.4.0-3.el7sat |
rubygem-gssapiRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.1.2-4.el7sat | 0:1.1.2-4.el7sat |
rubygem-hashieRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:2.0.5-5.el7sat | 0:2.0.5-5.el7sat |
rubygem-highlineRed Hat:satellite_capsule:6.6::el7 From an advisory covering 9 CVEs | before 0:1.7.8-3.el7sat | 0:1.7.8-3.el7sat |
python-Jinja2SUSE:Linux Enterprise Module for Basesystem 15 From an advisory covering 3 CVEs | before 2.10.1-3.5.1 | 2.10.1-3.5.1 |
python-Jinja2SUSE:Manager Client Tools 12 | before 2.8-19.17.1 | 2.8-19.17.1 |
python-Jinja2SUSE:Linux Enterprise Module for Advanced Systems Management 12 | before 2.8-19.17.1 | 2.8-19.17.1 |
python-Jinja2SUSE:Linux Enterprise Module for Public Cloud 12 | before 2.8-19.17.1 | 2.8-19.17.1 |
python-Jinja2SUSE:OpenStack Cloud 7 From an advisory covering 3 CVEs | before 2.8-22.8.1 | 2.8-22.8.1 |
python-Jinja2SUSE:Linux Enterprise Point of Sale 12 SP2 From an advisory covering 3 CVEs | before 2.8-22.8.1 | 2.8-22.8.1 |
python-Jinja2SUSE:Manager Proxy 3.1 From an advisory covering 3 CVEs | before 2.8-22.8.1 | 2.8-22.8.1 |
python-Jinja2SUSE:Manager Proxy 3.2 From an advisory covering 3 CVEs | before 2.8-22.8.1 | 2.8-22.8.1 |
python-Jinja2SUSE:Manager Server 3.1 From an advisory covering 3 CVEs | before 2.8-22.8.1 | 2.8-22.8.1 |
python-Jinja2SUSE:Manager Server 3.2 From an advisory covering 3 CVEs | before 2.8-22.8.1 | 2.8-22.8.1 |
python-Jinja2SUSE:Enterprise Storage 4 From an advisory covering 3 CVEs | before 2.8-22.8.1 | 2.8-22.8.1 |
python-Jinja2SUSE:Enterprise Storage 5 From an advisory covering 3 CVEs | before 2.8-22.8.1 | 2.8-22.8.1 |
ardana-cassandraSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 9.0+git.1600802664.7e480a2-3.6.2 | 9.0+git.1600802664.7e480a2-3.6.2 |
ardana-mqSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 9.0+git.1605174486.a78ddce-3.19.2 | 9.0+git.1605174486.a78ddce-3.19.2 |
ardana-osconfigSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 9.0+git.1601621747.a87e5a0-3.22.2 | 9.0+git.1601621747.a87e5a0-3.22.2 |
ardana-tempestSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 9.0+git.1603378983.fc0bca9-3.19.2 | 9.0+git.1603378983.fc0bca9-3.19.2 |
grafanaSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 6.7.4-3.20.1 | 6.7.4-3.20.1 |
influxdbSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 1.3.8-4.3.3 | 1.3.8-4.3.3 |
openstack-cinderSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 13.0.10~dev20-3.28.2 | 13.0.10~dev20-3.28.2 |
openstack-heatSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 11.0.4~dev4-3.19.2 | 11.0.4~dev4-3.19.2 |
openstack-heat-gbpSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 12.0.1~dev2-3.3.4 | 12.0.1~dev2-3.3.4 |
openstack-heat-templatesSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 0.0.0+git.1605509190.64f020b6-3.9.3 | 0.0.0+git.1605509190.64f020b6-3.9.3 |
openstack-horizon-plugin-gbp-uiSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 12.0.1~dev3-3.3.4 | 12.0.1~dev3-3.3.4 |
openstack-ironic-python-agentSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 3.3.4~dev6-3.19.4 | 3.3.4~dev6-3.19.4 |
openstack-manilaSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 7.4.2~dev57-4.30.2 | 7.4.2~dev57-4.30.2 |
openstack-neutronSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 13.0.8~dev135-3.31.2 | 13.0.8~dev135-3.31.2 |
openstack-neutron-gbpSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 12.0.1~dev5-3.19.4 | 12.0.1~dev5-3.19.4 |
openstack-neutron-vpnaasSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 13.0.2~dev6-3.9.2 | 13.0.2~dev6-3.9.2 |
openstack-novaSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 18.3.1~dev77-3.31.2 | 18.3.1~dev77-3.31.2 |
python-Jinja2SUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 2.10.1-3.3.3 | 2.10.1-3.3.3 |
python-pysaml2SUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 4.5.0-4.3.3 | 4.5.0-4.3.3 |
python-pytestSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 3.7.4-3.3.3 | 3.7.4-3.3.3 |
python-urllib3SUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 1.23-3.15.3 | 1.23-3.15.3 |
release-notes-suse-openstack-cloudSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 9.20200917-3.24.3 | 9.20200917-3.24.3 |
sparkSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 2.2.3-5.3.3 | 2.2.3-5.3.3 |
venv-openstack-barbicanSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 7.0.1~dev24-3.21.2 | 7.0.1~dev24-3.21.2 |
venv-openstack-cinderSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 13.0.10~dev20-3.24.2 | 13.0.10~dev20-3.24.2 |
venv-openstack-designateSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 7.0.2~dev2-3.21.2 | 7.0.2~dev2-3.21.2 |
venv-openstack-glanceSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 17.0.1~dev30-3.19.2 | 17.0.1~dev30-3.19.2 |
venv-openstack-heatSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 11.0.4~dev4-3.21.2 | 11.0.4~dev4-3.21.2 |
venv-openstack-horizonSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 14.1.1~dev7-4.23.2 | 14.1.1~dev7-4.23.2 |
venv-openstack-ironicSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 11.1.5~dev16-4.19.2 | 11.1.5~dev16-4.19.2 |
venv-openstack-keystoneSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 14.2.1~dev4-3.21.2 | 14.2.1~dev4-3.21.2 |
venv-openstack-magnumSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 7.2.1~dev1-4.21.2 | 7.2.1~dev1-4.21.2 |
venv-openstack-manilaSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 7.4.2~dev57-3.25.2 | 7.4.2~dev57-3.25.2 |
venv-openstack-monascaSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 2.7.1~dev10-3.19.2 | 2.7.1~dev10-3.19.2 |
venv-openstack-monasca-ceilometerSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 1.8.2~dev3-3.21.2 | 1.8.2~dev3-3.21.2 |
venv-openstack-neutronSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 13.0.8~dev135-6.23.2 | 13.0.8~dev135-6.23.2 |
venv-openstack-novaSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 18.3.1~dev77-3.23.2 | 18.3.1~dev77-3.23.2 |
venv-openstack-octaviaSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 3.2.3~dev7-4.21.2 | 3.2.3~dev7-4.21.2 |
venv-openstack-saharaSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 9.0.2~dev15-3.21.2 | 9.0.2~dev15-3.21.2 |
venv-openstack-swiftSUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs | before 2.19.2~dev48-2.16.2 | 2.19.2~dev48-2.16.2 |
crowbar-coreSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 7 CVEs | before 6.0+git.1606314264.bf9ada813-3.31.2 | 6.0+git.1606314264.bf9ada813-3.31.2 |
crowbar-openstackSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 7 CVEs | before 6.0+git.1604573541.bb18c172d-3.28.3 | 6.0+git.1604573541.bb18c172d-3.28.3 |
grafanaSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 7 CVEs | before 6.7.4-3.20.1 | 6.7.4-3.20.1 |
influxdbSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 7 CVEs | before 1.3.8-4.3.3 | 1.3.8-4.3.3 |
openstack-cinderSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 7 CVEs | before 13.0.10~dev20-3.28.2 | 13.0.10~dev20-3.28.2 |
openstack-heatSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 7 CVEs | before 11.0.4~dev4-3.19.2 | 11.0.4~dev4-3.19.2 |
openstack-heat-gbpSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 7 CVEs | before 12.0.1~dev2-3.3.4 | 12.0.1~dev2-3.3.4 |
openstack-heat-templatesSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 7 CVEs | before 0.0.0+git.1605509190.64f020b6-3.9.3 | 0.0.0+git.1605509190.64f020b6-3.9.3 |
openstack-horizon-plugin-gbp-uiSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 7 CVEs | before 12.0.1~dev3-3.3.4 | 12.0.1~dev3-3.3.4 |
openstack-ironic-python-agentSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 7 CVEs | before 3.3.4~dev6-3.19.4 | 3.3.4~dev6-3.19.4 |
openstack-manilaSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 7 CVEs | before 7.4.2~dev57-4.30.2 | 7.4.2~dev57-4.30.2 |
openstack-neutronSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 7 CVEs | before 13.0.8~dev135-3.31.2 | 13.0.8~dev135-3.31.2 |
openstack-neutron-gbpSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 7 CVEs | before 12.0.1~dev5-3.19.4 | 12.0.1~dev5-3.19.4 |
openstack-neutron-vpnaasSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 7 CVEs | before 13.0.2~dev6-3.9.2 | 13.0.2~dev6-3.9.2 |
openstack-novaSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 7 CVEs | before 18.3.1~dev77-3.31.2 | 18.3.1~dev77-3.31.2 |
python-Jinja2SUSE:OpenStack Cloud Crowbar 9 From an advisory covering 7 CVEs | before 2.10.1-3.3.3 | 2.10.1-3.3.3 |
python-pysaml2SUSE:OpenStack Cloud Crowbar 9 From an advisory covering 7 CVEs | before 4.5.0-4.3.3 | 4.5.0-4.3.3 |
python-pytestSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 7 CVEs | before 3.7.4-3.3.3 | 3.7.4-3.3.3 |
python-urllib3SUSE:OpenStack Cloud Crowbar 9 From an advisory covering 7 CVEs | before 1.23-3.15.3 | 1.23-3.15.3 |
release-notes-suse-openstack-cloudSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 7 CVEs | before 9.20200917-3.24.3 | 9.20200917-3.24.3 |
sparkSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 7 CVEs | before 2.2.3-5.3.3 | 2.2.3-5.3.3 |
jinja2Ubuntu:Pro:14.04:LTS | before 2.7.2-2ubuntu0.1~esm1, plus listed versions 2.7-32.7.1-12.7.2-12.7.2-2 | 2.7.2-2ubuntu0.1~esm1 |
jinja2Ubuntu:16.04:LTS | before 2.8-1ubuntu0.1, plus listed versions 2.8-1 | 2.8-1ubuntu0.1 |
jinja2Ubuntu:16.04:LTS From an advisory covering 2 CVEs | before 2.8-1ubuntu0.1, plus listed versions 2.8-1 | 2.8-1ubuntu0.1 |
jinja2Ubuntu:18.04:LTS From an advisory covering 2 CVEs | before 2.10-1ubuntu0.18.04.1, plus listed versions 2.9.6-12.10-1 | 2.10-1ubuntu0.18.04.1 |
jinja2Ubuntu:Pro:14.04:LTS From an advisory covering 2 CVEs | before 2.7.2-2ubuntu0.1~esm1, plus listed versions 2.7-32.7.1-12.7.2-12.7.2-2 | 2.7.2-2ubuntu0.1~esm1 |
python-Jinja2openSUSE:Leap 15.0 From an advisory covering 3 CVEs | before 2.10.1-lp150.2.3.1 | 2.10.1-lp150.2.3.1 |
python-Jinja2openSUSE:Tumbleweed From an advisory covering 4 CVEs | before 3.0.1-3.2 | 3.0.1-3.2 |
python-Jinja2openSUSE:Tumbleweed From an advisory covering 5 CVEs | before 3.1.4-1.1 | 3.1.4-1.1 |
python-Jinja2openSUSE:Tumbleweed From an advisory covering 6 CVEs | before 3.1.6-2.4 | 3.1.6-2.4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-10745 is a high vulnerability (CVSS 8.6) in Palletsprojects Jinja, published April 8, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.52%, the 89th percentile. Fixed in jinja2 2.8.1.
References
palletsprojects.com/blog/jinja-281-released
github.com/pallets/jinja/commit/9b53045c34e61013dc8f09b7e52a555fa16bed16
access.redhat.com/errata/RHSA-2019:1022
lists.opensuse.org/opensuse-security-announce/2019-05/msg00030.html
access.redhat.com/errata/RHSA-2019:1237
access.redhat.com/errata/RHSA-2019:1260
Show 194 moreShow less
usn.ubuntu.com/4011-1
usn.ubuntu.com/4011-2
lists.opensuse.org/opensuse-security-announce/2019-06/msg00064.html
access.redhat.com/errata/RHSA-2019:3964
access.redhat.com/errata/RHSA-2019:4062
nvd.nist.gov/vuln/detail/CVE-2016-10745
github.com/advisories/GHSA-hj2j-77xm-mc5v
github.com/pypa/advisory-database/tree/main/vulns/jinja2/PYSEC-2019-220.yaml
security-tracker.debian.org/tracker/CVE-2016-10745
github.com/pallets/jinja
advisories.mageia.org/MGASA-2019-0177.html
bugs.mageia.org/show_bug.cgi?id=24787
access.redhat.com/errata/RHSA-2019:1152
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=1698345
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1022.json
access.redhat.com/security/cve/CVE-2016-10745
cve.org/CVERecord?id=CVE-2016-10745
bugzilla.redhat.com/show_bug.cgi?id=1698839
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1237.json
access.redhat.com/security/cve/CVE-2019-10906
cve.org/CVERecord?id=CVE-2019-10906
nvd.nist.gov/vuln/detail/CVE-2019-10906
palletsprojects.com/blog/jinja-2-10-1-released
bugzilla.redhat.com/show_bug.cgi?id=1549191
bugzilla.redhat.com/show_bug.cgi?id=1549192
bugzilla.redhat.com/show_bug.cgi?id=1631822
bugzilla.redhat.com/show_bug.cgi?id=1688169
bugzilla.redhat.com/show_bug.cgi?id=1695572
bugzilla.redhat.com/show_bug.cgi?id=1709349
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1260.json
access.redhat.com/security/cve/CVE-2018-1060
cve.org/CVERecord?id=CVE-2018-1060
nvd.nist.gov/vuln/detail/CVE-2018-1060
docs.python.org/3.6/whatsnew/changelog.html
access.redhat.com/security/cve/CVE-2018-1061
cve.org/CVERecord?id=CVE-2018-1061
nvd.nist.gov/vuln/detail/CVE-2018-1061
access.redhat.com/security/cve/CVE-2018-14647
cve.org/CVERecord?id=CVE-2018-14647
nvd.nist.gov/vuln/detail/CVE-2018-14647
bugs.python.org/issue34623
access.redhat.com/security/cve/CVE-2019-9740
cve.org/CVERecord?id=CVE-2019-9740
nvd.nist.gov/vuln/detail/CVE-2019-9740
access.redhat.com/security/cve/CVE-2019-9947
cve.org/CVERecord?id=CVE-2019-9947
nvd.nist.gov/vuln/detail/CVE-2019-9947
access.redhat.com/errata/RHSA-2019:3172
bugzilla.redhat.com/show_bug.cgi?id=1111223
bugzilla.redhat.com/show_bug.cgi?id=1152515
bugzilla.redhat.com/show_bug.cgi?id=1163020
bugzilla.redhat.com/show_bug.cgi?id=1194093
bugzilla.redhat.com/show_bug.cgi?id=1336439
bugzilla.redhat.com/show_bug.cgi?id=1378579
bugzilla.redhat.com/show_bug.cgi?id=1402136
bugzilla.redhat.com/show_bug.cgi?id=1465521
bugzilla.redhat.com/show_bug.cgi?id=1490850
bugzilla.redhat.com/show_bug.cgi?id=1503426
bugzilla.redhat.com/show_bug.cgi?id=1505932
bugzilla.redhat.com/show_bug.cgi?id=1559006
bugzilla.redhat.com/show_bug.cgi?id=1561876
bugzilla.redhat.com/show_bug.cgi?id=1591629
bugzilla.redhat.com/show_bug.cgi?id=1593480
bugzilla.redhat.com/show_bug.cgi?id=1596411
bugzilla.redhat.com/show_bug.cgi?id=1601602
bugzilla.redhat.com/show_bug.cgi?id=1608712
bugzilla.redhat.com/show_bug.cgi?id=1609371
bugzilla.redhat.com/show_bug.cgi?id=1612800
bugzilla.redhat.com/show_bug.cgi?id=1620529
bugzilla.redhat.com/show_bug.cgi?id=1630548
bugzilla.redhat.com/show_bug.cgi?id=1634755
bugzilla.redhat.com/show_bug.cgi?id=1643649
bugzilla.redhat.com/show_bug.cgi?id=1644201
bugzilla.redhat.com/show_bug.cgi?id=1646814
bugzilla.redhat.com/show_bug.cgi?id=1649944
bugzilla.redhat.com/show_bug.cgi?id=1650641
bugzilla.redhat.com/show_bug.cgi?id=1651389
bugzilla.redhat.com/show_bug.cgi?id=1653293
bugzilla.redhat.com/show_bug.cgi?id=1658265
bugzilla.redhat.com/show_bug.cgi?id=1658284
bugzilla.redhat.com/show_bug.cgi?id=1658318
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3172.json
access.redhat.com/security/cve/CVE-2016-10516
cve.org/CVERecord?id=CVE-2016-10516
nvd.nist.gov/vuln/detail/CVE-2016-10516
access.redhat.com/security/cve/CVE-2018-16470
cve.org/CVERecord?id=CVE-2018-16470
nvd.nist.gov/vuln/detail/CVE-2018-16470
groups.google.com/forum
access.redhat.com/security/cve/CVE-2018-1000632
cve.org/CVERecord?id=CVE-2018-1000632
nvd.nist.gov/vuln/detail/CVE-2018-1000632
access.redhat.com/security/cve/CVE-2019-3893
cve.org/CVERecord?id=CVE-2019-3893
nvd.nist.gov/vuln/detail/CVE-2019-3893
access.redhat.com/security/cve/CVE-2019-10198
cve.org/CVERecord?id=CVE-2019-10198
nvd.nist.gov/vuln/detail/CVE-2019-10198
projects.theforeman.org/issues/27275
access.redhat.com/security/cve/CVE-2019-12387
cve.org/CVERecord?id=CVE-2019-12387
nvd.nist.gov/vuln/detail/CVE-2019-12387
access.redhat.com/security/cve/CVE-2019-14825
cve.org/CVERecord?id=CVE-2019-14825
nvd.nist.gov/vuln/detail/CVE-2019-14825
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3964.json
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_4062.json
suse.com/support/update/announcement/-2022-444/suse-fu-20220444-1
bugzilla.suse.com/1000080
bugzilla.suse.com/1000117
bugzilla.suse.com/1000194
bugzilla.suse.com/1000742
bugzilla.suse.com/1002895
bugzilla.suse.com/1003091
bugzilla.suse.com/1005246
bugzilla.suse.com/1010874
bugzilla.suse.com/1010966
bugzilla.suse.com/1011936
bugzilla.suse.com/1015549
bugzilla.suse.com/1027610
bugzilla.suse.com/1027705
bugzilla.suse.com/1029902
bugzilla.suse.com/1030038
bugzilla.suse.com/1032118
bugzilla.suse.com/1032119
bugzilla.suse.com/1035604
bugzilla.suse.com/1039469
bugzilla.suse.com/1040164
bugzilla.suse.com/1040256
bugzilla.suse.com/1041090
bugzilla.suse.com/1042670
bugzilla.suse.com/1049186
bugzilla.suse.com/1049304
bugzilla.suse.com/1050653
bugzilla.suse.com/1050665
bugzilla.suse.com/1055478
bugzilla.suse.com/1055542
bugzilla.suse.com/1056951
bugzilla.suse.com/1057496
bugzilla.suse.com/1062237
bugzilla.suse.com/1066873
bugzilla.suse.com/1068790
bugzilla.suse.com/1070737
bugzilla.suse.com/1070738
bugzilla.suse.com/1070853
bugzilla.suse.com/1071941
bugzilla.suse.com/1073310
bugzilla.suse.com/1073845
suse.com/security/cve/CVE-2011-3389
suse.com/security/cve/CVE-2011-4944
suse.com/security/cve/CVE-2012-0845
suse.com/security/cve/CVE-2012-1150
suse.com/security/cve/CVE-2013-1752
suse.com/security/cve/CVE-2013-4238
suse.com/security/cve/CVE-2013-4314
suse.com/security/cve/CVE-2014-0012
suse.com/security/cve/CVE-2014-1829
suse.com/security/cve/CVE-2014-1830
suse.com/security/cve/CVE-2014-2667
suse.com/security/cve/CVE-2014-4650
suse.com/security/cve/CVE-2014-7202
suse.com/security/cve/CVE-2014-7203
suse.com/security/cve/CVE-2014-9721
suse.com/security/cve/CVE-2015-2296
suse.com/security/cve/CVE-2016-10745
suse.com/security/cve/CVE-2016-9015
suse.com/security/cve/CVE-2017-18342
suse.com/security/cve/CVE-2018-18074
suse.com/security/cve/CVE-2018-20060
suse.com/security/cve/CVE-2018-7750
suse.com/security/cve/CVE-2019-10906
suse.com/security/cve/CVE-2019-11236
suse.com/security/cve/CVE-2019-11324
suse.com/security/cve/CVE-2019-13132
suse.com/security/cve/CVE-2019-20907
suse.com/security/cve/CVE-2019-20916
suse.com/security/cve/CVE-2019-5010
suse.com/security/cve/CVE-2019-6250
suse.com/security/cve/CVE-2019-8341
suse.com/security/cve/CVE-2019-9740
suse.com/security/cve/CVE-2019-9947
suse.com/security/cve/CVE-2020-14343
suse.com/security/cve/CVE-2020-15166
suse.com/security/cve/CVE-2020-15523
suse.com/security/cve/CVE-2020-15801
suse.com/security/cve/CVE-2020-1747
suse.com/security/cve/CVE-2020-25659
suse.com/security/cve/CVE-2020-26137
ubuntu.com/security/CVE-2016-10745
ubuntu.com/security/notices/USN-4011-1
ubuntu.com/security/notices/USN-4011-2
ubuntu.com/security/CVE-2019-10906
lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KPV2O2QPXQEQ5BKRBRQ2RKA7RHVLTZ7E
Left out here: 217 package rows, 685 references and the rest of 1 source description. The JSON record has them. Also not on the record: 372 package claims. ID and package lookups still check them.