{"id":"CVE-2017-2295","aliases":["DEBIAN-CVE-2017-2295","DLA-1012-1","DSA-3862-1","EUVD-2017-11478","GHSA-988w-9qqw-43hr","MGASA-2017-0156","RHSA-2018:0336","SUSE-SU-2017:2113-1","SUSE-SU-2018:0600-1","UBUNTU-CVE-2017-2295","USN-3308-1","USN-4804-1"],"status":"published","title":"Versions of Puppet prior to 4.10.1 will deserialize data off the wire (from the agent to the...","description":"Versions of Puppet prior to 4.10.1 will deserialize data off the wire (from the agent to the server, in this case) with a attacker-specified format. This could be used to force YAML deserialization in an unsafe manner, which would lead to remote code execution. This change constrains the format of data on the wire to PSON or safely decoded YAML.","severity":{"version":"3.0","score":8.2,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.02762,"percentile":0.8637,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-502"],"published":"2017-05-25T00:00:00Z","modified":"2026-10-24T10:31:05Z","fixes":[{"ecosystem":"Debian:11","package":"puppet","fixed_in":["4.8.2-5"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"puppet","fixed_in":["2.7.23-1~deb7u4"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"puppet","fixed_in":["3.7.2-4+deb8u1"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"puppet","fixed_in":["3.6.2-3.1.mga5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"puppet","fixed_in":["3.8.5-15.3.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"puppet","fixed_in":["3.8.5-15.3.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Advanced Systems Management 12","package":"puppet","fixed_in":["3.8.5-15.3.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"puppet","fixed_in":["2.7.26-0.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"puppet","fixed_in":["2.7.26-0.5.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"puppet","fixed_in":["3.4.3-1ubuntu1.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"puppet","fixed_in":["3.8.5-2ubuntu0.1+esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:11","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.2-5"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.23-1~deb7u4"}]}],"versions":["2.7.18-4","2.7.18-5","2.7.23-1~deb7u1","2.7.23-1~deb7u2","2.7.23-1~deb7u3"]},{"source":"osv","ecosystem":"Debian:8","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-4+deb8u1"}]}],"versions":["3.7.2-4","3.7.2-4+deb8u1~bpo70+1"]},{"source":"osv","ecosystem":"Mageia:5","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2-3.1.mga5"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.34-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"foreman-bootloaders-redhat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:201801241201-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"foreman-bootloaders-redhat-tftpboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:201801241201-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.34-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"foreman-discovery-image","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.4.4-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"foreman-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.15.6.8-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"foreman-installer-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.5.26-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"foreman-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.4-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"foreman-proxy-content","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.5-15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"foreman-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.2-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"hiera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.5-15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"katello-certs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"katello-client-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"katello-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.5-15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"katello-installer-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.5.26-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"katello-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.2-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"katello-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.5-15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"kobo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.1-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-admin-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-docker-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-docker-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-nodes-child","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-nodes-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-nodes-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-ostree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1.1-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-ostree-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1.1-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-ostree-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1.1-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4-3.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-puppet-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4-3.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-puppet-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4-3.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.8-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-rpm-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.8-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-rpm-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.8-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"puppet-foreman_scap_client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.16-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"python-pulp-agent-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"python-pulp-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"python-pulp-client-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"python-pulp-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"python-pulp-docker-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"python-pulp-oid_validation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"python-pulp-ostree-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1.1-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"python-pulp-puppet-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4-3.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"python-pulp-repoauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"python-pulp-rpm-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.8-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"python-pulp-streamer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"python-zope-interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.5-4.el7"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"python-zope-interface-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.5-4.el7"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"redhat-access-insights-puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.9-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"rubygem-kafo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"rubygem-kafo_parsers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"rubygem-kafo_wizards","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.1-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"rubygem-smart_proxy_dhcp_remote_isc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.2.1-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"rubygem-smart_proxy_discovery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.4-3.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"rubygem-smart_proxy_discovery_image","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"rubygem-smart_proxy_dynflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.10-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"rubygem-smart_proxy_openscap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.9-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"rubygem-smart_proxy_pulp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-1.git.0.b5c2768.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"rubygem-smart_proxy_remote_execution_ssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"rubygem-tilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.7-2.git.0.3b416c9.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.3.0-23.0.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"satellite-capsule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.3.0-23.0.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"satellite-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.3.0-23.0.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"satellite-debug-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.3.0-23.0.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"satellite-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.3.0.12-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"tfm-rubygem-foreman-tasks-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.8-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"tfm-rubygem-foreman_remote_execution_core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"tfm-rubygem-smart_proxy_dynflow_core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.10-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"candlepin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.14-1.el7"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"candlepin-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.14-1.el7"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.34-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-bootloaders-redhat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:201801241201-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-bootloaders-redhat-tftpboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:201801241201-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.34-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-compute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.34-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.34-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-discovery-image","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.4.4-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.34-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-gce","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.34-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.15.6.8-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-installer-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.5.26-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.34-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.34-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-ovirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.34-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.34-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.4-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-proxy-content","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.5-15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-rackspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.34-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.2-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-vmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.34-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"hiera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.5-15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"katello-certs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"katello-client-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"katello-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.5-15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"katello-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.5-15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"katello-installer-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.5.26-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"katello-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.2-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"katello-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.5-15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"kobo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.1-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-admin-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-docker-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-docker-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-ostree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1.1-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-ostree-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1.1-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-ostree-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1.1-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4-3.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-puppet-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4-3.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-puppet-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4-3.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-puppet-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4-3.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.8-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-rpm-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.8-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-rpm-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.8-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"puppet-foreman_scap_client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.16-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"python-pulp-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"python-pulp-client-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"python-pulp-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"python-pulp-docker-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"python-pulp-oid_validation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"python-pulp-ostree-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1.1-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"python-pulp-puppet-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4-3.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"python-pulp-repoauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"python-pulp-rpm-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.8-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"python-pulp-streamer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"python-zope-interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.5-4.el7"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"python-zope-interface-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.5-4.el7"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"redhat-access-insights-puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.9-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"rubygem-foreman_scap_client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"rubygem-kafo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"rubygem-kafo_parsers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"rubygem-kafo_wizards","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.1-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"rubygem-smart_proxy_dhcp_remote_isc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.2.1-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"rubygem-smart_proxy_discovery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.4-3.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"rubygem-smart_proxy_discovery_image","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"rubygem-smart_proxy_dynflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.10-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"rubygem-smart_proxy_openscap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.9-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"rubygem-smart_proxy_pulp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-1.git.0.b5c2768.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"rubygem-smart_proxy_remote_execution_ssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"rubygem-tilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.7-2.git.0.3b416c9.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.3.0-23.0.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"satellite-capsule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.3.0-23.0.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"satellite-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.3.0-23.0.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"satellite-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.3.0-23.0.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"satellite-debug-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.3.0-23.0.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"satellite-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.3.0.12-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-bastion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.1.4-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-foreman-redhat_access","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.13-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-foreman-tasks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6.4-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-foreman-tasks-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.8-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-foreman_bootdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.0.2.2-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-foreman_discovery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.1.5.3-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-foreman_docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0.3-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-foreman_hooks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.14-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-foreman_openscap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.11-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-foreman_remote_execution","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.7.2-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-foreman_remote_execution_core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-foreman_templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-foreman_theme_satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.4.16-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-foreman_virt_who_configure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.9-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-hammer_cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11.0.1-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-hammer_cli_csv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-hammer_cli_foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11.0.5-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-hammer_cli_foreman_admin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.8-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-hammer_cli_foreman_bootdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.3.3-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-hammer_cli_foreman_discovery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-hammer_cli_foreman_docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.6-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-hammer_cli_foreman_openscap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.5-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-hammer_cli_foreman_remote_execution","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.6-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-hammer_cli_foreman_tasks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.12-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-hammer_cli_foreman_virt_who_configure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.3-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-hammer_cli_katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11.3.5-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.5.58-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-katello_ostree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.5.58-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-ovirt_provision_plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-smart_proxy_dynflow_core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.10-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.5-15.3.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.5-15.3.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Advanced Systems Management 12","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.5-15.3.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.26-0.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.26-0.5.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.3-1ubuntu1.2"}]}],"versions":["3.2.4-2ubuntu2","3.3.1-1ubuntu1","3.3.1-1ubuntu2","3.3.1-1ubuntu3","3.4.2-1","3.4.3-1","3.4.3-1ubuntu1","3.4.3-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.5-2ubuntu0.1+esm1"}]}],"versions":["3.7.2-5ubuntu2","3.8.4-1ubuntu1","3.8.5-1ubuntu1","3.8.5-2","3.8.5-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.3-1ubuntu1.2"}]}],"versions":["3.2.4-2ubuntu2","3.3.1-1ubuntu1","3.3.1-1ubuntu2","3.3.1-1ubuntu3","3.4.2-1","3.4.3-1","3.4.3-1ubuntu1","3.4.3-1ubuntu1.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.5-2ubuntu0.1+esm1"}]}],"versions":["3.7.2-5ubuntu2","3.8.4-1ubuntu1","3.8.5-1ubuntu1","3.8.5-2","3.8.5-2ubuntu0.1"],"bundled":2}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"puppet","product":"puppet"},{"vendor":"puppet","product":"puppet server"}],"references":[{"url":"https://puppet.com/security/cve/cve-2017-2295","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web","article","report"]},{"url":"http://www.debian.org/security/2017/dsa-3862","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/98582","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-2295","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-988w-9qqw-43hr"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-2295","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0156.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=18640","tags":["report"]},{"url":"https://www.debian.org/security/2017/dsa-3862","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0336","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_satellite/6.3/html/release_notes/","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1019214","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1046642","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1132402","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1133515","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1140671","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1144042","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1145653","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1154382","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1177766","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1187338","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1190002","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1199204","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1210878","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1215825","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1217523","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1245642","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1255484","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1257588","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1260697","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1263748","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1264043","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1264732","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1265125","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1270771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1274159","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1278642","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1278644","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1284686","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1291935","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1292510","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1293538","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1303103","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1304608","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1305059","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1306723","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1309569","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1309944","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1313634","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1317614","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1318534","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1323436","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1324508","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1327030","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1327471","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328238","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328930","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1330264","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1335449","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1336924","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1339715","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1339889","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1340559","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1342623","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1344049","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1348939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349136","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1361473","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1365815","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366029","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370168","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376134","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376191","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1382356","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1382735","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1384146","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1384548","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1386266","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1386278","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390545","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1391831","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1393291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1393409","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1394056","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1402922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1406384","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1406729","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1410872","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412186","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413851","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1416119","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1417073","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1420711","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1422458","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1425121","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1425523","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1426404","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1426411","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1426448","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1428761","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1429426","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1434069","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1435972","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1436262","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1438376","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1439537","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1439850","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1445807","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1446707","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1446719","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452124","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1455057","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1455455","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1458817","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1464224","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1468248","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1480346","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1480348","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1480886","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1493001","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1493494","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1517827","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1529099","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0336.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-6459","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-6459","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-6459","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8183","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8183","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8183","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1669","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1669","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1669","tags":["advisory"]},{"url":"http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3693","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3693","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3693","tags":["advisory"]},{"url":"http://projects.theforeman.org/issues/14635","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3696","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3696","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3696","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3704","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3704","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3704","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4451","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4451","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4451","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4995","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4995","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4995","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4996","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4996","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4996","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-6319","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6319","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6319","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7077","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1385777","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7077","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7077","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7078","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1386244","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7078","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7078","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8613","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1387232","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8613","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8613","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8634","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1391520","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8634","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8634","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8639","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8639","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8639","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9593","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9593","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9593","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9595","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9595","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9595","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-2295","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452651","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-2295","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-2667","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-2667","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-2667","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-2672","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-2672","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-2672","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-15699","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1512724","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-15699","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15699","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14623","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1623719","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14623","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14623","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172113-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1040151","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2295","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180600-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1077767","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-2295","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3308-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4804-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-3248","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-10689","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-2295","description":"Versions of Puppet prior to 4.10.1 will deserialize data off the wire (from the agent to the server, in this case) with a attacker-specified format. This could be used to force YAML deserialization in an unsafe manner, which would lead to remote code execution. This change constrains the format of data on the wire to PSON or safely decoded YAML.","status":"published","published":"2017-07-05T15:00:00Z","modified":"2024-09-16T20:43:40.186Z","updated_at":"2026-11-02T14:33:15.543086Z"}],"euvd":[{"id":"EUVD-2017-11478","description":"Versions of Puppet prior to 4.10.1 will deserialize data off the wire (from the agent to the server, in this case) with a attacker-specified format. This could be used to force YAML deserialization in an unsafe manner, which would lead to remote code execution. This change constrains the format of data on the wire to PSON or safely decoded YAML.","status":"published","published":"2017-07-05T15:00:00Z","modified":"2024-09-16T20:43:40Z","updated_at":"2026-11-03T00:55:11.287524Z"}],"ghsa":[{"id":"GHSA-988w-9qqw-43hr","title":"Versions of Puppet prior to 4.10.1 will deserialize data off the wire (from the agent to the...","description":"Versions of Puppet prior to 4.10.1 will deserialize data off the wire (from the agent to the server, in this case) with a attacker-specified format. This could be used to force YAML deserialization in an unsafe manner, which would lead to remote code execution. This change constrains the format of data on the wire to PSON or safely decoded YAML.","status":"published","published":"2022-05-14T03:21:36Z","modified":"2023-02-02T05:07:45Z","cvss":[{"version":"3.0","score":8.2,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-502"],"updated_at":"2026-11-02T14:52:34.922323Z"}],"nvd":[{"id":"CVE-2017-2295","description":"Versions of Puppet prior to 4.10.1 will deserialize data off the wire (from the agent to the server, in this case) with a attacker-specified format. This could be used to force YAML deserialization in an unsafe manner, which would lead to remote code execution. This change constrains the format of data on the wire to PSON or safely decoded YAML.","status":"published","published":"2017-07-05T15:29:00.207Z","modified":"2026-06-17T01:15:54.37Z","cvss":[{"version":"3.0","score":8.2,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":6,"vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-502"],"updated_at":"2026-11-02T14:03:51.893212Z"}],"osv":[{"id":"CVE-2017-2295","description":"Versions of Puppet prior to 4.10.1 will deserialize data off the wire (from the agent to the server, in this case) with a attacker-specified format. This could be used to force YAML deserialization in an unsafe manner, which would lead to remote code execution. This change constrains the format of data on the wire to PSON or safely decoded YAML.","status":"published","published":"2017-07-05T15:29:00.207Z","modified":"2026-10-24T10:31:05.4535341Z","cvss":[{"version":"3.0","score":8.2,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:05.486486Z"},{"id":"DEBIAN-CVE-2017-2295","description":"Versions of Puppet prior to 4.10.1 will deserialize data off the wire (from the agent to the server, in this case) with a attacker-specified format. This could be used to force YAML deserialization in an unsafe manner, which would lead to remote code execution. This change constrains the format of data on the wire to PSON or safely decoded YAML.","status":"published","published":"2017-07-05T15:29:00.207Z","modified":"2026-08-04T05:48:04.197779748Z","cvss":[{"version":"3.0","score":8.2,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:29.100767Z"},{"id":"RHSA-2018:0336","title":"Red Hat Security Advisory: Satellite 6.3 security, bug fix, and enhancement update","status":"published","published":"2024-09-16T00:59:34Z","modified":"2026-07-01T10:03:22Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"UBUNTU-CVE-2017-2295","description":"Versions of Puppet prior to 4.10.1 will deserialize data off the wire (from the agent to the server, in this case) with a attacker-specified format. This could be used to force YAML deserialization in an unsafe manner, which would lead to remote code execution. This change constrains the format of data on the wire to PSON or safely decoded YAML.","status":"published","published":"2017-05-25T00:00:00Z","modified":"2026-02-04T04:04:44.516083Z","cvss":[{"version":"3.0","score":8.2,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:14.977781Z"},{"id":"DLA-1012-1","title":"puppet - security update","status":"published","published":"2017-07-03T00:00:00Z","modified":"2026-03-09T01:01:58.450833Z","updated_at":"2026-11-02T15:46:08.746073Z"},{"id":"DSA-3862-1","title":"puppet - security update","status":"published","published":"2017-05-25T00:00:00Z","modified":"2026-03-09T01:22:07.866844Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2017-0156","title":"Updated puppet packages fix security vulnerability","description":"It was discovered that unrestricted YAML deserialisation of data sent from\nagents to the server in the Puppet configuration management system could\nresult in the execution of arbitrary code (CVE-2017-2295).\n","status":"published","published":"2017-06-08T21:39:47Z","modified":"2026-04-16T06:24:54.431736065Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"SUSE-SU-2017:2113-1","title":"Security update for puppet","description":"This update for puppet fixes the following issues:\n\nSecurity issue fixed:\n- CVE-2017-2295: Possible code execution vulnerability where an attacker could force YAML\n  deserialization in an unsafe manner. In default, this update breaks a backwards compatibility\n  with Puppet agents older than 3.2.2 as the SLE12 master doesn't support other fact formats than\n  pson in default anymore.\n  In order to allow users to continue using their SLE12 master/SLE11 agents setup and fix\n  CVE-2017-2295 for the others, a new puppet master boolean option 'dangerous_fact_formats' was\n  added. When it's set to true it enables using dangerous fact formats (e.g. YAML). When it's set\n  to false, only PSON fact format is accepted. (bsc#1040151)\n","status":"published","published":"2017-08-09T07:43:44Z","modified":"2026-02-04T03:15:03.629417Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2018:0600-1","title":"Security update for puppet","description":"This update for puppet fixes the following issues:\n\n- CVE-2017-2295: Fixed a security vulnerability where an attacker could\n  force YAML deserialization in an unsafe manner, which would lead to\n  remote code execution.\n\nIn default, this update would break a backwards compatibility\nwith Puppet agents older than 3.2.2 as the SLE11 master doesn't\nsupport other fact formats than pson in default anymore.\nIn order to allow users to continue using their SLE11 agents\na patch was added that enables sending PSON from agents.\n\nFor non-SUSE clients older that 3.2.2 a new puppet master boolean option\n'dangerous_fact_formats' was added. When it's set to true it\nenables using dangerous fact formats (e.g. YAML). When it's set\nto false, only PSON fact format is accepted. (bsc#1040151),\n(bsc#1077767)\n","status":"published","published":"2018-03-05T09:43:31Z","modified":"2025-05-02T04:06:43.538543Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"USN-3308-1","title":"puppet vulnerabilities","description":"Dennis Rowe discovered that Puppet incorrectly handled the search path. A\nlocal attacker could use this issue to possibly execute arbitrary code.\n(CVE-2014-3248)\n\nIt was discovered that Puppet incorrectly handled YAML deserialization. A\nremote attacker could possibly use this issue to execute arbitrary code on\nthe master. This update is incompatible with agents older than 3.2.2.\n(CVE-2017-2295)\n","status":"published","published":"2017-06-05T16:28:41Z","modified":"2026-04-27T15:17:28.740803414Z","updated_at":"2026-11-02T16:58:13.496563Z"},{"id":"USN-4804-1","title":"puppet vulnerabilities","description":"It was discovered that Puppet installed modules with world writable\npermissions. An attacker could use this vulnerability to execute arbitrary\ncode or cause a denial of service. (CVE-2017-10689)\n\nIt was discovered that Puppet could be used to force YAML deserialization in an\nunsafe manner. A remote attacker could use this vulnerability for remote code\nexecution. (CVE-2017-2295)\n","status":"published","published":"2021-03-15T21:31:34Z","modified":"2026-06-25T13:30:26.750384423Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}