{"id":"CVE-2016-1000338","aliases":["DEBIAN-CVE-2016-1000338","DLA-1418-1","EUVD-2018-0506","GHSA-4vhj-98r6-424h","MGASA-2018-0376","RHSA-2018:2927","UBUNTU-CVE-2016-1000338","USN-3727-1","openSUSE-SU-2024:10661-1"],"status":"published","title":"In Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate","description":"In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up the signature and still have it validate, which in some cases may allow the introduction of 'invisible' data into a signed structure.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01794,"percentile":0.78561,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-347"],"published":"2018-06-01T00:00:00Z","modified":"2026-10-20T13:13:35Z","fixes":[{"ecosystem":"Maven","package":"org.bouncycastle:bcprov-jdk14","fixed_in":["1.56"],"sources":["ghsa","osv"]},{"ecosystem":"Maven","package":"org.bouncycastle:bcprov-jdk15","fixed_in":["1.56"],"sources":["ghsa","osv"]},{"ecosystem":"Maven","package":"org.bouncycastle:bcprov-jdk15on","fixed_in":["1.56"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"bouncycastle","fixed_in":["1.56-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"bouncycastle","fixed_in":["1.56-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"bouncycastle","fixed_in":["1.56-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"bouncycastle","fixed_in":["1.49+dfsg-2ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.bouncycastle:bcprov-jdk14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.38"},{"fixed":"1.56"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.bouncycastle:bcprov-jdk15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.38"},{"fixed":"1.56"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.bouncycastle:bcprov-jdk15on","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.38"},{"fixed":"1.56"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.56-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.56-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.56-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.49+dfsg-3+deb8u3"}]}],"versions":["1.49+dfsg-3","1.49+dfsg-3+deb8u1","1.49+dfsg-3+deb8u2"],"bundled":7},{"source":"osv","ecosystem":"Maven","package":"org.bouncycastle:bcprov-jdk14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.38"},{"fixed":"1.56"}]}],"versions":["1.38","1.43","1.44","1.45","1.46","1.47","1.48","1.49","1.50","1.51","1.53","1.54","1.55"]},{"source":"osv","ecosystem":"Maven","package":"org.bouncycastle:bcprov-jdk15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.38"},{"fixed":"1.56"}]}],"versions":["1.38","1.40","1.43","1.44","1.45","1.46"]},{"source":"osv","ecosystem":"Maven","package":"org.bouncycastle:bcprov-jdk15on","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.38"},{"fixed":"1.56"}]}],"versions":["1.46","1.47","1.48","1.49","1.50","1.51","1.52","1.53","1.54","1.55"]},{"source":"osv","ecosystem":"Mageia:6","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.60-1.mga6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"SOAPpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11.6-17.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"ansiblerole-insights-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"createrepo_c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.4-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"createrepo_c-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.4-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"createrepo_c-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.4-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.37-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"foreman-bootloaders-redhat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:201801241201-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"foreman-bootloaders-redhat-tftpboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:201801241201-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.37-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"foreman-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.18.0.2-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"foreman-installer-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0.10-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"foreman-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"foreman-proxy-content","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-8.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"foreman-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"gofer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"hfsplus-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:332.14-12.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"hfsplus-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:332.14-12.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-8.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"katello-certs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"katello-client-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"katello-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-8.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"katello-installer-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0.10-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"katello-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"katello-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-8.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"kobo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"libstemmer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0-2.585svn.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"libstemmer-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0-2.585svn.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"libwebsockets","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-3.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"libwebsockets-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-3.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"livecd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.4-1.6.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"mod_passenger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.18-24.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"mod_xsendfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12-10.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"mod_xsendfile-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12-10.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"mongodb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.11-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"mongodb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.11-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"mongodb-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.11-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"ostree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2017.1-2.atomic.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"ostree-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2017.1-2.atomic.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-admin-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-docker-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-docker-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-maintenance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-nodes-child","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-nodes-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-nodes-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-ostree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-ostree-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-ostree-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-puppet-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-puppet-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-rpm-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-rpm-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"puppet-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.0-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"puppet-agent-oauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.1-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"puppet-foreman_scap_client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.16-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"puppetlabs-stdlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-1.20140510git08b00d9.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"puppetserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-amqp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.2-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-anyjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.3-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-billiard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.0.3-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-billiard-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.0.3-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-blinker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-bson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-celery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-crane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.11-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-flask","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.10.1-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-fpconst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.3-12.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.7-1.el7ui"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-gofer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-gofer-qpid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-imgcreate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.4-1.6.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-isodate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-5.pulp.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-itsdangerous","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.23-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.2-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-kid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6-11.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-kombu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.0.2-8.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-mongoengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.5-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-nectar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.6-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-oauth2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.211-8.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-okaara","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.32-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-pulp-agent-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-pulp-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-pulp-client-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-pulp-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-pulp-docker-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-pulp-integrity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-pulp-oid_validation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-pulp-ostree-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-pulp-puppet-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-pulp-repoauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-pulp-rpm-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-pulp-streamer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-pymongo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-pymongo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-pymongo-gridfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-qpid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.35.0-5.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-qpid-proton","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16.0-12.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-qpid-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-saslwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.22-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-semantic_version","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-6.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-simplejson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-simplejson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-twisted-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.2.0-4.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-twisted-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.2.0-4.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-twisted-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.0-5.el7_2"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-vine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.3-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-zope-interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.5-4.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-zope-interface-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.5-4.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python2-amqp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.2-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python2-billiard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.0.3-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python2-celery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python2-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.11-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python2-kombu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.0.2-8.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python2-vine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.3-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"qpid-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"qpid-cpp-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"qpid-cpp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"qpid-cpp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"qpid-cpp-server-linearstore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"qpid-dispatch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"qpid-dispatch-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"qpid-dispatch-router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"qpid-dispatch-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"qpid-proton","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16.0-12.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"qpid-proton-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16.0-12.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"qpid-proton-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16.0-12.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"qpid-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"qpid-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"redhat-access-insights-puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.9-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"repoview","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.6-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-ansi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-bundler_ext","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.1-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-clamp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.2-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-concurrent-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.3-6.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-fast_gettext","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-ffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-ffi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-gssapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.2-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-hashie","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.5-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-highline","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.8-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-kafo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-kafo_parsers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.6-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-kafo_wizards","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.1-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-little-plugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.3-22.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.2-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-mime-types","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19-7.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-multi_json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-netrc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.7-9.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-newt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-newt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-oauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.4-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-openscap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.7-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-passenger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.18-24.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-passenger-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.18-24.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-passenger-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.18-24.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-passenger-native-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.18-24.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-powerbar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.17-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-rack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.4-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-rack-protection","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2.2-41.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-rb-inotify","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-rest-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.7-7.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-rkerberos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.3-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-rkerberos-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.3-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-rsec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.2-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-rubyipmi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.0-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-sinatra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.7-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-smart_proxy_ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-smart_proxy_dhcp_remote_isc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.4-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-smart_proxy_discovery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.4-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-smart_proxy_discovery_image","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-smart_proxy_dynflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.1-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-smart_proxy_openscap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.11-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-smart_proxy_pulp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-smart_proxy_remote_execution_ssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.0-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-tilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.7-2.git.0.3b416c9.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"saslwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.22-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"saslwrapper-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.22-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.0-15.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"satellite-capsule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.0-15.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"satellite-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.0-15.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"satellite-debug-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.0-15.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"satellite-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.0.7-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"tfm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"tfm-ror51","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"tfm-ror51-rubygem-concurrent-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.5-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"tfm-ror51-rubygem-mime-types","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"tfm-ror51-rubygem-mime-types-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2016.0521-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"tfm-ror51-rubygem-multi_json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"tfm-ror51-rubygem-mustermann","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"tfm-ror51-rubygem-rack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"SOAPpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11.6-17.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"ansiblerole-insights-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"candlepin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.8-1.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"candlepin-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.8-1.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"createrepo_c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.4-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"createrepo_c-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.4-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"createrepo_c-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.4-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.37-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-bootloaders-redhat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:201801241201-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-bootloaders-redhat-tftpboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:201801241201-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.37-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-compute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.37-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.37-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.37-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-gce","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.37-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.18.0.2-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-installer-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0.10-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-journald","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.37-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.37-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.37-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-ovirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.37-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.37-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-proxy-content","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-8.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-rackspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.37-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-telemetry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.37-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-vmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.37-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"gofer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"hfsplus-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:332.14-12.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"hfsplus-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:332.14-12.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-8.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"katello-certs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"katello-client-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"katello-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-8.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"katello-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-8.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"katello-installer-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0.10-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"katello-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"katello-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-8.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"kobo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"libwebsockets","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-3.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"libwebsockets-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-3.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"liquibase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-1.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"livecd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.4-1.6.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"mod_passenger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.18-24.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"mod_xsendfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12-10.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"mod_xsendfile-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12-10.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"ostree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2017.1-2.atomic.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"ostree-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2017.1-2.atomic.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pcp-mmvstatsd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-admin-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-docker-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-docker-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-maintenance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-ostree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-ostree-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-ostree-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-puppet-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-puppet-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-puppet-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-rpm-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-rpm-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"puppet-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.0-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"puppet-agent-oauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.1-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"puppet-foreman_scap_client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.16-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"puppetlabs-stdlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-1.20140510git08b00d9.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"puppetserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-amqp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.2-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-anyjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.3-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-billiard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.0.3-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-billiard-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.0.3-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-blinker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-bson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-celery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-crane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.11-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-flask","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.10.1-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-fpconst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.3-12.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.7-1.el7ui"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-gofer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-gofer-qpid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-imgcreate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.4-1.6.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-isodate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-5.pulp.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-itsdangerous","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.23-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.2-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-kid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6-11.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-kombu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.0.2-8.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-mongoengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.5-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-nectar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.6-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-oauth2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.211-8.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-okaara","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.32-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-pulp-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-pulp-client-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-pulp-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-pulp-docker-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-pulp-integrity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-pulp-oid_validation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-pulp-ostree-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-pulp-puppet-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-pulp-repoauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-pulp-rpm-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-pulp-streamer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-pymongo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-pymongo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-pymongo-gridfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-qpid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.35.0-5.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-qpid-proton","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16.0-12.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-qpid-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-saslwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.22-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-semantic_version","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-6.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-simplejson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-simplejson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-twisted-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.2.0-4.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-twisted-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.2.0-4.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-twisted-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.0-5.el7_2"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-vine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.3-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-zope-interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.5-4.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-zope-interface-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.5-4.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python2-amqp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.2-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python2-billiard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.0.3-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python2-celery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python2-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.11-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python2-kombu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.0.2-8.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python2-vine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.3-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"qpid-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"qpid-cpp-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"qpid-cpp-client-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"qpid-cpp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"qpid-cpp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"qpid-cpp-server-linearstore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"qpid-dispatch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"qpid-dispatch-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"qpid-dispatch-router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"qpid-dispatch-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"qpid-proton","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16.0-12.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"qpid-proton-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16.0-12.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"qpid-proton-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16.0-12.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"qpid-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"qpid-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"redhat-access-insights-puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.9-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"repoview","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.6-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-ansi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-bundler_ext","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.1-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-clamp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.2-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-concurrent-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.3-6.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-facter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-fast_gettext","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-ffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-ffi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-foreman_scap_client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-gssapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.2-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-hashie","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.5-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-highline","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.8-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-kafo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-kafo_parsers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.6-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-kafo_wizards","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.1-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-little-plugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.3-22.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.2-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-mime-types","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19-7.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-multi_json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-netrc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.7-9.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-newt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-newt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-oauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.4-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-openscap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.7-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-passenger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.18-24.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-passenger-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.18-24.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-passenger-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.18-24.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-passenger-native-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.18-24.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-powerbar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.17-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-rack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.4-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-rack-protection","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2.2-41.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-rb-inotify","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-rest-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.7-7.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-rkerberos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.3-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-rkerberos-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.3-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-rsec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.2-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-rubyipmi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.0-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-sinatra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.7-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-smart_proxy_ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-smart_proxy_dhcp_remote_isc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.4-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-smart_proxy_discovery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.4-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-smart_proxy_discovery_image","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-smart_proxy_dynflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.1-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-smart_proxy_openscap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.11-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-smart_proxy_pulp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-smart_proxy_remote_execution_ssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.0-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-tilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.7-2.git.0.3b416c9.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"saslwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.22-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"saslwrapper-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.22-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.0-15.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.49+dfsg-2ubuntu0.1"}]}],"versions":["1.48+dfsg-2","1.49+dfsg-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.49+dfsg-3ubuntu1","1.51-4ubuntu1","1.51-4ubuntu1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.49+dfsg-2ubuntu0.1"}]}],"versions":["1.48+dfsg-2","1.49+dfsg-2"],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.68-3.2"}]}],"bundled":16}],"affected_more":274,"products":[{"vendor":"bouncycastle","product":"legion-of-the-bouncy-castle-java-crytography-api"},{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"netapp","product":"7-mode_transition_tool"},{"vendor":"redhat","product":"satellite"},{"vendor":"redhat","product":"satellite_capsule"}],"references":[{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00009.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2669","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://usn.ubuntu.com/3727-1/","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2927","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E","tags":["mailing-list","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://github.com/bcgit/bc-java/commit/b0c3ce99d43d73a096268831d0d120ffc89eac7f#diff-3679f5a9d2b939d0d3ee1601a7774fb0","tags":["x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://security.netapp.com/advisory/ntap-20231006-0011/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1000338","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451@%3Csolr-user.lucene.apache.org%3E","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20231006-0011","tags":["web"]},{"url":"https://usn.ubuntu.com/3727-1","tags":["web"]},{"url":"https://github.com/advisories/GHSA-4vhj-98r6-424h"},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-1000338","tags":["advisory"]},{"url":"https://github.com/bcgit/bc-java","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2018-0376.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22197","tags":["report"]},{"url":"https://www.debian.org/security/2018/dsa-4233","tags":["web"]},{"url":"https://lists.opensuse.org/opensuse-updates/2018-06/msg00085.html","tags":["web"]},{"url":"https://lists.opensuse.org/opensuse-updates/2018-07/msg00089.html","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_satellite/6.4/html/release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1052713","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1060745","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1155817","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1177766","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1197650","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1225252","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1260733","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1265533","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1291730","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1295741","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1312098","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328707","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349150","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1356517","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1357256","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1372468","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1372731","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1379291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1382069","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1386283","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1386908","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1389820","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1400058","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1409485","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1410264","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1410746","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412596","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1416106","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1417015","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1417130","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1419060","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1425609","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1426739","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1428541","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1430022","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1430742","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1432858","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1435973","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1437234","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1439353","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443505","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443804","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1444015","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1449011","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452772","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1455006","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1455132","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1458383","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1458573","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1458754","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1464219","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1464512","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1465573","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1468354","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1468359","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1470014","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1470761","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1474348","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1475121","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1478849","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1482540","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1483033","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1485805","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1486297","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1486782","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1487710","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1488291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1489377","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1498588","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1498976","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1500593","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1506612","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1508551","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1515888","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1516623","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1527896","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1536487","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1538448","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1538479","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1539076","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1542850","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1545314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1549777","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1549779","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1552632","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1553869","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1553994","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1555310","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1557067","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1560035","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1561061","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1561723","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1563749","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1564577","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1566764","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1570808","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1572290","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1572297","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1572305","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1573391","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1579384","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1588313","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1588314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1588323","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1588327","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1588330","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1588688","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1588695","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1588708","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1588715","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1588721","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595777","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1608447","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2927.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3208","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3208","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-6644","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-6644","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-6644","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1000338","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1000338","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1000339","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1000339","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1000339","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1000340","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1000340","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1000340","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1000341","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1000341","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1000341","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1000342","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1000342","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1000342","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1000343","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1000343","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1000343","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1000344","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1000344","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1000344","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1000345","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1000345","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1000345","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1000346","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1000346","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1000346","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1000352","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1000352","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1000352","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5929","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5929","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5929","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7233","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7233","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7233","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7536","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7536","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7536","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10689","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10689","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10689","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10690","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10690","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10690","tags":["advisory"]},{"url":"https://puppet.com/security/cve/CVE-2017-10690","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12175","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12175","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12175","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-15095","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-15095","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15095","tags":["advisory"]},{"url":"https://access.redhat.com/solutions/3442891","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-15100","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-15100","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15100","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1090","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1090","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1090","tags":["advisory"]},{"url":"https://pulp.plan.io/issues/3521","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1096","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1096","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1096","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1097","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1097","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1097","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5382","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5382","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5382","tags":["advisory"]},{"url":"https://insights.sei.cmu.edu/blog/the-curious-case-of-the-bouncy-castle-bks-passwords/","tags":["article"]},{"url":"https://www.kb.cert.org/vuls/id/306792","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-6188","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1538793","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-6188","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-6188","tags":["advisory"]},{"url":"https://www.djangoproject.com/weblog/2018/feb/01/security-releases/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-7536","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-7536","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-7536","tags":["advisory"]},{"url":"https://www.djangoproject.com/weblog/2018/mar/06/security-releases/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-7537","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-7537","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-7537","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10237","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10237","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10237","tags":["advisory"]},{"url":"https://github.com/google/guava/wiki/CVE-2018-10237","tags":["article"]},{"url":"https://groups.google.com/forum/#!topic/guava-announce/xqWALw4W1vs/discussion","tags":["article"]},{"url":"https://ubuntu.com/security/CVE-2016-1000338","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3727-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-6644","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-7940","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-1000339","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-1000341","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-1000342","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-1000343","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-1000345","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-1000346","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1000338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1000339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1000340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1000341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1000342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1000343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1000344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1000345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1000346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1000352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28052","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-1000338","description":"In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up the signature and still have it validate, which in some cases may allow the introduction of 'invisible' data into a signed structure.","status":"published","published":"2018-06-01T00:00:00Z","modified":"2024-08-06T03:55:27.5Z","updated_at":"2026-11-02T14:33:36.802481Z"}],"euvd":[{"id":"EUVD-2018-0506","description":"In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up the signature and still have it validate, which in some cases may allow the introduction of 'invisible' data into a signed structure.","status":"published","published":"2018-06-01T00:00:00Z","modified":"2024-08-06T03:55:27Z","updated_at":"2026-11-03T02:22:21.326542Z"}],"ghsa":[{"id":"GHSA-4vhj-98r6-424h","title":"In Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate","description":"In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up the signature and still have it validate, which in some cases may allow the introduction of 'invisible' data into a signed structure.","status":"published","published":"2018-10-17T16:23:26Z","modified":"2025-09-12T19:27:36Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-347"],"updated_at":"2026-11-02T14:38:57.074217Z"}],"nvd":[{"id":"CVE-2016-1000338","description":"In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up the signature and still have it validate, which in some cases may allow the introduction of 'invisible' data into a signed structure.","status":"published","published":"2018-06-01T20:29:00.217Z","modified":"2026-06-17T00:38:50.973Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-347"],"updated_at":"2026-11-02T14:03:39.621168Z"}],"osv":[{"id":"CVE-2016-1000338","description":"In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up the signature and still have it validate, which in some cases may allow the introduction of 'invisible' data into a signed structure.","status":"published","published":"2018-06-01T20:29:00.217Z","modified":"2026-10-20T13:13:35.832819791Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:01.531338Z"},{"id":"DEBIAN-CVE-2016-1000338","description":"In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up the signature and still have it validate, which in some cases may allow the introduction of 'invisible' data into a signed structure.","status":"published","published":"2018-06-01T20:29:00.217Z","modified":"2026-09-22T07:00:13.745719955Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:27.323751Z"},{"id":"GHSA-4vhj-98r6-424h","title":"In Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate","description":"In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up the signature and still have it validate, which in some cases may allow the introduction of 'invisible' data into a signed structure.","status":"published","published":"2018-10-17T16:23:26Z","modified":"2025-09-12T20:11:46.340387Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-347"],"updated_at":"2026-11-02T15:46:37.528068Z"},{"id":"RHSA-2018:2927","title":"Red Hat Security Advisory: Satellite 6.4 security, bug fix, and enhancement update","status":"published","published":"2024-09-30T16:25:38Z","modified":"2026-08-05T10:05:45Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"UBUNTU-CVE-2016-1000338","description":"In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up the signature and still have it validate, which in some cases may allow the introduction of 'invisible' data into a signed structure.","status":"published","published":"2018-06-01T00:00:00Z","modified":"2026-03-19T06:47:25.182762Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:11.100633Z"},{"id":"DLA-1418-1","title":"bouncycastle - security update","status":"published","published":"2018-07-07T00:00:00Z","modified":"2026-03-09T01:01:42.446496Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"MGASA-2018-0376","title":"Updated bouncycastle packages fix security vulnerabilities","description":"Updated bouncycastle packages fix security vulnerabilities:\n\nEnsure full validation of ASN.1 encoding of signature on verification.\nIt was possible to inject extra elements in the sequence making up the\nsignature and still have it validate, which in some cases may have\nallowed the introduction of 'invisible' data into a signed structure\n(CVE-2016-1000338).\n\nPrevent AESEngine key information leak via lookup table accesses\n(CVE-2016-1000339).\n\nPreventcarry propagation bugs in the implementation of squaring for\nseveral raw math classes (CVE-2016-1000340).\n\nDSA signature generation was vulnerable to timing attack. Where timings\ncan be closely observed for the generation of signatures may have allowed\nan attacker to gain information about the signature's k value and\nultimately the private value as well (CVE-2016-1000341).\n\nEnsure that ECDSA does fully validate ASN.1 encoding of signature on\nverification. It was possible to inject extra elements in the sequence\nmaking up the signature and still have it validate, which in some cases\nmay have allowed the introduction of 'invisible' data into a signed\nstructure (CVE-2016-1000342).\n\nPrevent weak default settings for private DSA key pair generation\n(CVE-2016-1000343).\n\nRemoved DHIES from the provider to disable the unsafe usage of ECB mode\n(CVE-2016-1000344).\n\nThe DHIES/ECIES CBC mode was vulnerable to padding oracle attack. In an\nenvironment where timings can be easily observed, it was possible with\nenough observations to identify when the decryption is failing due to\npadding (CVE-2016-1000345).\n\nThe other party DH public key was not fully validated. This could have\ncaused issues as invalid keys could be used to reveal details about the\nother party's private key where static Diffie-Hellman is in use\n(CVE-2016-1000346).\n\nRemove ECIES from the provider to disable the unsafe usage of ECB mode\n(CVE-2016-1000352).\n\nBouncyCastle, when configured to use the JCE (Java Cryptography Extension)\nfor cryptographic functions, provided a weak Bleichenbacher oracle when\nany TLS cipher suite using RSA key exchange was negotiated. An attacker\ncan recover the private key from a vulnerable application. This\nvulnerability is referred to as \"ROBOT\" (CVE-2017-13098).\n\nIt was discovered that the low-level interface to the RSA key pair\ngenerator of Bouncy Castle (a Java implementation of cryptographic\nalgorithms) could perform less Miller-Rabin primality tests than expected\n(CVE-2018-1000180).\n\nFix use of Externally-Controlled Input to Select Classes or Code\n('Unsafe Reflection') (CVE-2018-1000613).\n","status":"published","published":"2018-09-20T23:17:55Z","modified":"2026-04-16T06:24:35.221735775Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2024:10661-1","title":"bouncycastle-1.68-3.2 on GA media","description":"These are all security issues fixed in the bouncycastle-1.68-3.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:35:59.843999Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"USN-3727-1","title":"bouncycastle vulnerabilities","description":"It was discovered that Bouncy Castle incorrectly handled certain crypto\nalgorithms. A remote attacker could possibly use these issues to obtain\nsensitive information, including private keys.\n","status":"published","published":"2018-08-01T14:56:58Z","modified":"2026-04-27T15:33:02.823094133Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}