CVE-2019-0223
Withdrawn Advisory: Improper Certificate Validation in Apache Qpid Proton
While investigating bug PROTON-2014, we discovered that under some circumstances Apache Qpid Proton versions 0.9 to 0.27.0 (C library and its language bindings) can connect to a peer anonymously using TLS even when configured to verify the peer certificate while used with OpenSSL versions before 1.1.0. This means that an undetected man in the middle attack could be constructed if an attacker can arrange to intercept TLS traffic.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
7.4
While investigating bug PROTON-2014, we discovered that under some circumstances Apache Qpid Proton versions 0.9 to 0.27.0 (C library and its language bindings) can connect to a peer anonymously using TLS even when configured to verify the peer certificate while used with OpenSSL versions before 1.1.0. This means that an undetected man in the middle attack could be constructed if an attacker can arrange to intercept TLS traffic.
- Record
CVE-2019-0223- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - CVSS 2.0
- 5.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:N - Updated
- 2026-11-02
CVE List No score
While investigating bug PROTON-2014, we discovered that under some circumstances Apache Qpid Proton versions 0.9 to 0.27.0 (C library and its language bindings) can connect to a peer anonymously using TLS even when configured to verify the peer certificate while used with OpenSSL versions before 1.1.0. This means that an undetected man in the middle attack could be constructed if an attacker can arrange to intercept TLS traffic.
- Record
CVE-2019-0223- Updated
- 2026-11-02
EUVDEUVD-2022-2590 No score
While investigating bug PROTON-2014, we discovered that under some circumstances Apache Qpid Proton versions 0.9 to 0.27.0 (C library and its language bindings) can connect to a peer anonymously using TLS even when configured to verify the peer certificate while used with OpenSSL versions before 1.1.0. This means that an undetected man in the middle attack could be constructed if an attacker can arrange to intercept TLS traffic.
- Record
EUVD-2022-2590- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5h6x-m52p-23ph
7.4
Withdrawn Advisory: Improper Certificate Validation in Apache Qpid Proton
Withdrawn Advisory
This advisory has been withdrawn because the vulnerability only affects the Qpid Proton C library and not org.apache.qpid:proton-j. This link has been maintained to preserve external references.
Original Description
While investigating bug PROTON-2014, we discovered that under some circumstances Apache Qpid Proton versions 0.9 to 0.27.0 (C library and its language bindings) can connect to a peer anonymously using TLS even when configured to verify the peer certificate while used with OpenSSL versions before 1.1.0. This means that an undetected man in the middle attack could be constructed if an attacker can arrange to intercept TLS traffic.
- Record
GHSA-5h6x-m52p-23ph- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-295
- Updated
- 2026-11-02
OSV
7.4
While investigating bug PROTON-2014, we discovered that under some circumstances Apache Qpid Proton versions 0.9 to 0.27.0 (C library and its language bindings) can connect to a peer anonymously using TLS even when configured to verify the peer certificate while used with OpenSSL versions before 1.1.0. This means that an undetected man in the middle attack could be constructed if an attacker can arrange to intercept TLS traffic.
- Record
CVE-2019-0223- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2019-0223
7.4
While investigating bug PROTON-2014, we discovered that under some circumstances Apache Qpid Proton versions 0.9 to 0.27.0 (C library and its language bindings) can connect to a peer anonymously using TLS even when configured to verify the peer certificate while used with OpenSSL versions before 1.1.0. This means that an undetected man in the middle attack could be constructed if an attacker can arrange to intercept TLS traffic.
- Record
DEBIAN-CVE-2019-0223- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
Show 15 moreShow less
OSVGHSA-5h6x-m52p-23ph
7.4
Withdrawn Advisory: Improper Certificate Validation in Apache Qpid Proton
Withdrawn Advisory
This advisory has been withdrawn because the vulnerability only affects the Qpid Proton C library and not org.apache.qpid:proton-j. This link has been maintained to preserve external references.
Original Description
While investigating bug PROTON-2014, we discovered that under some circumstances Apache Qpid Proton versions 0.9 to 0.27.0 (C library and its language bindings) can connect to a peer anonymously using TLS even when configured to verify the peer certificate while used with OpenSSL versions before 1.1.0. This means that an undetected man in the middle attack could be constructed if an attacker can arrange to intercept TLS traffic.
- Record
GHSA-5h6x-m52p-23ph- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-295
- Updated
- 2026-11-02
OSVRHBA-2019:4199
7.4
Red Hat Bug Fix Advisory: CloudForms 5.0 bug fix and enhancement update
- Record
RHBA-2019:4199- CVSS 3.0
- 7.4 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2019:0886
7.4
Red Hat Security Advisory: AMQ Clients 2.3.1 release and security update
- Record
RHSA-2019:0886- CVSS 3.0
- 7.4 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2019:1398
7.4
Red Hat Security Advisory: qpid-proton security update
- Record
RHSA-2019:1398- CVSS 3.0
- 7.4 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2019:1399
7.4
Red Hat Security Advisory: qpid-proton security update
- Record
RHSA-2019:1399- CVSS 3.0
- 7.4 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2019:1400
7.4
Red Hat Security Advisory: qpid-proton security update
- Record
RHSA-2019:1400- CVSS 3.0
- 7.4 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2019:2777
7.4
Red Hat Security Advisory: qpid-proton security update
- Record
RHSA-2019:2777- CVSS 3.0
- 7.4 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2019:2778
7.4
Red Hat Security Advisory: qpid-proton security update
- Record
RHSA-2019:2778- CVSS 3.0
- 7.4 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2019:2779
7.4
Red Hat Security Advisory: qpid-proton security update
- Record
RHSA-2019:2779- CVSS 3.0
- 7.4 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2019:2780
7.4
Red Hat Security Advisory: qpid-proton security update
- Record
RHSA-2019:2780- CVSS 3.0
- 7.4 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2019:2781
7.4
Red Hat Security Advisory: qpid-proton security update
- Record
RHSA-2019:2781- CVSS 3.0
- 7.4 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2019:2782
7.4
Red Hat Security Advisory: qpid-proton security update
- Record
RHSA-2019:2782- CVSS 3.0
- 7.4 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-0223
7.4
While investigating bug PROTON-2014, we discovered that under some circumstances Apache Qpid Proton versions 0.9 to 0.27.0 (C library and its language bindings) can connect to a peer anonymously using TLS even when configured to verify the peer certificate while used with OpenSSL versions before 1.1.0. This means that an undetected man in the middle attack could be constructed if an attacker can arrange to intercept TLS traffic.
- Record
UBUNTU-CVE-2019-0223- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:13808-1 No score
libqpid-proton-core10-0.38.0-2.1 on GA media
These are all security issues fixed in the libqpid-proton-core10-0.38.0-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13808-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:1074-1 No score
Security update for qpid-proton
This update for qpid-proton fixes the following issues:
- CVE-2019-0223: Fixed TLS Man in the Middle Vulnerability (bsc#1133158).
The following non-security bugs were fixed:
- Fix build with OpenSSL 3.0.0 (bsc#1172267)
- Sort linked .o files to make package build reproducible (bsc#1041090)
- Fix build with gcc8 (bsc#1084627)
- Move libqpid-proton-core to a different package to fix a rpmlint error (bsc#1191783)
- Record
SUSE-SU-2024:1074-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
qpid-protonDebian:12 |
before 0.22.0-1 | 0.22.0-1 |
qpid-protonDebian:13 |
before 0.22.0-1 | 0.22.0-1 |
qpid-protonDebian:14 |
before 0.22.0-1 | 0.22.0-1 |
ansible-runnerRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.3.4-2.el8ar | 0:1.3.4-2.el8ar |
ansible-tower-venv-ansibleRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:3.5.2-1.el8at | 0:3.5.2-1.el8at |
cfmeRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:5.11.0.28-1.el8cf | 0:5.11.0.28-1.el8cf |
cfme-amazon-smartstateRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:5.11.0.28-1.el8cf | 0:5.11.0.28-1.el8cf |
cfme-applianceRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:5.11.0.28-1.el8cf | 0:5.11.0.28-1.el8cf |
cfme-appliance-commonRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:5.11.0.28-1.el8cf | 0:5.11.0.28-1.el8cf |
cfme-appliance-toolsRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:5.11.0.28-1.el8cf | 0:5.11.0.28-1.el8cf |
Show 257 moreShow less
| Package | Affected | Fixed |
|---|---|---|
cfme-gemsetRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:5.11.0.28-1.el8cf | 0:5.11.0.28-1.el8cf |
ovirt-ansible-cluster-upgradeRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.1.13-1.el8ev | 0:1.1.13-1.el8ev |
ovirt-ansible-disaster-recoveryRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.2.0-1.el8ev | 0:1.2.0-1.el8ev |
ovirt-ansible-engine-setupRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.1.9-1.el8ev | 0:1.1.9-1.el8ev |
ovirt-ansible-hosted-engine-setupRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.0.26-1.el8ev | 0:1.0.26-1.el8ev |
ovirt-ansible-image-templateRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.1.11-1.el8ev | 0:1.1.11-1.el8ev |
ovirt-ansible-infraRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.1.12-1.el8ev | 0:1.1.12-1.el8ev |
ovirt-ansible-manageiqRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.1.14-1.el8ev | 0:1.1.14-1.el8ev |
ovirt-ansible-repositoriesRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.1.5-1.el8ev | 0:1.1.5-1.el8ev |
ovirt-ansible-rolesRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.1.7-2.el8ev | 0:1.1.7-2.el8ev |
ovirt-ansible-shutdown-envRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.0.3-1.el8ev | 0:1.0.3-1.el8ev |
ovirt-ansible-vm-infraRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.1.19-1.el8ev | 0:1.1.19-1.el8ev |
princeRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:12.4-1.el8cf | 0:12.4-1.el8cf |
python-bambouRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:3.0.1-2.el8cf | 0:3.0.1-2.el8cf |
python-coloramaRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.4.1-1.el8ost | 0:0.4.1-1.el8ost |
python-daemonRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:2.1.2-9.el8ar | 0:2.1.2-9.el8ar |
python-funcsigsRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.0.2-3.el8ost | 0:1.0.2-3.el8ost |
python-futureRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.16.0-1.el8cf | 0:0.16.0-1.el8cf |
python-lockfileRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 1:0.11.0-8.el8ar | 1:0.11.0-8.el8ar |
python-mockRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:2.0.0-11.el8ost | 0:2.0.0-11.el8ost |
python-pbrRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:5.1.2-2.el8ost | 0:5.1.2-2.el8ost |
python-pexpectRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:4.6-2.el8ar | 0:4.6-2.el8ar |
python-psutilRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:5.4.3-5.el8ar | 0:5.4.3-5.el8ar |
python-psutil-debugsourceRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:5.4.3-5.el8ar | 0:5.4.3-5.el8ar |
python-pylxcaRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:2.1.1-2.el8cf | 0:2.1.1-2.el8cf |
python-requests-toolbeltRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.8.0-2.el8cf | 0:0.8.0-2.el8cf |
python-tabulateRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.8.2-1.el8cf | 0:0.8.2-1.el8cf |
python-vspkRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:5.3.2-2.el8cf | 0:5.3.2-2.el8cf |
python3-ansible-runnerRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.3.4-2.el8ar | 0:1.3.4-2.el8ar |
python3-bambouRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:3.0.1-2.el8cf | 0:3.0.1-2.el8cf |
python3-coloramaRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.4.1-1.el8ost | 0:0.4.1-1.el8ost |
python3-daemonRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:2.1.2-9.el8ar | 0:2.1.2-9.el8ar |
python3-funcsigsRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.0.2-3.el8ost | 0:1.0.2-3.el8ost |
python3-futureRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.16.0-1.el8cf | 0:0.16.0-1.el8cf |
python3-lockfileRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 1:0.11.0-8.el8ar | 1:0.11.0-8.el8ar |
python3-mockRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:2.0.0-11.el8ost | 0:2.0.0-11.el8ost |
python3-ovirt-engine-sdk4Red Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:4.3.2-1.el8ev | 0:4.3.2-1.el8ev |
python3-ovirt-engine-sdk4-debuginfoRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:4.3.2-1.el8ev | 0:4.3.2-1.el8ev |
python3-ovirt-engine-sdk4-debugsourceRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:4.3.2-1.el8ev | 0:4.3.2-1.el8ev |
python3-pbrRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:5.1.2-2.el8ost | 0:5.1.2-2.el8ost |
python3-pexpectRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:4.6-2.el8ar | 0:4.6-2.el8ar |
python3-psutilRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:5.4.3-5.el8ar | 0:5.4.3-5.el8ar |
python3-psutil-debuginfoRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:5.4.3-5.el8ar | 0:5.4.3-5.el8ar |
python3-pylxcaRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:2.1.1-2.el8cf | 0:2.1.1-2.el8cf |
python3-qpid-proton-debuginfoRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.28.0-1.el8 | 0:0.28.0-1.el8 |
python3-requests-toolbeltRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.8.0-2.el8cf | 0:0.8.0-2.el8cf |
python3-tabulateRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.8.2-1.el8cf | 0:0.8.2-1.el8cf |
python3-vspkRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:5.3.2-2.el8cf | 0:5.3.2-2.el8cf |
qpid-protonRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.28.0-1.el8 | 0:0.28.0-1.el8 |
qpid-proton-cRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.28.0-1.el8 | 0:0.28.0-1.el8 |
qpid-proton-c-debuginfoRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.28.0-1.el8 | 0:0.28.0-1.el8 |
qpid-proton-c-develRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.28.0-1.el8 | 0:0.28.0-1.el8 |
qpid-proton-c-docsRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.28.0-1.el8 | 0:0.28.0-1.el8 |
qpid-proton-cpp-debuginfoRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.28.0-1.el8 | 0:0.28.0-1.el8 |
qpid-proton-debuginfoRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.28.0-1.el8 | 0:0.28.0-1.el8 |
qpid-proton-debugsourceRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.28.0-1.el8 | 0:0.28.0-1.el8 |
repmgr10Red Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:4.0.6-3.el8cf | 0:4.0.6-3.el8cf |
repmgr10-debuginfoRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:4.0.6-3.el8cf | 0:4.0.6-3.el8cf |
repmgr10-debugsourceRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:4.0.6-3.el8cf | 0:4.0.6-3.el8cf |
rubygem-bcryptRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:3.1.13-1.el8cf | 0:3.1.13-1.el8cf |
rubygem-bcrypt-debuginfoRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:3.1.13-1.el8cf | 0:3.1.13-1.el8cf |
rubygem-bcrypt-debugsourceRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:3.1.13-1.el8cf | 0:3.1.13-1.el8cf |
rubygem-bcrypt-docRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:3.1.13-1.el8cf | 0:3.1.13-1.el8cf |
rubygem-byebugRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:11.0.1-1.el8cf | 0:11.0.1-1.el8cf |
rubygem-byebug-debuginfoRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:11.0.1-1.el8cf | 0:11.0.1-1.el8cf |
rubygem-byebug-debugsourceRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:11.0.1-1.el8cf | 0:11.0.1-1.el8cf |
rubygem-byebug-docRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:11.0.1-1.el8cf | 0:11.0.1-1.el8cf |
rubygem-escape_utilsRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.2.1-1.el8cf | 0:1.2.1-1.el8cf |
rubygem-escape_utils-debuginfoRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.2.1-1.el8cf | 0:1.2.1-1.el8cf |
rubygem-escape_utils-debugsourceRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.2.1-1.el8cf | 0:1.2.1-1.el8cf |
rubygem-escape_utils-docRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.2.1-1.el8cf | 0:1.2.1-1.el8cf |
rubygem-ffiRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.9.25-1.el8cf | 0:1.9.25-1.el8cf |
rubygem-ffi-debuginfoRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.9.25-1.el8cf | 0:1.9.25-1.el8cf |
rubygem-ffi-debugsourceRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.9.25-1.el8cf | 0:1.9.25-1.el8cf |
rubygem-ffi-docRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.9.25-1.el8cf | 0:1.9.25-1.el8cf |
rubygem-hamlitRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:2.8.10-1.el8cf | 0:2.8.10-1.el8cf |
rubygem-hamlit-debuginfoRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:2.8.10-1.el8cf | 0:2.8.10-1.el8cf |
rubygem-hamlit-debugsourceRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:2.8.10-1.el8cf | 0:2.8.10-1.el8cf |
rubygem-hamlit-docRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:2.8.10-1.el8cf | 0:2.8.10-1.el8cf |
rubygem-http_parser.rbRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.6.0-1.el8cf | 0:0.6.0-1.el8cf |
rubygem-http_parser.rb-debuginfoRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.6.0-1.el8cf | 0:0.6.0-1.el8cf |
rubygem-http_parser.rb-debugsourceRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.6.0-1.el8cf | 0:0.6.0-1.el8cf |
rubygem-http_parser.rb-docRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.6.0-1.el8cf | 0:0.6.0-1.el8cf |
rubygem-linux_block_deviceRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.2.1-1.el8cf | 0:0.2.1-1.el8cf |
rubygem-linux_block_device-debuginfoRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.2.1-1.el8cf | 0:0.2.1-1.el8cf |
rubygem-linux_block_device-debugsourceRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.2.1-1.el8cf | 0:0.2.1-1.el8cf |
rubygem-linux_block_device-docRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.2.1-1.el8cf | 0:0.2.1-1.el8cf |
rubygem-memory_bufferRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.1.0-2.el8cf | 0:0.1.0-2.el8cf |
rubygem-memory_buffer-debuginfoRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.1.0-2.el8cf | 0:0.1.0-2.el8cf |
rubygem-memory_buffer-debugsourceRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.1.0-2.el8cf | 0:0.1.0-2.el8cf |
rubygem-memory_buffer-docRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.1.0-2.el8cf | 0:0.1.0-2.el8cf |
rubygem-nio4rRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:2.4.0-1.el8cf | 0:2.4.0-1.el8cf |
rubygem-nio4r-debuginfoRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:2.4.0-1.el8cf | 0:2.4.0-1.el8cf |
rubygem-nio4r-debugsourceRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:2.4.0-1.el8cf | 0:2.4.0-1.el8cf |
rubygem-nio4r-docRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:2.4.0-1.el8cf | 0:2.4.0-1.el8cf |
rubygem-nokogiriRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.8.5-1.el8cf | 0:1.8.5-1.el8cf |
rubygem-nokogiri-debuginfoRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.8.5-1.el8cf | 0:1.8.5-1.el8cf |
rubygem-nokogiri-debugsourceRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.8.5-1.el8cf | 0:1.8.5-1.el8cf |
rubygem-nokogiri-docRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.8.5-1.el8cf | 0:1.8.5-1.el8cf |
rubygem-ovirt-engine-sdk4Red Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:4.3.0-1.el8cf | 0:4.3.0-1.el8cf |
rubygem-ovirt-engine-sdk4-debuginfoRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:4.3.0-1.el8cf | 0:4.3.0-1.el8cf |
rubygem-ovirt-engine-sdk4-debugsourceRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:4.3.0-1.el8cf | 0:4.3.0-1.el8cf |
rubygem-ovirt-engine-sdk4-docRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:4.3.0-1.el8cf | 0:4.3.0-1.el8cf |
rubygem-pumaRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:3.7.1-1.el8cf | 0:3.7.1-1.el8cf |
rubygem-puma-debuginfoRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:3.7.1-1.el8cf | 0:3.7.1-1.el8cf |
rubygem-puma-debugsourceRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:3.7.1-1.el8cf | 0:3.7.1-1.el8cf |
rubygem-puma-docRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:3.7.1-1.el8cf | 0:3.7.1-1.el8cf |
rubygem-qpid_protonRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.26.0-1.el8cf | 0:0.26.0-1.el8cf |
rubygem-qpid_proton-debuginfoRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.26.0-1.el8cf | 0:0.26.0-1.el8cf |
rubygem-qpid_proton-debugsourceRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.26.0-1.el8cf | 0:0.26.0-1.el8cf |
rubygem-qpid_proton-docRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.26.0-1.el8cf | 0:0.26.0-1.el8cf |
rubygem-ruggedRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.28.2-1.el8cf | 0:0.28.2-1.el8cf |
rubygem-rugged-debuginfoRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.28.2-1.el8cf | 0:0.28.2-1.el8cf |
rubygem-rugged-debugsourceRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.28.2-1.el8cf | 0:0.28.2-1.el8cf |
rubygem-rugged-docRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.28.2-1.el8cf | 0:0.28.2-1.el8cf |
rubygem-sasscRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:2.0.1-1.el8cf | 0:2.0.1-1.el8cf |
rubygem-sassc-debuginfoRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:2.0.1-1.el8cf | 0:2.0.1-1.el8cf |
rubygem-sassc-debugsourceRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:2.0.1-1.el8cf | 0:2.0.1-1.el8cf |
rubygem-sassc-docRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:2.0.1-1.el8cf | 0:2.0.1-1.el8cf |
rubygem-sqlite3Red Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.3.13-2.el8cf | 0:1.3.13-2.el8cf |
rubygem-sqlite3-debuginfoRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.3.13-2.el8cf | 0:1.3.13-2.el8cf |
rubygem-sqlite3-debugsourceRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.3.13-2.el8cf | 0:1.3.13-2.el8cf |
rubygem-sqlite3-docRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.3.13-2.el8cf | 0:1.3.13-2.el8cf |
rubygem-surro-gateRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.0.5-1.el8cf | 0:1.0.5-1.el8cf |
rubygem-surro-gate-debuginfoRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.0.5-1.el8cf | 0:1.0.5-1.el8cf |
rubygem-surro-gate-debugsourceRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.0.5-1.el8cf | 0:1.0.5-1.el8cf |
rubygem-surro-gate-docRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.0.5-1.el8cf | 0:1.0.5-1.el8cf |
rubygem-unf_extRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.0.7.6-1.el8cf | 0:0.0.7.6-1.el8cf |
rubygem-unf_ext-debuginfoRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.0.7.6-1.el8cf | 0:0.0.7.6-1.el8cf |
rubygem-unf_ext-debugsourceRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.0.7.6-1.el8cf | 0:0.0.7.6-1.el8cf |
rubygem-unf_ext-docRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.0.7.6-1.el8cf | 0:0.0.7.6-1.el8cf |
rubygem-websocket-driverRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.6.5-1.el8cf | 0:0.6.5-1.el8cf |
rubygem-websocket-driver-debuginfoRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.6.5-1.el8cf | 0:0.6.5-1.el8cf |
rubygem-websocket-driver-debugsourceRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.6.5-1.el8cf | 0:0.6.5-1.el8cf |
rubygem-websocket-driver-docRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:0.6.5-1.el8cf | 0:0.6.5-1.el8cf |
smemRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.4-1.el8cf | 0:1.4-1.el8cf |
v2v-conversion-hostRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.14.2-1.el8ev | 0:1.14.2-1.el8ev |
v2v-conversion-host-ansibleRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.14.2-1.el8ev | 0:1.14.2-1.el8ev |
wmiRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.3.14-8.el8cf | 0:1.3.14-8.el8cf |
wmi-debuginfoRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.3.14-8.el8cf | 0:1.3.14-8.el8cf |
wmi-debugsourceRed Hat:cloudforms_managementengine:5.11::el8 From an advisory covering 2 CVEs |
before 0:1.3.14-8.el8cf | 0:1.3.14-8.el8cf |
python-qpid-protonRed Hat:a_mq_clients:2::el6 |
before 0:0.27.0-3.el6 | 0:0.27.0-3.el6 |
python-qpid-proton-docsRed Hat:a_mq_clients:2::el6 |
before 0:0.27.0-3.el6 | 0:0.27.0-3.el6 |
qpid-protonRed Hat:a_mq_clients:2::el6 |
before 0:0.27.0-3.el6 | 0:0.27.0-3.el6 |
qpid-proton-cRed Hat:a_mq_clients:2::el6 |
before 0:0.27.0-3.el6 | 0:0.27.0-3.el6 |
qpid-proton-c-develRed Hat:a_mq_clients:2::el6 |
before 0:0.27.0-3.el6 | 0:0.27.0-3.el6 |
qpid-proton-c-docsRed Hat:a_mq_clients:2::el6 |
before 0:0.27.0-3.el6 | 0:0.27.0-3.el6 |
qpid-proton-cppRed Hat:a_mq_clients:2::el6 |
before 0:0.27.0-3.el6 | 0:0.27.0-3.el6 |
qpid-proton-cpp-develRed Hat:a_mq_clients:2::el6 |
before 0:0.27.0-3.el6 | 0:0.27.0-3.el6 |
qpid-proton-cpp-docsRed Hat:a_mq_clients:2::el6 |
before 0:0.27.0-3.el6 | 0:0.27.0-3.el6 |
qpid-proton-debuginfoRed Hat:a_mq_clients:2::el6 |
before 0:0.27.0-3.el6 | 0:0.27.0-3.el6 |
qpid-proton-testsRed Hat:a_mq_clients:2::el6 |
before 0:0.27.0-3.el6 | 0:0.27.0-3.el6 |
python-qpid-protonRed Hat:a_mq_clients:2::el7 |
before 0:0.27.0-3.el7 | 0:0.27.0-3.el7 |
python-qpid-proton-docsRed Hat:a_mq_clients:2::el7 |
before 0:0.27.0-3.el7 | 0:0.27.0-3.el7 |
qpid-protonRed Hat:a_mq_clients:2::el7 |
before 0:0.27.0-3.el7 | 0:0.27.0-3.el7 |
qpid-proton-cRed Hat:a_mq_clients:2::el7 |
before 0:0.27.0-3.el7 | 0:0.27.0-3.el7 |
qpid-proton-c-develRed Hat:a_mq_clients:2::el7 |
before 0:0.27.0-3.el7 | 0:0.27.0-3.el7 |
qpid-proton-c-docsRed Hat:a_mq_clients:2::el7 |
before 0:0.27.0-3.el7 | 0:0.27.0-3.el7 |
qpid-proton-cppRed Hat:a_mq_clients:2::el7 |
before 0:0.27.0-3.el7 | 0:0.27.0-3.el7 |
qpid-proton-cpp-develRed Hat:a_mq_clients:2::el7 |
before 0:0.27.0-3.el7 | 0:0.27.0-3.el7 |
qpid-proton-cpp-docsRed Hat:a_mq_clients:2::el7 |
before 0:0.27.0-3.el7 | 0:0.27.0-3.el7 |
qpid-proton-debuginfoRed Hat:a_mq_clients:2::el7 |
before 0:0.27.0-3.el7 | 0:0.27.0-3.el7 |
qpid-proton-testsRed Hat:a_mq_clients:2::el7 |
before 0:0.27.0-3.el7 | 0:0.27.0-3.el7 |
qpid-protonRed Hat:openstack-optools:14::el7 |
before 0:0.27.0-3.el7 | 0:0.27.0-3.el7 |
qpid-proton-cRed Hat:openstack-optools:14::el7 |
before 0:0.27.0-3.el7 | 0:0.27.0-3.el7 |
qpid-proton-debuginfoRed Hat:openstack-optools:14::el7 |
before 0:0.27.0-3.el7 | 0:0.27.0-3.el7 |
python-qpid-protonRed Hat:openstack:14::el7 |
before 0:0.27.0-3.el7 | 0:0.27.0-3.el7 |
qpid-protonRed Hat:openstack:14::el7 |
before 0:0.27.0-3.el7 | 0:0.27.0-3.el7 |
qpid-proton-cRed Hat:openstack:14::el7 |
before 0:0.27.0-3.el7 | 0:0.27.0-3.el7 |
qpid-proton-debuginfoRed Hat:openstack:14::el7 |
before 0:0.27.0-3.el7 | 0:0.27.0-3.el7 |
jsoncppRed Hat:openstack:13::el7 |
before 0:1.7.7-1.el7 | 0:1.7.7-1.el7 |
jsoncpp-debuginfoRed Hat:openstack:13::el7 |
before 0:1.7.7-1.el7 | 0:1.7.7-1.el7 |
python-qpid-protonRed Hat:openstack:13::el7 |
before 0:0.27.0-3.el7 | 0:0.27.0-3.el7 |
qpid-protonRed Hat:openstack:13::el7 |
before 0:0.27.0-3.el7 | 0:0.27.0-3.el7 |
qpid-proton-cRed Hat:openstack:13::el7 |
before 0:0.27.0-3.el7 | 0:0.27.0-3.el7 |
qpid-proton-cppRed Hat:openstack:13::el7 |
before 0:0.27.0-3.el7 | 0:0.27.0-3.el7 |
qpid-proton-debuginfoRed Hat:openstack:13::el7 |
before 0:0.27.0-3.el7 | 0:0.27.0-3.el7 |
python-qpid-protonRed Hat:satellite_capsule:6.5::el7 |
before 0:0.28.0-1.el7 | 0:0.28.0-1.el7 |
qpid-protonRed Hat:satellite_capsule:6.5::el7 |
before 0:0.28.0-1.el7 | 0:0.28.0-1.el7 |
qpid-proton-cRed Hat:satellite_capsule:6.5::el7 |
before 0:0.28.0-1.el7 | 0:0.28.0-1.el7 |
qpid-proton-debuginfoRed Hat:satellite_capsule:6.5::el7 |
before 0:0.28.0-1.el7 | 0:0.28.0-1.el7 |
python-qpid-protonRed Hat:satellite:6.5::el7 |
before 0:0.28.0-1.el7 | 0:0.28.0-1.el7 |
qpid-protonRed Hat:satellite:6.5::el7 |
before 0:0.28.0-1.el7 | 0:0.28.0-1.el7 |
qpid-proton-cRed Hat:satellite:6.5::el7 |
before 0:0.28.0-1.el7 | 0:0.28.0-1.el7 |
qpid-proton-debuginfoRed Hat:satellite:6.5::el7 |
before 0:0.28.0-1.el7 | 0:0.28.0-1.el7 |
python-qpid-protonRed Hat:satellite_capsule:6.4::el7 |
before 0:0.16.0-14.el7sat | 0:0.16.0-14.el7sat |
qpid-protonRed Hat:satellite_capsule:6.4::el7 |
before 0:0.16.0-14.el7sat | 0:0.16.0-14.el7sat |
qpid-proton-cRed Hat:satellite_capsule:6.4::el7 |
before 0:0.16.0-14.el7sat | 0:0.16.0-14.el7sat |
qpid-proton-debuginfoRed Hat:satellite_capsule:6.4::el7 |
before 0:0.16.0-14.el7sat | 0:0.16.0-14.el7sat |
python-qpid-protonRed Hat:satellite:6.4::el7 |
before 0:0.16.0-14.el7sat | 0:0.16.0-14.el7sat |
qpid-protonRed Hat:satellite:6.4::el7 |
before 0:0.16.0-14.el7sat | 0:0.16.0-14.el7sat |
qpid-proton-cRed Hat:satellite:6.4::el7 |
before 0:0.16.0-14.el7sat | 0:0.16.0-14.el7sat |
qpid-proton-debuginfoRed Hat:satellite:6.4::el7 |
before 0:0.16.0-14.el7sat | 0:0.16.0-14.el7sat |
python-qpid-protonRed Hat:satellite_capsule:6.3::el7 |
before 0:0.16.0-14.el7sat | 0:0.16.0-14.el7sat |
qpid-protonRed Hat:satellite_capsule:6.3::el7 |
before 0:0.16.0-14.el7sat | 0:0.16.0-14.el7sat |
qpid-proton-cRed Hat:satellite_capsule:6.3::el7 |
before 0:0.16.0-14.el7sat | 0:0.16.0-14.el7sat |
qpid-proton-debuginfoRed Hat:satellite_capsule:6.3::el7 |
before 0:0.16.0-14.el7sat | 0:0.16.0-14.el7sat |
python-qpid-protonRed Hat:satellite:6.3::el7 |
before 0:0.16.0-14.el7sat | 0:0.16.0-14.el7sat |
qpid-protonRed Hat:satellite:6.3::el7 |
before 0:0.16.0-14.el7sat | 0:0.16.0-14.el7sat |
qpid-proton-cRed Hat:satellite:6.3::el7 |
before 0:0.16.0-14.el7sat | 0:0.16.0-14.el7sat |
qpid-proton-debuginfoRed Hat:satellite:6.3::el7 |
before 0:0.16.0-14.el7sat | 0:0.16.0-14.el7sat |
python-qpid-protonRed Hat:rhel_satellite_tools:6.5::el5 |
before 0:0.9-22.el5 | 0:0.9-22.el5 |
qpid-protonRed Hat:rhel_satellite_tools:6.5::el5 |
before 0:0.9-22.el5 | 0:0.9-22.el5 |
qpid-proton-cRed Hat:rhel_satellite_tools:6.5::el5 |
before 0:0.9-22.el5 | 0:0.9-22.el5 |
qpid-proton-debuginfoRed Hat:rhel_satellite_tools:6.5::el5 |
before 0:0.9-22.el5 | 0:0.9-22.el5 |
python-qpid-protonRed Hat:rhel_satellite_tools:6.5::el6 |
before 0:0.16.0-14.el6sat | 0:0.16.0-14.el6sat |
qpid-protonRed Hat:rhel_satellite_tools:6.5::el6 |
before 0:0.16.0-14.el6sat | 0:0.16.0-14.el6sat |
qpid-proton-cRed Hat:rhel_satellite_tools:6.5::el6 |
before 0:0.16.0-14.el6sat | 0:0.16.0-14.el6sat |
qpid-proton-debuginfoRed Hat:rhel_satellite_tools:6.5::el6 |
before 0:0.16.0-14.el6sat | 0:0.16.0-14.el6sat |
python-qpid-protonRed Hat:rhel_satellite_tools:6.5::el7 |
before 0:0.28.0-1.el7 | 0:0.28.0-1.el7 |
qpid-protonRed Hat:rhel_satellite_tools:6.5::el7 |
before 0:0.28.0-1.el7 | 0:0.28.0-1.el7 |
qpid-proton-cRed Hat:rhel_satellite_tools:6.5::el7 |
before 0:0.28.0-1.el7 | 0:0.28.0-1.el7 |
qpid-proton-debuginfoRed Hat:rhel_satellite_tools:6.5::el7 |
before 0:0.28.0-1.el7 | 0:0.28.0-1.el7 |
python-qpid-protonRed Hat:enterprise_linux:7::hypervisor |
before 0:0.28.0-1.el7 | 0:0.28.0-1.el7 |
qpid-protonRed Hat:enterprise_linux:7::hypervisor |
before 0:0.28.0-1.el7 | 0:0.28.0-1.el7 |
qpid-proton-cRed Hat:enterprise_linux:7::hypervisor |
before 0:0.28.0-1.el7 | 0:0.28.0-1.el7 |
qpid-proton-debuginfoRed Hat:enterprise_linux:7::hypervisor |
before 0:0.28.0-1.el7 | 0:0.28.0-1.el7 |
python3-qpid-protonRed Hat:rhel_satellite_tools:6.5::el8 |
before 0:0.28.0-1.el8 | 0:0.28.0-1.el8 |
python3-qpid-proton-debuginfoRed Hat:rhel_satellite_tools:6.5::el8 |
before 0:0.28.0-1.el8 | 0:0.28.0-1.el8 |
qpid-protonRed Hat:rhel_satellite_tools:6.5::el8 |
before 0:0.28.0-1.el8 | 0:0.28.0-1.el8 |
qpid-proton-cRed Hat:rhel_satellite_tools:6.5::el8 |
before 0:0.28.0-1.el8 | 0:0.28.0-1.el8 |
qpid-proton-c-debuginfoRed Hat:rhel_satellite_tools:6.5::el8 |
before 0:0.28.0-1.el8 | 0:0.28.0-1.el8 |
qpid-proton-cpp-debuginfoRed Hat:rhel_satellite_tools:6.5::el8 |
before 0:0.28.0-1.el8 | 0:0.28.0-1.el8 |
qpid-proton-debuginfoRed Hat:rhel_satellite_tools:6.5::el8 |
before 0:0.28.0-1.el8 | 0:0.28.0-1.el8 |
qpid-proton-debugsourceRed Hat:rhel_satellite_tools:6.5::el8 |
before 0:0.28.0-1.el8 | 0:0.28.0-1.el8 |
python-qpid-protonRed Hat:rhel_satellite_tools:6.3::el5 |
before 0:0.9-22.el5 | 0:0.9-22.el5 |
qpid-protonRed Hat:rhel_satellite_tools:6.3::el5 |
before 0:0.9-22.el5 | 0:0.9-22.el5 |
qpid-proton-cRed Hat:rhel_satellite_tools:6.3::el5 |
before 0:0.9-22.el5 | 0:0.9-22.el5 |
qpid-proton-debuginfoRed Hat:rhel_satellite_tools:6.3::el5 |
before 0:0.9-22.el5 | 0:0.9-22.el5 |
python-qpid-protonRed Hat:rhel_satellite_tools:6.3::el6 |
before 0:0.16.0-14.el6sat | 0:0.16.0-14.el6sat |
qpid-protonRed Hat:rhel_satellite_tools:6.3::el6 |
before 0:0.16.0-14.el6sat | 0:0.16.0-14.el6sat |
qpid-proton-cRed Hat:rhel_satellite_tools:6.3::el6 |
before 0:0.16.0-14.el6sat | 0:0.16.0-14.el6sat |
qpid-proton-debuginfoRed Hat:rhel_satellite_tools:6.3::el6 |
before 0:0.16.0-14.el6sat | 0:0.16.0-14.el6sat |
python-qpid-protonRed Hat:rhel_satellite_tools:6.3::el7 |
before 0:0.16.0-14.el7sat | 0:0.16.0-14.el7sat |
qpid-protonRed Hat:rhel_satellite_tools:6.3::el7 |
before 0:0.16.0-14.el7sat | 0:0.16.0-14.el7sat |
qpid-proton-cRed Hat:rhel_satellite_tools:6.3::el7 |
before 0:0.16.0-14.el7sat | 0:0.16.0-14.el7sat |
qpid-proton-debuginfoRed Hat:rhel_satellite_tools:6.3::el7 |
before 0:0.16.0-14.el7sat | 0:0.16.0-14.el7sat |
python-qpid-protonRed Hat:rhel_satellite_tools:6.4::el5 |
before 0:0.9-22.el5 | 0:0.9-22.el5 |
qpid-protonRed Hat:rhel_satellite_tools:6.4::el5 |
before 0:0.9-22.el5 | 0:0.9-22.el5 |
qpid-proton-cRed Hat:rhel_satellite_tools:6.4::el5 |
before 0:0.9-22.el5 | 0:0.9-22.el5 |
qpid-proton-debuginfoRed Hat:rhel_satellite_tools:6.4::el5 |
before 0:0.9-22.el5 | 0:0.9-22.el5 |
python-qpid-protonRed Hat:rhel_satellite_tools:6.4::el6 |
before 0:0.16.0-14.el6sat | 0:0.16.0-14.el6sat |
qpid-protonRed Hat:rhel_satellite_tools:6.4::el6 |
before 0:0.16.0-14.el6sat | 0:0.16.0-14.el6sat |
qpid-proton-cRed Hat:rhel_satellite_tools:6.4::el6 |
before 0:0.16.0-14.el6sat | 0:0.16.0-14.el6sat |
qpid-proton-debuginfoRed Hat:rhel_satellite_tools:6.4::el6 |
before 0:0.16.0-14.el6sat | 0:0.16.0-14.el6sat |
python-qpid-protonRed Hat:rhel_satellite_tools:6.4::el7 |
before 0:0.16.0-14.el7sat | 0:0.16.0-14.el7sat |
qpid-protonRed Hat:rhel_satellite_tools:6.4::el7 |
before 0:0.16.0-14.el7sat | 0:0.16.0-14.el7sat |
qpid-proton-cRed Hat:rhel_satellite_tools:6.4::el7 |
before 0:0.16.0-14.el7sat | 0:0.16.0-14.el7sat |
qpid-proton-debuginfoRed Hat:rhel_satellite_tools:6.4::el7 |
before 0:0.16.0-14.el7sat | 0:0.16.0-14.el7sat |
python-qpid-protonRed Hat:enterprise_linux:7::hypervisor |
before 0:0.16.0-14.el7sat | 0:0.16.0-14.el7sat |
qpid-protonRed Hat:enterprise_linux:7::hypervisor |
before 0:0.16.0-14.el7sat | 0:0.16.0-14.el7sat |
qpid-proton-cRed Hat:enterprise_linux:7::hypervisor |
before 0:0.16.0-14.el7sat | 0:0.16.0-14.el7sat |
qpid-proton-debuginfoRed Hat:enterprise_linux:7::hypervisor |
before 0:0.16.0-14.el7sat | 0:0.16.0-14.el7sat |
qpid-protonSUSE:Linux Enterprise Module for Package Hub 15 SP5 |
before 0.38.0-150000.6.3.1 | 0.38.0-150000.6.3.1 |
qpid-protonopenSUSE:Leap 15.5 |
before 0.38.0-150000.6.3.1 | 0.38.0-150000.6.3.1 |
qpid-protonUbuntu:16.04:LTS |
All versions, plus listed versions 0.7-20.10-2 |
None known |
qpid-protonUbuntu:18.04:LTS |
All versions, plus listed versions 0.14.0-5.10.14.0-5.1ubuntu1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-0223 is a high vulnerability (CVSS 7.4) in Apache Qpid, published April 23, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.23%, the 93rd percentile. Fixed in qpid-proton 0.22.0-1.
References
lists.apache.org/thread.html/49c83f0acce5ceaeffca51714ec2ba0f0199bcb8f99167181bba441b%40%3Cdev.qpid.apache.org%3E
lists.apache.org/thread.html/3adb2f020f705b4fd453982992a68cd10f9d5ac728b699efdb73c1f5%40%3Cdev.qpid.apache.org%3E
openwall.com/lists/oss-security/2019/04/23/4
lists.apache.org/thread.html/d9c9a882a292e2defaed1f954528c916fb64497ce57db652727e39b0%40%3Cannounce.apache.org%3E
lists.apache.org/thread.html/008ee5e78e5a090e1fcc5f6617f425e4e51d59f03d3eda2dd006df9f%40%3Cusers.qpid.apache.org%3E
issues.apache.org/jira/browse/PROTON-2014?page=com.atlassian.jira.plugin.system.issuetabpanels%3Aall-tabpanel
Show 194 moreShow less
lists.apache.org/thread.html/914424e4d798a340f523b6169aaf39b626971d9bb00fcdeb1d5d6c0d%40%3Ccommits.qpid.apache.org%3E
securityfocus.com/bid/108044
access.redhat.com/errata/RHSA-2019:0886
access.redhat.com/errata/RHSA-2019:1399
access.redhat.com/errata/RHSA-2019:1400
access.redhat.com/errata/RHSA-2019:1398
access.redhat.com/errata/RHSA-2019:2777
access.redhat.com/errata/RHSA-2019:2778
access.redhat.com/errata/RHSA-2019:2779
access.redhat.com/errata/RHSA-2019:2780
access.redhat.com/errata/RHSA-2019:2781
access.redhat.com/errata/RHSA-2019:2782
nvd.nist.gov/vuln/detail/CVE-2019-0223
lists.apache.org/thread.html/008ee5e78e5a090e1fcc5f6617f425e4e51d59f03d3eda2dd006df9f@%3Cusers.qpid.apache.org%3E
lists.apache.org/thread.html/3adb2f020f705b4fd453982992a68cd10f9d5ac728b699efdb73c1f5@%3Cdev.qpid.apache.org%3E
lists.apache.org/thread.html/49c83f0acce5ceaeffca51714ec2ba0f0199bcb8f99167181bba441b@%3Cdev.qpid.apache.org%3E
lists.apache.org/thread.html/914424e4d798a340f523b6169aaf39b626971d9bb00fcdeb1d5d6c0d@%3Ccommits.qpid.apache.org%3E
lists.apache.org/thread.html/d9c9a882a292e2defaed1f954528c916fb64497ce57db652727e39b0@%3Cannounce.apache.org%3E
github.com/advisories/GHSA-5h6x-m52p-23ph
security-tracker.debian.org/tracker/CVE-2019-0223
access.redhat.com/errata/RHBA-2019:4199
access.redhat.com/documentation/en-us/red_hat_cloudforms/5.0/html/release_notes
bugzilla.redhat.com/show_bug.cgi?id=1295839
bugzilla.redhat.com/show_bug.cgi?id=1314875
bugzilla.redhat.com/show_bug.cgi?id=1402112
bugzilla.redhat.com/show_bug.cgi?id=1415106
bugzilla.redhat.com/show_bug.cgi?id=1429540
bugzilla.redhat.com/show_bug.cgi?id=1430159
bugzilla.redhat.com/show_bug.cgi?id=1440191
bugzilla.redhat.com/show_bug.cgi?id=1445717
bugzilla.redhat.com/show_bug.cgi?id=1447170
bugzilla.redhat.com/show_bug.cgi?id=1455145
bugzilla.redhat.com/show_bug.cgi?id=1460798
bugzilla.redhat.com/show_bug.cgi?id=1461487
bugzilla.redhat.com/show_bug.cgi?id=1469035
bugzilla.redhat.com/show_bug.cgi?id=1475616
bugzilla.redhat.com/show_bug.cgi?id=1480819
bugzilla.redhat.com/show_bug.cgi?id=1486765
bugzilla.redhat.com/show_bug.cgi?id=1487178
bugzilla.redhat.com/show_bug.cgi?id=1498996
bugzilla.redhat.com/show_bug.cgi?id=1504155
bugzilla.redhat.com/show_bug.cgi?id=1507011
bugzilla.redhat.com/show_bug.cgi?id=1515952
bugzilla.redhat.com/show_bug.cgi?id=1516838
bugzilla.redhat.com/show_bug.cgi?id=1516912
bugzilla.redhat.com/show_bug.cgi?id=1518613
bugzilla.redhat.com/show_bug.cgi?id=1519359
bugzilla.redhat.com/show_bug.cgi?id=1525835
bugzilla.redhat.com/show_bug.cgi?id=1527695
bugzilla.redhat.com/show_bug.cgi?id=1528984
bugzilla.redhat.com/show_bug.cgi?id=1532720
bugzilla.redhat.com/show_bug.cgi?id=1533263
bugzilla.redhat.com/show_bug.cgi?id=1534529
bugzilla.redhat.com/show_bug.cgi?id=1534539
bugzilla.redhat.com/show_bug.cgi?id=1535215
bugzilla.redhat.com/show_bug.cgi?id=1535782
bugzilla.redhat.com/show_bug.cgi?id=1535928
bugzilla.redhat.com/show_bug.cgi?id=1540058
bugzilla.redhat.com/show_bug.cgi?id=1543007
bugzilla.redhat.com/show_bug.cgi?id=1545942
bugzilla.redhat.com/show_bug.cgi?id=1546108
bugzilla.redhat.com/show_bug.cgi?id=1546927
bugzilla.redhat.com/show_bug.cgi?id=1547081
bugzilla.redhat.com/show_bug.cgi?id=1549128
bugzilla.redhat.com/show_bug.cgi?id=1553846
bugzilla.redhat.com/show_bug.cgi?id=1557488
bugzilla.redhat.com/show_bug.cgi?id=1559335
bugzilla.redhat.com/show_bug.cgi?id=1566600
bugzilla.redhat.com/show_bug.cgi?id=1573609
bugzilla.redhat.com/show_bug.cgi?id=1574822
bugzilla.redhat.com/show_bug.cgi?id=1574823
bugzilla.redhat.com/show_bug.cgi?id=1574824
bugzilla.redhat.com/show_bug.cgi?id=1574826
bugzilla.redhat.com/show_bug.cgi?id=1578076
bugzilla.redhat.com/show_bug.cgi?id=1581817
bugzilla.redhat.com/show_bug.cgi?id=1591797
bugzilla.redhat.com/show_bug.cgi?id=1594381
bugzilla.redhat.com/show_bug.cgi?id=1594497
bugzilla.redhat.com/show_bug.cgi?id=1595259
bugzilla.redhat.com/show_bug.cgi?id=1595558
bugzilla.redhat.com/show_bug.cgi?id=1597125
bugzilla.redhat.com/show_bug.cgi?id=1600961
bugzilla.redhat.com/show_bug.cgi?id=1602072
bugzilla.redhat.com/show_bug.cgi?id=1608475
bugzilla.redhat.com/show_bug.cgi?id=1609348
bugzilla.redhat.com/show_bug.cgi?id=1609541
bugzilla.redhat.com/show_bug.cgi?id=1614567
bugzilla.redhat.com/show_bug.cgi?id=1623636
bugzilla.redhat.com/show_bug.cgi?id=1628228
bugzilla.redhat.com/show_bug.cgi?id=1630040
bugzilla.redhat.com/show_bug.cgi?id=1631845
bugzilla.redhat.com/show_bug.cgi?id=1632718
bugzilla.redhat.com/show_bug.cgi?id=1633867
bugzilla.redhat.com/show_bug.cgi?id=1634794
bugzilla.redhat.com/show_bug.cgi?id=1638245
bugzilla.redhat.com/show_bug.cgi?id=1638390
bugzilla.redhat.com/show_bug.cgi?id=1639387
bugzilla.redhat.com/show_bug.cgi?id=1641905
bugzilla.redhat.com/show_bug.cgi?id=1643331
bugzilla.redhat.com/show_bug.cgi?id=1645041
bugzilla.redhat.com/show_bug.cgi?id=1645193
bugzilla.redhat.com/show_bug.cgi?id=1646562
bugzilla.redhat.com/show_bug.cgi?id=1649280
bugzilla.redhat.com/show_bug.cgi?id=1650104
bugzilla.redhat.com/show_bug.cgi?id=1650117
bugzilla.redhat.com/show_bug.cgi?id=1650294
bugzilla.redhat.com/show_bug.cgi?id=1650396
bugzilla.redhat.com/show_bug.cgi?id=1650418
bugzilla.redhat.com/show_bug.cgi?id=1650484
bugzilla.redhat.com/show_bug.cgi?id=1650501
bugzilla.redhat.com/show_bug.cgi?id=1650506
bugzilla.redhat.com/show_bug.cgi?id=1650559
bugzilla.redhat.com/show_bug.cgi?id=1652577
bugzilla.redhat.com/show_bug.cgi?id=1652858
bugzilla.redhat.com/show_bug.cgi?id=1653772
bugzilla.redhat.com/show_bug.cgi?id=1653779
bugzilla.redhat.com/show_bug.cgi?id=1653787
bugzilla.redhat.com/show_bug.cgi?id=1653800
bugzilla.redhat.com/show_bug.cgi?id=1654511
bugzilla.redhat.com/show_bug.cgi?id=1655114
bugzilla.redhat.com/show_bug.cgi?id=1655495
bugzilla.redhat.com/show_bug.cgi?id=1655794
bugzilla.redhat.com/show_bug.cgi?id=1655977
bugzilla.redhat.com/show_bug.cgi?id=1656318
bugzilla.redhat.com/show_bug.cgi?id=1656371
bugzilla.redhat.com/show_bug.cgi?id=1656722
bugzilla.redhat.com/show_bug.cgi?id=1656734
bugzilla.redhat.com/show_bug.cgi?id=1656838
bugzilla.redhat.com/show_bug.cgi?id=1658906
bugzilla.redhat.com/show_bug.cgi?id=1659088
bugzilla.redhat.com/show_bug.cgi?id=1659452
bugzilla.redhat.com/show_bug.cgi?id=1660163
bugzilla.redhat.com/show_bug.cgi?id=1662991
bugzilla.redhat.com/show_bug.cgi?id=1663562
bugzilla.redhat.com/show_bug.cgi?id=1663972
bugzilla.redhat.com/show_bug.cgi?id=1664852
bugzilla.redhat.com/show_bug.cgi?id=1664886
bugzilla.redhat.com/show_bug.cgi?id=1664888
bugzilla.redhat.com/show_bug.cgi?id=1667178
bugzilla.redhat.com/show_bug.cgi?id=1668004
bugzilla.redhat.com/show_bug.cgi?id=1668437
bugzilla.redhat.com/show_bug.cgi?id=1669851
bugzilla.redhat.com/show_bug.cgi?id=1669860
bugzilla.redhat.com/show_bug.cgi?id=1669861
bugzilla.redhat.com/show_bug.cgi?id=1669867
bugzilla.redhat.com/show_bug.cgi?id=1669868
bugzilla.redhat.com/show_bug.cgi?id=1670016
bugzilla.redhat.com/show_bug.cgi?id=1670138
bugzilla.redhat.com/show_bug.cgi?id=1670150
bugzilla.redhat.com/show_bug.cgi?id=1670373
bugzilla.redhat.com/show_bug.cgi?id=1670456
bugzilla.redhat.com/show_bug.cgi?id=1670472
bugzilla.redhat.com/show_bug.cgi?id=1670604
bugzilla.redhat.com/show_bug.cgi?id=1671844
bugzilla.redhat.com/show_bug.cgi?id=1671909
bugzilla.redhat.com/show_bug.cgi?id=1671911
bugzilla.redhat.com/show_bug.cgi?id=1672437
bugzilla.redhat.com/show_bug.cgi?id=1672689
bugzilla.redhat.com/show_bug.cgi?id=1672933
bugzilla.redhat.com/show_bug.cgi?id=1672934
bugzilla.redhat.com/show_bug.cgi?id=1672937
bugzilla.redhat.com/show_bug.cgi?id=1672949
security.access.redhat.com/data/csaf/v2/advisories/2019/rhba-2019_4199.json
access.redhat.com/security/cve/CVE-2016-10735
cve.org/CVERecord?id=CVE-2016-10735
nvd.nist.gov/vuln/detail/CVE-2016-10735
access.redhat.com/security/cve/CVE-2019-0223
cve.org/CVERecord?id=CVE-2019-0223
qpid.apache.org/cves/CVE-2019-0223.html
access.redhat.com/security/updates/classification
access.redhat.com/documentation/en-us/red_hat_amq
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0886.json
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1398.json
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1399.json
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1400.json
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2777.json
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2778.json
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2779.json
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2780.json
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2781.json
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2782.json
suse.com/support/update/announcement/2024/suse-su-20241074-1
bugzilla.suse.com/1041090
bugzilla.suse.com/1084627
bugzilla.suse.com/1133158
bugzilla.suse.com/1172267
bugzilla.suse.com/1191783
suse.com/security/cve/CVE-2019-0223
ubuntu.com/security/CVE-2019-0223
issues.apache.org/jira/browse/PROTON-2014
gitbox.apache.org/repos/asf?p=qpid-proton.git;h=97c7733
gitbox.apache.org/repos/asf?p=qpid-proton.git;h=159fac1
gitbox.apache.org/repos/asf?p=qpid-proton.git;h=4aea0fd
gitbox.apache.org/repos/asf?p=qpid-proton.git;h=2d3ba8a
Left out here: 100 references. The JSON record has them.