{"id":"CVE-2017-10689","aliases":["DEBIAN-CVE-2017-10689","EUVD-2022-5438","GHSA-vw22-465p-8j5w","MGASA-2018-0199","RHSA-2018:2927","SUSE-SU-2018:0571-1","SUSE-SU-2018:0602-1","UBUNTU-CVE-2017-10689","USN-3567-1","USN-4804-1"],"status":"published","title":"Tarball permission preservation in puppet","description":"In previous versions of Puppet Agent it was possible to install a module with world writable permissions. Puppet Agent 5.3.4 and 1.10.10 included a fix to this vulnerability.","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00356,"percentile":0.29534,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-269"],"published":"2017-12-31T00:00:00Z","modified":"2026-10-24T10:30:49Z","fixes":[{"ecosystem":"RubyGems","package":"puppet","fixed_in":["4.10.10","5.3.4"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:11","package":"puppet","fixed_in":["5.4.0-1"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"puppet","fixed_in":["3.6.2-3.3.mga5"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"puppet","fixed_in":["4.2.1-4.4.mga6"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"puppet","fixed_in":["3.8.5-15.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"puppet","fixed_in":["3.8.5-15.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Advanced Systems Management 12","package":"puppet","fixed_in":["3.8.5-15.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Advanced Systems Management 12","package":"rubygem-puppet","fixed_in":["4.8.1-32.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"puppet","fixed_in":["3.4.3-1ubuntu1.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"puppet","fixed_in":["3.8.5-2ubuntu0.1+esm1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"RubyGems","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.10"}]}]},{"source":"ghsa","ecosystem":"RubyGems","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.3.4"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-1"}]}]},{"source":"osv","ecosystem":"RubyGems","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.10"}]}],"versions":["0.13.0","0.13.1","0.13.2","0.13.6","0.16.0","0.18.4","0.22.4","0.23.0","0.23.1","0.23.2","0.24.0","0.24.1","0.24.2","0.24.3","0.24.4","0.24.5","0.24.6","0.24.7","0.24.8","0.24.9","0.25.0","0.25.1","0.25.2","0.25.3","0.25.4","0.25.5","0.9.2","2.6.0","2.6.1","2.6.10","2.6.11","2.6.12","2.6.13","2.6.14","2.6.15","2.6.16","2.6.17","2.6.18","2.6.2","2.6.3","2.6.4","2.6.5","2.6.6","2.6.7","2.6.8","2.6.9","2.7.1","2.7.11","2.7.12","2.7.13","2.7.14","2.7.16","2.7.17","2.7.18","2.7.19","2.7.20","2.7.20.rc1","2.7.21","2.7.22","2.7.23","2.7.24","2.7.25","2.7.26","2.7.3","2.7.4","2.7.5","2.7.6","2.7.8","2.7.9","3.0.0","3.0.0.rc4","3.0.0.rc5","3.0.0.rc7","3.0.0.rc8","3.0.1","3.0.1.rc1","3.0.2","3.0.2.rc1","3.0.2.rc2","3.0.2.rc3","3.1.0","3.1.0.rc1","3.1.0.rc2","3.1.1","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.1.rc1","3.2.2","3.2.3","3.2.3.rc1","3.2.4","3.3.0","3.3.0.rc2","3.3.0.rc3","3.3.1","3.3.1.rc1","3.3.1.rc2","3.3.1.rc3","3.3.2","3.4.0","3.4.0.rc1","3.4.0.rc2","3.4.1","3.4.2","3.4.3","3.5.0.rc1","3.5.0.rc2","3.5.0.rc3","3.5.1","3.5.1.rc1","3.6.0","3.6.0.rc1","3.6.1","3.6.2","3.7.0","3.7.1","3.7.2","3.7.3","3.7.4","3.7.5","3.8.1","3.8.2","3.8.3","3.8.4","3.8.5","3.8.6","3.8.7","4.0.0","4.0.0.rc1","4.1.0","4.10.0","4.10.1","4.10.4","4.10.5","4.10.6","4.10.7","4.10.8","4.10.9","4.2.0","4.2.1","4.2.2","4.2.3","4.3.0","4.3.1","4.3.2","4.4.0","4.4.1","4.4.2","4.5.0","4.5.1","4.5.2","4.5.3","4.6.1","4.6.2","4.7.0","4.7.1","4.8.0","4.8.1","4.8.2","4.9.0","4.9.1","4.9.2","4.9.3","4.9.4"]},{"source":"osv","ecosystem":"RubyGems","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.3.4"}]}],"versions":["5.0.0","5.0.1","5.1.0","5.2.0","5.3.1","5.3.2","5.3.3"]},{"source":"osv","ecosystem":"Mageia:5","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2-3.3.mga5"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-4.4.mga6"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"SOAPpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11.6-17.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"ansiblerole-insights-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"createrepo_c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.4-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"createrepo_c-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.4-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"createrepo_c-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.4-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.37-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"foreman-bootloaders-redhat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:201801241201-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"foreman-bootloaders-redhat-tftpboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:201801241201-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.37-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"foreman-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.18.0.2-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"foreman-installer-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0.10-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"foreman-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"foreman-proxy-content","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-8.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"foreman-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"gofer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"hfsplus-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:332.14-12.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"hfsplus-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:332.14-12.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-8.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"katello-certs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"katello-client-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"katello-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-8.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"katello-installer-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0.10-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"katello-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"katello-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-8.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"kobo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"libstemmer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0-2.585svn.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"libstemmer-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0-2.585svn.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"libwebsockets","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-3.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"libwebsockets-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-3.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"livecd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.4-1.6.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"mod_passenger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.18-24.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"mod_xsendfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12-10.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"mod_xsendfile-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12-10.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"mongodb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.11-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"mongodb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.11-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"mongodb-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.11-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"ostree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2017.1-2.atomic.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"ostree-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2017.1-2.atomic.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-admin-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-docker-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-docker-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-maintenance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-nodes-child","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-nodes-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-nodes-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-ostree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-ostree-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-ostree-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-puppet-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-puppet-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-rpm-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-rpm-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"pulp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"puppet-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.0-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"puppet-agent-oauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.1-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"puppet-foreman_scap_client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.16-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"puppetlabs-stdlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-1.20140510git08b00d9.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"puppetserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-amqp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.2-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-anyjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.3-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-billiard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.0.3-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-billiard-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.0.3-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-blinker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-bson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-celery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-crane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.11-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-flask","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.10.1-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-fpconst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.3-12.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.7-1.el7ui"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-gofer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-gofer-qpid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-imgcreate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.4-1.6.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-isodate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-5.pulp.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-itsdangerous","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.23-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.2-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-kid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6-11.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-kombu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.0.2-8.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-mongoengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.5-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-nectar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.6-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-oauth2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.211-8.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-okaara","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.32-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-pulp-agent-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-pulp-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-pulp-client-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-pulp-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-pulp-docker-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-pulp-integrity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-pulp-oid_validation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-pulp-ostree-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-pulp-puppet-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-pulp-repoauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-pulp-rpm-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-pulp-streamer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-pymongo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-pymongo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-pymongo-gridfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-qpid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.35.0-5.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-qpid-proton","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16.0-12.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-qpid-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-saslwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.22-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-semantic_version","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-6.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-simplejson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-simplejson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-twisted-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.2.0-4.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-twisted-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.2.0-4.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-twisted-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.0-5.el7_2"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-vine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.3-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-zope-interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.5-4.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python-zope-interface-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.5-4.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python2-amqp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.2-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python2-billiard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.0.3-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python2-celery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python2-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.11-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python2-kombu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.0.2-8.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"python2-vine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.3-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"qpid-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"qpid-cpp-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"qpid-cpp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"qpid-cpp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"qpid-cpp-server-linearstore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"qpid-dispatch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"qpid-dispatch-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"qpid-dispatch-router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"qpid-dispatch-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"qpid-proton","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16.0-12.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"qpid-proton-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16.0-12.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"qpid-proton-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16.0-12.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"qpid-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"qpid-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"redhat-access-insights-puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.9-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"repoview","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.6-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-ansi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-bundler_ext","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.1-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-clamp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.2-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-concurrent-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.3-6.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-fast_gettext","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-ffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-ffi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-gssapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.2-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-hashie","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.5-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-highline","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.8-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-kafo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-kafo_parsers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.6-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-kafo_wizards","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.1-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-little-plugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.3-22.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.2-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-mime-types","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19-7.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-multi_json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-netrc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.7-9.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-newt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-newt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-oauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.4-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-openscap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.7-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-passenger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.18-24.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-passenger-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.18-24.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-passenger-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.18-24.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-passenger-native-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.18-24.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-powerbar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.17-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-rack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.4-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-rack-protection","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2.2-41.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-rb-inotify","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-rest-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.7-7.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-rkerberos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.3-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-rkerberos-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.3-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-rsec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.2-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-rubyipmi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.0-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-sinatra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.7-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-smart_proxy_ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-smart_proxy_dhcp_remote_isc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.4-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-smart_proxy_discovery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.4-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-smart_proxy_discovery_image","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-smart_proxy_dynflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.1-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-smart_proxy_openscap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.11-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-smart_proxy_pulp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-smart_proxy_remote_execution_ssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.0-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"rubygem-tilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.7-2.git.0.3b416c9.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"saslwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.22-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"saslwrapper-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.22-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.0-15.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"satellite-capsule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.0-15.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"satellite-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.0-15.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"satellite-debug-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.0-15.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"satellite-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.0.7-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"tfm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"tfm-ror51","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"tfm-ror51-rubygem-concurrent-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.5-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"tfm-ror51-rubygem-mime-types","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"tfm-ror51-rubygem-mime-types-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2016.0521-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"tfm-ror51-rubygem-multi_json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"tfm-ror51-rubygem-mustermann","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.4::el7","package":"tfm-ror51-rubygem-rack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"SOAPpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11.6-17.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"ansiblerole-insights-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"candlepin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.8-1.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"candlepin-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.8-1.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"createrepo_c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.4-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"createrepo_c-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.4-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"createrepo_c-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.4-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.37-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-bootloaders-redhat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:201801241201-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-bootloaders-redhat-tftpboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:201801241201-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.37-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-compute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.37-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.37-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.37-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-gce","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.37-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.18.0.2-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-installer-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0.10-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-journald","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.37-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.37-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.37-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-ovirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.37-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.37-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-proxy-content","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-8.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-rackspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.37-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-telemetry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.37-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"foreman-vmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0.37-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"gofer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"hfsplus-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:332.14-12.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"hfsplus-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:332.14-12.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-8.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"katello-certs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"katello-client-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"katello-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-8.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"katello-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-8.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"katello-installer-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0.10-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"katello-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"katello-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-8.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"kobo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"libwebsockets","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-3.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"libwebsockets-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-3.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"liquibase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-1.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"livecd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.4-1.6.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"mod_passenger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.18-24.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"mod_xsendfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12-10.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"mod_xsendfile-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12-10.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"ostree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2017.1-2.atomic.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"ostree-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2017.1-2.atomic.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pcp-mmvstatsd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-admin-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-docker-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-docker-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-maintenance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-ostree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-ostree-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-ostree-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-puppet-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-puppet-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-puppet-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-rpm-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-rpm-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"pulp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"puppet-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.0-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"puppet-agent-oauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.1-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"puppet-foreman_scap_client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.16-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"puppetlabs-stdlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-1.20140510git08b00d9.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"puppetserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-amqp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.2-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-anyjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.3-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-billiard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.0.3-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-billiard-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.0.3-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-blinker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-bson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-celery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-crane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.11-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-flask","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.10.1-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-fpconst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.3-12.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.7-1.el7ui"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-gofer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-gofer-qpid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-imgcreate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.4-1.6.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-isodate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-5.pulp.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-itsdangerous","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.23-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.2-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-kid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6-11.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-kombu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.0.2-8.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-mongoengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.5-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-nectar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.6-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-oauth2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.211-8.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-okaara","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.32-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-pulp-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-pulp-client-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-pulp-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-pulp-docker-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-pulp-integrity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-pulp-oid_validation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-pulp-ostree-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-pulp-puppet-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-pulp-repoauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-pulp-rpm-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-pulp-streamer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.4.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-pymongo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-pymongo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-pymongo-gridfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-qpid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.35.0-5.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-qpid-proton","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16.0-12.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-qpid-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-saslwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.22-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-semantic_version","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-6.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-simplejson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-simplejson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-twisted-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.2.0-4.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-twisted-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.2.0-4.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-twisted-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.0-5.el7_2"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-vine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.3-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.1-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-zope-interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.5-4.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python-zope-interface-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.5-4.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python2-amqp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.2-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python2-billiard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.0.3-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python2-celery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python2-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.11-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python2-kombu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.0.2-8.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"python2-vine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.3-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"qpid-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"qpid-cpp-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"qpid-cpp-client-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"qpid-cpp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"qpid-cpp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"qpid-cpp-server-linearstore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"qpid-dispatch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"qpid-dispatch-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"qpid-dispatch-router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"qpid-dispatch-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"qpid-proton","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16.0-12.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"qpid-proton-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16.0-12.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"qpid-proton-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16.0-12.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"qpid-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"qpid-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-19.el7"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"redhat-access-insights-puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.9-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"repoview","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.6-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-ansi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-bundler_ext","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.1-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-clamp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.2-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-concurrent-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.3-6.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-facter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-fast_gettext","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-ffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-ffi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-foreman_scap_client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-gssapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.2-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-hashie","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.5-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-highline","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.8-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-kafo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-kafo_parsers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.6-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-kafo_wizards","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.1-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-little-plugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.3-22.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.2-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-mime-types","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19-7.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-multi_json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.2-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-netrc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.7-9.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-newt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-newt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-oauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.4-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-openscap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.7-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-passenger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.18-24.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-passenger-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.18-24.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-passenger-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.18-24.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-passenger-native-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.18-24.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-powerbar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.17-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-rack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.4-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-rack-protection","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2.2-41.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-rb-inotify","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7-4.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-rest-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.7-7.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-rkerberos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.3-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-rkerberos-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.3-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-rsec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.2-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-rubyipmi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.0-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-sinatra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.7-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-smart_proxy_ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-smart_proxy_dhcp_remote_isc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.4-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-smart_proxy_discovery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.4-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-smart_proxy_discovery_image","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-smart_proxy_dynflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.1-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-smart_proxy_openscap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.11-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-smart_proxy_pulp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-smart_proxy_remote_execution_ssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.0-3.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"rubygem-tilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.7-2.git.0.3b416c9.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"saslwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.22-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"saslwrapper-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.22-5.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.4::el7","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.0-15.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.5-15.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.5-15.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Advanced Systems Management 12","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.5-15.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Advanced Systems Management 12","package":"rubygem-puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.1-32.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.3-1ubuntu1.3"}]}],"versions":["3.2.4-2ubuntu2","3.3.1-1ubuntu1","3.3.1-1ubuntu2","3.3.1-1ubuntu3","3.4.2-1","3.4.3-1","3.4.3-1ubuntu1","3.4.3-1ubuntu1.1","3.4.3-1ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.5-2ubuntu0.1+esm1"}]}],"versions":["3.7.2-5ubuntu2","3.8.4-1ubuntu1","3.8.5-1ubuntu1","3.8.5-2","3.8.5-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.3-1ubuntu1.3"}]}],"versions":["3.2.4-2ubuntu2","3.3.1-1ubuntu1","3.3.1-1ubuntu2","3.3.1-1ubuntu3","3.4.2-1","3.4.3-1","3.4.3-1ubuntu1","3.4.3-1ubuntu1.1","3.4.3-1ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.5-2ubuntu0.1+esm1"}]}],"versions":["3.7.2-5ubuntu2","3.8.4-1ubuntu1","3.8.5-1ubuntu1","3.8.5-2","3.8.5-2ubuntu0.1"],"bundled":2}],"affected_more":274,"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"perforce","product":"puppet enterprise"},{"vendor":"puppet","product":"puppet"},{"vendor":"puppet","product":"puppet agent"},{"vendor":"puppet","product":"puppet enterprise"},{"vendor":"puppet","product":"puppet_enterprise"},{"vendor":"puppetpu","product":"puppet agent"},{"vendor":"redhat","product":"satellite"}],"references":[{"url":"https://usn.ubuntu.com/3567-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://puppet.com/security/cve/CVE-2017-10689","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web","report"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2927","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10689","tags":["advisory"]},{"url":"https://github.com/puppetlabs/puppet/commit/17d9e02da3882e44c1876e2805cf9708481715ee","tags":["web"]},{"url":"https://github.com/puppetlabs/puppet/commit/2f1047f85e22cde139a421bc25d371f2ffc92cb1","tags":["web"]},{"url":"https://tickets.puppetlabs.com/browse/PUP-7866","tags":["web"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/puppet/CVE-2017-10689.yml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-vw22-465p-8j5w"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-10689","tags":["advisory"]},{"url":"https://github.com/puppetlabs/puppet","tags":["package"]},{"url":"https://usn.ubuntu.com/3567-1","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2018-0199.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22589","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_satellite/6.4/html/release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1052713","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1060745","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1155817","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1177766","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1197650","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1225252","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1260733","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1265533","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1291730","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1295741","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1312098","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328707","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349150","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1356517","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1357256","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1372468","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1372731","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1379291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1382069","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1386283","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1386908","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1389820","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1400058","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1409485","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1410264","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1410746","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412596","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1416106","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1417015","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1417130","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1419060","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1425609","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1426739","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1428541","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1430022","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1430742","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1432858","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1435973","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1437234","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1439353","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443505","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443804","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1444015","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1449011","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452772","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1455006","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1455132","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1458383","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1458573","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1458754","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1464219","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1464512","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1465573","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1468354","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1468359","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1470014","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1470761","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1474348","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1475121","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1478849","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1482540","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1483033","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1485805","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1486297","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1486782","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1487710","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1488291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1489377","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1498588","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1498976","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1500593","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1506612","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1508551","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1515888","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1516623","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1527896","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1536487","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1538448","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1538479","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1539076","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1542850","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1545314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1549777","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1549779","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1552632","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1553869","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1553994","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1555310","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1557067","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1560035","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1561061","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1561723","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1563749","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1564577","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1566764","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1570808","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1572290","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1572297","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1572305","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1573391","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1579384","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1588313","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1588314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1588323","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1588327","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1588330","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1588688","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1588695","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1588708","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1588715","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1588721","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595777","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1608447","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2927.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3208","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3208","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-6644","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-6644","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-6644","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1000338","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1000338","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1000338","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1000339","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1000339","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1000339","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1000340","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1000340","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1000340","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1000341","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1000341","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1000341","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1000342","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1000342","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1000342","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1000343","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1000343","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1000343","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1000344","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1000344","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1000344","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1000345","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1000345","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1000345","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1000346","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1000346","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1000346","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1000352","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1000352","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1000352","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5929","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5929","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5929","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7233","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7233","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7233","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7536","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7536","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7536","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10689","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10689","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10690","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10690","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10690","tags":["advisory"]},{"url":"https://puppet.com/security/cve/CVE-2017-10690","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12175","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12175","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12175","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-15095","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-15095","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15095","tags":["advisory"]},{"url":"https://access.redhat.com/solutions/3442891","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-15100","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-15100","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15100","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1090","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1090","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1090","tags":["advisory"]},{"url":"https://pulp.plan.io/issues/3521","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1096","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1096","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1096","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1097","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1097","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1097","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5382","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5382","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5382","tags":["advisory"]},{"url":"https://insights.sei.cmu.edu/blog/the-curious-case-of-the-bouncy-castle-bks-passwords/","tags":["article"]},{"url":"https://www.kb.cert.org/vuls/id/306792","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-6188","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1538793","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-6188","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-6188","tags":["advisory"]},{"url":"https://www.djangoproject.com/weblog/2018/feb/01/security-releases/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-7536","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-7536","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-7536","tags":["advisory"]},{"url":"https://www.djangoproject.com/weblog/2018/mar/06/security-releases/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-7537","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-7537","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-7537","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10237","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10237","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10237","tags":["advisory"]},{"url":"https://github.com/google/guava/wiki/CVE-2018-10237","tags":["article"]},{"url":"https://groups.google.com/forum/#!topic/guava-announce/xqWALw4W1vs/discussion","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180571-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1080288","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10689","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180602-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-10689","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3567-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4804-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-2295","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-10689","description":"In previous versions of Puppet Agent it was possible to install a module with world writable permissions. Puppet Agent 5.3.4 and 1.10.10 included a fix to this vulnerability.","status":"published","published":"2018-02-09T20:00:00Z","modified":"2024-09-17T00:20:43.149Z","updated_at":"2026-11-02T14:33:12.942409Z"}],"euvd":[{"id":"EUVD-2022-5438","description":"In previous versions of Puppet Agent it was possible to install a module with world writable permissions. Puppet Agent 5.3.4 and 1.10.10 included a fix to this vulnerability.","status":"published","published":"2018-02-09T20:00:00Z","modified":"2024-09-17T00:20:43Z","updated_at":"2026-11-03T00:29:00.142007Z"}],"ghsa":[{"id":"GHSA-vw22-465p-8j5w","title":"Tarball permission preservation in puppet","description":"When installing a module using the system tar, the PMT will filter filesystem permissions to a sane value. This may just be based on the user's umask.\n\nWhen using minitar, files are unpacked with whatever permissions are in the tarball. This is potentially unsafe, as tarballs can be easily created with weird permissions.\n","status":"published","published":"2022-05-13T01:41:57Z","modified":"2023-01-27T05:02:29Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:36:18.427692Z"}],"nvd":[{"id":"CVE-2017-10689","description":"In previous versions of Puppet Agent it was possible to install a module with world writable permissions. Puppet Agent 5.3.4 and 1.10.10 included a fix to this vulnerability.","status":"published","published":"2018-02-09T20:29:00.207Z","modified":"2026-06-17T01:00:33.063Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:04:15.877386Z"}],"osv":[{"id":"CVE-2017-10689","description":"In previous versions of Puppet Agent it was possible to install a module with world writable permissions. Puppet Agent 5.3.4 and 1.10.10 included a fix to this vulnerability.","status":"published","published":"2018-02-09T20:29:00.207Z","modified":"2026-10-24T10:30:49.962260344Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:03.851821Z"},{"id":"DEBIAN-CVE-2017-10689","description":"In previous versions of Puppet Agent it was possible to install a module with world writable permissions. Puppet Agent 5.3.4 and 1.10.10 included a fix to this vulnerability.","status":"published","published":"2018-02-09T20:29:00.207Z","modified":"2026-08-04T05:47:38.845917277Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:28.207321Z"},{"id":"GHSA-vw22-465p-8j5w","title":"Tarball permission preservation in puppet","description":"When installing a module using the system tar, the PMT will filter filesystem permissions to a sane value. This may just be based on the user's umask.\n\nWhen using minitar, files are unpacked with whatever permissions are in the tarball. This is potentially unsafe, as tarballs can be easily created with weird permissions.\n","status":"published","published":"2022-05-13T01:41:57Z","modified":"2024-02-20T05:32:16.784114Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T15:46:57.694388Z"},{"id":"RHSA-2018:2927","title":"Red Hat Security Advisory: Satellite 6.4 security, bug fix, and enhancement update","status":"published","published":"2024-09-30T16:25:38Z","modified":"2026-08-05T10:05:45Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"UBUNTU-CVE-2017-10689","description":"In previous versions of Puppet Agent it was possible to install a module with world writable permissions. Puppet Agent 5.3.4 and 1.10.10 included a fix to this vulnerability.","status":"published","published":"2017-12-31T00:00:00Z","modified":"2026-02-04T02:15:00.144435Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:13.729565Z"},{"id":"MGASA-2018-0199","title":"Updated puppet packages fix security vulnerability","description":"It was discovered that Puppet incorrectly handled permissions when\nunpacking certain tarballs. A local user could possibly use this issue\nto execute arbitrary code (CVE-2017-10689).\n","status":"published","published":"2018-04-13T20:08:48Z","modified":"2026-04-16T06:23:11.859080086Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"SUSE-SU-2018:0571-1","title":"Security update for puppet","description":"This update for puppet fixes the following issues:\n\n- CVE-2017-10689: Reset permissions when unpacking tar in PMT.\n  When using minitar, files were unpacked with whatever permissions are in the tarball.\n  This is potentially unsafe, as tarballs can be easily created with weird permissions\n  (bsc#1080288)\n","status":"published","published":"2018-03-01T13:34:13Z","modified":"2026-02-04T02:16:55.40282Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0602-1","title":"Security update for rubygem-puppet","description":"This update for rubygem-puppet fixes the following issues:\n\n- CVE-2017-10689: Reset permissions when unpacking tar in PMT.\n  When using minitar, files were unpacked with whatever permissions are\n  in the tarball. This is potentially unsafe, as tarballs can be easily\n  created with weird permissions\n  (bsc#1080288)\n","status":"published","published":"2018-03-05T09:41:06Z","modified":"2026-02-04T04:11:17.397344Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"USN-3567-1","title":"puppet vulnerability","description":"It was discovered that Puppet incorrectly handled permissions when\nunpacking certain tarballs. A local user could possibly use this issue to\nexecute arbitrary code.\n","status":"published","published":"2018-02-12T15:34:35Z","modified":"2026-02-10T04:41:16Z","updated_at":"2026-11-02T16:58:13.496563Z"},{"id":"USN-4804-1","title":"puppet vulnerabilities","description":"It was discovered that Puppet installed modules with world writable\npermissions. An attacker could use this vulnerability to execute arbitrary\ncode or cause a denial of service. (CVE-2017-10689)\n\nIt was discovered that Puppet could be used to force YAML deserialization in an\nunsafe manner. A remote attacker could use this vulnerability for remote code\nexecution. (CVE-2017-2295)\n","status":"published","published":"2021-03-15T21:31:34Z","modified":"2026-06-25T13:30:26.750384423Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}
