{"id":"CVE-2021-21290","aliases":["CLSA-2026-1776126830","CLSA-2026-1776126839","CLSA-2026-1776299668","CLSA-2026-1777596012","CLSA-2026-1791957404","CLSA-2026-1792688651","CLSA-2026-1792746051","CLSA-2026-1792747978","CLSA-2026-1793121965","DEBIAN-CVE-2021-21290","DLA-2555-1","DSA-4885-1","EUVD-2021-0535","GHSA-5mcr-gq6c-3hq2","GHSA-xpw8-rcwv-8f8p","MGASA-2021-0136","OESA-2021-1143","RHSA-2021:1511","RHSA-2021:2046","RHSA-2021:2047","RHSA-2021:2048","RHSA-2022:0190","RHSA-2022:5498","RLSA-2022:5498","ROOT-APP-MAVEN-GHSA-xpw8-rcwv-8f8p","SUSE-SU-2022:1271-1","SUSE-SU-2022:3617-1","SUSE-SU-2022:3760-1","SUSE-SU-2022:3793-1","UBUNTU-CVE-2021-21290","USN-6049-1","openSUSE-SU-2024:11085-1"],"status":"published","title":"Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files","description":"Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers \u0026 clients. In Netty before version 4.1.59.Final there is a vulnerability on Unix-like systems involving an insecure temp file. When netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. On unix-like systems, the temporary directory is shared between all user. As such, writing to this directory using APIs that do not explicitly set the file/directory permissions can lead to information disclosure. Of note, this does not impact modern MacOS Operating Systems. The method \"File.createTempFile\" on unix-like systems creates a random file, but, by default will create this file with the permissions \"-rw-r--r--\". Thus, if sensitive information is written to this file, other local users can read this information. This is the case in netty's \"AbstractDiskHttpData\" is vulnerable. This has been fixed in version 4.1.59.Final. As a workaround, one may specify your own \"java.io.tmpdir\" when you start the JVM or use \"DefaultHttpDataFactory.setBaseDir(...)\" to set the directory to something that is only readable by the current user.","severity":{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.01799,"percentile":0.78793,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-378","CWE-379","CWE-400","CWE-668"],"published":"2021-02-08T20:10:16Z","modified":"2026-11-10T19:58:31Z","fixes":[{"ecosystem":"Maven","package":"io.netty:netty-codec-http","fixed_in":["4.1.59.Final"],"sources":["ghsa","osv"]},{"ecosystem":"Maven","package":"org.jboss.netty:netty","fixed_in":["4.0.0"],"sources":["ghsa"]},{"ecosystem":"Maven","package":"io.netty:netty","fixed_in":["4.0.0"],"sources":["ghsa"]},{"ecosystem":"Maven","package":"io.netty:netty-codec-http2","fixed_in":["4.1.100.Final"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:Maven","package":"io.netty:netty","fixed_in":["3.6.2.Final-tuxcare.1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"netty","fixed_in":["1:4.1.48-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"netty","fixed_in":["1:4.1.48-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"netty","fixed_in":["1:4.1.48-2"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"netty","fixed_in":["1:4.1.7-2+deb9u3"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"netty","fixed_in":["4.1.51-1.1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"netty","fixed_in":["4.1.13-10.oe1"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.10::el7","package":"satellite","fixed_in":["0:6.10.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.10::el7","package":"satellite-capsule","fixed_in":["0:6.10.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.10::el7","package":"satellite-common","fixed_in":["0:6.10.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.10::el7","package":"satellite","fixed_in":["0:6.10.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.10::el7","package":"satellite-cli","fixed_in":["0:6.10.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.10::el7","package":"satellite-common","fixed_in":["0:6.10.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"io.root.io.netty:netty-codec-http2","fixed_in":["4.1.97.Final-root.io.1","4.1.97.Final-root.io.2","4.1.97.Final-root.io.3","4.1.97.Final-root.io.4","4.1.97.Final-root.io.5","4.1.97.Final-root.io.6","4.1.97.Final-root.io.7"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"io.netty:netty-codec-http2","fixed_in":["4.1.97.Final-aikido.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"netty","fixed_in":["1:4.0.34-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"netty","fixed_in":["1:4.1.7-4ubuntu0.1+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"netty","fixed_in":["1:4.1.45-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"netty","fixed_in":["1:4.1.48-4+deb11u1build0.22.04.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"io.netty:netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.1.59.Final"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.jboss.netty:netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"io.netty:netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"io.netty:netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.100.Final"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.52.Final"},{"fixed":"4.1.52.Final-tuxcare.1"}]}],"versions":["4.1.52.Final"],"bundled":15},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.52.Final"},{"fixed":"4.1.52.Final-tuxcare.1"}]}],"versions":["4.1.52.Final"],"bundled":15},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.52.Final"},{"fixed":"4.1.52.Final-tuxcare.1"}]}],"versions":["4.1.52.Final"],"bundled":15},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.52.Final"},{"fixed":"4.1.52.Final-tuxcare.1"}]}],"versions":["4.1.52.Final"],"bundled":15},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-smtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.52.Final"},{"fixed":"4.1.52.Final-tuxcare.1"}]}],"versions":["4.1.52.Final"],"bundled":15},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.52.Final"},{"fixed":"4.1.52.Final-tuxcare.1"}]}],"versions":["4.1.52.Final"],"bundled":15},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.48.Final"},{"fixed":"4.1.48.Final-tuxcare.1"}]}],"versions":["4.1.48.Final"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.48.Final"},{"fixed":"4.1.48.Final-tuxcare.1"}]}],"versions":["4.1.48.Final"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.48.Final"},{"fixed":"4.1.48.Final-tuxcare.1"}]}],"versions":["4.1.48.Final"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.58.Final"},{"fixed":"4.1.58.Final-tuxcare.1"}]}],"versions":["4.1.58.Final"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.58.Final"},{"fixed":"4.1.58.Final-tuxcare.1"}]}],"versions":["4.1.58.Final"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.58.Final"},{"fixed":"4.1.58.Final-tuxcare.1"}]}],"versions":["4.1.58.Final"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.58.Final"},{"fixed":"4.1.58.Final-tuxcare.1"}]}],"versions":["4.1.58.Final"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-smtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.58.Final"},{"fixed":"4.1.58.Final-tuxcare.1"}]}],"versions":["4.1.58.Final"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.58.Final"},{"fixed":"4.1.58.Final-tuxcare.1"}]}],"versions":["4.1.58.Final"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.10.6.Final"},{"fixed":"3.10.6.Final-tuxcare.1"}]}],"versions":["3.10.6.Final"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.7.0.Final"},{"fixed":"3.7.0.Final-tuxcare.1"}]}],"versions":["3.7.0.Final"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.5.13.Final"},{"fixed":"3.5.13.Final-tuxcare.1"}]}],"versions":["3.5.13.Final"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.53.Final"},{"fixed":"4.1.53.Final-tuxcare.1"}]}],"versions":["4.1.53.Final"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.53.Final"},{"fixed":"4.1.53.Final-tuxcare.1"}]}],"versions":["4.1.53.Final"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.53.Final"},{"fixed":"4.1.53.Final-tuxcare.1"}]}],"versions":["4.1.53.Final"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.53.Final"},{"fixed":"4.1.53.Final-tuxcare.1"}]}],"versions":["4.1.53.Final"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.53.Final"},{"fixed":"4.1.53.Final-tuxcare.1"}]}],"versions":["4.1.53.Final"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-mqtt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.53.Final"},{"fixed":"4.1.53.Final-tuxcare.1"}]}],"versions":["4.1.53.Final"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.53.Final"},{"fixed":"4.1.53.Final-tuxcare.1"}]}],"versions":["4.1.53.Final"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-smtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.53.Final"},{"fixed":"4.1.53.Final-tuxcare.1"}]}],"versions":["4.1.53.Final"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.53.Final"},{"fixed":"4.1.53.Final-tuxcare.1"}]}],"versions":["4.1.53.Final"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.53.Final"},{"fixed":"4.1.53.Final-tuxcare.1"}]}],"versions":["4.1.53.Final"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.53.Final"},{"fixed":"4.1.53.Final-tuxcare.1"}]}],"versions":["4.1.53.Final"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-native-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.53.Final"},{"fixed":"4.1.53.Final-tuxcare.1"}]}],"versions":["4.1.53.Final"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-native-kqueue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.53.Final"},{"fixed":"4.1.53.Final-tuxcare.1"}]}],"versions":["4.1.53.Final"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-sctp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.53.Final"},{"fixed":"4.1.53.Final-tuxcare.1"}]}],"versions":["4.1.53.Final"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.51.Final"},{"fixed":"4.1.51.Final-tuxcare.1"}]}],"versions":["4.1.51.Final"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.51.Final"},{"fixed":"4.1.51.Final-tuxcare.1"}]}],"versions":["4.1.51.Final"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.51.Final"},{"fixed":"4.1.51.Final-tuxcare.1"}]}],"versions":["4.1.51.Final"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.51.Final"},{"fixed":"4.1.51.Final-tuxcare.1"}]}],"versions":["4.1.51.Final"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.51.Final"},{"fixed":"4.1.51.Final-tuxcare.1"}]}],"versions":["4.1.51.Final"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.51.Final"},{"fixed":"4.1.51.Final-tuxcare.1"}]}],"versions":["4.1.51.Final"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-codec-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.51.Final"},{"fixed":"4.1.51.Final-tuxcare.1"}]}],"versions":["4.1.51.Final"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.51.Final"},{"fixed":"4.1.51.Final-tuxcare.1"}]}],"versions":["4.1.51.Final"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-native-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.51.Final"},{"fixed":"4.1.51.Final-tuxcare.1"}]}],"versions":["4.1.51.Final"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-native-kqueue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.51.Final"},{"fixed":"4.1.51.Final-tuxcare.1"}]}],"versions":["4.1.51.Final"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty-transport-sctp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.51.Final"},{"fixed":"4.1.51.Final-tuxcare.1"}]}],"versions":["4.1.51.Final"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.netty:netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.6.2.Final"},{"fixed":"3.6.2.Final-tuxcare.1"}]}],"versions":["3.6.2.Final"]},{"source":"osv","ecosystem":"Debian:12","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1.48-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1.48-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1.48-2"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1.7-2+deb9u3"}]}],"versions":["1:4.1.7-2","1:4.1.7-2+deb9u1","1:4.1.7-2+deb9u2"]},{"source":"osv","ecosystem":"Debian:10","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1.33-1+deb10u2"}]}],"versions":["1:4.1.33-1","1:4.1.33-1+deb10u1"],"bundled":7},{"source":"osv","ecosystem":"Maven","package":"io.netty:netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.1.59.Final"}]}],"versions":["4.0.0.Final","4.0.1.Final","4.0.10.Final","4.0.11.Final","4.0.12.Final","4.0.13.Final","4.0.14.Beta1","4.0.14.Final","4.0.15.Final","4.0.16.Final","4.0.17.Final","4.0.18.Final","4.0.19.Final","4.0.2.Final","4.0.20.Final","4.0.21.Final","4.0.22.Final","4.0.23.Final","4.0.24.Final","4.0.25.Final","4.0.26.Final","4.0.27.Final","4.0.28.Final","4.0.29.Final","4.0.3.Final","4.0.30.Final","4.0.31.Final","4.0.32.Final","4.0.33.Final","4.0.34.Final","4.0.35.Final","4.0.36.Final","4.0.37.Final","4.0.38.Final","4.0.39.Final","4.0.4.Final","4.0.40.Final","4.0.41.Final","4.0.42.Final","4.0.43.Final","4.0.44.Final","4.0.45.Final","4.0.46.Final","4.0.47.Final","4.0.48.Final","4.0.49.Final","4.0.5.Final","4.0.50.Final","4.0.51.Final","4.0.52.Final","4.0.53.Final","4.0.54.Final","4.0.55.Final","4.0.56.Final","4.0.6.Final","4.0.7.Final","4.0.8.Final","4.0.9.Final","4.1.0.Beta1","4.1.0.Beta2","4.1.0.Beta3","4.1.0.Beta4","4.1.0.Beta5","4.1.0.Beta6","4.1.0.Beta7","4.1.0.Beta8","4.1.0.CR1","4.1.0.CR2","4.1.0.CR3","4.1.0.CR4","4.1.0.CR5","4.1.0.CR6","4.1.0.CR7","4.1.0.Final","4.1.1.Final","4.1.10.Final","4.1.11.Final","4.1.12.Final","4.1.13.Final","4.1.14.Final","4.1.15.Final","4.1.16.Final","4.1.17.Final","4.1.18.Final","4.1.19.Final","4.1.2.Final","4.1.20.Final","4.1.21.Final","4.1.22.Final","4.1.23.Final","4.1.24.Final","4.1.25.Final","4.1.26.Final","4.1.27.Final","4.1.28.Final","4.1.29.Final","4.1.3.Final","4.1.30.Final","4.1.31.Final","4.1.32.Final","4.1.33.Final","4.1.34.Final","4.1.35.Final","4.1.36.Final","4.1.37.Final","4.1.38.Final","4.1.39.Final","4.1.4.Final","4.1.40.Final","4.1.41.Final","4.1.42.Final","4.1.43.Final","4.1.44.Final","4.1.45.Final","4.1.46.Final","4.1.47.Final","4.1.48.Final","4.1.49.Final","4.1.5.Final","4.1.50.Final","4.1.51.Final","4.1.52.Final","4.1.53.Final","4.1.54.Final","4.1.55.Final","4.1.56.Final","4.1.57.Final","4.1.58.Final","4.1.6.Final","4.1.7.Final","4.1.8.Final","4.1.9.Final"]},{"source":"osv","ecosystem":"Maven","package":"org.jboss.netty:netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.0.CR1","3.0.0.CR2","3.0.0.CR3","3.0.0.CR4","3.0.0.CR5","3.0.0.GA","3.0.1.GA","3.0.2.GA","3.1.0.ALPHA1","3.1.0.ALPHA2","3.1.0.ALPHA3","3.1.0.ALPHA4","3.1.0.BETA1","3.1.0.BETA2","3.1.0.BETA3","3.1.0.CR1","3.1.0.GA","3.1.1.GA","3.1.2.GA","3.1.3.GA","3.1.4.GA","3.1.5.GA","3.2.0.ALPHA1","3.2.0.ALPHA2","3.2.0.ALPHA3","3.2.0.ALPHA4","3.2.0.BETA1","3.2.0.CR1","3.2.0.Final","3.2.1.Final","3.2.10.Final","3.2.2.Final","3.2.3.Final","3.2.4.Final","3.2.5.Final","3.2.6.Final","3.2.7.Final","3.2.8.Final","3.2.9.Final"]},{"source":"osv","ecosystem":"Maven","package":"io.netty:netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.10.0.Final","3.10.1.Final","3.10.2.Final","3.10.3.Final","3.10.4.Final","3.10.5.Final","3.10.6.Final","3.3.0.Final","3.3.1.Final","3.4.0.Alpha1","3.4.0.Alpha2","3.4.0.Beta1","3.4.0.Final","3.4.1.Final","3.4.2.Final","3.4.3.Final","3.4.4.Final","3.4.5.Final","3.4.6.Final","3.5.0.Beta1","3.5.0.Final","3.5.1.Final","3.5.10.Final","3.5.11.Final","3.5.12.Final","3.5.13.Final","3.5.2.Final","3.5.3.Final","3.5.4.Final","3.5.5.Final","3.5.6.Final","3.5.7.Final","3.5.8.Final","3.5.9.Final","3.6.0.Beta1","3.6.0.Final","3.6.1.Final","3.6.10.Final","3.6.2.Final","3.6.3.Final","3.6.4.Final","3.6.5.Final","3.6.6.Final","3.6.7.Final","3.6.8.Final","3.6.9.Final","3.7.0.Final","3.7.1.Final","3.8.0.Final","3.8.1.Final","3.8.2.Final","3.8.3.Final","3.9.0.Final","3.9.1.1.Final","3.9.1.Final","3.9.2.Final","3.9.3.Final","3.9.4.Final","3.9.5.Final","3.9.6.Final","3.9.7.Final","3.9.8.Final","3.9.9.Final","4.0.0.Alpha1","4.0.0.Alpha2","4.0.0.Alpha3","4.0.0.Alpha4","4.0.0.Alpha5","4.0.0.Alpha6","4.0.0.Alpha7","4.0.0.Alpha8"]},{"source":"osv","ecosystem":"Maven","package":"io.netty:netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.100.Final"}]}],"versions":["4.1.0.Beta4","4.1.0.Beta5","4.1.0.Beta6","4.1.0.Beta7","4.1.0.Beta8","4.1.0.CR1","4.1.0.CR2","4.1.0.CR3","4.1.0.CR4","4.1.0.CR5","4.1.0.CR6","4.1.0.CR7","4.1.0.Final","4.1.1.Final","4.1.10.Final","4.1.11.Final","4.1.12.Final","4.1.13.Final","4.1.14.Final","4.1.15.Final","4.1.16.Final","4.1.17.Final","4.1.18.Final","4.1.19.Final","4.1.2.Final","4.1.20.Final","4.1.21.Final","4.1.22.Final","4.1.23.Final","4.1.24.Final","4.1.25.Final","4.1.26.Final","4.1.27.Final","4.1.28.Final","4.1.29.Final","4.1.3.Final","4.1.30.Final","4.1.31.Final","4.1.32.Final","4.1.33.Final","4.1.34.Final","4.1.35.Final","4.1.36.Final","4.1.37.Final","4.1.38.Final","4.1.39.Final","4.1.4.Final","4.1.40.Final","4.1.41.Final","4.1.42.Final","4.1.43.Final","4.1.44.Final","4.1.45.Final","4.1.46.Final","4.1.47.Final","4.1.48.Final","4.1.49.Final","4.1.5.Final","4.1.50.Final","4.1.51.Final","4.1.52.Final","4.1.53.Final","4.1.54.Final","4.1.55.Final","4.1.56.Final","4.1.57.Final","4.1.58.Final","4.1.59.Final","4.1.6.Final","4.1.60.Final","4.1.61.Final","4.1.62.Final","4.1.63.Final","4.1.64.Final","4.1.65.Final","4.1.66.Final","4.1.67.Final","4.1.68.Final","4.1.69.Final","4.1.7.Final","4.1.70.Final","4.1.71.Final","4.1.72.Final","4.1.73.Final","4.1.74.Final","4.1.75.Final","4.1.76.Final","4.1.77.Final","4.1.78.Final","4.1.79.Final","4.1.8.Final","4.1.80.Final","4.1.81.Final","4.1.82.Final","4.1.83.Final","4.1.84.Final","4.1.85.Final","4.1.86.Final","4.1.87.Final","4.1.88.Final","4.1.89.Final","4.1.9.Final","4.1.90.Final","4.1.91.Final","4.1.92.Final","4.1.93.Final","4.1.94.Final","4.1.95.Final","4.1.96.Final","4.1.97.Final","4.1.98.Final","4.1.99.Final"]},{"source":"osv","ecosystem":"Mageia:8","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.51-1.1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.13-10.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el7","package":"python-qpid-proton","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33.0-6.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el7","package":"python-qpid-proton-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33.0-6.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el7","package":"qpid-proton","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33.0-6.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el7","package":"qpid-proton-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33.0-6.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el7","package":"qpid-proton-c-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33.0-6.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el7","package":"qpid-proton-c-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33.0-6.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el7","package":"qpid-proton-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33.0-6.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el7","package":"qpid-proton-cpp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33.0-6.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el7","package":"qpid-proton-cpp-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33.0-6.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el7","package":"qpid-proton-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33.0-6.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el7","package":"qpid-proton-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33.0-6.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el7","package":"rubygem-qpid_proton","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33.0-6.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"python-qpid-proton-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33.0-8.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"python3-qpid-proton","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33.0-8.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"python3-qpid-proton-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33.0-8.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"qpid-proton","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33.0-8.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"qpid-proton-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33.0-8.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"qpid-proton-c-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33.0-8.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"qpid-proton-c-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33.0-8.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"qpid-proton-c-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33.0-8.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"qpid-proton-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33.0-8.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"qpid-proton-cpp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33.0-8.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"qpid-proton-cpp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33.0-8.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"qpid-proton-cpp-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33.0-8.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"qpid-proton-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33.0-8.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"qpid-proton-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33.0-8.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"qpid-proton-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33.0-8.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"rubygem-qpid_proton","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33.0-8.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"rubygem-qpid_proton-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33.0-8.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-artemis-wildfly-integration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.4-1.redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-2.redhat_00005.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-bouncycastle-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-2.redhat_00005.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-bouncycastle-pkix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-2.redhat_00005.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-bouncycastle-prov","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-2.redhat_00005.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.14-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-infinispan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.22-3.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-infinispan-cachestore-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.22-3.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-infinispan-cachestore-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.22-3.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-infinispan-client-hotrod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.22-3.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-infinispan-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.22-3.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-infinispan-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.22-3.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-infinispan-hibernate-cache-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.22-3.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-infinispan-hibernate-cache-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.22-3.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-infinispan-hibernate-cache-v53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.22-3.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.30-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.30-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.30-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.30-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.30-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.30-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.30-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.30-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.30-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-genericjms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.9-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-marshalling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.11-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-marshalling-river","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.11-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-eap6.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-eap6.4-to-eap7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-eap7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-eap7.2-to-eap7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-eap7.3-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly10.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly12.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly13.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly14.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly15.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly16.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly17.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly18.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly8.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-weld-3.1-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-6.SP3_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-weld-3.1-api-weld-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-6.SP3_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-weld-3.1-api-weld-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-6.SP3_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jgroups-kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.16-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-mod_cluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-2.Final_redhat_00002.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.60-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.60-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-atom-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-cdi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-client-microprofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-jackson-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-jackson2-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-jaxb-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-jaxrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-jettison-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-jose-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-jsapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-json-binding-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-json-p-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-multipart-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-rxjava2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-validator-provider-11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-yaml-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.35-1.SP1_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-velocity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-1.redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-velocity-engine-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-1.redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-weld-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.6-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-weld-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.6-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-weld-core-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.6-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-weld-ejb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.6-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-weld-jta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.6-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-weld-probe-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.6-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-weld-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.6-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.7-1.GA_redhat_00002.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-wildfly-elytron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.12-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-wildfly-elytron-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.12-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-wildfly-http-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.26-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-wildfly-http-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.26-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-wildfly-http-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.26-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-wildfly-http-naming-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.26-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-wildfly-http-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.26-1.Final_redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.7-1.GA_redhat_00002.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.7-1.GA_redhat_00002.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-xalan-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-36.redhat_00013.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-yasson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-1.redhat_00001.1.el6eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-artemis-wildfly-integration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.4-1.redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-2.redhat_00005.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-bouncycastle-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-2.redhat_00005.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-bouncycastle-pkix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-2.redhat_00005.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-bouncycastle-prov","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-2.redhat_00005.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.14-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-infinispan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.22-3.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-infinispan-cachestore-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.22-3.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-infinispan-cachestore-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.22-3.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-infinispan-client-hotrod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.22-3.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-infinispan-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.22-3.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-infinispan-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.22-3.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-infinispan-hibernate-cache-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.22-3.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-infinispan-hibernate-cache-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.22-3.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-infinispan-hibernate-cache-v53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.22-3.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.30-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.30-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.30-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.30-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.30-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.30-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.30-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.30-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.30-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-genericjms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.9-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-marshalling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.11-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-marshalling-river","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.11-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-eap6.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-eap6.4-to-eap7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-eap7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-eap7.2-to-eap7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-eap7.3-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly10.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly12.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly13.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly14.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly15.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly16.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly17.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly18.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly8.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-weld-3.1-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-6.SP3_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-weld-3.1-api-weld-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-6.SP3_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-weld-3.1-api-weld-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-6.SP3_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jgroups-kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.16-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-mod_cluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-2.Final_redhat_00002.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.60-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.60-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-atom-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-cdi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-client-microprofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-jackson-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-jackson2-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-jaxb-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-jaxrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-jettison-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-jose-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-jsapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-json-binding-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-json-p-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-multipart-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-rxjava2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-validator-provider-11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-yaml-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.35-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-velocity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-1.redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-velocity-engine-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-1.redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-weld-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.6-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-weld-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.6-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-weld-core-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.6-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-weld-ejb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.6-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-weld-jta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.6-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-weld-probe-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.6-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-weld-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.6-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.7-1.GA_redhat_00002.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wildfly-elytron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.12-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wildfly-elytron-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.12-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wildfly-http-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.26-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wildfly-http-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.26-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wildfly-http-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.26-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wildfly-http-naming-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.26-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wildfly-http-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.26-1.Final_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.7-1.GA_redhat_00002.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.7-1.GA_redhat_00002.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.7-1.GA_redhat_00002.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.7-1.GA_redhat_00002.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-xalan-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-36.redhat_00013.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-yasson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-1.redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-artemis-wildfly-integration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.4-1.redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-2.redhat_00005.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-bouncycastle-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-2.redhat_00005.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-bouncycastle-pkix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-2.redhat_00005.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-bouncycastle-prov","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-2.redhat_00005.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.14-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-infinispan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.22-3.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-infinispan-cachestore-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.22-3.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-infinispan-cachestore-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.22-3.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-infinispan-client-hotrod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.22-3.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-infinispan-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.22-3.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-infinispan-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.22-3.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-infinispan-hibernate-cache-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.22-3.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-infinispan-hibernate-cache-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.22-3.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-infinispan-hibernate-cache-v53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.22-3.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.30-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.30-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.30-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.30-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.30-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.30-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.30-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.30-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.30-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-genericjms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.9-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-marshalling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.11-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-marshalling-river","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.11-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-eap6.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-eap6.4-to-eap7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-eap7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-eap7.2-to-eap7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-eap7.3-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly10.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly12.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly13.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly14.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly15.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly16.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly17.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly18.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly8.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-6.Final_redhat_00007.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-weld-3.1-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-6.SP3_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-weld-3.1-api-weld-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-6.SP3_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-weld-3.1-api-weld-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-6.SP3_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jgroups-kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.16-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-mod_cluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-2.Final_redhat_00002.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.60-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.60-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-atom-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-cdi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-client-microprofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-jackson-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-jackson2-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-jaxb-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-jaxrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-jettison-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-jose-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-jsapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-json-binding-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-json-p-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-multipart-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-rxjava2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-validator-provider-11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-yaml-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.4-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.35-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-velocity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-1.redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-velocity-engine-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-1.redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-weld-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.6-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-weld-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.6-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-weld-core-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.6-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-weld-ejb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.6-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-weld-jta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.6-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-weld-probe-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.6-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-weld-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.6-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.7-1.GA_redhat_00002.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-wildfly-elytron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.12-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-wildfly-elytron-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.12-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-wildfly-http-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.26-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-wildfly-http-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.26-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-wildfly-http-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.26-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-wildfly-http-naming-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.26-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-wildfly-http-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.26-1.Final_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.7-1.GA_redhat_00002.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.7-1.GA_redhat_00002.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-xalan-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-36.redhat_00013.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-yasson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-1.redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.10::el7","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.10.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.10::el7","package":"satellite-capsule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.10.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.10::el7","package":"satellite-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.10.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.10.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"satellite-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.10.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"satellite-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.10.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.11::el7","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.22-1.el7pc"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el7","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.22-1.el7pc"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.11::el8","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.22-1.el8pc"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el8","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.22-1.el8pc"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.11::el7","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.21-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.11::el7","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.21-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el7","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.21-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.11::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.21-2.el8sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.11::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.21-2.el8sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.21-2.el8sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.11::el7","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.11.0-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.11::el7","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.11.0-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el7","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.11.0-2.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.11::el8","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.11.0-2.el8sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.11::el8","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.11.0-2.el8sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el8","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.11.0-2.el8sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el7","package":"candlepin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.13-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el8","package":"candlepin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.13-1.el8sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el7","package":"tfm-rubygem-sidekiq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.10-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.11::el8","package":"python-sqlparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.2-2.el8pc"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el8","package":"python-sqlparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.2-2.el8pc"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el7","package":"tfm-rubygem-puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.2-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el8","package":"rubygem-puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.2-1.el8sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.11::el8","package":"python-lxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-1.el8pc"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el8","package":"python-lxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-1.el8pc"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.11::el8","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.13-1.el8pc"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el8","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.13-1.el8pc"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.11::el8","package":"python38-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.13-1.el8pc"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el8","package":"python38-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.13-1.el8pc"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el7","package":"tfm-rubygem-actionpack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.4.7-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el8","package":"rubygem-actionpack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.4.7-1.el8sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el7","package":"tfm-rubygem-puma-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.2-1.el7sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el8","package":"rubygem-puma-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.2-1.el8sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el8","package":"rubygem-puma-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.2-1.el8sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el8","package":"rubygem-sidekiq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.10-1.el8sat"}]}],"bundled":28},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":28},{"source":"osv","ecosystem":"Root:Maven","package":"io.root.io.netty:netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.97.Final-root.io.1"},{"fixed":"4.1.97.Final-root.io.2"},{"fixed":"4.1.97.Final-root.io.3"},{"fixed":"4.1.97.Final-root.io.4"},{"fixed":"4.1.97.Final-root.io.5"},{"fixed":"4.1.97.Final-root.io.6"},{"fixed":"4.1.97.Final-root.io.7"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"io.netty:netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.97.Final-aikido.7"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.75-150200.4.6.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.44.Final-150300.4.3.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.44.Final-150400.3.3.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.1","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.44.Final-150200.3.4.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.0.34-1ubuntu0.1~esm1"}]}],"versions":["1:3.2.6.Final-2","1:4.0.32-1","1:4.0.33-1","1:4.0.34-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1.7-4ubuntu0.1+esm2"}]}],"versions":["1:4.1.7-4","1:4.1.7-4ubuntu0.1~esm1","1:4.1.7-4ubuntu0.1","1:4.1.7-4ubuntu0.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1.45-1ubuntu0.1~esm1"}]}],"versions":["1:4.1.33-1","1:4.1.33-2","1:4.1.33-3","1:4.1.45-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1.48-4+deb11u1build0.22.04.1"}]}],"versions":["1:4.1.48-4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.0.34-1ubuntu0.1~esm1"}]}],"versions":["1:3.2.6.Final-2","1:4.0.32-1","1:4.0.33-1","1:4.0.34-1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1.7-4ubuntu0.1+esm2"}]}],"versions":["1:4.1.7-4","1:4.1.7-4ubuntu0.1~esm1","1:4.1.7-4ubuntu0.1","1:4.1.7-4ubuntu0.1+esm1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1.45-1ubuntu0.1~esm1"}]}],"versions":["1:4.1.33-1","1:4.1.33-2","1:4.1.33-3","1:4.1.45-1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1.48-4+deb11u1build0.22.04.1"}]}],"versions":["1:4.1.48-4"],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.60-1.4"}]}],"bundled":4}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"netapp","product":"active_iq_unified_manager"},{"vendor":"netapp","product":"cloud_secure_agent"},{"vendor":"netapp","product":"snapcenter"},{"vendor":"netty","product":"netty"},{"vendor":"oracle","product":"banking_corporate_lending_process_management"},{"vendor":"oracle","product":"banking_credit_facilities_process_management"},{"vendor":"oracle","product":"banking_trade_finance_process_management"},{"vendor":"oracle","product":"communications_brm_-_elastic_charging_engine"},{"vendor":"oracle","product":"communications_design_studio"},{"vendor":"oracle","product":"communications_messaging_server"},{"vendor":"oracle","product":"nosql_database"},{"vendor":"quarkus","product":"quarkus"}],"references":[{"url":"https://github.com/netty/netty/security/advisories/GHSA-5mcr-gq6c-3hq2","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Third Party Advisory","evidence","web","advisory","report"]},{"url":"https://github.com/netty/netty/commit/c735357bf29d07856ad171c6611a2e1a0e0000ec","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/02/msg00016.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://lists.apache.org/thread.html/rc488f80094872ad925f0c73d283d4c00d32def81977438e27a3dc2bb%40%3Cjira.kafka.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r2748097ea4b774292539cf3de6e3b267fc7a88d6c8ec40f4e2e87bd4%40%3Cdev.kafka.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/ra503756ced78fdc2136bd33e87cb7553028645b261b1f5c6186a121e%40%3Cjira.kafka.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r10308b625e49d4e9491d7e079606ca0df2f0a4d828f1ad1da64ba47b%40%3Cjira.kafka.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r2fda4dab73097051977f2ab818f75e04fbcb15bb1003c8530eac1059%40%3Cjira.kafka.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r326ec431f06eab7cb7113a7a338e59731b8d556d05258457f12bac1b%40%3Cdev.kafka.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rdba4f78ac55f803893a1a2265181595e79e3aa027e2e651dfba98c18%40%3Cjira.kafka.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r0857b613604c696bf9743f0af047360baaded48b1c75cf6945a083c5%40%3Cjira.kafka.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r5e4a540089760c8ecc2c411309d74264f1dad634ad93ad583ca16214%40%3Ccommits.kafka.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r71dbb66747ff537640bb91eb0b2b24edef21ac07728097016f58b01f%40%3Ccommits.kafka.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/ra0fc2b4553dd7aaf75febb61052b7f1243ac3a180a71c01f29093013%40%3Cjira.kafka.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r5bf303d7c04da78f276765da08559fdc62420f1df539b277ca31f63b%40%3Cissues.zookeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r743149dcc8db1de473e6bff0b3ddf10140a7357bc2add75f7d1fbb12%40%3Cdev.zookeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r4efed2c501681cb2e8d629da16e48d9eac429624fd4c9a8c6b8e7020%40%3Cdev.tinkerpop.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r02e467123d45006a1dda20a38349e9c74c3a4b53e2e07be0939ecb3f%40%3Cdev.ranger.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r7bb3cdc192e9a6f863d3ea05422f09fa1ae2b88d4663e63696ee7ef5%40%3Cdev.ranger.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rcd163e421273e8dca1c71ea298dce3dd11b41d51c3a812e0394e6a5d%40%3Ccommits.pulsar.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r9924ef9357537722b28d04c98a189750b80694a19754e5057c34ca48%40%3Ccommits.pulsar.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rb51d6202ff1a773f96eaa694b7da4ad3f44922c40b3d4e1a19c2f325%40%3Ccommits.pulsar.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r790c2926efcd062067eb18fde2486527596d7275381cfaff2f7b3890%40%3Cissues.bookkeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r1908a34b9cc7120e5c19968a116ddbcffea5e9deb76c2be4fa461904%40%3Cdev.zookeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rb06c1e766aa45ee422e8261a8249b561784186483e8f742ea627bda4%40%3Cdev.kafka.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r5e66e286afb5506cdfe9bbf68a323e8d09614f6d1ddc806ed0224700%40%3Cjira.kafka.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rb592033a2462548d061a83ac9449c5ff66098751748fcd1e2d008233%40%3Cissues.zookeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r59bac5c09f7a4179b9e2460e8f41c278aaf3b9a21cc23678eb893e41%40%3Cjira.kafka.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rc0087125cb15b4b78e44000f841cd37fefedfda942fd7ddf3ad1b528%40%3Cissues.zookeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r2936730ef0a06e724b96539bc7eacfcd3628987c16b1b99c790e7b87%40%3Cissues.zookeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://www.debian.org/security/2021/dsa-4885","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://lists.apache.org/thread.html/r0053443ce19ff125981559f8c51cf66e3ab4350f47812b8cf0733a05%40%3Cdev.kafka.apache.org%3E","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r5c701840aa2845191721e39821445e1e8c59711e71942b7796a6ec29%40%3Cusers.activemq.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://lists.apache.org/thread.html/r584cf871f188c406d8bd447ff4e2fd9817fca862436c064d0951a071%40%3Ccommits.pulsar.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://security.netapp.com/advisory/ntap-20220210-0011/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21290","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/r10308b625e49d4e9491d7e079606ca0df2f0a4d828f1ad1da64ba47b@%3Cjira.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r2748097ea4b774292539cf3de6e3b267fc7a88d6c8ec40f4e2e87bd4@%3Cdev.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r2fda4dab73097051977f2ab818f75e04fbcb15bb1003c8530eac1059@%3Cjira.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/ra503756ced78fdc2136bd33e87cb7553028645b261b1f5c6186a121e@%3Cjira.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rc488f80094872ad925f0c73d283d4c00d32def81977438e27a3dc2bb@%3Cjira.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r0053443ce19ff125981559f8c51cf66e3ab4350f47812b8cf0733a05@%3Cdev.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r0857b613604c696bf9743f0af047360baaded48b1c75cf6945a083c5@%3Cjira.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r326ec431f06eab7cb7113a7a338e59731b8d556d05258457f12bac1b@%3Cdev.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r5e4a540089760c8ecc2c411309d74264f1dad634ad93ad583ca16214@%3Ccommits.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r71dbb66747ff537640bb91eb0b2b24edef21ac07728097016f58b01f@%3Ccommits.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/ra0fc2b4553dd7aaf75febb61052b7f1243ac3a180a71c01f29093013@%3Cjira.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rdba4f78ac55f803893a1a2265181595e79e3aa027e2e651dfba98c18@%3Cjira.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r5bf303d7c04da78f276765da08559fdc62420f1df539b277ca31f63b@%3Cissues.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r743149dcc8db1de473e6bff0b3ddf10140a7357bc2add75f7d1fbb12@%3Cdev.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r02e467123d45006a1dda20a38349e9c74c3a4b53e2e07be0939ecb3f@%3Cdev.ranger.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r4efed2c501681cb2e8d629da16e48d9eac429624fd4c9a8c6b8e7020@%3Cdev.tinkerpop.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r7bb3cdc192e9a6f863d3ea05422f09fa1ae2b88d4663e63696ee7ef5@%3Cdev.ranger.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r9924ef9357537722b28d04c98a189750b80694a19754e5057c34ca48@%3Ccommits.pulsar.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rcd163e421273e8dca1c71ea298dce3dd11b41d51c3a812e0394e6a5d@%3Ccommits.pulsar.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r1908a34b9cc7120e5c19968a116ddbcffea5e9deb76c2be4fa461904@%3Cdev.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r2936730ef0a06e724b96539bc7eacfcd3628987c16b1b99c790e7b87@%3Cissues.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r59bac5c09f7a4179b9e2460e8f41c278aaf3b9a21cc23678eb893e41@%3Cjira.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r5e66e286afb5506cdfe9bbf68a323e8d09614f6d1ddc806ed0224700@%3Cjira.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r790c2926efcd062067eb18fde2486527596d7275381cfaff2f7b3890@%3Cissues.bookkeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rb06c1e766aa45ee422e8261a8249b561784186483e8f742ea627bda4@%3Cdev.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rb51d6202ff1a773f96eaa694b7da4ad3f44922c40b3d4e1a19c2f325@%3Ccommits.pulsar.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rb592033a2462548d061a83ac9449c5ff66098751748fcd1e2d008233@%3Cissues.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rc0087125cb15b4b78e44000f841cd37fefedfda942fd7ddf3ad1b528@%3Cissues.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r5c701840aa2845191721e39821445e1e8c59711e71942b7796a6ec29@%3Cusers.activemq.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r584cf871f188c406d8bd447ff4e2fd9817fca862436c064d0951a071@%3Ccommits.pulsar.apache.org%3E","tags":["web"]},{"url":"https://github.com/advisories/GHSA-5mcr-gq6c-3hq2"},{"url":"https://github.com/netty/netty/security/advisories/GHSA-xpw8-rcwv-8f8p","tags":["web"]},{"url":"https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61","tags":["web"]},{"url":"https://github.com/apple/swift-nio-http2/security/advisories/GHSA-qppj-fm5r-hxr3","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-44487","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-44487","tags":["web"]},{"url":"https://github.com/advisories/GHSA-xpw8-rcwv-8f8p"},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-21290","tags":["advisory"]},{"url":"https://github.com/netty/netty","tags":["package"]},{"url":"https://security.netapp.com/advisory/ntap-20220210-0011","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2021-0136.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=28446","tags":["report"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1143","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:1511","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_amq/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1927028","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1937364","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944888","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1511.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21290","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21290","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21295","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21295","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21295","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-wm47-8v5p-wjpj","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21409","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21409","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21409","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-f256-j965-7f32","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2046","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.3/","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.3/html-single/installation_guide/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1937440","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-20478","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-20868","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-20927","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-20935","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-20940","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-21093","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-21094","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-21095","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-21096","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-21121","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-21185","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-21186","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-21193","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-21196","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-21203","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-21262","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-21279","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-21312","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-21322","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-21351","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-21390","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-21479","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2046.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-13936","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-13936","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13936","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2047","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-20869","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2047.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2048","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-20870","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2048.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0190","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2016047","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2027347","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2027354","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2027358","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2027817","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2030445","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2030448","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0190.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:5498","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_satellite/6.11/html/release_notes","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1459231","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1473263","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1545000","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1596004","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609543","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1659649","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1662924","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1685708","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693733","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1694659","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1713401","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1723632","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1723751","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1735540","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1744521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1761421","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1770075","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1771724","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1777820","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1784254","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1805028","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1807258","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1807536","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1809769","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1811166","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1813624","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1819309","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1825761","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1832858","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1844848","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1845471","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1847825","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1851808","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1852897","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1862140","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1867193","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1869351","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1872688","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1873241","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1877283","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1878049","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1881668","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1883612","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1883816","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1886780","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1893059","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1896628","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1898656","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1899481","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1902047","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1902314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1906023","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1907795","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1910433","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1911545","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1914803","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1915394","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1919146","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1920579","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1922872","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1923766","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1924625","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1927532","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1931489","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1937470","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1940308","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1942806","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944802","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1951626","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1955385","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1957070","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1957288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1958664","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1959691","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1960228","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962307","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962410","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962847","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1964394","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1965968","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1967319","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1968439","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1969748","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1969992","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1970482","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1972501","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1973146","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1974225","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1975321","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978323","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978689","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979092","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979907","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1980023","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1980166","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1982970","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1988370","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1992570","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1992624","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1992698","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1994212","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1994237","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1994397","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1994679","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1996803","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1997575","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1997818","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1998172","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1999604","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2000699","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2000703","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2000705","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2000707","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2000769","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2002995","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2004016","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2004158","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2004234","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2004335","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2005072","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2007655","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2008809","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2009049","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2009398","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2010138","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2011062","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2013495","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2013503","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2013837","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2014037","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2014244","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2014251","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2018263","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2020329","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2021255","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2021352","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2021406","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2021985","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2022648","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2023809","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2024269","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2024553","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2024889","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2024894","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2024963","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2024978","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2024986","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2025049","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2025437","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2025494","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2025523","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2025760","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2025811","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2026239","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2026277","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2026415","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2026658","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2026718","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2026873","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2027052","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2027968","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2028178","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2028205","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2028273","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2028377","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2028446","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2028733","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2029192","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2029375","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2029385","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2029548","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2029760","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2029807","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2029828","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2029829","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2029914","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2030101","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2030273","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2030434","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2030460","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2030715","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2031154","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2031958","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2032098","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2032400","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2032569","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2032602","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2032928","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2032956","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2033174","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2033201","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2033217","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2033336","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2033560","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2033593","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2033847","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2033853","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2033940","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034317","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034346","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034552","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034635","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034649","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034659","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2035195","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2035204","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2035480","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2035907","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2036054","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2036187","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2036381","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2036628","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2036721","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2037024","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2037025","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2037028","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2037180","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2037275","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2037508","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2037518","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2037520","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2037648","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2037706","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2037773","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2038042","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2038192","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2038241","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2038388","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2038432","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2038849","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2039289","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2039696","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2040406","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2040447","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2040453","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2040596","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2040650","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2040773","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2040796","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2040870","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041457","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041497","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041508","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041551","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041588","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041701","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2042416","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2042480","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2042848","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2042861","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2043081","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2043097","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2043144","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2043248","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2043501","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2043609","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2043726","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044581","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044606","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044631","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044839","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2045504","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2045854","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2046281","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2046307","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2046322","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2046328","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2046337","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2046484","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2046573","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2047285","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2047443","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2047451","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2047485","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2047649","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2047675","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2047683","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2048470","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2048517","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2048560","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2048775","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2048778","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2048913","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2048927","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2048986","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2049143","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2049304","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2049799","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2049913","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2050100","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2050297","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2050323","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2050440","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2051374","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2051408","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2051468","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2051522","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2051543","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2051912","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2052048","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2052088","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2052420","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2052493","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2052506","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2052524","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2052815","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2052958","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2053329","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2053395","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2053478","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2053601","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2053839","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2053843","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2053872","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2053876","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2053884","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2053923","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2053928","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2053956","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2053970","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2053996","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2053997","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2054008","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2054121","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2054123","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2054165","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2054174","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2054182","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2054211","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2054340","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2054758","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2054849","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2054971","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055159","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055312","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055329","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055495","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055513","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055570","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055808","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055951","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056167","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056171","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056172","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056173","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056177","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056178","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056183","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056186","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056189","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056198","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056202","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056237","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056469","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056657","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056966","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2057178","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2057309","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2057416","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2057605","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2057632","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2057658","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2057782","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2057848","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2058397","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2058532","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2058649","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2058711","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2058844","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2058863","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2058867","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2058894","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2058905","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2058984","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2059576","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2059985","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2060097","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2060396","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2060512","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2060546","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2060885","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2061688","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2061749","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2061773","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2061970","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2062189","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2062476","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2063149","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2063190","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2063575","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2063910","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064400","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064410","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064434","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064583","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064707","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064793","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2065015","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2065027","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2065391","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2065448","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2065450","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2066408","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2066899","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2067301","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2067331","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2069135","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2069248","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2069381","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2069456","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2069459","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2069640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2070176","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2070177","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2070242","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2070272","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2070620","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2072447","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2072459","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2072530","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2073039","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2073124","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2073194","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2073307","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2073313","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2073421","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2073468","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2073469","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2073470","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2075434","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2075519","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2075528","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2076372","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2076684","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2076987","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2077850","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2078983","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2079357","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2080909","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2081280","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2081459","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2082076","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2082241","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2082505","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2082560","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2083532","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2084106","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2084624","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2085446","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2085528","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2086101","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2086683","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2086948","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2087727","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2089361","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2089794","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2089796","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2089812","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2089928","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2090740","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2090820","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2093679","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2094255","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2094280","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2094454","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2095598","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2095599","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2096198","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2096921","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5498.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3200","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3200","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3200","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3584","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3584","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3584","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4142","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4142","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4142","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30151","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30151","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30151","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-grh7-935j-hg6w","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-32839","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-32839","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-32839","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-33928","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-33928","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33928","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-33929","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-33929","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33929","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-33930","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-33930","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33930","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-33938","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-33938","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33938","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-41136","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-41136","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41136","tags":["advisory"]},{"url":"https://github.com/puma/puma/security/advisories/GHSA-48w2-rm65-62xx","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-42550","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-42550","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-42550","tags":["advisory"]},{"url":"http://logback.qos.ch/news.html","tags":["article"]},{"url":"https://cve.report/CVE-2021-42550","tags":["article"]},{"url":"https://jira.qos.ch/browse/LOGBACK-1591","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-43797","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-43797","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-43797","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-wx5j-54mm-rqqq","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-43818","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-43818","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-43818","tags":["advisory"]},{"url":"https://github.com/lxml/lxml/blob/lxml-4.6.5/CHANGES.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-44420","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-44420","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44420","tags":["advisory"]},{"url":"https://www.djangoproject.com/weblog/2021/dec/07/security-releases/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-44568","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-44568","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44568","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-45115","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-45115","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-45115","tags":["advisory"]},{"url":"https://www.djangoproject.com/weblog/2022/jan/04/security-releases/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-45116","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-45116","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-45116","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-45452","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-45452","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-45452","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-22818","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-22818","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22818","tags":["advisory"]},{"url":"https://www.djangoproject.com/weblog/2022/feb/01/security-releases/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23633","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23633","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23633","tags":["advisory"]},{"url":"https://github.com/rails/rails/security/advisories/GHSA-wh98-p28r-vrc9","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23634","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23634","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23634","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-rmj8-8hhh-gv5h","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23833","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23833","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23833","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23837","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23837","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23837","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-jrfj-98qg-qjgv","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-28346","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-28346","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-28346","tags":["advisory"]},{"url":"https://www.djangoproject.com/weblog/2022/apr/11/security-releases/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-28347","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-28347","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-28347","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:5498","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221271-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1182103","tags":["report"]},{"url":"https://bugzilla.suse.com/1183262","tags":["report"]},{"url":"https://bugzilla.suse.com/1190610","tags":["report"]},{"url":"https://bugzilla.suse.com/1190613","tags":["report"]},{"url":"https://bugzilla.suse.com/1193672","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-37136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-37137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43797","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223617-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1168932","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11612","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223760-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223793-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-21290","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6049-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-11612","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-21295","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-21409","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-37136","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-37137","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-43797","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-41881","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-41915","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10707","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-21290","title":"Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files","description":"Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers \u0026 clients. In Netty before version 4.1.59.Final there is a vulnerability on Unix-like systems involving an insecure temp file. When netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. On unix-like systems, the temporary directory is shared between all user. As such, writing to this directory using APIs that do not explicitly set the file/directory permissions can lead to information disclosure. Of note, this does not impact modern MacOS Operating Systems. The method \"File.createTempFile\" on unix-like systems creates a random file, but, by default will create this file with the permissions \"-rw-r--r--\". Thus, if sensitive information is written to this file, other local users can read this information. This is the case in netty's \"AbstractDiskHttpData\" is vulnerable. This has been fixed in version 4.1.59.Final. As a workaround, one may specify your own \"java.io.tmpdir\" when you start the JVM or use \"DefaultHttpDataFactory.setBaseDir(...)\" to set the directory to something that is only readable by the current user.","status":"published","published":"2021-02-08T20:10:16Z","modified":"2026-10-08T21:14:01.568Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-378","CWE-379"],"updated_at":"2026-11-02T14:33:00.488332Z"}],"euvd":[{"id":"EUVD-2021-0535","description":"Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers \u0026 clients. In Netty before version 4.1.59.Final there is a vulnerability on Unix-like systems involving an insecure temp file. When netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. On unix-like systems, the temporary directory is shared between all user. As such, writing to this directory using APIs that do not explicitly set the file/directory permissions can lead to information disclosure. Of note, this does not impact modern MacOS Operating Systems. The method \"File.createTempFile\" on unix-like systems creates a random file, but, by default will create this file with the permissions \"-rw-r--r--\". Thus, if sensitive information is written to this file, other local users can read this information. This is the case in netty's \"AbstractDiskHttpData\" is vulnerable. This has been fixed in version 4.1.59.Final. As a workaround, one may specify your own \"java.io.tmpdir\" when you start the JVM or use \"DefaultHttpDataFactory.setBaseDir(...)\" to set the directory to something that is only readable by the current user.","status":"published","published":"2021-02-08T20:10:16Z","modified":"2026-10-08T21:14:01Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T17:27:26.452288Z"}],"ghsa":[{"id":"GHSA-5mcr-gq6c-3hq2","title":"Local Information Disclosure Vulnerability in Netty on Unix-Like systems","description":"### Impact\n\nWhen netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled.\n\nThe CVSSv3.1 score of this vulnerability is calculated to be a [6.2/10](https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\u0026version=3.1)\n\n### Vulnerability Details\n\nOn unix-like systems, the temporary directory is shared between all user. As such, writing to this directory using APIs that do not explicitly set the file/directory permissions can lead to information disclosure. Of note, this does not impact modern MacOS Operating Systems.\n\nThe method `File.createTempFile` on unix-like systems creates a random file, but, by default will create this file with the permissions `-rw-r--r--`. Thus, if sensitive information is written to this file, other local users can read this information.\n\nThis is the case in netty's `AbstractDiskHttpData` is vulnerable.\n\nhttps://github.com/netty/netty/blob/e5951d46fc89db507ba7d2968d2ede26378f0b04/codec-http/src/main/java/io/netty/handler/codec/http/multipart/AbstractDiskHttpData.java#L80-L101\n\n`AbstractDiskHttpData` is used as a part of the `DefaultHttpDataFactory` class which is used by `HttpPostRequestDecoder` / `HttpPostMultiPartRequestDecoder`.\n\nYou may be affected by this vulnerability your project contains the following code patterns:\n\n```java\nchannelPipeline.addLast(new HttpPostRequestDecoder(...));\n```\n\n```java\nchannelPipeline.addLast(new HttpPostMultiPartRequestDecoder(...));\n```\n\n### Patches\n\nThis has been patched in version `4.1.59.Final`.\n\n### Workarounds\n\nSpecify your own `java.io.tmpdir` when you start the JVM or use `DefaultHttpDataFactory.setBaseDir(...)` to set the directory to something that is only readable by the current user.\n\n### References\n\n - [CWE-378: Creation of Temporary File With Insecure Permissions](https://cwe.mitre.org/data/definitions/378.html)\n - [CWE-379: Creation of Temporary File in Directory with Insecure Permissions](https://cwe.mitre.org/data/definitions/379.html)\n\n### Similar Vulnerabilities\n\nSimilar, but not the same.\n\n - JUnit 4 - https://github.com/junit-team/junit4/security/advisories/GHSA-269g-pwp5-87pp\n - Google Guava - https://github.com/google/guava/issues/4011\n - Apache Ant - https://nvd.nist.gov/vuln/detail/CVE-2020-1945\n - JetBrains Kotlin Compiler - https://nvd.nist.gov/vuln/detail/CVE-2020-15824\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [netty](https://github.com/netty/netty)\n* Email us [here](mailto:netty-security@googlegroups.com)\n\n### Original Report\n\n\u003e Hi Netty Security Team,\n\u003e \n\u003e I've been working on some security research leveraging custom CodeQL queries to detect local information disclosure vulnerabilities in java applications. This was the result from running this query against the netty project:\n\u003e https://lgtm.com/query/7723301787255288599/\n\u003e \n\u003e Netty contains three local information disclosure vulnerabilities, so far as I can tell.\n\u003e \n\u003e One is here, where the private key for the certificate is written to a temporary file.\n\u003e \n\u003e https://github.com/netty/netty/blob/e5951d46fc89db507ba7d2968d2ede26378f0b04/handler/src/main/java/io/netty/handler/ssl/util/SelfSignedCertificate.java#L316-L346\n\u003e \n\u003e One is here, where the certificate is written to a temporary file.\n\u003e \n\u003e https://github.com/netty/netty/blob/e5951d46fc89db507ba7d2968d2ede26378f0b04/handler/src/main/java/io/netty/handler/ssl/util/SelfSignedCertificate.java#L348-L371\n\u003e \n\u003e The final one is here, where the 'AbstractDiskHttpData' creates a temporary file if the getBaseDirectory() method returns null. I believe that 'AbstractDiskHttpData' is used as a part of the file upload support? If this is the case, any files uploaded would be similarly vulnerable.\n\u003e \n\u003e https://github.com/netty/netty/blob/e5951d46fc89db507ba7d2968d2ede26378f0b04/codec-http/src/main/java/io/netty/handler/codec/http/multipart/AbstractDiskHttpData.java#L91\n\u003e \n\u003e All of these vulnerabilities exist because `File.createTempFile(String, String)` will create a temporary file in the system temporary directory if the 'java.io.tmpdir' system property is not explicitly set. It is my understanding that when java creates a file, by default, and using this method, the permissions on that file utilize the umask. In a majority of cases, this means that the file that java creates has the permissions: `-rw-r--r--`, thus, any other local user on that system can read the contents of that file.\n\u003e \n\u003e Impacted OS:\n\u003e - Any OS where the system temporary directory is shared between multiple users. This is not the case for MacOS or Windows.\n\u003e \n\u003e Mitigation.\n\u003e \n\u003e Moving to the `Files` API instead will fix this vulnerability. \n\u003e https://docs.oracle.com/javase/8/docs/api/java/nio/file/Files.html#createTempFile-java.nio.file.Path-java.lang.String-java.lang.String-java.nio.file.attribute.FileAttribute...-\n\u003e \n\u003e This API will explicitly set the posix file permissions to something safe, by default.\n\u003e \n\u003e I recently disclosed a similar vulnerability in JUnit 4:\n\u003e https://github.com/junit-team/junit4/security/advisories/GHSA-269g-pwp5-87pp\n\u003e \n\u003e If you're also curious, this vulnerability in Jetty was also mine, also involving temporary directories, but is not the same vulnerability as in this case.\n\u003e https://github.com/eclipse/jetty.project/security/advisories/GHSA-g3wg-6mcf-8jj6\n\u003e \n\u003e I would appreciate it if we could perform disclosure of this vulnerability leveraging the GitHub security advisories feature here. GitHub has a nice credit system that I appreciate, plus the disclosures, as you can see from the sampling above, end up looking very nice.\n\u003e https://github.com/netty/netty/security/advisories\n\u003e \n\u003e This vulnerability disclosure follows Google's [90-day vulnerability disclosure policy](https://www.google.com/about/appsecurity/) (I'm not an employee of Google, I just like their policy). Full disclosure will occur either at the end of the 90-day deadline or whenever a patch is made widely available, whichever occurs first.\n\u003e \n\u003e Cheers,\n\u003e Jonathan Leitschuh","status":"published","published":"2021-02-08T21:17:48Z","modified":"2023-08-16T05:02:15Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-378","CWE-379","CWE-668"],"updated_at":"2026-11-02T14:36:59.456342Z"},{"id":"GHSA-xpw8-rcwv-8f8p","title":"io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack","description":"A client might overload the server by issue frequent RST frames. This can cause a massive amount of load on the remote system and so cause a DDOS attack. \n\n### Impact\nThis is a DDOS attack, any http2 server is affected and so you should update as soon as possible.\n\n### Patches\nThis is patched in version 4.1.100.Final.\n\n### Workarounds\nA user can limit the amount of RST frames that are accepted per connection over a timeframe manually using either an own `Http2FrameListener` implementation or an `ChannelInboundHandler` implementation (depending which http2 API is used).\n\n### References\n- https://www.cve.org/CVERecord?id=CVE-2023-44487\n- https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/\n- https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/","status":"published","published":"2023-10-10T22:22:54Z","modified":"2023-11-06T22:08:37Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:37:15.055009Z"}],"nvd":[{"id":"CVE-2021-21290","description":"Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers \u0026 clients. In Netty before version 4.1.59.Final there is a vulnerability on Unix-like systems involving an insecure temp file. When netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. On unix-like systems, the temporary directory is shared between all user. As such, writing to this directory using APIs that do not explicitly set the file/directory permissions can lead to information disclosure. Of note, this does not impact modern MacOS Operating Systems. The method \"File.createTempFile\" on unix-like systems creates a random file, but, by default will create this file with the permissions \"-rw-r--r--\". Thus, if sensitive information is written to this file, other local users can read this information. This is the case in netty's \"AbstractDiskHttpData\" is vulnerable. This has been fixed in version 4.1.59.Final. As a workaround, one may specify your own \"java.io.tmpdir\" when you start the JVM or use \"DefaultHttpDataFactory.setBaseDir(...)\" to set the directory to something that is only readable by the current user.","status":"published","published":"2021-02-08T20:15:12.433Z","modified":"2026-10-08T22:17:04.713Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":1.9,"vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-378","CWE-379","CWE-668"],"updated_at":"2026-11-02T14:06:49.660551Z"}],"osv":[{"id":"CVE-2021-21290","description":"Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers \u0026 clients. In Netty before version 4.1.59.Final there is a vulnerability on Unix-like systems involving an insecure temp file. When netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. On unix-like systems, the temporary directory is shared between all user. As such, writing to this directory using APIs that do not explicitly set the file/directory permissions can lead to information disclosure. Of note, this does not impact modern MacOS Operating Systems. The method \"File.createTempFile\" on unix-like systems creates a random file, but, by default will create this file with the permissions \"-rw-r--r--\". Thus, if sensitive information is written to this file, other local users can read this information. This is the case in netty's \"AbstractDiskHttpData\" is vulnerable. This has been fixed in version 4.1.59.Final. As a workaround, one may specify your own \"java.io.tmpdir\" when you start the JVM or use \"DefaultHttpDataFactory.setBaseDir(...)\" to set the directory to something that is only readable by the current user.","status":"published","published":"2021-02-08T20:15:12.433Z","modified":"2026-10-24T14:24:42.00646802Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:18.004149Z"},{"id":"DEBIAN-CVE-2021-21290","description":"Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers \u0026 clients. In Netty before version 4.1.59.Final there is a vulnerability on Unix-like systems involving an insecure temp file. When netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. On unix-like systems, the temporary directory is shared between all user. As such, writing to this directory using APIs that do not explicitly set the file/directory permissions can lead to information disclosure. Of note, this does not impact modern MacOS Operating Systems. The method \"File.createTempFile\" on unix-like systems creates a random file, but, by default will create this file with the permissions \"-rw-r--r--\". Thus, if sensitive information is written to this file, other local users can read this information. This is the case in netty's \"AbstractDiskHttpData\" is vulnerable. This has been fixed in version 4.1.59.Final. As a workaround, one may specify your own \"java.io.tmpdir\" when you start the JVM or use \"DefaultHttpDataFactory.setBaseDir(...)\" to set the directory to something that is only readable by the current user.","status":"published","published":"2021-02-08T20:15:12.433Z","modified":"2026-10-09T09:47:31.00276291Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:34.637046Z"},{"id":"GHSA-5mcr-gq6c-3hq2","title":"Local Information Disclosure Vulnerability in Netty on Unix-Like systems","description":"### Impact\n\nWhen netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled.\n\nThe CVSSv3.1 score of this vulnerability is calculated to be a [6.2/10](https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\u0026version=3.1)\n\n### Vulnerability Details\n\nOn unix-like systems, the temporary directory is shared between all user. As such, writing to this directory using APIs that do not explicitly set the file/directory permissions can lead to information disclosure. Of note, this does not impact modern MacOS Operating Systems.\n\nThe method `File.createTempFile` on unix-like systems creates a random file, but, by default will create this file with the permissions `-rw-r--r--`. Thus, if sensitive information is written to this file, other local users can read this information.\n\nThis is the case in netty's `AbstractDiskHttpData` is vulnerable.\n\nhttps://github.com/netty/netty/blob/e5951d46fc89db507ba7d2968d2ede26378f0b04/codec-http/src/main/java/io/netty/handler/codec/http/multipart/AbstractDiskHttpData.java#L80-L101\n\n`AbstractDiskHttpData` is used as a part of the `DefaultHttpDataFactory` class which is used by `HttpPostRequestDecoder` / `HttpPostMultiPartRequestDecoder`.\n\nYou may be affected by this vulnerability your project contains the following code patterns:\n\n```java\nchannelPipeline.addLast(new HttpPostRequestDecoder(...));\n```\n\n```java\nchannelPipeline.addLast(new HttpPostMultiPartRequestDecoder(...));\n```\n\n### Patches\n\nThis has been patched in version `4.1.59.Final`.\n\n### Workarounds\n\nSpecify your own `java.io.tmpdir` when you start the JVM or use `DefaultHttpDataFactory.setBaseDir(...)` to set the directory to something that is only readable by the current user.\n\n### References\n\n - [CWE-378: Creation of Temporary File With Insecure Permissions](https://cwe.mitre.org/data/definitions/378.html)\n - [CWE-379: Creation of Temporary File in Directory with Insecure Permissions](https://cwe.mitre.org/data/definitions/379.html)\n\n### Similar Vulnerabilities\n\nSimilar, but not the same.\n\n - JUnit 4 - https://github.com/junit-team/junit4/security/advisories/GHSA-269g-pwp5-87pp\n - Google Guava - https://github.com/google/guava/issues/4011\n - Apache Ant - https://nvd.nist.gov/vuln/detail/CVE-2020-1945\n - JetBrains Kotlin Compiler - https://nvd.nist.gov/vuln/detail/CVE-2020-15824\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [netty](https://github.com/netty/netty)\n* Email us [here](mailto:netty-security@googlegroups.com)\n\n### Original Report\n\n\u003e Hi Netty Security Team,\n\u003e \n\u003e I've been working on some security research leveraging custom CodeQL queries to detect local information disclosure vulnerabilities in java applications. This was the result from running this query against the netty project:\n\u003e https://lgtm.com/query/7723301787255288599/\n\u003e \n\u003e Netty contains three local information disclosure vulnerabilities, so far as I can tell.\n\u003e \n\u003e One is here, where the private key for the certificate is written to a temporary file.\n\u003e \n\u003e https://github.com/netty/netty/blob/e5951d46fc89db507ba7d2968d2ede26378f0b04/handler/src/main/java/io/netty/handler/ssl/util/SelfSignedCertificate.java#L316-L346\n\u003e \n\u003e One is here, where the certificate is written to a temporary file.\n\u003e \n\u003e https://github.com/netty/netty/blob/e5951d46fc89db507ba7d2968d2ede26378f0b04/handler/src/main/java/io/netty/handler/ssl/util/SelfSignedCertificate.java#L348-L371\n\u003e \n\u003e The final one is here, where the 'AbstractDiskHttpData' creates a temporary file if the getBaseDirectory() method returns null. I believe that 'AbstractDiskHttpData' is used as a part of the file upload support? If this is the case, any files uploaded would be similarly vulnerable.\n\u003e \n\u003e https://github.com/netty/netty/blob/e5951d46fc89db507ba7d2968d2ede26378f0b04/codec-http/src/main/java/io/netty/handler/codec/http/multipart/AbstractDiskHttpData.java#L91\n\u003e \n\u003e All of these vulnerabilities exist because `File.createTempFile(String, String)` will create a temporary file in the system temporary directory if the 'java.io.tmpdir' system property is not explicitly set. It is my understanding that when java creates a file, by default, and using this method, the permissions on that file utilize the umask. In a majority of cases, this means that the file that java creates has the permissions: `-rw-r--r--`, thus, any other local user on that system can read the contents of that file.\n\u003e \n\u003e Impacted OS:\n\u003e - Any OS where the system temporary directory is shared between multiple users. This is not the case for MacOS or Windows.\n\u003e \n\u003e Mitigation.\n\u003e \n\u003e Moving to the `Files` API instead will fix this vulnerability. \n\u003e https://docs.oracle.com/javase/8/docs/api/java/nio/file/Files.html#createTempFile-java.nio.file.Path-java.lang.String-java.lang.String-java.nio.file.attribute.FileAttribute...-\n\u003e \n\u003e This API will explicitly set the posix file permissions to something safe, by default.\n\u003e \n\u003e I recently disclosed a similar vulnerability in JUnit 4:\n\u003e https://github.com/junit-team/junit4/security/advisories/GHSA-269g-pwp5-87pp\n\u003e \n\u003e If you're also curious, this vulnerability in Jetty was also mine, also involving temporary directories, but is not the same vulnerability as in this case.\n\u003e https://github.com/eclipse/jetty.project/security/advisories/GHSA-g3wg-6mcf-8jj6\n\u003e \n\u003e I would appreciate it if we could perform disclosure of this vulnerability leveraging the GitHub security advisories feature here. GitHub has a nice credit system that I appreciate, plus the disclosures, as you can see from the sampling above, end up looking very nice.\n\u003e https://github.com/netty/netty/security/advisories\n\u003e \n\u003e This vulnerability disclosure follows Google's [90-day vulnerability disclosure policy](https://www.google.com/about/appsecurity/) (I'm not an employee of Google, I just like their policy). Full disclosure will occur either at the end of the 90-day deadline or whenever a patch is made widely available, whichever occurs first.\n\u003e \n\u003e Cheers,\n\u003e Jonathan Leitschuh","status":"published","published":"2021-02-08T21:17:48Z","modified":"2026-09-10T03:49:14.1983303Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-378","CWE-379","CWE-668"],"updated_at":"2026-11-02T15:46:38.553953Z"},{"id":"GHSA-xpw8-rcwv-8f8p","title":"io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack","description":"A client might overload the server by issue frequent RST frames. This can cause a massive amount of load on the remote system and so cause a DDOS attack. \n\n### Impact\nThis is a DDOS attack, any http2 server is affected and so you should update as soon as possible.\n\n### Patches\nThis is patched in version 4.1.100.Final.\n\n### Workarounds\nA user can limit the amount of RST frames that are accepted per connection over a timeframe manually using either an own `Http2FrameListener` implementation or an `ChannelInboundHandler` implementation (depending which http2 API is used).\n\n### References\n- https://www.cve.org/CVERecord?id=CVE-2023-44487\n- https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/\n- https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/","status":"published","published":"2023-10-10T22:22:54Z","modified":"2026-09-10T03:49:58.76078733Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:47:00.198893Z"},{"id":"OESA-2021-1143","title":"netty security update","description":"Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers \u0026amp; clients.\r\n\r\nSecurity Fix(es):\r\n\r\nNetty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers \u0026amp; clients. In Netty before version 4.1.59.Final there is a vulnerability on Unix-like systems involving an insecure temp file. When netty\u0026apos;s multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. On unix-like systems, the temporary directory is shared between all user. As such, writing to this directory using APIs that do not explicitly set the file/directory permissions can lead to information disclosure. Of note, this does not impact modern MacOS Operating Systems. The method \u0026quot;File.createTempFile\u0026quot; on unix-like systems creates a random file, but, by default will create this file with the permissions \u0026quot;-rw-r--r--\u0026quot;. Thus, if sensitive information is written to this file, other local users can read this information. This is the case in netty\u0026apos;s \u0026quot;AbstractDiskHttpData\u0026quot; is vulnerable. This has been fixed in version 4.1.59.Final. As a workaround, one may specify your own \u0026quot;java.io.tmpdir\u0026quot; when you start the JVM or use \u0026quot;DefaultHttpDataFactory.setBaseDir(...)\u0026quot; to set the directory to something that is only readable by the current user.(CVE-2021-21290)","status":"published","published":"2021-04-07T11:04:23Z","modified":"2026-08-18T01:15:28.724137907Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2021:1511","title":"Red Hat Security Advisory: AMQ Clients 2.9.1 release and security update","status":"published","published":"2024-09-13T22:44:37Z","modified":"2026-10-13T10:02:18Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:2046","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.7 security update on RHEL 6","status":"published","published":"2024-09-20T13:58:59Z","modified":"2026-10-13T10:02:20Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:2047","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.7 security update on RHEL 7","status":"published","published":"2024-09-20T13:59:07Z","modified":"2026-10-13T10:02:20Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:2048","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.7 security update on RHEL 8","status":"published","published":"2024-09-20T13:58:31Z","modified":"2026-10-13T10:02:21Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2022:0190","title":"Red Hat Security Advisory: Satellite 6.10.2 Async Bug Fix Update","status":"published","published":"2024-09-13T22:47:43Z","modified":"2026-10-13T10:02:47Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:5498","title":"Red Hat Security Advisory: Satellite 6.11 Release","status":"published","published":"2024-09-29T19:06:23Z","modified":"2026-10-13T10:03:09Z","cvss":[{"version":"3.1","score":9.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","level":"critical"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"ROOT-APP-MAVEN-GHSA-xpw8-rcwv-8f8p","title":"GHSA-xpw8-rcwv-8f8p in io.root.io.netty:netty-codec-http2 - Patched by Root","description":"Root has patched GHSA-xpw8-rcwv-8f8p in the io.root.io.netty:netty-codec-http2 package for Root:Maven. Multiple fixed versions available.","status":"published","published":"2026-06-18T12:52:23Z","modified":"2026-06-18T18:15:26.175069727Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:27.066589Z"},{"id":"UBUNTU-CVE-2021-21290","description":"Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers \u0026 clients. In Netty before version 4.1.59.Final there is a vulnerability on Unix-like systems involving an insecure temp file. When netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. On unix-like systems, the temporary directory is shared between all user. As such, writing to this directory using APIs that do not explicitly set the file/directory permissions can lead to information disclosure. Of note, this does not impact modern MacOS Operating Systems. The method \"File.createTempFile\" on unix-like systems creates a random file, but, by default will create this file with the permissions \"-rw-r--r--\". Thus, if sensitive information is written to this file, other local users can read this information. This is the case in netty's \"AbstractDiskHttpData\" is vulnerable. This has been fixed in version 4.1.59.Final. As a workaround, one may specify your own \"java.io.tmpdir\" when you start the JVM or use \"DefaultHttpDataFactory.setBaseDir(...)\" to set the directory to something that is only readable by the current user.","status":"published","published":"2021-02-08T20:15:00Z","modified":"2026-11-04T20:02:25.564302385Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-06T14:21:57.100949Z"},{"id":"CLSA-2026-1776126830","title":"TuxCare security update for io.netty (15 CVEs)","description":"TuxCare rebuilt 6 io.netty packages to address 15 CVEs. Fixed in 4.1.52.Final-tuxcare.1.","status":"published","published":"2026-08-04T14:52:25Z","modified":"2026-11-10T19:45:06.359004461Z","updated_at":"2026-11-10T20:12:44.559934Z"},{"id":"CLSA-2026-1776126839","title":"TuxCare security update for io.netty (4 CVEs)","description":"TuxCare rebuilt 3 io.netty packages to address 4 CVEs. Fixed in 4.1.48.Final-tuxcare.1.","status":"published","published":"2026-08-04T14:52:25Z","modified":"2026-11-10T19:45:06.409216457Z","updated_at":"2026-11-10T20:12:44.559934Z"},{"id":"CLSA-2026-1776299668","title":"TuxCare security update for io.netty (9 CVEs)","description":"TuxCare rebuilt 6 io.netty packages to address 9 CVEs. Fixed in 4.1.58.Final-tuxcare.1.","status":"published","published":"2026-08-04T14:52:26Z","modified":"2026-11-02T19:45:21.366633596Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1777596012","title":"TuxCare security update for io.netty:netty (4 CVEs)","description":"TuxCare rebuilt io.netty:netty to address 4 CVEs. Fixed in 3.10.6.Final-tuxcare.1.","status":"published","published":"2026-08-04T14:52:30Z","modified":"2026-11-10T19:58:31.028999117Z","updated_at":"2026-11-10T20:07:15.512362Z"},{"id":"CLSA-2026-1791957404","title":"TuxCare security update for io.netty:netty (1 CVE)","description":"TuxCare rebuilt io.netty:netty to address 1 CVE. Fixed in 3.7.0.Final-tuxcare.1.","status":"published","published":"2026-10-14T05:56:44Z","modified":"2026-11-10T19:45:07.295297475Z","updated_at":"2026-11-10T20:12:44.559934Z"},{"id":"CLSA-2026-1792688651","title":"TuxCare security update for io.netty:netty (1 CVE)","description":"TuxCare rebuilt io.netty:netty to address 1 CVE. Fixed in 3.5.13.Final-tuxcare.1.","status":"published","published":"2026-10-22T17:04:11Z","modified":"2026-11-10T19:45:07.639817379Z","updated_at":"2026-11-10T20:12:44.559934Z"},{"id":"CLSA-2026-1792746051","title":"TuxCare security update for io.netty (25 CVEs)","description":"TuxCare rebuilt 14 io.netty packages to address 25 CVEs. Fixed in 4.1.53.Final-tuxcare.1.","status":"published","published":"2026-10-23T09:00:51Z","modified":"2026-11-10T19:58:17.90887029Z","updated_at":"2026-11-10T20:07:37.114365Z"},{"id":"CLSA-2026-1792747978","title":"TuxCare security update for io.netty (21 CVEs)","description":"TuxCare rebuilt 11 io.netty packages to address 21 CVEs. Fixed in 4.1.51.Final-tuxcare.1.","status":"published","published":"2026-10-23T09:32:58Z","modified":"2026-11-02T19:46:31.672461772Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1793121965","title":"TuxCare security update for io.netty:netty (1 CVE)","description":"TuxCare rebuilt io.netty:netty to address 1 CVE. Fixed in 3.6.2.Final-tuxcare.1.","status":"published","published":"2026-10-27T17:26:05Z","modified":"2026-11-10T19:58:20.862125988Z","updated_at":"2026-11-10T20:07:27.279527Z"},{"id":"DLA-2555-1","title":"netty - security update","status":"published","published":"2021-02-11T00:00:00Z","modified":"2026-03-09T01:22:57.56599Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DSA-4885-1","title":"netty - security update","status":"published","published":"2021-04-05T00:00:00Z","modified":"2026-03-09T02:09:09.979764Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2021-0136","title":"Updated netty packages fix a security vulnerability","description":"When netty's multipart decoders are used local information disclosure can occur\nvia the local system temporary directory if temporary storing uploads on the\ndisk is enabled (CVE-2021-21290).\n","status":"published","published":"2021-03-14T21:20:42Z","modified":"2026-04-16T04:43:44.214990624Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2024:11085-1","title":"netty-4.1.60-1.4 on GA media","description":"These are all security issues fixed in the netty-4.1.60-1.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:47:04.347691Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"RLSA-2022:5498","title":"Moderate: Satellite 6.11 Release","description":"Rocky Enterprise Software Foundation Satellite is a systems management tool for Linux-based\ninfrastructure. It allows for provisioning, remote management, and\nmonitoring of multiple Linux deployments with a single centralized tool.\n\nSecurity Fix(es):\n\n* libsolv: Heap-based buffer overflow in testcase_read() in src/testcase.c (CVE-2021-3200) \n* satellite: foreman: Authenticate remote code execution through Sendmail configuration (CVE-2021-3584)\n* candlepin: Allow unintended SCA certificate to authenticate Candlepin (CVE-2021-4142)\n* candlepin: netty: Information disclosure via the local system temporary directory (CVE-2021-21290)\n* candlepin: netty: Possible request smuggling in HTTP/2 due missing validation (CVE-2021-21295)\n* candlepin: netty: Request smuggling via content-length header (CVE-2021-21409)\n* tfm-rubygem-sidekiq: XSS via the queue name of the live-poll feature (CVE-2021-30151)\n* python-sqlparse: ReDoS via regular expression in StripComments filter (CVE-2021-32839)\n* libsolv: various flaws (CVE-2021-33928 CVE-2021-33929 CVE-2021-33930 CVE-2021-33938)\n* tfm-rubygem-puma: Inconsistent Interpretation of HTTP Requests in puma (CVE-2021-41136)\n* logback-classic: Remote code execution through JNDI call from within its configuration file (CVE-2021-42550)\n* candlepin: netty: Control chars in header names may lead to HTTP request smuggling (CVE-2021-43797)\n* python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through (CVE-2021-43818)\n* python3-django: Potential bypass of an upstream access control based on URL paths (CVE-2021-44420)  \n* libsolv: Heap overflow (CVE-2021-44568)\n* python3-django: Various flaws (CVE-2021-45115 CVE-2021-45116 CVE-2021-45452 CVE-2022-22818)\n* tfm-rubygem-actionpack: Information leak between requests (CVE-2022-23633)\n* tfm-rubygem-puma: rubygem-rails: Information leak between requests (CVE-2022-23634)\n* python3-django: Denial-of-service possibility in file uploads (CVE-2022-23833)\n* tfm-rubygem-sidekiq: WebUI Denial of Service caused by number of days on graph (CVE-2022-23837)\n* python3-django: Various flaws (CVE-2022-28346 CVE-2022-28347)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section.\n\nAdditional Changes:\n\n* New repo layout for Satellite, Utils, Maintenance, and Client repos.\n* Support for Rocky Linux 9 clients\n* Module-based installation on Rocky Linux 8\n* Upgrading Satellite Server and Capsule Server installations from Rocky Linux 7 to Rocky Linux 8\n* Connected and Disconnected servers supported on Rocky Linux 7 and Rocky Linux 8\n* Inter-Server Synchronization improvements\n* Puppet integration optional and disabled by default\n* Pulp 3 updated to Python 3.8\n* Change to Capsule certificate archive\n* New default port for communication with Rocky Enterprise Software Foundation Subscription Management * (RHSM) API on Capsule servers\n* New Content Views Page (Content Publication workflow simplification)\n* New Hosts Page (Technology Preview)\n* Registration and preview templates\n* Simplified host content source changing\n* Improved behavior for configuring and running remote jobs\n* Provisioning improvements\n* New error signaling unsupported options in TASK-Filter\n* Virt-who configuration enhanced to support Nutanix AHV\n* Cloud Connector configuration updated\n* Improved Insights adoption\n\nThe items above are not a complete list of changes. This update also fixes\nseveral bugs and adds various enhancements. Documentation for these changes\nis available from the Release Notes document linked to in the References\nsection.","status":"published","published":"2022-07-05T13:55:16Z","modified":"2026-02-05T04:30:12.09857Z","updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"SUSE-SU-2022:1271-1","title":"Security update for netty","description":"This update for netty fixes the following issues:\n\n- Updated to version 4.1.75:\n  - CVE-2021-37136: Fixed an unrestricted decompressed data size in Bzip2Decoder\n    (bsc#1190610).\n  - CVE-2021-37137: Fixed an unrestricted chunk length in SnappyFrameDecoder,\n    which might lead to excessive memory usage (#bsc#1190613).\n  - CVE-2021-43797: Fixed a potential HTTP request smuggling issue due to\n    insufficient validation against control characters (bsc#1193672).\n  - CVE-2021-21290: Fixed an information disclosure via the local system\n    temporary directory (bsc#1182103).\n","status":"published","published":"2022-04-20T07:03:12Z","modified":"2026-02-04T02:21:57.577669Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:3617-1","title":"Security update for netty","description":"This update for netty fixes the following issues:\n\n- CVE-2020-11612: The ZlibDecoders allow for unbounded memory allocation while decoding a byte stream (bsc#1168932)\n- CVE-2021-21290: Information disclosure via the local system temporary directory (bsc#1182103)\n- CVE-2021-37136: Bzip2Decoder doesn't allow setting size restrictions for decompressed data (bsc#1190610)\n- CVE-2021-37137: Snappy frame decoder doesn't restrict the chunk length and may buffer skippable chunks (bsc#1190613)\n","status":"published","published":"2022-10-18T11:28:54Z","modified":"2026-02-04T02:23:50.164004Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:3760-1","title":"Security update for netty","description":"This update for netty fixes the following issues:\n\n- CVE-2020-11612: The ZlibDecoders allow for unbounded memory allocation while decoding a byte stream (bsc#1168932)\n- CVE-2021-21290: Information disclosure via the local system temporary directory (bsc#1182103)\n- CVE-2021-37136: Bzip2Decoder doesn't allow setting size restrictions for decompressed data (bsc#1190610)\n- CVE-2021-37137: Snappy frame decoder doesn't restrict the chunk length and may buffer skippable chunks (bsc#1190613)\n","status":"published","published":"2022-10-26T08:58:36Z","modified":"2026-02-04T02:29:29.970929Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:3793-1","title":"Security update for netty","description":"This update for netty fixes the following issues:\n\n- CVE-2020-11612: The ZlibDecoders allow for unbounded memory allocation while decoding a byte stream (bsc#1168932)\n- CVE-2021-21290: Information disclosure via the local system temporary directory (bsc#1182103)\n- CVE-2021-37136: Bzip2Decoder doesn't allow setting size restrictions for decompressed data (bsc#1190610)\n- CVE-2021-37137: Snappy frame decoder doesn't restrict the chunk length and may buffer skippable chunks (bsc#1190613)\n","status":"published","published":"2022-10-27T08:09:43Z","modified":"2026-02-04T04:37:25.689244Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"USN-6049-1","title":"netty vulnerabilities","description":"It was discovered that Netty's Zlib decoders did not limit memory\nallocations. A remote attacker could possibly use this issue to cause\nNetty to exhaust memory via malicious input, leading to a denial of\nservice. This issue only affected Ubuntu 16.04 ESM and Ubuntu 20.04 ESM.\n(CVE-2020-11612)\n\nIt was discovered that Netty created temporary files with excessive\npermissions. A local attacker could possibly use this issue to expose\nsensitive information. This issue only affected Ubuntu 16.04 ESM, Ubuntu\n18.04 ESM, and Ubuntu 20.04 ESM. (CVE-2021-21290)\n\nIt was discovered that Netty did not properly validate content-length\nheaders. A remote attacker could possibly use this issue to smuggle\nrequests. This issue was only fixed in Ubuntu 20.04 ESM. (CVE-2021-21295,\nCVE-2021-21409)\n\nIt was discovered that Netty's Bzip2 decompression decoder did not limit\nthe decompressed output data size. A remote attacker could possibly use\nthis issue to cause Netty to exhaust memory via malicious input, leading\nto a denial of service. This issue only affected Ubuntu 18.04 ESM, Ubuntu\n20.04 ESM, Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2021-37136)\n\nIt was discovered that Netty's Snappy frame decoder function did not limit\nchunk lengths. A remote attacker could possibly use this issue to cause\nNetty to exhaust memory via malicious input, leading to a denial of\nservice. (CVE-2021-37137)\n\nIt was discovered that Netty did not properly handle control chars at the\nbeginning and end of header names. A remote attacker could possibly use\nthis issue to smuggle requests. This issue only affected Ubuntu 18.04 ESM,\nUbuntu 20.04 ESM, Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2021-43797)\n\nIt was discovered that Netty could be made into an infinite recursion when\nparsing a malformed crafted message. A remote attacker could possibly use\nthis issue to cause Netty to crash, leading to a denial of service. This\nissue only affected Ubuntu 20.04 ESM, Ubuntu 22.04 LTS, and Ubuntu 22.10.\n(CVE-2022-41881)\n\nIt was discovered that Netty did not validate header values under certain\ncircumstances. A remote attacker could possibly use this issue to perform\nHTTP response splitting via malicious header values. This issue only\naffected Ubuntu 18.04 ESM, Ubuntu 20.04 ESM, Ubuntu 22.04 LTS, and Ubuntu\n22.10. (CVE-2022-41915)\n","status":"published","published":"2023-04-28T16:02:26Z","modified":"2026-06-25T13:32:01.552160649Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}