pod: gl-multi-component-parent-frae-on-pull-request-bnfb6-init-pod | init container: prepare
2025/09/11 13:34:59 Entrypoint initialization

 pod: gl-multi-component-parent-frae-on-pull-request-bnfb6-init-pod | init container: place-scripts
2025/09/11 13:35:03 Decoded script /tekton/scripts/script-0-jkcfq

pod: gl-multi-component-parent-frae-on-pull-request-bnfb6-init-pod | container step-init: 
Build Initialize: quay.io/redhat-appstudio-qe/build-e2e-rinw/gl-multi-component-parent-frae:on-pr-3088714b7a27ed26e82730106beb4ff6127f559c

Determine if Image Already Exists

 pod: gl-multi-component-parent-frae-on-push-p2fns-apply-tags-pod | init container: prepare
2025/09/11 13:43:07 Entrypoint initialization

 pod: gl-multi-component-parent-frae-on-push-p2fns-apply-tags-pod | init container: place-scripts
2025/09/11 13:43:08 Decoded script /tekton/scripts/script-0-dzl9k
2025/09/11 13:43:08 Decoded script /tekton/scripts/script-1-bg7zq

pod: gl-multi-component-parent-frae-on-push-p2fns-apply-tags-pod | container step-apply-additional-tags-from-parameter: 
No additional tags parameter specified

pod: gl-multi-component-parent-frae-on-push-p2fns-apply-tags-pod | container step-apply-additional-tags-from-image-label: 
No additional tags specified in the image labels

 pod: gl-multi-component-parent-frae-on-push-p2fns-clair-scan-pod | init container: prepare
2025/09/11 13:42:49 Entrypoint initialization

 pod: gl-multi-component-parent-frae-on-push-p2fns-clair-scan-pod | init container: place-scripts
2025/09/11 13:43:09 Decoded script /tekton/scripts/script-0-svlt7
2025/09/11 13:43:09 Decoded script /tekton/scripts/script-1-cz8jk
2025/09/11 13:43:10 Decoded script /tekton/scripts/script-2-hslbm
2025/09/11 13:43:10 Decoded script /tekton/scripts/script-3-vc6nf

pod: gl-multi-component-parent-frae-on-push-p2fns-clair-scan-pod | container step-get-image-manifests: 
Inspecting raw image manifest quay.io/redhat-appstudio-qe/build-e2e-rinw/gl-multi-component-parent-frae@sha256:cb899cbfa3e2bd36c0f6f0459e2579b4059fa9c2a8543235443d8c101d5dc13f.

pod: gl-multi-component-parent-frae-on-push-p2fns-clair-scan-pod | container step-get-vulnerabilities: 
Running clair-action on amd64 image manifest...
2025-09-11T13:43:19Z INF matchers created component=libvuln/New matchers=[{"docs":"https://pkg.go.dev/github.com/quay/claircore/ubuntu","name":"ubuntu-matcher"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/rhel/rhcc","name":"rhel-container-matcher"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/suse","name":"suse"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/alpine","name":"alpine-matcher"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/gobin","name":"gobin"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/java","name":"java-maven"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/oracle","name":"oracle"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/rhel","name":"rhel"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/aws","name":"aws-matcher"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/python","name":"python"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/ruby","name":"ruby-gem"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/debian","name":"debian-matcher"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/photon","name":"photon"}]
2025-09-11T13:43:19Z INF libvuln initialized component=libvuln/New
2025-09-11T13:43:20Z INF registered configured scanners component=libindex/New
2025-09-11T13:43:20Z INF NewLayerScanner: constructing a new layer-scanner component=indexer.NewLayerScanner
2025-09-11T13:43:20Z INF index request start component=libindex/Libindex.Index manifest=sha256:cb899cbfa3e2bd36c0f6f0459e2579b4059fa9c2a8543235443d8c101d5dc13f
2025-09-11T13:43:20Z INF starting scan component=indexer/controller/Controller.Index manifest=sha256:cb899cbfa3e2bd36c0f6f0459e2579b4059fa9c2a8543235443d8c101d5dc13f
2025-09-11T13:43:20Z INF manifest to be scanned component=indexer/controller/Controller.Index manifest=sha256:cb899cbfa3e2bd36c0f6f0459e2579b4059fa9c2a8543235443d8c101d5dc13f state=CheckManifest
2025-09-11T13:43:20Z INF layers fetch start component=indexer/controller/Controller.Index manifest=sha256:cb899cbfa3e2bd36c0f6f0459e2579b4059fa9c2a8543235443d8c101d5dc13f state=FetchLayers
2025-09-11T13:43:21Z INF layers fetch success component=indexer/controller/Controller.Index manifest=sha256:cb899cbfa3e2bd36c0f6f0459e2579b4059fa9c2a8543235443d8c101d5dc13f state=FetchLayers
2025-09-11T13:43:21Z INF layers fetch done component=indexer/controller/Controller.Index manifest=sha256:cb899cbfa3e2bd36c0f6f0459e2579b4059fa9c2a8543235443d8c101d5dc13f state=FetchLayers
2025-09-11T13:43:21Z INF layers scan start component=indexer/controller/Controller.Index manifest=sha256:cb899cbfa3e2bd36c0f6f0459e2579b4059fa9c2a8543235443d8c101d5dc13f state=ScanLayers
2025-09-11T13:43:21Z INF found buildinfo Dockerfile component=rhel/rhcc/scanner.Scan kind=package layer=sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1 manifest=sha256:cb899cbfa3e2bd36c0f6f0459e2579b4059fa9c2a8543235443d8c101d5dc13f path=root/buildinfo/Dockerfile-ubi9-minimal-9.2-750.1697625013 scanner=rhel_containerscanner state=ScanLayers
2025-09-11T13:43:21Z INF layers scan done component=indexer/controller/Controller.Index manifest=sha256:cb899cbfa3e2bd36c0f6f0459e2579b4059fa9c2a8543235443d8c101d5dc13f state=ScanLayers
2025-09-11T13:43:21Z INF starting index manifest component=indexer/controller/Controller.Index manifest=sha256:cb899cbfa3e2bd36c0f6f0459e2579b4059fa9c2a8543235443d8c101d5dc13f state=IndexManifest
2025-09-11T13:43:21Z INF finishing scan component=indexer/controller/Controller.Index manifest=sha256:cb899cbfa3e2bd36c0f6f0459e2579b4059fa9c2a8543235443d8c101d5dc13f state=IndexFinished
2025-09-11T13:43:21Z INF manifest successfully scanned component=indexer/controller/Controller.Index manifest=sha256:cb899cbfa3e2bd36c0f6f0459e2579b4059fa9c2a8543235443d8c101d5dc13f state=IndexFinished
2025-09-11T13:43:21Z INF index request done component=libindex/Libindex.Index manifest=sha256:cb899cbfa3e2bd36c0f6f0459e2579b4059fa9c2a8543235443d8c101d5dc13f
{
  "manifest_hash": "sha256:cb899cbfa3e2bd36c0f6f0459e2579b4059fa9c2a8543235443d8c101d5dc13f",
  "packages": {
    "+A7/nzEXX3Q/xJZ50VMnlQ==": {
      "id": "+A7/nzEXX3Q/xJZ50VMnlQ==",
      "name": "libidn2",
      "version": "2.3.0-7.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "libidn2",
        "version": "2.3.0-7.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "+UVLfP94O7FKWQedQPvwWw==": {
      "id": "+UVLfP94O7FKWQedQPvwWw==",
      "name": "gnutls",
      "version": "3.7.6-21.el9_2",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "gnutls",
        "version": "3.7.6-21.el9_2",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "/L1kFEoHZTukrNTCQLypFQ==": {
      "id": "/L1kFEoHZTukrNTCQLypFQ==",
      "name": "xz-libs",
      "version": "5.2.5-8.el9_0",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "xz",
        "version": "5.2.5-8.el9_0",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "0A/c+uC9xs5LmvEMZeRwuQ==": {
      "id": "0A/c+uC9xs5LmvEMZeRwuQ==",
      "name": "krb5-libs",
      "version": "1.20.1-9.el9_2",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "krb5",
        "version": "1.20.1-9.el9_2",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "1Cze9cRYBDtXuXGQEqRPOQ==": {
      "id": "1Cze9cRYBDtXuXGQEqRPOQ==",
      "name": "ubi9-minimal-container",
      "version": "9.2-750.1697625013",
      "kind": "source",
      "source": {
        "id": "",
        "name": "",
        "version": "",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "rhctag:9.2.0.0.0.0.0.0.0.0",
      "arch": "x86_64",
      "cpe": ""
    },
    "1h9uHE0QiXBO/zpJrT0VjA==": {
      "id": "1h9uHE0QiXBO/zpJrT0VjA==",
      "name": "ncurses-base",
      "version": "6.2-8.20210508.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "ncurses",
        "version": "6.2-8.20210508.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "noarch",
      "cpe": ""
    },
    "2fg1ZRYCSPKKOgCxCcA36w==": {
      "id": "2fg1ZRYCSPKKOgCxCcA36w==",
      "name": "bzip2-libs",
      "version": "1.0.8-8.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "bzip2",
        "version": "1.0.8-8.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "2o98V0sT38kVqiwC3FlZKw==": {
      "id": "2o98V0sT38kVqiwC3FlZKw==",
      "name": "libnghttp2",
      "version": "1.43.0-5.el9_2.1",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "nghttp2",
        "version": "1.43.0-5.el9_2.1",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "36FFkl7AbUZOwOpkdqfk3Q==": {
      "id": "36FFkl7AbUZOwOpkdqfk3Q==",
      "name": "ubi9-minimal",
      "version": "9.2-750.1697625013",
      "kind": "binary",
      "source": {
        "id": "1Cze9cRYBDtXuXGQEqRPOQ==",
        "name": "ubi9-minimal-container",
        "version": "9.2-750.1697625013",
        "kind": "source",
        "source": {
          "id": "",
          "name": "",
          "version": "",
          "normalized_version": "",
          "cpe": ""
        },
        "normalized_version": "rhctag:9.2.0.0.0.0.0.0.0.0",
        "arch": "x86_64",
        "cpe": ""
      },
      "normalized_version": "rhctag:9.2.0.0.0.0.0.0.0.0",
      "arch": "x86_64",
      "cpe": ""
    },
    "5mmSudfrCeEmVSPweWmcVQ==": {
      "id": "5mmSudfrCeEmVSPweWmcVQ==",
      "name": "librhsm",
      "version": "0.0.3-7.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "librhsm",
        "version": "0.0.3-7.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "6RxnMs+9yIqzJpLgR7I3zA==": {
      "id": "6RxnMs+9yIqzJpLgR7I3zA==",
      "name": "audit-libs",
      "version": "3.0.7-103.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "audit",
        "version": "3.0.7-103.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "6camihNRcGvFSo3XinEWFg==": {
      "id": "6camihNRcGvFSo3XinEWFg==",
      "name": "libacl",
      "version": "2.3.1-3.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "acl",
        "version": "2.3.1-3.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "7kedTb4EJLDAcGarhqe+lQ==": {
      "id": "7kedTb4EJLDAcGarhqe+lQ==",
      "name": "rpm",
      "version": "4.16.1.3-22.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "rpm",
        "version": "4.16.1.3-22.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "7vssDPaHKfFKMLimKBo7Gw==": {
      "id": "7vssDPaHKfFKMLimKBo7Gw==",
      "name": "libpeas",
      "version": "1.30.0-4.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "libpeas",
        "version": "1.30.0-4.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "8c2Y1Jul4k8x0+owb81kuA==": {
      "id": "8c2Y1Jul4k8x0+owb81kuA==",
      "name": "lua-libs",
      "version": "5.4.4-3.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "lua",
        "version": "5.4.4-3.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "9m+4P/rW2R4cZr2RRaGc7A==": {
      "id": "9m+4P/rW2R4cZr2RRaGc7A==",
      "name": "glibc-common",
      "version": "2.34-60.el9_2.7",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "glibc",
        "version": "2.34-60.el9_2.7",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "AnHvlYoTKSxzg0JMVMiJkg==": {
      "id": "AnHvlYoTKSxzg0JMVMiJkg==",
      "name": "openldap-compat",
      "version": "2.6.2-3.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "openldap",
        "version": "2.6.2-3.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "BJbegVsc0QXOgPydbqTe/A==": {
      "id": "BJbegVsc0QXOgPydbqTe/A==",
      "name": "libdnf",
      "version": "0.69.0-3.el9_2",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "libdnf",
        "version": "0.69.0-3.el9_2",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "BQhiFmX4hLYteW4oRCLTSA==": {
      "id": "BQhiFmX4hLYteW4oRCLTSA==",
      "name": "libassuan",
      "version": "2.5.5-3.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "libassuan",
        "version": "2.5.5-3.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "BRLVvSCW1qZQlEQR2x48fQ==": {
      "id": "BRLVvSCW1qZQlEQR2x48fQ==",
      "name": "gobject-introspection",
      "version": "1.68.0-11.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "gobject-introspection",
        "version": "1.68.0-11.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "C7VGVckK0YZj4RiVmStEsA==": {
      "id": "C7VGVckK0YZj4RiVmStEsA==",
      "name": "sqlite-libs",
      "version": "3.34.1-6.el9_1",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "sqlite",
        "version": "3.34.1-6.el9_1",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "CVixq6Nx9Sn2ciGY36Hf6w==": {
      "id": "CVixq6Nx9Sn2ciGY36Hf6w==",
      "name": "crypto-policies",
      "version": "20221215-1.git9a18988.el9_2.1",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "crypto-policies",
        "version": "20221215-1.git9a18988.el9_2.1",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "noarch",
      "cpe": ""
    },
    "Clbp1ERO3UWUCfklcBdPow==": {
      "id": "Clbp1ERO3UWUCfklcBdPow==",
      "name": "coreutils-single",
      "version": "8.32-34.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "coreutils",
        "version": "8.32-34.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "DF9A9iyHS74eLz1WptgqEw==": {
      "id": "DF9A9iyHS74eLz1WptgqEw==",
      "name": "curl-minimal",
      "version": "7.76.1-23.el9_2.4",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "curl",
        "version": "7.76.1-23.el9_2.4",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "DSiKsVzdOYp1aJo/8T0A5A==": {
      "id": "DSiKsVzdOYp1aJo/8T0A5A==",
      "name": "pcre",
      "version": "8.44-3.el9.3",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "pcre",
        "version": "8.44-3.el9.3",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "DrLq8qfU1bfE8o8AfdvkrQ==": {
      "id": "DrLq8qfU1bfE8o8AfdvkrQ==",
      "name": "libverto",
      "version": "0.3.2-3.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "libverto",
        "version": "0.3.2-3.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "G61ZL2SOHR2qgvQfi118gw==": {
      "id": "G61ZL2SOHR2qgvQfi118gw==",
      "name": "dejavu-sans-fonts",
      "version": "2.37-18.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "dejavu-fonts",
        "version": "2.37-18.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "noarch",
      "cpe": ""
    },
    "HbglDdnV9yne0i8jQL30HA==": {
      "id": "HbglDdnV9yne0i8jQL30HA==",
      "name": "libtasn1",
      "version": "4.16.0-8.el9_1",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "libtasn1",
        "version": "4.16.0-8.el9_1",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "I16VSEydeiRYB1TSf5694A==": {
      "id": "I16VSEydeiRYB1TSf5694A==",
      "name": "libreport-filesystem",
      "version": "2.15.2-6.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "libreport",
        "version": "2.15.2-6.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "noarch",
      "cpe": ""
    },
    "J29dSuYPkhEzm8309H5EwA==": {
      "id": "J29dSuYPkhEzm8309H5EwA==",
      "name": "tzdata",
      "version": "2023c-1.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "tzdata",
        "version": "2023c-1.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "noarch",
      "cpe": ""
    },
    "JKP7JzVg7UGaAz4VrH03lQ==": {
      "id": "JKP7JzVg7UGaAz4VrH03lQ==",
      "name": "langpacks-core-font-en",
      "version": "3.0-16.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "langpacks",
        "version": "3.0-16.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "noarch",
      "cpe": ""
    },
    "JQNq+OC3WhGyVEKcjFoRxg==": {
      "id": "JQNq+OC3WhGyVEKcjFoRxg==",
      "name": "systemd-libs",
      "version": "252-14.el9_2.3",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "systemd",
        "version": "252-14.el9_2.3",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "K5U87AYLwYDq48YpniD72A==": {
      "id": "K5U87AYLwYDq48YpniD72A==",
      "name": "libffi",
      "version": "3.4.2-7.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "libffi",
        "version": "3.4.2-7.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "KF5C+zKu/uFB7knCqOvDAQ==": {
      "id": "KF5C+zKu/uFB7knCqOvDAQ==",
      "name": "json-glib",
      "version": "1.6.6-1.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "json-glib",
        "version": "1.6.6-1.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "KSobT+LH4PXsCiP04HOhbQ==": {
      "id": "KSobT+LH4PXsCiP04HOhbQ==",
      "name": "gdbm-libs",
      "version": "1:1.19-4.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "gdbm",
        "version": "1.19-4.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "Lwqn0aweLQLZmo12VvYcog==": {
      "id": "Lwqn0aweLQLZmo12VvYcog==",
      "name": "popt",
      "version": "1.18-8.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "popt",
        "version": "1.18-8.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "MDH8Zt4oQWDiYk9qFV5Lbg==": {
      "id": "MDH8Zt4oQWDiYk9qFV5Lbg==",
      "name": "libxcrypt",
      "version": "4.4.18-3.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "libxcrypt",
        "version": "4.4.18-3.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "MQF9tiK3RKmnYG+Jc/FhJg==": {
      "id": "MQF9tiK3RKmnYG+Jc/FhJg==",
      "name": "libmount",
      "version": "2.37.4-11.el9_2",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "util-linux",
        "version": "2.37.4-11.el9_2",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "Ma5Vpx57SAZOCC5w2EPQYw==": {
      "id": "Ma5Vpx57SAZOCC5w2EPQYw==",
      "name": "libksba",
      "version": "1.5.1-6.el9_1",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "libksba",
        "version": "1.5.1-6.el9_1",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "NdCY2/S+syamLH224R4hug==": {
      "id": "NdCY2/S+syamLH224R4hug==",
      "name": "langpacks-en",
      "version": "3.0-16.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "langpacks",
        "version": "3.0-16.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "noarch",
      "cpe": ""
    },
    "NkVP5O90EaiaDjZZzKM5xg==": {
      "id": "NkVP5O90EaiaDjZZzKM5xg==",
      "name": "zlib",
      "version": "1.2.11-39.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "zlib",
        "version": "1.2.11-39.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "OgwdUybWl/HQYbnPTE4Psw==": {
      "id": "OgwdUybWl/HQYbnPTE4Psw==",
      "name": "npth",
      "version": "1.6-8.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "npth",
        "version": "1.6-8.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "Ozo3BDeee2I7Ob4Ofm4VdA==": {
      "id": "Ozo3BDeee2I7Ob4Ofm4VdA==",
      "name": "libsmartcols",
      "version": "2.37.4-11.el9_2",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "util-linux",
        "version": "2.37.4-11.el9_2",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "PTFUIquIrYO4PcMvo6vxMg==": {
      "id": "PTFUIquIrYO4PcMvo6vxMg==",
      "name": "rpm-libs",
      "version": "4.16.1.3-22.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "rpm",
        "version": "4.16.1.3-22.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "PW1RAxkiwx83tVBhyQViyw==": {
      "id": "PW1RAxkiwx83tVBhyQViyw==",
      "name": "libstdc++",
      "version": "11.3.1-4.3.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "gcc",
        "version": "11.3.1-4.3.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "PZXvGa4khHd2n6o73hJ/Pg==": {
      "id": "PZXvGa4khHd2n6o73hJ/Pg==",
      "name": "microdnf",
      "version": "3.9.1-3.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "microdnf",
        "version": "3.9.1-3.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "R9VobIcNNshV6E8DetHeXA==": {
      "id": "R9VobIcNNshV6E8DetHeXA==",
      "name": "openssl-libs",
      "version": "1:3.0.7-17.el9_2",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "openssl",
        "version": "3.0.7-17.el9_2",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "RgUn0rRy/i742s4qQGGoNw==": {
      "id": "RgUn0rRy/i742s4qQGGoNw==",
      "name": "libcom_err",
      "version": "1.46.5-3.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "e2fsprogs",
        "version": "1.46.5-3.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "RnnkgzrsHA8d297AfaWbPg==": {
      "id": "RnnkgzrsHA8d297AfaWbPg==",
      "name": "bash",
      "version": "5.1.8-6.el9_1",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "bash",
        "version": "5.1.8-6.el9_1",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "SILSy5+vMjyw0TX1rOWbmg==": {
      "id": "SILSy5+vMjyw0TX1rOWbmg==",
      "name": "glibc-minimal-langpack",
      "version": "2.34-60.el9_2.7",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "glibc",
        "version": "2.34-60.el9_2.7",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "SSFXEK4vNCR4s9ImWtXtgA==": {
      "id": "SSFXEK4vNCR4s9ImWtXtgA==",
      "name": "gnupg2",
      "version": "2.3.3-2.el9_0",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "gnupg2",
        "version": "2.3.3-2.el9_0",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "SdI1Am/qHph5dG2ZoOeUIQ==": {
      "id": "SdI1Am/qHph5dG2ZoOeUIQ==",
      "name": "libevent",
      "version": "2.1.12-6.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "libevent",
        "version": "2.1.12-6.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "TPIRq84Pr3a6ywzPeCr3Pw==": {
      "id": "TPIRq84Pr3a6ywzPeCr3Pw==",
      "name": "libcap-ng",
      "version": "0.8.2-7.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "libcap-ng",
        "version": "0.8.2-7.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "To0NR+oyXDu1CYJfmVGurQ==": {
      "id": "To0NR+oyXDu1CYJfmVGurQ==",
      "name": "gpgme",
      "version": "1.15.1-6.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "gpgme",
        "version": "1.15.1-6.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "V/3oHP6E5IRlfgZZHK72RA==": {
      "id": "V/3oHP6E5IRlfgZZHK72RA==",
      "name": "p11-kit-trust",
      "version": "0.24.1-2.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "p11-kit",
        "version": "0.24.1-2.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "VV2Z1ngTs6sGvt5SrayPCg==": {
      "id": "VV2Z1ngTs6sGvt5SrayPCg==",
      "name": "libgpg-error",
      "version": "1.42-5.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "libgpg-error",
        "version": "1.42-5.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "Vq6OZiGbhChZZ27EcmF1PA==": {
      "id": "Vq6OZiGbhChZZ27EcmF1PA==",
      "name": "libgcrypt",
      "version": "1.10.0-10.el9_2",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "libgcrypt",
        "version": "1.10.0-10.el9_2",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "W4amAY83CsyR7zQ0GM7zsg==": {
      "id": "W4amAY83CsyR7zQ0GM7zsg==",
      "name": "pcre2-syntax",
      "version": "10.40-2.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "pcre2",
        "version": "10.40-2.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "noarch",
      "cpe": ""
    },
    "XwbkaIGCYyq6BjBMVZ1wzw==": {
      "id": "XwbkaIGCYyq6BjBMVZ1wzw==",
      "name": "readline",
      "version": "8.1-4.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "readline",
        "version": "8.1-4.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "ZFEfQrxUBY1btxBh+yKlDg==": {
      "id": "ZFEfQrxUBY1btxBh+yKlDg==",
      "name": "libselinux",
      "version": "3.5-1.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "libselinux",
        "version": "3.5-1.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "bFvWffGqJWr7FWnI7K9NVw==": {
      "id": "bFvWffGqJWr7FWnI7K9NVw==",
      "name": "grep",
      "version": "3.6-5.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "grep",
        "version": "3.6-5.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "bbOmNWQZu2GtbHRNTT5LbA==": {
      "id": "bbOmNWQZu2GtbHRNTT5LbA==",
      "name": "pcre2",
      "version": "10.40-2.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "pcre2",
        "version": "10.40-2.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "dC9CoYt17eaqinGSVCfCxw==": {
      "id": "dC9CoYt17eaqinGSVCfCxw==",
      "name": "libattr",
      "version": "2.5.1-3.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "attr",
        "version": "2.5.1-3.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "dMY7Qly4vcBOdARECvhzxQ==": {
      "id": "dMY7Qly4vcBOdARECvhzxQ==",
      "name": "ncurses-libs",
      "version": "6.2-8.20210508.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "ncurses",
        "version": "6.2-8.20210508.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "dStYvdO33sly7EacpHOqeA==": {
      "id": "dStYvdO33sly7EacpHOqeA==",
      "name": "rootfiles",
      "version": "8.1-31.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "rootfiles",
        "version": "8.1-31.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "noarch",
      "cpe": ""
    },
    "dpQG/pUwAqVv1OdQqnvylQ==": {
      "id": "dpQG/pUwAqVv1OdQqnvylQ==",
      "name": "libsigsegv",
      "version": "2.13-4.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "libsigsegv",
        "version": "2.13-4.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "f8lJd/yoDqE6O0RUQGqkpQ==": {
      "id": "f8lJd/yoDqE6O0RUQGqkpQ==",
      "name": "libusbx",
      "version": "1.0.26-1.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "libusbx",
        "version": "1.0.26-1.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "fhqVflOEiGLnOOgEUvGuSQ==": {
      "id": "fhqVflOEiGLnOOgEUvGuSQ==",
      "name": "glibc",
      "version": "2.34-60.el9_2.7",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "glibc",
        "version": "2.34-60.el9_2.7",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "gONioUcnQIIRbbViWOETsw==": {
      "id": "gONioUcnQIIRbbViWOETsw==",
      "name": "librepo",
      "version": "1.14.5-1.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "librepo",
        "version": "1.14.5-1.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "gaj77WNtnPFhL+vveIeiCA==": {
      "id": "gaj77WNtnPFhL+vveIeiCA==",
      "name": "dnf-data",
      "version": "4.14.0-5.el9_2",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "dnf",
        "version": "4.14.0-5.el9_2",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "noarch",
      "cpe": ""
    },
    "gqOdH0Kiuf6AbkqFcLH1hg==": {
      "id": "gqOdH0Kiuf6AbkqFcLH1hg==",
      "name": "libarchive",
      "version": "3.5.3-4.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "libarchive",
        "version": "3.5.3-4.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "gsdYiUdG+fMtG/M0X1EkAg==": {
      "id": "gsdYiUdG+fMtG/M0X1EkAg==",
      "name": "filesystem",
      "version": "3.16-2.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "filesystem",
        "version": "3.16-2.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "h1J8TPl/jsinSWX6NGdwBQ==": {
      "id": "h1J8TPl/jsinSWX6NGdwBQ==",
      "name": "redhat-release",
      "version": "9.2-0.13.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "redhat-release",
        "version": "9.2-0.13.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "hYEisV19Dxn4PvCvxJFm5A==": {
      "id": "hYEisV19Dxn4PvCvxJFm5A==",
      "name": "lz4-libs",
      "version": "1.9.3-5.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "lz4",
        "version": "1.9.3-5.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "iODVJwGc39HK9YJaL/S8oA==": {
      "id": "iODVJwGc39HK9YJaL/S8oA==",
      "name": "glib2",
      "version": "2.68.4-6.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "glib2",
        "version": "2.68.4-6.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "kAEPeyZOK/FwFoG6mOFUbQ==": {
      "id": "kAEPeyZOK/FwFoG6mOFUbQ==",
      "name": "libcap",
      "version": "2.48-9.el9_2",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "libcap",
        "version": "2.48-9.el9_2",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "kdml4TiffKDDUHJjP7R1Tg==": {
      "id": "kdml4TiffKDDUHJjP7R1Tg==",
      "name": "openldap",
      "version": "2.6.2-3.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "openldap",
        "version": "2.6.2-3.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "kigiD4fuysu8/DeCr+ONKQ==": {
      "id": "kigiD4fuysu8/DeCr+ONKQ==",
      "name": "basesystem",
      "version": "11-13.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "basesystem",
        "version": "11-13.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "noarch",
      "cpe": ""
    },
    "l0z+eHWKZYYL3mOicWgc2w==": {
      "id": "l0z+eHWKZYYL3mOicWgc2w==",
      "name": "libgcc",
      "version": "11.3.1-4.3.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "gcc",
        "version": "11.3.1-4.3.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "mK/FUfODp3MR7WS2xegPsw==": {
      "id": "mK/FUfODp3MR7WS2xegPsw==",
      "name": "langpacks-core-en",
      "version": "3.0-16.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "langpacks",
        "version": "3.0-16.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "noarch",
      "cpe": ""
    },
    "mPqGnMbiXN6jP61aGbHvOA==": {
      "id": "mPqGnMbiXN6jP61aGbHvOA==",
      "name": "libyaml",
      "version": "0.2.5-7.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "libyaml",
        "version": "0.2.5-7.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "qYSZ6aKFWol313IOGRXaug==": {
      "id": "qYSZ6aKFWol313IOGRXaug==",
      "name": "json-c",
      "version": "0.14-11.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "json-c",
        "version": "0.14-11.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "rCLp3m64Catai9VuHvh3Lw==": {
      "id": "rCLp3m64Catai9VuHvh3Lw==",
      "name": "keyutils-libs",
      "version": "1.6.3-1.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "keyutils",
        "version": "1.6.3-1.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "rY/kE/V4JnxYoqV+lmc9mg==": {
      "id": "rY/kE/V4JnxYoqV+lmc9mg==",
      "name": "gawk",
      "version": "5.1.0-6.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "gawk",
        "version": "5.1.0-6.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "rYCgRZF9UtO2MybO6TcW0g==": {
      "id": "rYCgRZF9UtO2MybO6TcW0g==",
      "name": "nettle",
      "version": "3.8-3.el9_0",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "nettle",
        "version": "3.8-3.el9_0",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "rlHYqOr0lkUB/Gs6b1kD2g==": {
      "id": "rlHYqOr0lkUB/Gs6b1kD2g==",
      "name": "mpfr",
      "version": "4.1.0-7.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "mpfr",
        "version": "4.1.0-7.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "s2h0kSO0Y3eNEReWOR8CBA==": {
      "id": "s2h0kSO0Y3eNEReWOR8CBA==",
      "name": "setup",
      "version": "2.13.7-9.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "setup",
        "version": "2.13.7-9.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "noarch",
      "cpe": ""
    },
    "ssPaV1VLDu6d5ZJ6Rrmh3A==": {
      "id": "ssPaV1VLDu6d5ZJ6Rrmh3A==",
      "name": "sed",
      "version": "4.8-9.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "sed",
        "version": "4.8-9.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "sx0C6L5COHIkv6yQQyPlbw==": {
      "id": "sx0C6L5COHIkv6yQQyPlbw==",
      "name": "libunistring",
      "version": "0.9.10-15.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "libunistring",
        "version": "0.9.10-15.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "sy1cTR7VjlyD3WavviV1+g==": {
      "id": "sy1cTR7VjlyD3WavviV1+g==",
      "name": "p11-kit",
      "version": "0.24.1-2.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "p11-kit",
        "version": "0.24.1-2.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "tw6NSiUrRlogU6GlrjYElg==": {
      "id": "tw6NSiUrRlogU6GlrjYElg==",
      "name": "libblkid",
      "version": "2.37.4-11.el9_2",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "util-linux",
        "version": "2.37.4-11.el9_2",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "u5TyEoU5GA6Z2czzwhMLiA==": {
      "id": "u5TyEoU5GA6Z2czzwhMLiA==",
      "name": "fonts-filesystem",
      "version": "1:2.0.5-7.el9.1",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "fonts-rpm-macros",
        "version": "2.0.5-7.el9.1",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "noarch",
      "cpe": ""
    },
    "uSt8DkzxoDcE1tRbyYPDOg==": {
      "id": "uSt8DkzxoDcE1tRbyYPDOg==",
      "name": "alternatives",
      "version": "1.20-2.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "chkconfig",
        "version": "1.20-2.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "uwkXfq5VvKEldZwWOwGq4w==": {
      "id": "uwkXfq5VvKEldZwWOwGq4w==",
      "name": "gmp",
      "version": "1:6.2.0-10.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "gmp",
        "version": "6.2.0-10.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "v5fMEqf0GRz+BrBqAji9dQ==": {
      "id": "v5fMEqf0GRz+BrBqAji9dQ==",
      "name": "libzstd",
      "version": "1.5.1-2.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "zstd",
        "version": "1.5.1-2.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "vVrvJSq6PSHuN2/SjjnToQ==": {
      "id": "vVrvJSq6PSHuN2/SjjnToQ==",
      "name": "libsepol",
      "version": "3.5-1.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "libsepol",
        "version": "3.5-1.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "wTy35qCQ8tPvk6o/Aa069Q==": {
      "id": "wTy35qCQ8tPvk6o/Aa069Q==",
      "name": "libuuid",
      "version": "2.37.4-11.el9_2",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "util-linux",
        "version": "2.37.4-11.el9_2",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "x4oijVhQU8BUwJwoFvk4QA==": {
      "id": "x4oijVhQU8BUwJwoFvk4QA==",
      "name": "libmodulemd",
      "version": "2.13.0-2.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "libmodulemd",
        "version": "2.13.0-2.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "xDkggOSr/Uc0l1xliF0UBA==": {
      "id": "xDkggOSr/Uc0l1xliF0UBA==",
      "name": "file-libs",
      "version": "5.39-12.1.el9_2",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "file",
        "version": "5.39-12.1.el9_2",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "xhMgwxa+ubXlCA6s9XfRgw==": {
      "id": "xhMgwxa+ubXlCA6s9XfRgw==",
      "name": "cyrus-sasl-lib",
      "version": "2.1.27-21.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "cyrus-sasl",
        "version": "2.1.27-21.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "xmGRecRK4z0HZrD157U0cw==": {
      "id": "xmGRecRK4z0HZrD157U0cw==",
      "name": "ca-certificates",
      "version": "2023.2.60_v7.0.306-90.1.el9_2",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "ca-certificates",
        "version": "2023.2.60_v7.0.306-90.1.el9_2",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "noarch",
      "cpe": ""
    },
    "xmvHgJqnx+8mo577UrJz8g==": {
      "id": "xmvHgJqnx+8mo577UrJz8g==",
      "name": "libsolv",
      "version": "0.7.22-4.el9",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "libsolv",
        "version": "0.7.22-4.el9",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "xzagOg0jEKrK7kuJB0AXWg==": {
      "id": "xzagOg0jEKrK7kuJB0AXWg==",
      "name": "libcurl-minimal",
      "version": "7.76.1-23.el9_2.4",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "curl",
        "version": "7.76.1-23.el9_2.4",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    },
    "zk7rVs3iwRY0RF5GLXu1Lw==": {
      "id": "zk7rVs3iwRY0RF5GLXu1Lw==",
      "name": "libxml2",
      "version": "2.9.13-3.el9_2.1",
      "kind": "binary",
      "source": {
        "id": "",
        "name": "libxml2",
        "version": "2.9.13-3.el9_2.1",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "normalized_version": "",
      "arch": "x86_64",
      "cpe": ""
    }
  },
  "distributions": {
    "af37e979-1703-4e14-9966-d6de432c82c7": {
      "id": "af37e979-1703-4e14-9966-d6de432c82c7",
      "did": "rhel",
      "name": "Red Hat Enterprise Linux Server",
      "version": "9",
      "version_code_name": "",
      "version_id": "9",
      "arch": "",
      "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
      "pretty_name": "Red Hat Enterprise Linux Server 9"
    }
  },
  "repository": {
    "5213fee2-7edc-4a71-89c9-de5979777ee9": {
      "id": "5213fee2-7edc-4a71-89c9-de5979777ee9",
      "name": "cpe:/o:redhat:enterprise_linux:9::baseos",
      "key": "rhel-cpe-repository",
      "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
    },
    "6624a569-022e-4566-97d1-676884b8036a": {
      "id": "6624a569-022e-4566-97d1-676884b8036a",
      "name": "Red Hat Container Catalog",
      "uri": "https://catalog.redhat.com/software/containers/explore",
      "cpe": ""
    },
    "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf": {
      "id": "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf",
      "name": "cpe:/a:redhat:enterprise_linux:9::appstream",
      "key": "rhel-cpe-repository",
      "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
    }
  },
  "environments": {
    "+A7/nzEXX3Q/xJZ50VMnlQ==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "+UVLfP94O7FKWQedQPvwWw==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "/L1kFEoHZTukrNTCQLypFQ==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "0A/c+uC9xs5LmvEMZeRwuQ==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "1Cze9cRYBDtXuXGQEqRPOQ==": [
      {
        "package_db": "root/buildinfo/Dockerfile-ubi9-minimal-9.2-750.1697625013",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": [
          "6624a569-022e-4566-97d1-676884b8036a",
          "6624a569-022e-4566-97d1-676884b8036a"
        ]
      }
    ],
    "1h9uHE0QiXBO/zpJrT0VjA==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "2fg1ZRYCSPKKOgCxCcA36w==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "2o98V0sT38kVqiwC3FlZKw==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "36FFkl7AbUZOwOpkdqfk3Q==": [
      {
        "package_db": "root/buildinfo/Dockerfile-ubi9-minimal-9.2-750.1697625013",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": [
          "6624a569-022e-4566-97d1-676884b8036a",
          "6624a569-022e-4566-97d1-676884b8036a"
        ]
      }
    ],
    "5mmSudfrCeEmVSPweWmcVQ==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "6RxnMs+9yIqzJpLgR7I3zA==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "6camihNRcGvFSo3XinEWFg==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "7kedTb4EJLDAcGarhqe+lQ==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "7vssDPaHKfFKMLimKBo7Gw==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "8c2Y1Jul4k8x0+owb81kuA==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "9m+4P/rW2R4cZr2RRaGc7A==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "AnHvlYoTKSxzg0JMVMiJkg==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "BJbegVsc0QXOgPydbqTe/A==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "BQhiFmX4hLYteW4oRCLTSA==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "BRLVvSCW1qZQlEQR2x48fQ==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "C7VGVckK0YZj4RiVmStEsA==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "CVixq6Nx9Sn2ciGY36Hf6w==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "Clbp1ERO3UWUCfklcBdPow==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "DF9A9iyHS74eLz1WptgqEw==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "DSiKsVzdOYp1aJo/8T0A5A==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "DrLq8qfU1bfE8o8AfdvkrQ==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "G61ZL2SOHR2qgvQfi118gw==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "HbglDdnV9yne0i8jQL30HA==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "I16VSEydeiRYB1TSf5694A==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "J29dSuYPkhEzm8309H5EwA==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "JKP7JzVg7UGaAz4VrH03lQ==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "JQNq+OC3WhGyVEKcjFoRxg==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "K5U87AYLwYDq48YpniD72A==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "KF5C+zKu/uFB7knCqOvDAQ==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "KSobT+LH4PXsCiP04HOhbQ==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "Lwqn0aweLQLZmo12VvYcog==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "MDH8Zt4oQWDiYk9qFV5Lbg==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "MQF9tiK3RKmnYG+Jc/FhJg==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "Ma5Vpx57SAZOCC5w2EPQYw==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "NdCY2/S+syamLH224R4hug==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "NkVP5O90EaiaDjZZzKM5xg==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "OgwdUybWl/HQYbnPTE4Psw==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "Ozo3BDeee2I7Ob4Ofm4VdA==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "PTFUIquIrYO4PcMvo6vxMg==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "PW1RAxkiwx83tVBhyQViyw==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "PZXvGa4khHd2n6o73hJ/Pg==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "R9VobIcNNshV6E8DetHeXA==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "RgUn0rRy/i742s4qQGGoNw==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "RnnkgzrsHA8d297AfaWbPg==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "SILSy5+vMjyw0TX1rOWbmg==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "SSFXEK4vNCR4s9ImWtXtgA==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "SdI1Am/qHph5dG2ZoOeUIQ==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "TPIRq84Pr3a6ywzPeCr3Pw==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "To0NR+oyXDu1CYJfmVGurQ==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "V/3oHP6E5IRlfgZZHK72RA==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "VV2Z1ngTs6sGvt5SrayPCg==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "Vq6OZiGbhChZZ27EcmF1PA==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "W4amAY83CsyR7zQ0GM7zsg==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "XwbkaIGCYyq6BjBMVZ1wzw==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "ZFEfQrxUBY1btxBh+yKlDg==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "bFvWffGqJWr7FWnI7K9NVw==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "bbOmNWQZu2GtbHRNTT5LbA==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "dC9CoYt17eaqinGSVCfCxw==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "dMY7Qly4vcBOdARECvhzxQ==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "dStYvdO33sly7EacpHOqeA==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "dpQG/pUwAqVv1OdQqnvylQ==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "f8lJd/yoDqE6O0RUQGqkpQ==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "fhqVflOEiGLnOOgEUvGuSQ==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "gONioUcnQIIRbbViWOETsw==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "gaj77WNtnPFhL+vveIeiCA==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "gqOdH0Kiuf6AbkqFcLH1hg==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "gsdYiUdG+fMtG/M0X1EkAg==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "h1J8TPl/jsinSWX6NGdwBQ==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "hYEisV19Dxn4PvCvxJFm5A==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "iODVJwGc39HK9YJaL/S8oA==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "kAEPeyZOK/FwFoG6mOFUbQ==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "kdml4TiffKDDUHJjP7R1Tg==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "kigiD4fuysu8/DeCr+ONKQ==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "l0z+eHWKZYYL3mOicWgc2w==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "mK/FUfODp3MR7WS2xegPsw==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "mPqGnMbiXN6jP61aGbHvOA==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "qYSZ6aKFWol313IOGRXaug==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "rCLp3m64Catai9VuHvh3Lw==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "rY/kE/V4JnxYoqV+lmc9mg==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "rYCgRZF9UtO2MybO6TcW0g==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "rlHYqOr0lkUB/Gs6b1kD2g==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "s2h0kSO0Y3eNEReWOR8CBA==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "ssPaV1VLDu6d5ZJ6Rrmh3A==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "sx0C6L5COHIkv6yQQyPlbw==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "sy1cTR7VjlyD3WavviV1+g==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "tw6NSiUrRlogU6GlrjYElg==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "u5TyEoU5GA6Z2czzwhMLiA==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "uSt8DkzxoDcE1tRbyYPDOg==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "uwkXfq5VvKEldZwWOwGq4w==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "v5fMEqf0GRz+BrBqAji9dQ==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "vVrvJSq6PSHuN2/SjjnToQ==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "wTy35qCQ8tPvk6o/Aa069Q==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "x4oijVhQU8BUwJwoFvk4QA==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "xDkggOSr/Uc0l1xliF0UBA==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "xhMgwxa+ubXlCA6s9XfRgw==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "xmGRecRK4z0HZrD157U0cw==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "xmvHgJqnx+8mo577UrJz8g==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "xzagOg0jEKrK7kuJB0AXWg==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ],
    "zk7rVs3iwRY0RF5GLXu1Lw==": [
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "",
        "repository_ids": null
      },
      {
        "package_db": "sqlite:var/lib/rpm",
        "introduced_in": "sha256:2f5211d9dccf1de31345273282bf9a4f2a32341a7352b0435155277e54fc0cd1",
        "distribution_id": "af37e979-1703-4e14-9966-d6de432c82c7",
        "repository_ids": [
          "5213fee2-7edc-4a71-89c9-de5979777ee9",
          "72d6bbc3-3089-4aa5-b772-6a5ca42e22bf"
        ]
      }
    ]
  },
  "vulnerabilities": {
    "+6d/SeOQYGr+iTSAhpcDwA==": {
      "id": "+6d/SeOQYGr+iTSAhpcDwA==",
      "updater": "rhel-vex",
      "name": "CVE-2025-4802",
      "description": "A flaw was found in the glibc library. A statically linked setuid binary that calls dlopen(), including internal dlopen() calls after setlocale() or calls to NSS functions such as getaddrinfo(), may incorrectly search LD_LIBRARY_PATH to determine which library to load, allowing a local attacker to load malicious shared libraries, escalate privileges and execute arbitrary code.",
      "issued": "2025-05-16T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-4802 https://bugzilla.redhat.com/show_bug.cgi?id=2367468 https://www.cve.org/CVERecord?id=CVE-2025-4802 https://nvd.nist.gov/vuln/detail/CVE-2025-4802 https://www.openwall.com/lists/oss-security/2025/05/16/7 https://www.openwall.com/lists/oss-security/2025/05/17/2 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-4802.json https://access.redhat.com/errata/RHSA-2025:8655",
      "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glibc-minimal-langpack",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-168.el9_6.19",
      "arch_op": "pattern match"
    },
    "/WQB0Cmnj06XJWCr3nqOoA==": {
      "id": "/WQB0Cmnj06XJWCr3nqOoA==",
      "updater": "rhel-vex",
      "name": "CVE-2021-35939",
      "description": "It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
      "issued": "2021-06-30T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2021-35939 https://bugzilla.redhat.com/show_bug.cgi?id=1964129 https://www.cve.org/CVERecord?id=CVE-2021-35939 https://nvd.nist.gov/vuln/detail/CVE-2021-35939 https://rpm.org/wiki/Releases/4.18.0 https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-35939.json https://access.redhat.com/errata/RHSA-2024:0463",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "rpm",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:4.16.1.3-27.el9_3",
      "arch_op": "pattern match"
    },
    "/eopcBL7Sl3Br4tMJEoF+Q==": {
      "id": "/eopcBL7Sl3Br4tMJEoF+Q==",
      "updater": "rhel-vex",
      "name": "CVE-2024-26462",
      "description": "A memory leak flaw was found in krb5 in /krb5/src/kdc/ndr.c. This issue can lead to a denial of service through memory exhaustion.",
      "issued": "2024-02-28T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-26462 https://bugzilla.redhat.com/show_bug.cgi?id=2266742 https://www.cve.org/CVERecord?id=CVE-2024-26462 https://nvd.nist.gov/vuln/detail/CVE-2024-26462 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-26462.json https://access.redhat.com/errata/RHSA-2024:9331",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "krb5-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:1.21.1-3.el9",
      "arch_op": "pattern match"
    },
    "/oK+zNt0cQ+IZv2Cz+p1ow==": {
      "id": "/oK+zNt0cQ+IZv2Cz+p1ow==",
      "updater": "rhel-vex",
      "name": "CVE-2023-27533",
      "description": "A vulnerability in input validation exists in curl \u003c8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and \"telnet options\" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform option negotiation without the application's intent. This vulnerability could be exploited if an application allows user input, thereby enabling attackers to execute arbitrary code on the system.",
      "issued": "2023-03-20T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-27533 https://bugzilla.redhat.com/show_bug.cgi?id=2179062 https://www.cve.org/CVERecord?id=CVE-2023-27533 https://nvd.nist.gov/vuln/detail/CVE-2023-27533 https://curl.se/docs/CVE-2023-27533.html https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-27533.json https://access.redhat.com/errata/RHSA-2023:6679",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "curl-minimal",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:7.76.1-26.el9",
      "arch_op": "pattern match"
    },
    "/s1A0DUzgN/pTr1DN27Mlg==": {
      "id": "/s1A0DUzgN/pTr1DN27Mlg==",
      "updater": "rhel-vex",
      "name": "CVE-2024-4603",
      "description": "A flaw was found in OpenSSL. Applications that use the EVP_PKEY_param_check() or EVP_PKEY_public_check() function to check a DSA public key or DSA parameters may experience long delays when checking excessively long DSA keys or parameters.  In applications that allow untrusted sources to provide the key or parameters that are checked, an attacker may be able to cause a denial of service. These functions are not called by OpenSSL on untrusted DSA keys. The applications that directly call these functions are the ones that may be vulnerable to this issue.",
      "issued": "2024-05-16T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-4603 https://bugzilla.redhat.com/show_bug.cgi?id=2281029 https://www.cve.org/CVERecord?id=CVE-2024-4603 https://nvd.nist.gov/vuln/detail/CVE-2024-4603 https://www.openssl.org/news/secadv/20240516.txt https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-4603.json https://access.redhat.com/errata/RHSA-2024:9333",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "openssl-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "1:3.2.2-6.el9_5",
      "arch_op": "pattern match"
    },
    "0+YAs+Dy3SPd130Wus0uxQ==": {
      "id": "0+YAs+Dy3SPd130Wus0uxQ==",
      "updater": "rhel-vex",
      "name": "CVE-2024-33601",
      "description": "A flaw was found in the glibc netgroup cache. The netgroup cache uses xmalloc/xrealloc and may terminate the process due to a memory allocation failure.",
      "issued": "2024-04-24T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-33601 https://bugzilla.redhat.com/show_bug.cgi?id=2277205 https://www.cve.org/CVERecord?id=CVE-2024-33601 https://nvd.nist.gov/vuln/detail/CVE-2024-33601 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-33601.json https://access.redhat.com/errata/RHSA-2024:3339",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "glibc",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9_4.2",
      "arch_op": "pattern match"
    },
    "06nVp3HoQkp2GMYq8FEEOw==": {
      "id": "06nVp3HoQkp2GMYq8FEEOw==",
      "updater": "rhel-vex",
      "name": "CVE-2025-5702",
      "description": "A flaw was found in the optimized strcmp glibc function for the Power10 CPU architecture. GNU C library versions from 2.39 onward overwrite two vector registers in a way that can disrupt the control flow of a program.",
      "issued": "2025-06-05T18:23:57Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-5702 https://bugzilla.redhat.com/show_bug.cgi?id=2370472 https://www.cve.org/CVERecord?id=CVE-2025-5702 https://nvd.nist.gov/vuln/detail/CVE-2025-5702 https://sourceware.org/bugzilla/show_bug.cgi?id=33056 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-5702.json",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glibc",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "0DMa5ftnj+HYBOgjKFl2gQ==": {
      "id": "0DMa5ftnj+HYBOgjKFl2gQ==",
      "updater": "rhel-vex",
      "name": "CVE-2023-3446",
      "description": "A vulnerability was found in OpenSSL. This security flaw occurs because the applications that use the DH_check(), DH_check_ex(), or EVP_PKEY_param_check() functions to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source may lead to a denial of service.",
      "issued": "2023-07-19T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-3446 https://bugzilla.redhat.com/show_bug.cgi?id=2224962 https://www.cve.org/CVERecord?id=CVE-2023-3446 https://nvd.nist.gov/vuln/detail/CVE-2023-3446 https://www.openssl.org/news/secadv/20230719.txt https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-3446.json https://access.redhat.com/errata/RHSA-2024:2447",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "openssl-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "1:3.0.7-27.el9",
      "arch_op": "pattern match"
    },
    "0INnWKjjSMNVc6OCjv18YA==": {
      "id": "0INnWKjjSMNVc6OCjv18YA==",
      "updater": "rhel-vex",
      "name": "CVE-2023-4911",
      "description": "A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.",
      "issued": "2023-10-03T17:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-4911 https://bugzilla.redhat.com/show_bug.cgi?id=2238352 https://www.cve.org/CVERecord?id=CVE-2023-4911 https://nvd.nist.gov/vuln/detail/CVE-2023-4911 https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt https://www.qualys.com/cve-2023-4911/ https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-4911.json https://access.redhat.com/errata/RHBA-2024:2413",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "glibc",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9",
      "arch_op": "pattern match"
    },
    "0QiVY9M19b7tjbpn/ViWqA==": {
      "id": "0QiVY9M19b7tjbpn/ViWqA==",
      "updater": "rhel-vex",
      "name": "CVE-2024-33600",
      "description": "A flaw was found in the glibc netgroup cache. After a failed cache insertion, addgetnetgrentX tries to send the non-existing response after the not-found header. This can lead to a null pointer dereference that causes a crash or exit.",
      "issued": "2024-04-24T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-33600 https://bugzilla.redhat.com/show_bug.cgi?id=2277204 https://www.cve.org/CVERecord?id=CVE-2024-33600 https://nvd.nist.gov/vuln/detail/CVE-2024-33600 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-33600.json https://access.redhat.com/errata/RHSA-2024:3339",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glibc-common",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9_4.2",
      "arch_op": "pattern match"
    },
    "0XyIJoIqTLxnYiZet4x5Yg==": {
      "id": "0XyIJoIqTLxnYiZet4x5Yg==",
      "updater": "rhel-vex",
      "name": "CVE-2021-3997",
      "description": "A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested directories are created in /tmp.",
      "issued": "2022-01-10T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2021-3997 https://bugzilla.redhat.com/show_bug.cgi?id=2024639 https://www.cve.org/CVERecord?id=CVE-2021-3997 https://nvd.nist.gov/vuln/detail/CVE-2021-3997 https://www.openwall.com/lists/oss-security/2022/01/10/2 https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-3997.json",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "systemd",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "0ZY5ysR3Nkqr0/VhSIiqfw==": {
      "id": "0ZY5ysR3Nkqr0/VhSIiqfw==",
      "updater": "rhel-vex",
      "name": "CVE-2024-2961",
      "description": "An out-of-bounds write flaw was found in the ISO-2022-CN-EXT plugin for glibc's iconv library. When converting from UCS4 charset, adding certain escape charterers is required to indicate where the charset was changed to the library. During this process, iconv improperly checks the boundaries of internal buffers, leading to a buffer overflow, which allows writing up to 3 bytes outside the desired memory location. This issue may allow an attacker to craft a malicious characters sequence that will trigger the out-of-bounds write and perform remote code execution, presenting a high impact to the Integrity, Confidentiality, and Availability triad.",
      "issued": "2024-04-17T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-2961 https://bugzilla.redhat.com/show_bug.cgi?id=2273404 https://www.cve.org/CVERecord?id=CVE-2024-2961 https://nvd.nist.gov/vuln/detail/CVE-2024-2961 https://www.openwall.com/lists/oss-security/2024/04/17/9 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-2961.json https://access.redhat.com/errata/RHSA-2024:3339",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "glibc-minimal-langpack",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9_4.2",
      "arch_op": "pattern match"
    },
    "0s+Oo3nd8zFM1b/9W/xFMg==": {
      "id": "0s+Oo3nd8zFM1b/9W/xFMg==",
      "updater": "rhel-vex",
      "name": "CVE-2024-33602",
      "description": "A flaw was found in the glibc netgroup cache. The buffer-resizing code in addgetnetgrentX assumes that all string pointers point into the supplied buffer. This can potentially lead to memory corruption and cause a crash.",
      "issued": "2024-04-24T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-33602 https://bugzilla.redhat.com/show_bug.cgi?id=2277206 https://www.cve.org/CVERecord?id=CVE-2024-33602 https://nvd.nist.gov/vuln/detail/CVE-2024-33602 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-33602.json https://access.redhat.com/errata/RHSA-2024:3339",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "glibc-common",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9_4.2",
      "arch_op": "pattern match"
    },
    "0zv+xomxIiCvJFT5PKrlsg==": {
      "id": "0zv+xomxIiCvJFT5PKrlsg==",
      "updater": "rhel-vex",
      "name": "CVE-2024-37371",
      "description": "A vulnerability was found in the MIT Kerberos 5 GSS krb5 wrap token, where an attacker can modify the plaintext Extra Count field, causing the unwrapped token to appear truncated to the application, occurs when the attacker alters the token data during transmission which can lead to improper handling of authentication tokens.",
      "issued": "2024-06-27T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-37371 https://bugzilla.redhat.com/show_bug.cgi?id=2294676 https://www.cve.org/CVERecord?id=CVE-2024-37371 https://nvd.nist.gov/vuln/detail/CVE-2024-37371 https://web.mit.edu/kerberos/www/krb5-1.21/ https://www.oracle.com/security-alerts/cpujan2025.html#AppendixMSQL https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-37371.json https://access.redhat.com/errata/RHSA-2024:6166",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "krb5-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:1.21.1-2.el9_4",
      "arch_op": "pattern match"
    },
    "1CEt59+PK/QZsDtTC+bpGg==": {
      "id": "1CEt59+PK/QZsDtTC+bpGg==",
      "updater": "rhel-vex",
      "name": "CVE-2024-13176",
      "description": "A timing side-channel vulnerability was found in OpenSSL. This vulnerability allows an attacker to recover the private key. However, measuring the timing would require local access to the signing application or a fast network connection with low latency. There is a timing signal of around 300 nanoseconds when the top word of the inverted ECDSA nonce value is zero. This issue can happen with significant probability only for some of the supported elliptic curves. In particular, the NIST P-521 curve is affected.",
      "issued": "2025-01-20T13:29:57Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-13176 https://bugzilla.redhat.com/show_bug.cgi?id=2338999 https://www.cve.org/CVERecord?id=CVE-2024-13176 https://nvd.nist.gov/vuln/detail/CVE-2024-13176 https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467 https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902 https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65 https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86 https://openssl-library.org/news/secadv/20250120.txt https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-13176.json",
      "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "openssl",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "1lRtJofWFCTkQi0dreTmvg==": {
      "id": "1lRtJofWFCTkQi0dreTmvg==",
      "updater": "rhel-vex",
      "name": "CVE-2023-29491",
      "description": "A vulnerability was found in ncurses and occurs when used by a setuid application. This flaw allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.",
      "issued": "2023-04-12T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-29491 https://bugzilla.redhat.com/show_bug.cgi?id=2191704 https://www.cve.org/CVERecord?id=CVE-2023-29491 https://nvd.nist.gov/vuln/detail/CVE-2023-29491 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-29491.json https://access.redhat.com/errata/RHSA-2023:6698",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "ncurses-base",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "noarch",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:6.2-10.20210508.el9",
      "arch_op": "pattern match"
    },
    "21rba03Cro+scmMld7bHyw==": {
      "id": "21rba03Cro+scmMld7bHyw==",
      "updater": "rhel-vex",
      "name": "CVE-2024-5535",
      "description": "A flaw was found in OpenSSL. Affected versions of this package are vulnerable to Information Exposure through the SSL_select_next_proto function. This flaw allows an attacker to cause unexpected application behavior or a crash by exploiting the buffer overread condition when the function is called with a zero-length client list. This issue is only exploitable if the application is misconfigured to use a zero-length server list and mishandles the 'no overlap' response in ALPN or uses the output as the opportunistic protocol in NPN.",
      "issued": "2024-06-27T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-5535 https://bugzilla.redhat.com/show_bug.cgi?id=2294581 https://www.cve.org/CVERecord?id=CVE-2024-5535 https://nvd.nist.gov/vuln/detail/CVE-2024-5535 https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-5535.json https://access.redhat.com/errata/RHSA-2024:9333",
      "severity": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "openssl-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "1:3.2.2-6.el9_5",
      "arch_op": "pattern match"
    },
    "2CeZCuCny7jSZBuuaMXULg==": {
      "id": "2CeZCuCny7jSZBuuaMXULg==",
      "updater": "rhel-vex",
      "name": "CVE-2021-35937",
      "description": "A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
      "issued": "2021-06-30T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2021-35937 https://bugzilla.redhat.com/show_bug.cgi?id=1964125 https://www.cve.org/CVERecord?id=CVE-2021-35937 https://nvd.nist.gov/vuln/detail/CVE-2021-35937 https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-35937.json https://access.redhat.com/errata/RHSA-2024:0463",
      "severity": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "rpm-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:4.16.1.3-27.el9_3",
      "arch_op": "pattern match"
    },
    "2SApI7oHpcm9Z48+2Hj11w==": {
      "id": "2SApI7oHpcm9Z48+2Hj11w==",
      "updater": "rhel-vex",
      "name": "CVE-2025-5915",
      "description": "A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer-Schieber (LZSS) window. This means the library may attempt to read beyond the allocated memory buffer, which can result in unpredictable program behavior, crashes (denial of service), or the disclosure of sensitive information from adjacent memory regions.",
      "issued": "2025-05-20T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-5915 https://bugzilla.redhat.com/show_bug.cgi?id=2370865 https://www.cve.org/CVERecord?id=CVE-2025-5915 https://nvd.nist.gov/vuln/detail/CVE-2025-5915 https://github.com/libarchive/libarchive/pull/2599 https://github.com/libarchive/libarchive/releases/tag/v3.8.0 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-5915.json",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "libarchive",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "2sdR4GjmaEV2ZFIV+TVU6A==": {
      "id": "2sdR4GjmaEV2ZFIV+TVU6A==",
      "updater": "rhel-vex",
      "name": "CVE-2023-38546",
      "description": "A flaw was found in the Curl package. This flaw allows an attacker to insert cookies into a running program using libcurl if the specific series of conditions are met.",
      "issued": "2023-10-11T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-38546 https://bugzilla.redhat.com/show_bug.cgi?id=2241938 https://access.redhat.com/errata/RHSA-2024:2101 https://www.cve.org/CVERecord?id=CVE-2023-38546 https://nvd.nist.gov/vuln/detail/CVE-2023-38546 https://curl.se/docs/CVE-2023-38546.html https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-38546.json https://access.redhat.com/errata/RHSA-2023:6745",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "libcurl-minimal",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:7.76.1-26.el9_3.2",
      "arch_op": "pattern match"
    },
    "3+Tq4mPPOiL6olm2GLk5Mg==": {
      "id": "3+Tq4mPPOiL6olm2GLk5Mg==",
      "updater": "rhel-vex",
      "name": "CVE-2025-49795",
      "description": "A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This flaw allows an attacker to craft a malicious XML input to libxml2, leading to a denial of service.",
      "issued": "2025-06-11T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-49795 https://bugzilla.redhat.com/show_bug.cgi?id=2372379 https://www.cve.org/CVERecord?id=CVE-2025-49795 https://nvd.nist.gov/vuln/detail/CVE-2025-49795 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-49795.json",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "libxml2",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "3VdtHqtIaf9cjYBkwOn6/g==": {
      "id": "3VdtHqtIaf9cjYBkwOn6/g==",
      "updater": "rhel-vex",
      "name": "CVE-2025-49794",
      "description": "A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the \u003csch:name path=\"...\"/\u003e schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's crash using libxml or other possible undefined behaviors.",
      "issued": "2025-06-10T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-49794 https://bugzilla.redhat.com/show_bug.cgi?id=2372373 https://www.cve.org/CVERecord?id=CVE-2025-49794 https://nvd.nist.gov/vuln/detail/CVE-2025-49794 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-49794.json",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "libxml2",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "3XaVgHeIFJL3w2B85i3krw==": {
      "id": "3XaVgHeIFJL3w2B85i3krw==",
      "updater": "rhel-vex",
      "name": "CVE-2023-32665",
      "description": "A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue where a crafted GVariant can cause excessive processing, leading to denial of service.",
      "issued": "2022-12-14T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-32665 https://bugzilla.redhat.com/show_bug.cgi?id=2211827 https://www.cve.org/CVERecord?id=CVE-2023-32665 https://nvd.nist.gov/vuln/detail/CVE-2023-32665 https://gitlab.gnome.org/GNOME/glib/-/issues/2121 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-32665.json https://access.redhat.com/errata/RHSA-2023:6631",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "glib2",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.68.4-11.el9",
      "arch_op": "pattern match"
    },
    "3ktHS+YZSMYXCkYy+yNUcA==": {
      "id": "3ktHS+YZSMYXCkYy+yNUcA==",
      "updater": "rhel-vex",
      "name": "CVE-2022-48554",
      "description": "A flaw was found in file, a program used to identify a particular file according to the type of data contained by the file. This issue occurs when processing a specially crafted file, causing a stack-based buffer over-read, resulting in an application crash.",
      "issued": "2022-01-21T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2022-48554 https://bugzilla.redhat.com/show_bug.cgi?id=2235714 https://www.cve.org/CVERecord?id=CVE-2022-48554 https://nvd.nist.gov/vuln/detail/CVE-2022-48554 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48554.json https://access.redhat.com/errata/RHSA-2024:2512",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "file-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:5.39-16.el9",
      "arch_op": "pattern match"
    },
    "3xq4PznUGaWv+UklhKhOCw==": {
      "id": "3xq4PznUGaWv+UklhKhOCw==",
      "updater": "rhel-vex",
      "name": "CVE-2024-5535",
      "description": "A flaw was found in OpenSSL. Affected versions of this package are vulnerable to Information Exposure through the SSL_select_next_proto function. This flaw allows an attacker to cause unexpected application behavior or a crash by exploiting the buffer overread condition when the function is called with a zero-length client list. This issue is only exploitable if the application is misconfigured to use a zero-length server list and mishandles the 'no overlap' response in ALPN or uses the output as the opportunistic protocol in NPN.",
      "issued": "2024-06-27T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-5535 https://bugzilla.redhat.com/show_bug.cgi?id=2294581 https://www.cve.org/CVERecord?id=CVE-2024-5535 https://nvd.nist.gov/vuln/detail/CVE-2024-5535 https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-5535.json https://access.redhat.com/errata/RHSA-2024:9333",
      "severity": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "openssl-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "1:3.2.2-6.el9_5",
      "arch_op": "pattern match"
    },
    "4WTOrslnIqtUscmv3OpUqw==": {
      "id": "4WTOrslnIqtUscmv3OpUqw==",
      "updater": "rhel-vex",
      "name": "CVE-2024-12797",
      "description": "A flaw was found in OpenSSL's RFC7250 Raw Public Key (RPK) authentication. This vulnerability allows man-in-the-middle (MITM) attacks via failure to abort TLS/DTLS handshakes when the server's RPK does not match the expected key despite the SSL_VERIFY_PEER verification mode being set.",
      "issued": "2025-02-11T15:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-12797 https://bugzilla.redhat.com/show_bug.cgi?id=2342757 https://www.cve.org/CVERecord?id=CVE-2024-12797 https://nvd.nist.gov/vuln/detail/CVE-2024-12797 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-12797.json https://access.redhat.com/errata/RHSA-2025:1330",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "openssl-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "1:3.2.2-6.el9_5.1",
      "arch_op": "pattern match"
    },
    "4asubKvJrlJVsaeeKleZeQ==": {
      "id": "4asubKvJrlJVsaeeKleZeQ==",
      "updater": "rhel-vex",
      "name": "CVE-2024-28182",
      "description": "A vulnerability was found in how nghttp2 implements the HTTP/2 protocol. There are insufficient limitations placed on the amount of CONTINUATION frames that can be sent within a single stream. This issue could allow an unauthenticated remote attacker to send packets to vulnerable servers, which could use up compute or memory resources to cause a Denial of Service.",
      "issued": "2024-04-03T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-28182 https://bugzilla.redhat.com/show_bug.cgi?id=2268639 https://www.cve.org/CVERecord?id=CVE-2024-28182 https://nvd.nist.gov/vuln/detail/CVE-2024-28182 https://github.com/nghttp2/nghttp2/security/advisories/GHSA-x6x3-gv8h-m57q https://nowotarski.info/http2-continuation-flood/ https://www.kb.cert.org/vuls/id/421644 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-28182.json https://access.redhat.com/errata/RHSA-2024:3501",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "libnghttp2",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:1.43.0-5.el9_4.3",
      "arch_op": "pattern match"
    },
    "4bsXMyNX8A2vDNbincmT7A==": {
      "id": "4bsXMyNX8A2vDNbincmT7A==",
      "updater": "rhel-vex",
      "name": "CVE-2024-33602",
      "description": "A flaw was found in the glibc netgroup cache. The buffer-resizing code in addgetnetgrentX assumes that all string pointers point into the supplied buffer. This can potentially lead to memory corruption and cause a crash.",
      "issued": "2024-04-24T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-33602 https://bugzilla.redhat.com/show_bug.cgi?id=2277206 https://www.cve.org/CVERecord?id=CVE-2024-33602 https://nvd.nist.gov/vuln/detail/CVE-2024-33602 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-33602.json https://access.redhat.com/errata/RHSA-2024:3339",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "glibc-common",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9_4.2",
      "arch_op": "pattern match"
    },
    "4flqiPbmTauic3ijyT75yw==": {
      "id": "4flqiPbmTauic3ijyT75yw==",
      "updater": "rhel-vex",
      "name": "CVE-2024-6119",
      "description": "A flaw was found in OpenSSL. Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address resulting in abnormal termination of the application process.",
      "issued": "2024-09-04T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-6119 https://bugzilla.redhat.com/show_bug.cgi?id=2306158 https://www.cve.org/CVERecord?id=CVE-2024-6119 https://nvd.nist.gov/vuln/detail/CVE-2024-6119 https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-6119.json https://access.redhat.com/errata/RHSA-2024:6783",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "openssl-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "1:3.0.7-28.el9_4",
      "arch_op": "pattern match"
    },
    "51LUS52PmOp1zHrTW3se6w==": {
      "id": "51LUS52PmOp1zHrTW3se6w==",
      "updater": "rhel-vex",
      "name": "CVE-2024-33602",
      "description": "A flaw was found in the glibc netgroup cache. The buffer-resizing code in addgetnetgrentX assumes that all string pointers point into the supplied buffer. This can potentially lead to memory corruption and cause a crash.",
      "issued": "2024-04-24T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-33602 https://bugzilla.redhat.com/show_bug.cgi?id=2277206 https://www.cve.org/CVERecord?id=CVE-2024-33602 https://nvd.nist.gov/vuln/detail/CVE-2024-33602 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-33602.json https://access.redhat.com/errata/RHSA-2024:3339",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "glibc",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9_4.2",
      "arch_op": "pattern match"
    },
    "53g2lPwzOLmoqCCLIr2InQ==": {
      "id": "53g2lPwzOLmoqCCLIr2InQ==",
      "updater": "rhel-vex",
      "name": "CVE-2023-4911",
      "description": "A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.",
      "issued": "2023-10-03T17:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-4911 https://bugzilla.redhat.com/show_bug.cgi?id=2238352 https://www.cve.org/CVERecord?id=CVE-2023-4911 https://nvd.nist.gov/vuln/detail/CVE-2023-4911 https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt https://www.qualys.com/cve-2023-4911/ https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-4911.json https://access.redhat.com/errata/RHBA-2024:2413",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "glibc-minimal-langpack",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9",
      "arch_op": "pattern match"
    },
    "58xY9Xj25VNzU8f4Nsn43Q==": {
      "id": "58xY9Xj25VNzU8f4Nsn43Q==",
      "updater": "rhel-vex",
      "name": "CVE-2023-3817",
      "description": "A vulnerability was found in OpenSSL. This security issue occurs because the applications that use the DH_check(), DH_check_ex(), or EVP_PKEY_param_check() functions to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source may lead to a denial of service.",
      "issued": "2023-07-31T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-3817 https://bugzilla.redhat.com/show_bug.cgi?id=2227852 https://www.cve.org/CVERecord?id=CVE-2023-3817 https://nvd.nist.gov/vuln/detail/CVE-2023-3817 https://www.openssl.org/news/secadv/20230731.txt https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-3817.json https://access.redhat.com/errata/RHSA-2024:2447",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "openssl-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "1:3.0.7-27.el9",
      "arch_op": "pattern match"
    },
    "5DWxn7dmJcIfTQzzUA2+nA==": {
      "id": "5DWxn7dmJcIfTQzzUA2+nA==",
      "updater": "rhel-vex",
      "name": "CVE-2024-12243",
      "description": "A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially crafted certificate, causing GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition.",
      "issued": "2025-02-10T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-12243 https://bugzilla.redhat.com/show_bug.cgi?id=2344615 https://www.cve.org/CVERecord?id=CVE-2024-12243 https://nvd.nist.gov/vuln/detail/CVE-2024-12243 https://gitlab.com/gnutls/libtasn1/-/issues/52 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-12243.json https://access.redhat.com/errata/RHSA-2025:7076",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "gnutls",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:3.8.3-6.el9",
      "arch_op": "pattern match"
    },
    "6eMjths7OctCI6zbpR/CJw==": {
      "id": "6eMjths7OctCI6zbpR/CJw==",
      "updater": "rhel-vex",
      "name": "CVE-2023-7008",
      "description": "A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.",
      "issued": "2022-12-08T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-7008 https://bugzilla.redhat.com/show_bug.cgi?id=2222672 https://www.cve.org/CVERecord?id=CVE-2023-7008 https://nvd.nist.gov/vuln/detail/CVE-2023-7008 https://bugzilla.redhat.com/show_bug.cgi?id=2222261 https://github.com/systemd/systemd/issues/25676 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-7008.json https://access.redhat.com/errata/RHSA-2024:2463",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "systemd-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:252-32.el9_4",
      "arch_op": "pattern match"
    },
    "6hAQW3vY9ZA/8datv1rY4g==": {
      "id": "6hAQW3vY9ZA/8datv1rY4g==",
      "updater": "rhel-vex",
      "name": "CVE-2024-41996",
      "description": "A vulnerability was found in the Diffie-Hellman Ephemeral (DHE) Key Agreement Protocol, where a malicious client can exploit the server's public key validation process. By forcing the server to use DHE and validating the order of public keys, the client can trigger expensive server-side modular exponentiation calculations. This issue results in asymmetric resource consumption, potentially leading to a denial of service (DoS) attack by overwhelming the server with computationally intensive operations.",
      "issued": "2024-08-26T06:15:04Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-41996 https://bugzilla.redhat.com/show_bug.cgi?id=2307826 https://www.cve.org/CVERecord?id=CVE-2024-41996 https://nvd.nist.gov/vuln/detail/CVE-2024-41996 https://dheatattack.gitlab.io/details/ https://dheatattack.gitlab.io/faq/ https://gist.github.com/c0r0n3r/abccc14d4d96c0442f3a77fa5ca255d1 https://github.com/openssl/openssl/issues/17374 https://openssl-library.org/post/2022-10-21-tls-groups-configuration/ https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-41996.json",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "openssl",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "6hxITWtIkDQpBjQM5vKOkA==": {
      "id": "6hxITWtIkDQpBjQM5vKOkA==",
      "updater": "rhel-vex",
      "name": "CVE-2024-26458",
      "description": "A memory leak flaw was found in krb5 in /krb5/src/lib/rpc/pmap_rmt.c. This issue can lead to a denial of service through memory exhaustion.",
      "issued": "2024-02-28T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-26458 https://bugzilla.redhat.com/show_bug.cgi?id=2266731 https://www.cve.org/CVERecord?id=CVE-2024-26458 https://nvd.nist.gov/vuln/detail/CVE-2024-26458 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-26458.json https://access.redhat.com/errata/RHSA-2024:9331",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "krb5-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:1.21.1-3.el9",
      "arch_op": "pattern match"
    },
    "71mUiqp9K+KrPPMFd0Gr9A==": {
      "id": "71mUiqp9K+KrPPMFd0Gr9A==",
      "updater": "rhel-vex",
      "name": "CVE-2023-29499",
      "description": "A flaw was found in GLib. GVariant deserialization fails to validate that the input conforms to the expected format, leading to denial of service.",
      "issued": "2022-12-14T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-29499 https://bugzilla.redhat.com/show_bug.cgi?id=2211828 https://www.cve.org/CVERecord?id=CVE-2023-29499 https://nvd.nist.gov/vuln/detail/CVE-2023-29499 https://gitlab.gnome.org/GNOME/glib/-/issues/2794 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-29499.json https://access.redhat.com/errata/RHSA-2023:6631",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "glib2",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.68.4-11.el9",
      "arch_op": "pattern match"
    },
    "7JZ3MHJevu7noH+KiM70cQ==": {
      "id": "7JZ3MHJevu7noH+KiM70cQ==",
      "updater": "rhel-vex",
      "name": "CVE-2025-24928",
      "description": "A flaw was found in libxml2. This vulnerability allows a stack-based buffer overflow via DTD validation of an untrusted document or untrusted DTD.",
      "issued": "2025-02-18T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-24928 https://bugzilla.redhat.com/show_bug.cgi?id=2346421 https://www.cve.org/CVERecord?id=CVE-2025-24928 https://nvd.nist.gov/vuln/detail/CVE-2025-24928 https://gitlab.gnome.org/GNOME/libxml2/-/issues/847 https://issues.oss-fuzz.com/issues/392687022 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24928.json https://access.redhat.com/errata/RHSA-2025:2679",
      "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "libxml2",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.9.13-6.el9_5.2",
      "arch_op": "pattern match"
    },
    "7nWSET5rvC0ef4ukzNTUGQ==": {
      "id": "7nWSET5rvC0ef4ukzNTUGQ==",
      "updater": "rhel-vex",
      "name": "CVE-2023-27538",
      "description": "An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse them for subsequent transfers if the configurations match. However, two SSH settings were omitted from the configuration check, allowing them to match easily, potentially leading to the reuse of an inappropriate connection.",
      "issued": "2023-03-20T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-27538 https://bugzilla.redhat.com/show_bug.cgi?id=2179103 https://www.cve.org/CVERecord?id=CVE-2023-27538 https://nvd.nist.gov/vuln/detail/CVE-2023-27538 https://curl.se/docs/CVE-2023-27538.html https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-27538.json https://access.redhat.com/errata/RHSA-2023:6679",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "curl-minimal",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:7.76.1-26.el9",
      "arch_op": "pattern match"
    },
    "8090a+9YHf/MvdRFP7qTAw==": {
      "id": "8090a+9YHf/MvdRFP7qTAw==",
      "updater": "rhel-vex",
      "name": "CVE-2024-2236",
      "description": "A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts.",
      "issued": "2024-03-06T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-2236 https://bugzilla.redhat.com/show_bug.cgi?id=2245218 https://www.cve.org/CVERecord?id=CVE-2024-2236 https://nvd.nist.gov/vuln/detail/CVE-2024-2236 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-2236.json https://access.redhat.com/errata/RHSA-2024:9404",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "libgcrypt",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:1.10.0-11.el9",
      "arch_op": "pattern match"
    },
    "8E2ckAPYq5vgQQfdGbTALQ==": {
      "id": "8E2ckAPYq5vgQQfdGbTALQ==",
      "updater": "rhel-vex",
      "name": "CVE-2025-0395",
      "description": "A flaw was found in the GNU C Library (glibc). A buffer overflow condition via the `assert()` function may be triggered due to glibc not allocating enough space for the assertion failure message string and size information. In certain conditions, a local attacker can exploit this, potentially leading to an application crash or other undefined behavior.",
      "issued": "2025-01-22T13:11:30Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-0395 https://bugzilla.redhat.com/show_bug.cgi?id=2339460 https://www.cve.org/CVERecord?id=CVE-2025-0395 https://nvd.nist.gov/vuln/detail/CVE-2025-0395 https://sourceware.org/bugzilla/show_bug.cgi?id=32582 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-0395.json https://access.redhat.com/errata/RHSA-2025:4244",
      "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glibc-minimal-langpack",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-125.el9_5.8",
      "arch_op": "pattern match"
    },
    "8UUCxMXAfRtBuDf07+fISg==": {
      "id": "8UUCxMXAfRtBuDf07+fISg==",
      "updater": "rhel-vex",
      "name": "CVE-2024-56171",
      "description": "A flaw was found in libxml2. This vulnerability allows a use-after-free via a crafted XML document validated against an XML schema with certain identity constraints or a crafted XML schema.",
      "issued": "2025-02-18T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-56171 https://bugzilla.redhat.com/show_bug.cgi?id=2346416 https://www.cve.org/CVERecord?id=CVE-2024-56171 https://nvd.nist.gov/vuln/detail/CVE-2024-56171 https://gitlab.gnome.org/GNOME/libxml2/-/issues/828 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-56171.json https://access.redhat.com/errata/RHSA-2025:2679",
      "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "libxml2",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.9.13-6.el9_5.2",
      "arch_op": "pattern match"
    },
    "8aaFS1jGAsM+0YwLvTiCyw==": {
      "id": "8aaFS1jGAsM+0YwLvTiCyw==",
      "updater": "rhel-vex",
      "name": "CVE-2024-2398",
      "description": "A flaw was found in curl. When an application configures libcurl to use HTTP/2 server push and the amount of received headers for the push surpasses the maximum allowed limit, libcurl aborts the server push. When aborting, libcurl does not free all the previously allocated headers, resulting in a memory leak.",
      "issued": "2024-03-27T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-2398 https://bugzilla.redhat.com/show_bug.cgi?id=2270498 https://www.cve.org/CVERecord?id=CVE-2024-2398 https://nvd.nist.gov/vuln/detail/CVE-2024-2398 https://curl.se/docs/CVE-2024-2398.html https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-2398.json https://access.redhat.com/errata/RHSA-2024:5529",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "libcurl-minimal",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:7.76.1-29.el9_4.1",
      "arch_op": "pattern match"
    },
    "8kndQj/aRn+NNJdGVP9v4g==": {
      "id": "8kndQj/aRn+NNJdGVP9v4g==",
      "updater": "rhel-vex",
      "name": "CVE-2023-45322",
      "description": "A flaw was found in libxml2. In an out-of-memory condition or when limiting the memory allocation, processing a XML document using the HTML parser may result in a use-after-free vulnerability.",
      "issued": "2023-08-23T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-45322 https://bugzilla.redhat.com/show_bug.cgi?id=2242945 https://www.cve.org/CVERecord?id=CVE-2023-45322 https://nvd.nist.gov/vuln/detail/CVE-2023-45322 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-45322.json",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "libxml2",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "9FKHFApkWswWkHyGdodK0g==": {
      "id": "9FKHFApkWswWkHyGdodK0g==",
      "updater": "rhel-vex",
      "name": "CVE-2020-11023",
      "description": "A flaw was found in jQuery. HTML containing \\\u003coption\\\u003e elements from untrusted sources are passed, even after sanitizing, to one of jQuery's DOM manipulation methods, which may execute untrusted code. The highest threat from this vulnerability is to data confidentiality and integrity.",
      "issued": "2020-04-29T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2020-11023 https://bugzilla.redhat.com/show_bug.cgi?id=1850004 https://www.cve.org/CVERecord?id=CVE-2020-11023 https://nvd.nist.gov/vuln/detail/CVE-2020-11023 https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/ https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://security.access.redhat.com/data/csaf/v2/vex/2020/cve-2020-11023.json https://access.redhat.com/errata/RHSA-2025:1346",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "libgcc",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:11.5.0-5.el9_5",
      "arch_op": "pattern match"
    },
    "9O6eBDd9OtueXKQaS30JHQ==": {
      "id": "9O6eBDd9OtueXKQaS30JHQ==",
      "updater": "rhel-vex",
      "name": "CVE-2023-46218",
      "description": "A flaw was found in curl that verifies a given cookie domain against the Public Suffix List. This issue could allow a malicious HTTP server to set \"super cookies\" in curl that are passed back to more origins than what is otherwise allowed or possible.",
      "issued": "2023-12-06T07:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-46218 https://bugzilla.redhat.com/show_bug.cgi?id=2252030 https://www.cve.org/CVERecord?id=CVE-2023-46218 https://nvd.nist.gov/vuln/detail/CVE-2023-46218 https://curl.se/docs/CVE-2023-46218.html https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-46218.json https://access.redhat.com/errata/RHSA-2024:1129",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "curl-minimal",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:7.76.1-26.el9_3.3",
      "arch_op": "pattern match"
    },
    "9O8vLtOdyUMO1soTy2OBGw==": {
      "id": "9O8vLtOdyUMO1soTy2OBGw==",
      "updater": "rhel-vex",
      "name": "CVE-2024-0553",
      "description": "A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange, potentially leading to the leakage of sensitive data. CVE-2024-0553 is designated as an incomplete resolution for CVE-2023-5981.",
      "issued": "2024-01-16T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-0553 https://bugzilla.redhat.com/show_bug.cgi?id=2258412 https://www.cve.org/CVERecord?id=CVE-2024-0553 https://nvd.nist.gov/vuln/detail/CVE-2024-0553 https://gitlab.com/gnutls/gnutls/-/issues/1522 https://lists.gnupg.org/pipermail/gnutls-help/2024-January/004841.html https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-0553.json https://access.redhat.com/errata/RHSA-2024:0533",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "gnutls",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:3.7.6-23.el9_3.3",
      "arch_op": "pattern match"
    },
    "A7bcOuxkjccnpaTXIAxpLw==": {
      "id": "A7bcOuxkjccnpaTXIAxpLw==",
      "updater": "rhel-vex",
      "name": "CVE-2023-5981",
      "description": "A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.",
      "issued": "2023-11-15T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-5981 https://bugzilla.redhat.com/show_bug.cgi?id=2248445 https://www.cve.org/CVERecord?id=CVE-2023-5981 https://nvd.nist.gov/vuln/detail/CVE-2023-5981 https://gnutls.org/security-new.html#GNUTLS-SA-2023-10-23 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-5981.json https://access.redhat.com/errata/RHSA-2024:0533",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "gnutls",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:3.7.6-23.el9_3.3",
      "arch_op": "pattern match"
    },
    "ABgAEtKLJJ3BQYa4+jCHyg==": {
      "id": "ABgAEtKLJJ3BQYa4+jCHyg==",
      "updater": "rhel-vex",
      "name": "CVE-2023-4813",
      "description": "A flaw was found in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge.",
      "issued": "2022-03-01T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-4813 https://bugzilla.redhat.com/show_bug.cgi?id=2237798 https://www.cve.org/CVERecord?id=CVE-2023-4813 https://nvd.nist.gov/vuln/detail/CVE-2023-4813 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-4813.json https://access.redhat.com/errata/RHBA-2024:2413",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glibc-common",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9",
      "arch_op": "pattern match"
    },
    "AOqYiSRMsYI7D2mmuqAtJA==": {
      "id": "AOqYiSRMsYI7D2mmuqAtJA==",
      "updater": "rhel-vex",
      "name": "CVE-2021-35938",
      "description": "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
      "issued": "2021-06-30T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2021-35938 https://bugzilla.redhat.com/show_bug.cgi?id=1964114 https://www.cve.org/CVERecord?id=CVE-2021-35938 https://nvd.nist.gov/vuln/detail/CVE-2021-35938 https://rpm.org/wiki/Releases/4.18.0 https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-35938.json https://access.redhat.com/errata/RHSA-2024:0463",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "rpm-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:4.16.1.3-27.el9_3",
      "arch_op": "pattern match"
    },
    "AUiFITCnRjRxctzqqbDeeA==": {
      "id": "AUiFITCnRjRxctzqqbDeeA==",
      "updater": "rhel-vex",
      "name": "CVE-2022-3219",
      "description": "A vulnerability was found in GnuPG. GnuPG can spin on a relatively small input by crafting a public key with thousands of signatures attached and compressed down to a few kilobytes. This issue can potentially cause a denial of service.",
      "issued": "2022-09-15T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2022-3219 https://bugzilla.redhat.com/show_bug.cgi?id=2127010 https://www.cve.org/CVERecord?id=CVE-2022-3219 https://nvd.nist.gov/vuln/detail/CVE-2022-3219 https://dev.gnupg.org/D556 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-3219.json",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "gnupg2",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "AqIetzkTw3mVI6hiusMy1w==": {
      "id": "AqIetzkTw3mVI6hiusMy1w==",
      "updater": "rhel-vex",
      "name": "CVE-2023-4806",
      "description": "A flaw was found in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags.",
      "issued": "2023-09-12T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-4806 https://bugzilla.redhat.com/show_bug.cgi?id=2237782 https://www.cve.org/CVERecord?id=CVE-2023-4806 https://nvd.nist.gov/vuln/detail/CVE-2023-4806 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-4806.json https://access.redhat.com/errata/RHBA-2024:2413",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glibc-common",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9",
      "arch_op": "pattern match"
    },
    "AsiuN/8gu7sZ0PJCLihjmw==": {
      "id": "AsiuN/8gu7sZ0PJCLihjmw==",
      "updater": "rhel-vex",
      "name": "CVE-2025-4598",
      "description": "A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality.",
      "issued": "2025-05-29T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-4598 https://bugzilla.redhat.com/show_bug.cgi?id=2369242 https://www.cve.org/CVERecord?id=CVE-2025-4598 https://nvd.nist.gov/vuln/detail/CVE-2025-4598 https://www.openwall.com/lists/oss-security/2025/05/29/3 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-4598.json",
      "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "systemd",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "AtWoYkoBl9avwxLPtk70fw==": {
      "id": "AtWoYkoBl9avwxLPtk70fw==",
      "updater": "rhel-vex",
      "name": "CVE-2023-29491",
      "description": "A vulnerability was found in ncurses and occurs when used by a setuid application. This flaw allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.",
      "issued": "2023-04-12T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-29491 https://bugzilla.redhat.com/show_bug.cgi?id=2191704 https://www.cve.org/CVERecord?id=CVE-2023-29491 https://nvd.nist.gov/vuln/detail/CVE-2023-29491 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-29491.json https://access.redhat.com/errata/RHSA-2023:6698",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "ncurses-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:6.2-10.20210508.el9",
      "arch_op": "pattern match"
    },
    "AwYRRq6SmgfJLn2NZxQUdw==": {
      "id": "AwYRRq6SmgfJLn2NZxQUdw==",
      "updater": "rhel-vex",
      "name": "CVE-2024-34459",
      "description": "A flaw was found in the xmllint program distributed by the libxml2 package. A buffer over-read in the xmlHTMLPrintFileContext function in the xmllint.c file may be triggered when a crafted file is processed with the xmllint program using the `--htmlout` command line option, causing an application crash and resulting in a denial of service.",
      "issued": "2024-05-08T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-34459 https://bugzilla.redhat.com/show_bug.cgi?id=2280532 https://www.cve.org/CVERecord?id=CVE-2024-34459 https://nvd.nist.gov/vuln/detail/CVE-2024-34459 https://gitlab.gnome.org/GNOME/libxml2/-/issues/720 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-34459.json",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "libxml2",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "BLkI3n1XefyybyaipLStXA==": {
      "id": "BLkI3n1XefyybyaipLStXA==",
      "updater": "rhel-vex",
      "name": "CVE-2020-11023",
      "description": "A flaw was found in jQuery. HTML containing \\\u003coption\\\u003e elements from untrusted sources are passed, even after sanitizing, to one of jQuery's DOM manipulation methods, which may execute untrusted code. The highest threat from this vulnerability is to data confidentiality and integrity.",
      "issued": "2020-04-29T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2020-11023 https://bugzilla.redhat.com/show_bug.cgi?id=1850004 https://www.cve.org/CVERecord?id=CVE-2020-11023 https://nvd.nist.gov/vuln/detail/CVE-2020-11023 https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/ https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://security.access.redhat.com/data/csaf/v2/vex/2020/cve-2020-11023.json https://access.redhat.com/errata/RHSA-2025:1346",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "libstdc++",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:11.5.0-5.el9_5",
      "arch_op": "pattern match"
    },
    "BO4mpvHlpA2VMxVuGCs5Gw==": {
      "id": "BO4mpvHlpA2VMxVuGCs5Gw==",
      "updater": "rhel-vex",
      "name": "CVE-2022-49043",
      "description": "A flaw was found in libxml2 where improper handling of memory allocation failures in `libxml2` can lead to crashes, memory leaks, or inconsistent states. While an attacker cannot directly control allocation failures, they may trigger denial-of-service conditions under extreme system stress.",
      "issued": "2025-01-26T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2022-49043 https://bugzilla.redhat.com/show_bug.cgi?id=2342118 https://www.cve.org/CVERecord?id=CVE-2022-49043 https://nvd.nist.gov/vuln/detail/CVE-2022-49043 https://github.com/php/php-src/issues/17467 https://gitlab.gnome.org/GNOME/libxml2/-/commit/5a19e21605398cef6a8b1452477a8705cb41562b https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-49043.json https://access.redhat.com/errata/RHSA-2025:1350",
      "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "libxml2",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.9.13-6.el9_5.1",
      "arch_op": "pattern match"
    },
    "BrBV5lr2Oniu9+XAGvI91A==": {
      "id": "BrBV5lr2Oniu9+XAGvI91A==",
      "updater": "rhel-vex",
      "name": "CVE-2023-32611",
      "description": "A flaw was found in GLib. GVariant deserialization is vulnerable to a slowdown issue where a crafted GVariant can cause excessive processing, leading to denial of service.",
      "issued": "2022-12-14T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-32611 https://bugzilla.redhat.com/show_bug.cgi?id=2211829 https://www.cve.org/CVERecord?id=CVE-2023-32611 https://nvd.nist.gov/vuln/detail/CVE-2023-32611 https://gitlab.gnome.org/GNOME/glib/-/issues/2797 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-32611.json https://access.redhat.com/errata/RHSA-2023:6631",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "glib2",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.68.4-11.el9",
      "arch_op": "pattern match"
    },
    "C0CVf3gKIXy0pxUEC+HbFA==": {
      "id": "C0CVf3gKIXy0pxUEC+HbFA==",
      "updater": "rhel-vex",
      "name": "CVE-2024-3596",
      "description": "A vulnerability in the RADIUS (Remote Authentication Dial-In User Service) protocol allows attackers to forge authentication responses when the Message-Authenticator attribute is not enforced. This issue arises from a cryptographically insecure integrity check using MD5, enabling attackers to spoof UDP-based RADIUS response packets. This can result in unauthorized access by modifying an Access-Reject response to an Access-Accept response, thereby compromising the authentication process.",
      "issued": "2024-07-09T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-3596 https://bugzilla.redhat.com/show_bug.cgi?id=2263240 https://www.cve.org/CVERecord?id=CVE-2024-3596 https://nvd.nist.gov/vuln/detail/CVE-2024-3596 https://datatracker.ietf.org/doc/draft-ietf-radext-deprecating-radius/ https://datatracker.ietf.org/doc/html/rfc2865 https://networkradius.com/assets/pdf/radius_and_md5_collisions.pdf https://w1.fi/security/2024-1/hostapd-and-radius-protocol-forgery-attacks.txt https://www.blastradius.fail/ https://www.kb.cert.org/vuls/id/456537 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-3596.json https://access.redhat.com/errata/RHSA-2024:9474",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "krb5-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:1.21.1-4.el9_5",
      "arch_op": "pattern match"
    },
    "CCTTGeQPsaGe9k69jAJeHQ==": {
      "id": "CCTTGeQPsaGe9k69jAJeHQ==",
      "updater": "rhel-vex",
      "name": "CVE-2023-4911",
      "description": "A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.",
      "issued": "2023-10-03T17:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-4911 https://bugzilla.redhat.com/show_bug.cgi?id=2238352 https://www.cve.org/CVERecord?id=CVE-2023-4911 https://nvd.nist.gov/vuln/detail/CVE-2023-4911 https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt https://www.qualys.com/cve-2023-4911/ https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-4911.json https://access.redhat.com/errata/RHBA-2024:2413",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "glibc-common",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9",
      "arch_op": "pattern match"
    },
    "CKyr7yp8MCOkPhmRI+ObRw==": {
      "id": "CKyr7yp8MCOkPhmRI+ObRw==",
      "updater": "rhel-vex",
      "name": "CVE-2024-2961",
      "description": "An out-of-bounds write flaw was found in the ISO-2022-CN-EXT plugin for glibc's iconv library. When converting from UCS4 charset, adding certain escape charterers is required to indicate where the charset was changed to the library. During this process, iconv improperly checks the boundaries of internal buffers, leading to a buffer overflow, which allows writing up to 3 bytes outside the desired memory location. This issue may allow an attacker to craft a malicious characters sequence that will trigger the out-of-bounds write and perform remote code execution, presenting a high impact to the Integrity, Confidentiality, and Availability triad.",
      "issued": "2024-04-17T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-2961 https://bugzilla.redhat.com/show_bug.cgi?id=2273404 https://www.cve.org/CVERecord?id=CVE-2024-2961 https://nvd.nist.gov/vuln/detail/CVE-2024-2961 https://www.openwall.com/lists/oss-security/2024/04/17/9 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-2961.json https://access.redhat.com/errata/RHSA-2024:3339",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "glibc",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9_4.2",
      "arch_op": "pattern match"
    },
    "DAaQgj58NrubTxbgg0RwcA==": {
      "id": "DAaQgj58NrubTxbgg0RwcA==",
      "updater": "rhel-vex",
      "name": "CVE-2024-28834",
      "description": "A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits, exposing a potential timing side-channel.",
      "issued": "2024-03-21T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-28834 https://bugzilla.redhat.com/show_bug.cgi?id=2269228 https://www.cve.org/CVERecord?id=CVE-2024-28834 https://nvd.nist.gov/vuln/detail/CVE-2024-28834 https://lists.gnupg.org/pipermail/gnutls-help/2024-March/004845.html https://minerva.crocs.fi.muni.cz/ https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-28834.json https://access.redhat.com/errata/RHSA-2024:2570",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "gnutls",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:3.8.3-4.el9_4",
      "arch_op": "pattern match"
    },
    "DDxCHnX+kCqcRQj9b90/cg==": {
      "id": "DDxCHnX+kCqcRQj9b90/cg==",
      "updater": "rhel-vex",
      "name": "CVE-2023-4156",
      "description": "A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information.",
      "issued": "2023-06-19T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-4156 https://bugzilla.redhat.com/show_bug.cgi?id=2215930 https://www.cve.org/CVERecord?id=CVE-2023-4156 https://nvd.nist.gov/vuln/detail/CVE-2023-4156 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-4156.json",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "gawk",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "DLttSzeHzaVnO33nSnt80A==": {
      "id": "DLttSzeHzaVnO33nSnt80A==",
      "updater": "rhel-vex",
      "name": "CVE-2023-27538",
      "description": "An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse them for subsequent transfers if the configurations match. However, two SSH settings were omitted from the configuration check, allowing them to match easily, potentially leading to the reuse of an inappropriate connection.",
      "issued": "2023-03-20T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-27538 https://bugzilla.redhat.com/show_bug.cgi?id=2179103 https://www.cve.org/CVERecord?id=CVE-2023-27538 https://nvd.nist.gov/vuln/detail/CVE-2023-27538 https://curl.se/docs/CVE-2023-27538.html https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-27538.json https://access.redhat.com/errata/RHSA-2023:6679",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "curl-minimal",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:7.76.1-26.el9",
      "arch_op": "pattern match"
    },
    "Dmj+1Th9y/xKrHIFa6FtQA==": {
      "id": "Dmj+1Th9y/xKrHIFa6FtQA==",
      "updater": "rhel-vex",
      "name": "CVE-2021-35939",
      "description": "It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
      "issued": "2021-06-30T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2021-35939 https://bugzilla.redhat.com/show_bug.cgi?id=1964129 https://www.cve.org/CVERecord?id=CVE-2021-35939 https://nvd.nist.gov/vuln/detail/CVE-2021-35939 https://rpm.org/wiki/Releases/4.18.0 https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-35939.json https://access.redhat.com/errata/RHSA-2024:0463",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "rpm-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:4.16.1.3-27.el9_3",
      "arch_op": "pattern match"
    },
    "Dx77Vhdnp5MtAgyIT881TQ==": {
      "id": "Dx77Vhdnp5MtAgyIT881TQ==",
      "updater": "rhel-vex",
      "name": "CVE-2024-26458",
      "description": "A memory leak flaw was found in krb5 in /krb5/src/lib/rpc/pmap_rmt.c. This issue can lead to a denial of service through memory exhaustion.",
      "issued": "2024-02-28T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-26458 https://bugzilla.redhat.com/show_bug.cgi?id=2266731 https://www.cve.org/CVERecord?id=CVE-2024-26458 https://nvd.nist.gov/vuln/detail/CVE-2024-26458 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-26458.json https://access.redhat.com/errata/RHSA-2024:9331",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "krb5-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:1.21.1-3.el9",
      "arch_op": "pattern match"
    },
    "EdSmJzT79gNsCaz3hmp+zw==": {
      "id": "EdSmJzT79gNsCaz3hmp+zw==",
      "updater": "rhel-vex",
      "name": "CVE-2023-27534",
      "description": "A path traversal vulnerability exists in curl \u003c8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can exploit this flaw to bypass filtering or execute arbitrary code by crafting a path like /~2/foo while accessing a server with a specific user.",
      "issued": "2023-03-20T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-27534 https://bugzilla.redhat.com/show_bug.cgi?id=2179069 https://www.cve.org/CVERecord?id=CVE-2023-27534 https://nvd.nist.gov/vuln/detail/CVE-2023-27534 https://curl.se/docs/CVE-2023-27534.html https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-27534.json https://access.redhat.com/errata/RHSA-2023:6679",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "libcurl-minimal",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:7.76.1-26.el9",
      "arch_op": "pattern match"
    },
    "EfJQ14qFSb1S0rB4VJRXzg==": {
      "id": "EfJQ14qFSb1S0rB4VJRXzg==",
      "updater": "rhel-vex",
      "name": "CVE-2022-48554",
      "description": "A flaw was found in file, a program used to identify a particular file according to the type of data contained by the file. This issue occurs when processing a specially crafted file, causing a stack-based buffer over-read, resulting in an application crash.",
      "issued": "2022-01-21T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2022-48554 https://bugzilla.redhat.com/show_bug.cgi?id=2235714 https://www.cve.org/CVERecord?id=CVE-2022-48554 https://nvd.nist.gov/vuln/detail/CVE-2022-48554 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48554.json https://access.redhat.com/errata/RHSA-2024:2512",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "file-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:5.39-16.el9",
      "arch_op": "pattern match"
    },
    "EoQrZ5N7i4JBUoj0xAeL3Q==": {
      "id": "EoQrZ5N7i4JBUoj0xAeL3Q==",
      "updater": "rhel-vex",
      "name": "CVE-2023-4806",
      "description": "A flaw was found in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags.",
      "issued": "2023-09-12T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-4806 https://bugzilla.redhat.com/show_bug.cgi?id=2237782 https://www.cve.org/CVERecord?id=CVE-2023-4806 https://nvd.nist.gov/vuln/detail/CVE-2023-4806 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-4806.json https://access.redhat.com/errata/RHBA-2024:2413",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glibc",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9",
      "arch_op": "pattern match"
    },
    "F/E7m2THTaTl0s46g5J9Qw==": {
      "id": "F/E7m2THTaTl0s46g5J9Qw==",
      "updater": "rhel-vex",
      "name": "CVE-2023-46218",
      "description": "A flaw was found in curl that verifies a given cookie domain against the Public Suffix List. This issue could allow a malicious HTTP server to set \"super cookies\" in curl that are passed back to more origins than what is otherwise allowed or possible.",
      "issued": "2023-12-06T07:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-46218 https://bugzilla.redhat.com/show_bug.cgi?id=2252030 https://www.cve.org/CVERecord?id=CVE-2023-46218 https://nvd.nist.gov/vuln/detail/CVE-2023-46218 https://curl.se/docs/CVE-2023-46218.html https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-46218.json https://access.redhat.com/errata/RHSA-2024:1129",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "curl-minimal",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:7.76.1-26.el9_3.3",
      "arch_op": "pattern match"
    },
    "F6QBkHsQuDYkHPuVPox4pw==": {
      "id": "F6QBkHsQuDYkHPuVPox4pw==",
      "updater": "rhel-vex",
      "name": "CVE-2023-46218",
      "description": "A flaw was found in curl that verifies a given cookie domain against the Public Suffix List. This issue could allow a malicious HTTP server to set \"super cookies\" in curl that are passed back to more origins than what is otherwise allowed or possible.",
      "issued": "2023-12-06T07:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-46218 https://bugzilla.redhat.com/show_bug.cgi?id=2252030 https://www.cve.org/CVERecord?id=CVE-2023-46218 https://nvd.nist.gov/vuln/detail/CVE-2023-46218 https://curl.se/docs/CVE-2023-46218.html https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-46218.json https://access.redhat.com/errata/RHSA-2024:1129",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "libcurl-minimal",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:7.76.1-26.el9_3.3",
      "arch_op": "pattern match"
    },
    "FE/mnRiATGHgivPxG+13dw==": {
      "id": "FE/mnRiATGHgivPxG+13dw==",
      "updater": "rhel-vex",
      "name": "CVE-2025-6170",
      "description": "A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare configurations without modern protections.",
      "issued": "2025-06-16T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-6170 https://bugzilla.redhat.com/show_bug.cgi?id=2372952 https://www.cve.org/CVERecord?id=CVE-2025-6170 https://nvd.nist.gov/vuln/detail/CVE-2025-6170 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-6170.json",
      "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "libxml2",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "FL8qoTgXQjuCQf4vtGJ2JA==": {
      "id": "FL8qoTgXQjuCQf4vtGJ2JA==",
      "updater": "rhel-vex",
      "name": "CVE-2023-38545",
      "description": "A heap-based buffer overflow flaw was found in the SOCKS5 proxy handshake in the Curl package. If Curl is unable to resolve the address itself, it passes the hostname to the SOCKS5 proxy. However, the maximum length of the hostname that can be passed is 255 bytes. If the hostname is longer, then Curl switches to the local name resolving and passes the resolved address only to the proxy. The local variable that instructs Curl to \"let the host resolve the name\" could obtain the wrong value during a slow SOCKS5 handshake, resulting in the too-long hostname being copied to the target buffer instead of the resolved address, which was not the intended behavior.",
      "issued": "2023-10-11T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-38545 https://bugzilla.redhat.com/show_bug.cgi?id=2241933 https://www.cve.org/CVERecord?id=CVE-2023-38545 https://nvd.nist.gov/vuln/detail/CVE-2023-38545 https://curl.se/docs/CVE-2023-38545.html https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-38545.json https://access.redhat.com/errata/RHSA-2023:6745",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "curl-minimal",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:7.76.1-26.el9_3.2",
      "arch_op": "pattern match"
    },
    "FdHZNK1wtI6/xHHLNOjd7w==": {
      "id": "FdHZNK1wtI6/xHHLNOjd7w==",
      "updater": "rhel-vex",
      "name": "CVE-2024-0567",
      "description": "A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.",
      "issued": "2024-01-16T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-0567 https://bugzilla.redhat.com/show_bug.cgi?id=2258544 https://www.cve.org/CVERecord?id=CVE-2024-0567 https://nvd.nist.gov/vuln/detail/CVE-2024-0567 https://gitlab.com/gnutls/gnutls/-/issues/1521 https://lists.gnupg.org/pipermail/gnutls-help/2024-January/004841.html https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-0567.json https://access.redhat.com/errata/RHSA-2024:0533",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "gnutls",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:3.7.6-23.el9_3.3",
      "arch_op": "pattern match"
    },
    "GAn7gWUe2pFr7PbwechqxA==": {
      "id": "GAn7gWUe2pFr7PbwechqxA==",
      "updater": "rhel-vex",
      "name": "CVE-2025-30258",
      "description": "A flaw was found in GnuPG. In affected versions, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, leading to a verification denial of service.",
      "issued": "2025-03-19T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-30258 https://bugzilla.redhat.com/show_bug.cgi?id=2353427 https://www.cve.org/CVERecord?id=CVE-2025-30258 https://nvd.nist.gov/vuln/detail/CVE-2025-30258 https://dev.gnupg.org/T7527 https://dev.gnupg.org/rG48978ccb4e20866472ef18436a32744350a65158 https://lists.gnupg.org/pipermail/gnupg-announce/2025q1/000491.html https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-30258.json",
      "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "gnupg2",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "GklzFsX1Kbjw7XUdLCRFCA==": {
      "id": "GklzFsX1Kbjw7XUdLCRFCA==",
      "updater": "rhel-vex",
      "name": "CVE-2024-25062",
      "description": "A use-after-free flaw was found in libxml2. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.",
      "issued": "2024-02-04T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-25062 https://bugzilla.redhat.com/show_bug.cgi?id=2262726 https://www.cve.org/CVERecord?id=CVE-2024-25062 https://nvd.nist.gov/vuln/detail/CVE-2024-25062 https://gitlab.gnome.org/GNOME/libxml2/-/issues/604 https://gitlab.gnome.org/GNOME/libxml2/-/tags https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-25062.json https://access.redhat.com/errata/RHSA-2024:2679",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "libxml2",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.9.13-6.el9_4",
      "arch_op": "pattern match"
    },
    "Gt1/7zqpYq3ilRksfYs0Fw==": {
      "id": "Gt1/7zqpYq3ilRksfYs0Fw==",
      "updater": "rhel-vex",
      "name": "CVE-2024-12797",
      "description": "A flaw was found in OpenSSL's RFC7250 Raw Public Key (RPK) authentication. This vulnerability allows man-in-the-middle (MITM) attacks via failure to abort TLS/DTLS handshakes when the server's RPK does not match the expected key despite the SSL_VERIFY_PEER verification mode being set.",
      "issued": "2025-02-11T15:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-12797 https://bugzilla.redhat.com/show_bug.cgi?id=2342757 https://www.cve.org/CVERecord?id=CVE-2024-12797 https://nvd.nist.gov/vuln/detail/CVE-2024-12797 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-12797.json https://access.redhat.com/errata/RHSA-2025:1330",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "openssl-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "1:3.2.2-6.el9_5.1",
      "arch_op": "pattern match"
    },
    "HxI42iSjURjRki+uV6q/9w==": {
      "id": "HxI42iSjURjRki+uV6q/9w==",
      "updater": "rhel-vex",
      "name": "CVE-2024-0232",
      "description": "A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash and leading to a denial of service.",
      "issued": "2023-10-12T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-0232 https://bugzilla.redhat.com/show_bug.cgi?id=2243754 https://www.cve.org/CVERecord?id=CVE-2024-0232 https://nvd.nist.gov/vuln/detail/CVE-2024-0232 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-0232.json",
      "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "sqlite",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "I6USarzQiNF0WDmxnwYl6Q==": {
      "id": "I6USarzQiNF0WDmxnwYl6Q==",
      "updater": "rhel-vex",
      "name": "CVE-2024-0553",
      "description": "A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange, potentially leading to the leakage of sensitive data. CVE-2024-0553 is designated as an incomplete resolution for CVE-2023-5981.",
      "issued": "2024-01-16T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-0553 https://bugzilla.redhat.com/show_bug.cgi?id=2258412 https://www.cve.org/CVERecord?id=CVE-2024-0553 https://nvd.nist.gov/vuln/detail/CVE-2024-0553 https://gitlab.com/gnutls/gnutls/-/issues/1522 https://lists.gnupg.org/pipermail/gnutls-help/2024-January/004841.html https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-0553.json https://access.redhat.com/errata/RHSA-2024:0533",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "gnutls",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:3.7.6-23.el9_3.3",
      "arch_op": "pattern match"
    },
    "InyvNMAfT1Zl5TKOPF5zkw==": {
      "id": "InyvNMAfT1Zl5TKOPF5zkw==",
      "updater": "rhel-vex",
      "name": "CVE-2025-49796",
      "description": "A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that can lead libxml to crash, resulting in a denial of service or other possible undefined behavior due to sensitive data being corrupted in memory.",
      "issued": "2025-06-11T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-49796 https://bugzilla.redhat.com/show_bug.cgi?id=2372385 https://www.cve.org/CVERecord?id=CVE-2025-49796 https://nvd.nist.gov/vuln/detail/CVE-2025-49796 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-49796.json",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "libxml2",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "IpfgPSRwb+bSNtOR59K02g==": {
      "id": "IpfgPSRwb+bSNtOR59K02g==",
      "updater": "rhel-vex",
      "name": "CVE-2020-11023",
      "description": "A flaw was found in jQuery. HTML containing \\\u003coption\\\u003e elements from untrusted sources are passed, even after sanitizing, to one of jQuery's DOM manipulation methods, which may execute untrusted code. The highest threat from this vulnerability is to data confidentiality and integrity.",
      "issued": "2020-04-29T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2020-11023 https://bugzilla.redhat.com/show_bug.cgi?id=1850004 https://www.cve.org/CVERecord?id=CVE-2020-11023 https://nvd.nist.gov/vuln/detail/CVE-2020-11023 https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/ https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://security.access.redhat.com/data/csaf/v2/vex/2020/cve-2020-11023.json https://access.redhat.com/errata/RHSA-2025:1346",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "libgcc",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:11.5.0-5.el9_5",
      "arch_op": "pattern match"
    },
    "J4b5dVoVJ6TOvSQqt+geLg==": {
      "id": "J4b5dVoVJ6TOvSQqt+geLg==",
      "updater": "rhel-vex",
      "name": "CVE-2023-27538",
      "description": "An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse them for subsequent transfers if the configurations match. However, two SSH settings were omitted from the configuration check, allowing them to match easily, potentially leading to the reuse of an inappropriate connection.",
      "issued": "2023-03-20T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-27538 https://bugzilla.redhat.com/show_bug.cgi?id=2179103 https://www.cve.org/CVERecord?id=CVE-2023-27538 https://nvd.nist.gov/vuln/detail/CVE-2023-27538 https://curl.se/docs/CVE-2023-27538.html https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-27538.json https://access.redhat.com/errata/RHSA-2023:6679",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "libcurl-minimal",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:7.76.1-26.el9",
      "arch_op": "pattern match"
    },
    "JNF5Te1xcV1nlv2CXSyRdg==": {
      "id": "JNF5Te1xcV1nlv2CXSyRdg==",
      "updater": "rhel-vex",
      "name": "CVE-2024-33599",
      "description": "A stack-based buffer overflow flaw was found in the glibc netgroup cache. In certain conditions, its possible to trigger a stack-based buffer overflow condition that can lead to a denial of service and potentially other malicious actions that impact confidentiality and integrity.",
      "issued": "2024-04-23T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-33599 https://bugzilla.redhat.com/show_bug.cgi?id=2277202 https://www.cve.org/CVERecord?id=CVE-2024-33599 https://nvd.nist.gov/vuln/detail/CVE-2024-33599 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-33599.json https://access.redhat.com/errata/RHSA-2024:3339",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "glibc",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9_4.2",
      "arch_op": "pattern match"
    },
    "JSxIEGIOCwboUDoJZgS9fA==": {
      "id": "JSxIEGIOCwboUDoJZgS9fA==",
      "updater": "rhel-vex",
      "name": "CVE-2023-37920",
      "description": "A flaw was found in the python-certifi package. This issue occurs when the e-Tugra root certificate in Certifi is removed, resulting in an unspecified error that has an unknown impact and attack vector.",
      "issued": "2023-07-25T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-37920 https://bugzilla.redhat.com/show_bug.cgi?id=2226586 https://www.cve.org/CVERecord?id=CVE-2023-37920 https://nvd.nist.gov/vuln/detail/CVE-2023-37920 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-37920.json https://access.redhat.com/errata/RHBA-2024:5691",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "ca-certificates",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "noarch|src",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2024.2.69_v8.0.303-91.4.el9_4",
      "arch_op": "pattern match"
    },
    "JlVcDBeAbzDMosineu4gZQ==": {
      "id": "JlVcDBeAbzDMosineu4gZQ==",
      "updater": "rhel-vex",
      "name": "CVE-2025-0395",
      "description": "A flaw was found in the GNU C Library (glibc). A buffer overflow condition via the `assert()` function may be triggered due to glibc not allocating enough space for the assertion failure message string and size information. In certain conditions, a local attacker can exploit this, potentially leading to an application crash or other undefined behavior.",
      "issued": "2025-01-22T13:11:30Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-0395 https://bugzilla.redhat.com/show_bug.cgi?id=2339460 https://www.cve.org/CVERecord?id=CVE-2025-0395 https://nvd.nist.gov/vuln/detail/CVE-2025-0395 https://sourceware.org/bugzilla/show_bug.cgi?id=32582 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-0395.json https://access.redhat.com/errata/RHSA-2025:4244",
      "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glibc",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-125.el9_5.8",
      "arch_op": "pattern match"
    },
    "K3j3nYCvhPD02WXNRIsNow==": {
      "id": "K3j3nYCvhPD02WXNRIsNow==",
      "updater": "rhel-vex",
      "name": "CVE-2023-27533",
      "description": "A vulnerability in input validation exists in curl \u003c8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and \"telnet options\" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform option negotiation without the application's intent. This vulnerability could be exploited if an application allows user input, thereby enabling attackers to execute arbitrary code on the system.",
      "issued": "2023-03-20T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-27533 https://bugzilla.redhat.com/show_bug.cgi?id=2179062 https://www.cve.org/CVERecord?id=CVE-2023-27533 https://nvd.nist.gov/vuln/detail/CVE-2023-27533 https://curl.se/docs/CVE-2023-27533.html https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-27533.json https://access.redhat.com/errata/RHSA-2023:6679",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "libcurl-minimal",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:7.76.1-26.el9",
      "arch_op": "pattern match"
    },
    "KcLk8c2v0kqHAbhhwfgdpA==": {
      "id": "KcLk8c2v0kqHAbhhwfgdpA==",
      "updater": "rhel-vex",
      "name": "CVE-2024-2511",
      "description": "A flaw was found in OpenSSL. A malicious client can trigger an uncontrolled memory consumption, resulting in a Denial of Service. This issue occurs due to OpenSSL's TLSv1.3 session cache going into an incorrect state, leading to it failing to flush properly as it fills. OpenSSL must be configured with the non-default SSL_OP_NO_TICKET option enabled to be vulnerable. This issue only affects TLSv1.3 servers, while TLS clients are not affected.",
      "issued": "2024-04-08T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-2511 https://bugzilla.redhat.com/show_bug.cgi?id=2274020 https://www.cve.org/CVERecord?id=CVE-2024-2511 https://nvd.nist.gov/vuln/detail/CVE-2024-2511 https://www.openssl.org/news/vulnerabilities.html https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-2511.json https://access.redhat.com/errata/RHSA-2024:9333",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "openssl-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "1:3.2.2-6.el9_5",
      "arch_op": "pattern match"
    },
    "Kqq2xlybjD/tOLmQWu2xPw==": {
      "id": "Kqq2xlybjD/tOLmQWu2xPw==",
      "updater": "rhel-vex",
      "name": "CVE-2025-5918",
      "description": "A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended consequences, including unpredictable program behavior, memory corruption, or a denial-of-service condition.",
      "issued": "2025-05-20T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-5918 https://bugzilla.redhat.com/show_bug.cgi?id=2370877 https://www.cve.org/CVERecord?id=CVE-2025-5918 https://nvd.nist.gov/vuln/detail/CVE-2025-5918 https://github.com/libarchive/libarchive/pull/2584 https://github.com/libarchive/libarchive/releases/tag/v3.8.0 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-5918.json",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "libarchive",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "Ku0iCN64UKn/F7rmu3Ggjg==": {
      "id": "Ku0iCN64UKn/F7rmu3Ggjg==",
      "updater": "rhel-vex",
      "name": "CVE-2025-25724",
      "description": "A flaw was found in the libarchive package. Affected versions of libarchive do not check a strftime return value, which can lead to a denial of service or unspecified other impacts via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.",
      "issued": "2025-03-02T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-25724 https://bugzilla.redhat.com/show_bug.cgi?id=2349221 https://www.cve.org/CVERecord?id=CVE-2025-25724 https://nvd.nist.gov/vuln/detail/CVE-2025-25724 https://gist.github.com/Ekkosun/a83870ce7f3b7813b9b462a395e8ad92 https://github.com/Ekkosun/pocs/blob/main/bsdtarbug https://github.com/libarchive/libarchive/blob/b439d586f53911c84be5e380445a8a259e19114c/tar/util.c#L751-L752 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-25724.json",
      "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "libarchive",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "KwrizcJTvx0lAr8NWSRHvQ==": {
      "id": "KwrizcJTvx0lAr8NWSRHvQ==",
      "updater": "rhel-vex",
      "name": "CVE-2023-39615",
      "description": "A flaw was found in Libxml2, where it contains a global buffer overflow via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a denial of service (DoS) by supplying a crafted XML file.",
      "issued": "2023-08-29T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-39615 https://bugzilla.redhat.com/show_bug.cgi?id=2235864 https://www.cve.org/CVERecord?id=CVE-2023-39615 https://nvd.nist.gov/vuln/detail/CVE-2023-39615 https://gitlab.gnome.org/GNOME/libxml2/-/issues/535 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-39615.json https://access.redhat.com/errata/RHSA-2023:7747",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "libxml2",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.9.13-5.el9_3",
      "arch_op": "pattern match"
    },
    "L2MoZbVdo8+qepBivoAPsQ==": {
      "id": "L2MoZbVdo8+qepBivoAPsQ==",
      "updater": "rhel-vex",
      "name": "CVE-2023-36054",
      "description": "A vulnerability was found in the _xdr_kadm5_principal_ent_rec() function in lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (krb5). This issue occurs due to lack of validation in the relationship between n_key_data and the key_data array count, leading to the freeing of uninitialized pointers. This may allow a remote authenticated attacker to send a specially crafted request that causes the kadmind process to crash, resulting in a denial of service (DoS).",
      "issued": "2023-08-07T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-36054 https://bugzilla.redhat.com/show_bug.cgi?id=2230178 https://www.cve.org/CVERecord?id=CVE-2023-36054 https://nvd.nist.gov/vuln/detail/CVE-2023-36054 https://github.com/krb5/krb5/commit/ef08b09c9459551aabbe7924fb176f1583053cdd https://github.com/krb5/krb5/compare/krb5-1.20.1-final...krb5-1.20.2-final https://github.com/krb5/krb5/compare/krb5-1.21-final...krb5-1.21.1-final https://web.mit.edu/kerberos/www/advisories/ https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-36054.json https://access.redhat.com/errata/RHSA-2023:6699",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "krb5-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:1.21.1-1.el9",
      "arch_op": "pattern match"
    },
    "M3U4dY4DNzzwTtzYkhXUMA==": {
      "id": "M3U4dY4DNzzwTtzYkhXUMA==",
      "updater": "rhel-vex",
      "name": "CVE-2023-27534",
      "description": "A path traversal vulnerability exists in curl \u003c8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can exploit this flaw to bypass filtering or execute arbitrary code by crafting a path like /~2/foo while accessing a server with a specific user.",
      "issued": "2023-03-20T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-27534 https://bugzilla.redhat.com/show_bug.cgi?id=2179069 https://www.cve.org/CVERecord?id=CVE-2023-27534 https://nvd.nist.gov/vuln/detail/CVE-2023-27534 https://curl.se/docs/CVE-2023-27534.html https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-27534.json https://access.redhat.com/errata/RHSA-2023:6679",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "curl-minimal",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:7.76.1-26.el9",
      "arch_op": "pattern match"
    },
    "M9ekoeOzelYJSf4p5TpoJg==": {
      "id": "M9ekoeOzelYJSf4p5TpoJg==",
      "updater": "rhel-vex",
      "name": "CVE-2025-0395",
      "description": "A flaw was found in the GNU C Library (glibc). A buffer overflow condition via the `assert()` function may be triggered due to glibc not allocating enough space for the assertion failure message string and size information. In certain conditions, a local attacker can exploit this, potentially leading to an application crash or other undefined behavior.",
      "issued": "2025-01-22T13:11:30Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-0395 https://bugzilla.redhat.com/show_bug.cgi?id=2339460 https://www.cve.org/CVERecord?id=CVE-2025-0395 https://nvd.nist.gov/vuln/detail/CVE-2025-0395 https://sourceware.org/bugzilla/show_bug.cgi?id=32582 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-0395.json https://access.redhat.com/errata/RHSA-2025:4244",
      "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glibc-common",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-125.el9_5.8",
      "arch_op": "pattern match"
    },
    "Mg8SgrJU+lTo8Y3PGUgkTA==": {
      "id": "Mg8SgrJU+lTo8Y3PGUgkTA==",
      "updater": "rhel-vex",
      "name": "CVE-2023-6129",
      "description": "A flaw was found in in the POLY1305 MAC (message authentication code) implementation in OpenSSL, affecting applications running on PowerPC CPU-based platforms that utilize vector instructions, and has the potential to corrupt the internal state of these applications. If an attacker can manipulate the utilization of the POLY1305 MAC algorithm, it may lead to the corruption of the application state, resulting in various application-dependent consequences, often resulting in a crash and leading to a denial of service.",
      "issued": "2024-01-09T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-6129 https://bugzilla.redhat.com/show_bug.cgi?id=2257571 https://www.cve.org/CVERecord?id=CVE-2023-6129 https://nvd.nist.gov/vuln/detail/CVE-2023-6129 https://www.openssl.org/news/secadv/20240109.txt https://www.openwall.com/lists/oss-security/2024/01/09/1 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-6129.json https://access.redhat.com/errata/RHSA-2024:2447",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "openssl-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "1:3.0.7-27.el9",
      "arch_op": "pattern match"
    },
    "NETfvu2mgbpmZZcrjbxOYg==": {
      "id": "NETfvu2mgbpmZZcrjbxOYg==",
      "updater": "rhel-vex",
      "name": "CVE-2023-27533",
      "description": "A vulnerability in input validation exists in curl \u003c8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and \"telnet options\" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform option negotiation without the application's intent. This vulnerability could be exploited if an application allows user input, thereby enabling attackers to execute arbitrary code on the system.",
      "issued": "2023-03-20T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-27533 https://bugzilla.redhat.com/show_bug.cgi?id=2179062 https://www.cve.org/CVERecord?id=CVE-2023-27533 https://nvd.nist.gov/vuln/detail/CVE-2023-27533 https://curl.se/docs/CVE-2023-27533.html https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-27533.json https://access.redhat.com/errata/RHSA-2023:6679",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "curl-minimal",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:7.76.1-26.el9",
      "arch_op": "pattern match"
    },
    "NHVF8uSdIs3qjmJ3d32Guw==": {
      "id": "NHVF8uSdIs3qjmJ3d32Guw==",
      "updater": "rhel-vex",
      "name": "CVE-2023-3446",
      "description": "A vulnerability was found in OpenSSL. This security flaw occurs because the applications that use the DH_check(), DH_check_ex(), or EVP_PKEY_param_check() functions to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source may lead to a denial of service.",
      "issued": "2023-07-19T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-3446 https://bugzilla.redhat.com/show_bug.cgi?id=2224962 https://www.cve.org/CVERecord?id=CVE-2023-3446 https://nvd.nist.gov/vuln/detail/CVE-2023-3446 https://www.openssl.org/news/secadv/20230719.txt https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-3446.json https://access.redhat.com/errata/RHSA-2024:2447",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "openssl-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "1:3.0.7-27.el9",
      "arch_op": "pattern match"
    },
    "NcPLoHAzsoXhM7GdshqtXA==": {
      "id": "NcPLoHAzsoXhM7GdshqtXA==",
      "updater": "rhel-vex",
      "name": "CVE-2024-12133",
      "description": "A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack.",
      "issued": "2025-02-10T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-12133 https://bugzilla.redhat.com/show_bug.cgi?id=2344611 https://www.cve.org/CVERecord?id=CVE-2024-12133 https://nvd.nist.gov/vuln/detail/CVE-2024-12133 https://gitlab.com/gnutls/libtasn1/-/issues/52 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-12133.json https://access.redhat.com/errata/RHSA-2025:7077",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "libtasn1",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:4.16.0-9.el9",
      "arch_op": "pattern match"
    },
    "NqnvbAJ9TE8i+K0jPU+gTA==": {
      "id": "NqnvbAJ9TE8i+K0jPU+gTA==",
      "updater": "rhel-vex",
      "name": "CVE-2023-27536",
      "description": "A flaw was found in the Curl package. Libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. However, the GSS delegation setting was left out from the configuration match checks, making them match too easily, affecting krb5/kerberos/negotiate/GSSAPI transfers.",
      "issued": "2023-03-20T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-27536 https://bugzilla.redhat.com/show_bug.cgi?id=2179092 https://www.cve.org/CVERecord?id=CVE-2023-27536 https://nvd.nist.gov/vuln/detail/CVE-2023-27536 https://curl.se/docs/CVE-2023-27536.html https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-27536.json https://access.redhat.com/errata/RHSA-2023:6679",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "libcurl-minimal",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:7.76.1-26.el9",
      "arch_op": "pattern match"
    },
    "NrmEp7ITzyyHtVTCw3MlhQ==": {
      "id": "NrmEp7ITzyyHtVTCw3MlhQ==",
      "updater": "rhel-vex",
      "name": "CVE-2024-0727",
      "description": "A flaw was found in OpenSSL. The optional ContentInfo fields can be set to null, even if the \"type\" is a valid value, which can lead to a null dereference error that may cause a denial of service.",
      "issued": "2024-01-22T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-0727 https://bugzilla.redhat.com/show_bug.cgi?id=2259944 https://www.cve.org/CVERecord?id=CVE-2024-0727 https://nvd.nist.gov/vuln/detail/CVE-2024-0727 https://github.com/openssl/openssl/pull/23362 https://www.openssl.org/news/secadv/20240125.txt https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-0727.json https://access.redhat.com/errata/RHSA-2024:2447",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "openssl-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "1:3.0.7-27.el9",
      "arch_op": "pattern match"
    },
    "O1JHrWWpvsl8fn/ssFRoQg==": {
      "id": "O1JHrWWpvsl8fn/ssFRoQg==",
      "updater": "rhel-vex",
      "name": "CVE-2024-2398",
      "description": "A flaw was found in curl. When an application configures libcurl to use HTTP/2 server push and the amount of received headers for the push surpasses the maximum allowed limit, libcurl aborts the server push. When aborting, libcurl does not free all the previously allocated headers, resulting in a memory leak.",
      "issued": "2024-03-27T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-2398 https://bugzilla.redhat.com/show_bug.cgi?id=2270498 https://www.cve.org/CVERecord?id=CVE-2024-2398 https://nvd.nist.gov/vuln/detail/CVE-2024-2398 https://curl.se/docs/CVE-2024-2398.html https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-2398.json https://access.redhat.com/errata/RHSA-2024:5529",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "curl-minimal",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:7.76.1-29.el9_4.1",
      "arch_op": "pattern match"
    },
    "O6K8wxAPcmLr8qOIbQ6uMA==": {
      "id": "O6K8wxAPcmLr8qOIbQ6uMA==",
      "updater": "rhel-vex",
      "name": "CVE-2024-0727",
      "description": "A flaw was found in OpenSSL. The optional ContentInfo fields can be set to null, even if the \"type\" is a valid value, which can lead to a null dereference error that may cause a denial of service.",
      "issued": "2024-01-22T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-0727 https://bugzilla.redhat.com/show_bug.cgi?id=2259944 https://www.cve.org/CVERecord?id=CVE-2024-0727 https://nvd.nist.gov/vuln/detail/CVE-2024-0727 https://github.com/openssl/openssl/pull/23362 https://www.openssl.org/news/secadv/20240125.txt https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-0727.json https://access.redhat.com/errata/RHSA-2024:2447",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "openssl-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "1:3.0.7-27.el9",
      "arch_op": "pattern match"
    },
    "OAFgQI0NLiTuwa5m3oeKvw==": {
      "id": "OAFgQI0NLiTuwa5m3oeKvw==",
      "updater": "rhel-vex",
      "name": "CVE-2019-12900",
      "description": "A data integrity error was found in the bzip2 (User-space package) functionality when decompressing. This issue occurs when a user decompresses a particular kind of .bz2 files. A local user could get unexpected results (or corrupted data) as result of decompressing these files.",
      "issued": "2024-11-15T10:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2019-12900 https://bugzilla.redhat.com/show_bug.cgi?id=2332075 https://www.cve.org/CVERecord?id=CVE-2019-12900 https://nvd.nist.gov/vuln/detail/CVE-2019-12900 https://security.access.redhat.com/data/csaf/v2/vex/2019/cve-2019-12900.json https://access.redhat.com/errata/RHSA-2025:0925",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "bzip2-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:1.0.8-10.el9_5",
      "arch_op": "pattern match"
    },
    "OELX0txDNvSSX5G8K8KlJg==": {
      "id": "OELX0txDNvSSX5G8K8KlJg==",
      "updater": "rhel-vex",
      "name": "CVE-2024-33601",
      "description": "A flaw was found in the glibc netgroup cache. The netgroup cache uses xmalloc/xrealloc and may terminate the process due to a memory allocation failure.",
      "issued": "2024-04-24T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-33601 https://bugzilla.redhat.com/show_bug.cgi?id=2277205 https://www.cve.org/CVERecord?id=CVE-2024-33601 https://nvd.nist.gov/vuln/detail/CVE-2024-33601 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-33601.json https://access.redhat.com/errata/RHSA-2024:3339",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "glibc-common",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9_4.2",
      "arch_op": "pattern match"
    },
    "OFIelSTGJAvnMHk6/6CzoA==": {
      "id": "OFIelSTGJAvnMHk6/6CzoA==",
      "updater": "rhel-vex",
      "name": "CVE-2025-32415",
      "description": "In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.",
      "issued": "2025-04-17T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-32415 https://bugzilla.redhat.com/show_bug.cgi?id=2360768 https://www.cve.org/CVERecord?id=CVE-2025-32415 https://nvd.nist.gov/vuln/detail/CVE-2025-32415 https://gitlab.gnome.org/GNOME/libxml2/-/issues/890 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-32415.json",
      "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "libxml2",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "OXQ7H2CaA5DhIn9wkh9zjA==": {
      "id": "OXQ7H2CaA5DhIn9wkh9zjA==",
      "updater": "rhel-vex",
      "name": "CVE-2023-5981",
      "description": "A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.",
      "issued": "2023-11-15T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-5981 https://bugzilla.redhat.com/show_bug.cgi?id=2248445 https://www.cve.org/CVERecord?id=CVE-2023-5981 https://nvd.nist.gov/vuln/detail/CVE-2023-5981 https://gnutls.org/security-new.html#GNUTLS-SA-2023-10-23 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-5981.json https://access.redhat.com/errata/RHSA-2024:0533",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "gnutls",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:3.7.6-23.el9_3.3",
      "arch_op": "pattern match"
    },
    "P3nYYaDmet+LJ8m5KZeEvw==": {
      "id": "P3nYYaDmet+LJ8m5KZeEvw==",
      "updater": "rhel-vex",
      "name": "CVE-2023-6237",
      "description": "A flaw was found in OpenSSL. When the EVP_PKEY_public_check() function is called in RSA public keys, a computation is done to confirm that the RSA modulus, n, is composite. For valid RSA keys, n is a product of two or more large primes and this computation completes quickly. However, if n is a large prime, this computation takes a long time. An application that calls EVP_PKEY_public_check() and supplies an RSA key obtained from an untrusted source could be vulnerable to a Denial of Service attack.",
      "issued": "2024-01-15T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-6237 https://bugzilla.redhat.com/show_bug.cgi?id=2258502 https://www.cve.org/CVERecord?id=CVE-2023-6237 https://nvd.nist.gov/vuln/detail/CVE-2023-6237 https://www.openssl.org/news/secadv/20240115.txt https://www.openwall.com/lists/oss-security/2024/01/15/2 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-6237.json https://access.redhat.com/errata/RHSA-2024:2447",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "openssl-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "1:3.0.7-27.el9",
      "arch_op": "pattern match"
    },
    "P9a8nTOFDYbTUSMNt0VDfg==": {
      "id": "P9a8nTOFDYbTUSMNt0VDfg==",
      "updater": "rhel-vex",
      "name": "CVE-2023-45918",
      "description": "A flaw was found in ncurses. Affected versions of this package contain a NULL pointer dereference in tgetstr in tinfo/lib_termcap.c.",
      "issued": "2024-01-26T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-45918 https://bugzilla.redhat.com/show_bug.cgi?id=2300290 https://www.cve.org/CVERecord?id=CVE-2023-45918 https://nvd.nist.gov/vuln/detail/CVE-2023-45918 https://lists.gnu.org/archive/html/bug-ncurses/2023-06/msg00005.html https://security.netapp.com/advisory/ntap-20240315-0006/ https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-45918.json",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "ncurses",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "PAUv+MU3xwsjx5jndGYXQA==": {
      "id": "PAUv+MU3xwsjx5jndGYXQA==",
      "updater": "rhel-vex",
      "name": "CVE-2024-37371",
      "description": "A vulnerability was found in the MIT Kerberos 5 GSS krb5 wrap token, where an attacker can modify the plaintext Extra Count field, causing the unwrapped token to appear truncated to the application, occurs when the attacker alters the token data during transmission which can lead to improper handling of authentication tokens.",
      "issued": "2024-06-27T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-37371 https://bugzilla.redhat.com/show_bug.cgi?id=2294676 https://www.cve.org/CVERecord?id=CVE-2024-37371 https://nvd.nist.gov/vuln/detail/CVE-2024-37371 https://web.mit.edu/kerberos/www/krb5-1.21/ https://www.oracle.com/security-alerts/cpujan2025.html#AppendixMSQL https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-37371.json https://access.redhat.com/errata/RHSA-2024:6166",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "krb5-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:1.21.1-2.el9_4",
      "arch_op": "pattern match"
    },
    "PT1sohtQtbutC5G9fp60Bw==": {
      "id": "PT1sohtQtbutC5G9fp60Bw==",
      "updater": "rhel-vex",
      "name": "CVE-2024-2511",
      "description": "A flaw was found in OpenSSL. A malicious client can trigger an uncontrolled memory consumption, resulting in a Denial of Service. This issue occurs due to OpenSSL's TLSv1.3 session cache going into an incorrect state, leading to it failing to flush properly as it fills. OpenSSL must be configured with the non-default SSL_OP_NO_TICKET option enabled to be vulnerable. This issue only affects TLSv1.3 servers, while TLS clients are not affected.",
      "issued": "2024-04-08T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-2511 https://bugzilla.redhat.com/show_bug.cgi?id=2274020 https://www.cve.org/CVERecord?id=CVE-2024-2511 https://nvd.nist.gov/vuln/detail/CVE-2024-2511 https://www.openssl.org/news/vulnerabilities.html https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-2511.json https://access.redhat.com/errata/RHSA-2024:9333",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "openssl-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "1:3.2.2-6.el9_5",
      "arch_op": "pattern match"
    },
    "Pza9Y2xtH9MChVMkZwgw2A==": {
      "id": "Pza9Y2xtH9MChVMkZwgw2A==",
      "updater": "rhel-vex",
      "name": "CVE-2024-7264",
      "description": "A flaw was found in libcurl, where libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If a syntactically incorrect field is given, the parser can use -1 for the length of the *time fraction*, leading to a `strlen()` performed on a pointer to a heap buffer area that is not purposely NULL terminated.",
      "issued": "2024-07-31T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-7264 https://bugzilla.redhat.com/show_bug.cgi?id=2301888 https://www.cve.org/CVERecord?id=CVE-2024-7264 https://nvd.nist.gov/vuln/detail/CVE-2024-7264 https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-7264.json",
      "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "curl",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "Q9ZepVg3erGzmkHdoohUTw==": {
      "id": "Q9ZepVg3erGzmkHdoohUTw==",
      "updater": "rhel-vex",
      "name": "CVE-2024-4741",
      "description": "A use-after-free vulnerability was found in OpenSSL. Calling the OpenSSL API SSL_free_buffers function may cause memory to be accessed that was previously freed in some situations.",
      "issued": "2024-05-28T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-4741 https://bugzilla.redhat.com/show_bug.cgi?id=2283757 https://www.cve.org/CVERecord?id=CVE-2024-4741 https://nvd.nist.gov/vuln/detail/CVE-2024-4741 https://www.openssl.org/news/secadv/20240528.txt https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-4741.json https://access.redhat.com/errata/RHSA-2024:9333",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "openssl-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "1:3.2.2-6.el9_5",
      "arch_op": "pattern match"
    },
    "RIB897UdZi2GShqV1cDBcw==": {
      "id": "RIB897UdZi2GShqV1cDBcw==",
      "updater": "rhel-vex",
      "name": "CVE-2023-38546",
      "description": "A flaw was found in the Curl package. This flaw allows an attacker to insert cookies into a running program using libcurl if the specific series of conditions are met.",
      "issued": "2023-10-11T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-38546 https://bugzilla.redhat.com/show_bug.cgi?id=2241938 https://access.redhat.com/errata/RHSA-2024:2101 https://www.cve.org/CVERecord?id=CVE-2023-38546 https://nvd.nist.gov/vuln/detail/CVE-2023-38546 https://curl.se/docs/CVE-2023-38546.html https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-38546.json https://access.redhat.com/errata/RHSA-2023:6745",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "libcurl-minimal",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:7.76.1-26.el9_3.2",
      "arch_op": "pattern match"
    },
    "RIwina92/O63CIQtdCj6Ug==": {
      "id": "RIwina92/O63CIQtdCj6Ug==",
      "updater": "rhel-vex",
      "name": "CVE-2023-44487",
      "description": "A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit.\r\n\r\nCVE-2023-39325 was assigned for the Rapid Reset Attack in the Go language packages.\r\n\r\nSecurity Bulletin\r\nhttps://access.redhat.com/security/vulnerabilities/RHSB-2023-003",
      "issued": "2023-10-10T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-44487 https://bugzilla.redhat.com/show_bug.cgi?id=2242803 https://access.redhat.com/security/vulnerabilities/RHSB-2023-003 https://www.cve.org/CVERecord?id=CVE-2023-44487 https://nvd.nist.gov/vuln/detail/CVE-2023-44487 https://github.com/dotnet/announcements/issues/277 https://pkg.go.dev/vuln/GO-2023-2102 https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487 https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/ https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-44487.json https://access.redhat.com/errata/RHSA-2023:6746",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "libnghttp2",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:1.43.0-5.el9_3.1",
      "arch_op": "pattern match"
    },
    "RTIOYNKa5k5ts9Kih1+7yw==": {
      "id": "RTIOYNKa5k5ts9Kih1+7yw==",
      "updater": "rhel-vex",
      "name": "CVE-2024-33600",
      "description": "A flaw was found in the glibc netgroup cache. After a failed cache insertion, addgetnetgrentX tries to send the non-existing response after the not-found header. This can lead to a null pointer dereference that causes a crash or exit.",
      "issued": "2024-04-24T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-33600 https://bugzilla.redhat.com/show_bug.cgi?id=2277204 https://www.cve.org/CVERecord?id=CVE-2024-33600 https://nvd.nist.gov/vuln/detail/CVE-2024-33600 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-33600.json https://access.redhat.com/errata/RHSA-2024:3339",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glibc-common",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9_4.2",
      "arch_op": "pattern match"
    },
    "RfP0HFLmxGH5ZWk1oGaF+A==": {
      "id": "RfP0HFLmxGH5ZWk1oGaF+A==",
      "updater": "rhel-vex",
      "name": "CVE-2024-26461",
      "description": "A memory leak flaw was found in krb5 in /krb5/src/lib/gssapi/krb5/k5sealv3.c. This issue can lead to a denial of service through memory exhaustion.",
      "issued": "2024-02-28T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-26461 https://bugzilla.redhat.com/show_bug.cgi?id=2266740 https://www.cve.org/CVERecord?id=CVE-2024-26461 https://nvd.nist.gov/vuln/detail/CVE-2024-26461 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-26461.json https://access.redhat.com/errata/RHSA-2024:9331",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "krb5-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:1.21.1-3.el9",
      "arch_op": "pattern match"
    },
    "RrbNEAZ+bJrZ+zzACvAjBw==": {
      "id": "RrbNEAZ+bJrZ+zzACvAjBw==",
      "updater": "rhel-vex",
      "name": "CVE-2023-27538",
      "description": "An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse them for subsequent transfers if the configurations match. However, two SSH settings were omitted from the configuration check, allowing them to match easily, potentially leading to the reuse of an inappropriate connection.",
      "issued": "2023-03-20T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-27538 https://bugzilla.redhat.com/show_bug.cgi?id=2179103 https://www.cve.org/CVERecord?id=CVE-2023-27538 https://nvd.nist.gov/vuln/detail/CVE-2023-27538 https://curl.se/docs/CVE-2023-27538.html https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-27538.json https://access.redhat.com/errata/RHSA-2023:6679",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "libcurl-minimal",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:7.76.1-26.el9",
      "arch_op": "pattern match"
    },
    "Rs2w9Uui+dW2Lg48Ml6jpw==": {
      "id": "Rs2w9Uui+dW2Lg48Ml6jpw==",
      "updater": "rhel-vex",
      "name": "CVE-2025-1632",
      "description": "A flaw was found in the bsdunzip utility of libarchive. In affected versions, a specially crafted file may trigger a null pointer dereference. This issue can lead to an application crash or other unexpected behavior.",
      "issued": "2025-02-24T13:31:08Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-1632 https://bugzilla.redhat.com/show_bug.cgi?id=2347309 https://www.cve.org/CVERecord?id=CVE-2025-1632 https://nvd.nist.gov/vuln/detail/CVE-2025-1632 https://github.com/Ekkosun/pocs/blob/main/bsdunzip-poc https://vuldb.com/?ctiid.296619 https://vuldb.com/?id.296619 https://vuldb.com/?submit.496460 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-1632.json",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "libarchive",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "RtSOg3g9DhQAy4EV/TL4ow==": {
      "id": "RtSOg3g9DhQAy4EV/TL4ow==",
      "updater": "rhel-vex",
      "name": "CVE-2025-4373",
      "description": "A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite.",
      "issued": "2025-05-06T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-4373 https://bugzilla.redhat.com/show_bug.cgi?id=2364265 https://www.cve.org/CVERecord?id=CVE-2025-4373 https://nvd.nist.gov/vuln/detail/CVE-2025-4373 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-4373.json",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glib2",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "S26cXHzIjCvMHy8DUlbXOg==": {
      "id": "S26cXHzIjCvMHy8DUlbXOg==",
      "updater": "rhel-vex",
      "name": "CVE-2024-33601",
      "description": "A flaw was found in the glibc netgroup cache. The netgroup cache uses xmalloc/xrealloc and may terminate the process due to a memory allocation failure.",
      "issued": "2024-04-24T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-33601 https://bugzilla.redhat.com/show_bug.cgi?id=2277205 https://www.cve.org/CVERecord?id=CVE-2024-33601 https://nvd.nist.gov/vuln/detail/CVE-2024-33601 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-33601.json https://access.redhat.com/errata/RHSA-2024:3339",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "glibc",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9_4.2",
      "arch_op": "pattern match"
    },
    "S3QNU6jy5TEnJU2t9h6F+A==": {
      "id": "S3QNU6jy5TEnJU2t9h6F+A==",
      "updater": "rhel-vex",
      "name": "CVE-2023-36054",
      "description": "A vulnerability was found in the _xdr_kadm5_principal_ent_rec() function in lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (krb5). This issue occurs due to lack of validation in the relationship between n_key_data and the key_data array count, leading to the freeing of uninitialized pointers. This may allow a remote authenticated attacker to send a specially crafted request that causes the kadmind process to crash, resulting in a denial of service (DoS).",
      "issued": "2023-08-07T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-36054 https://bugzilla.redhat.com/show_bug.cgi?id=2230178 https://www.cve.org/CVERecord?id=CVE-2023-36054 https://nvd.nist.gov/vuln/detail/CVE-2023-36054 https://github.com/krb5/krb5/commit/ef08b09c9459551aabbe7924fb176f1583053cdd https://github.com/krb5/krb5/compare/krb5-1.20.1-final...krb5-1.20.2-final https://github.com/krb5/krb5/compare/krb5-1.21-final...krb5-1.21.1-final https://web.mit.edu/kerberos/www/advisories/ https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-36054.json https://access.redhat.com/errata/RHSA-2023:6699",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "krb5-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:1.21.1-1.el9",
      "arch_op": "pattern match"
    },
    "S5Dzz9cigoJDCj8s5UcT0g==": {
      "id": "S5Dzz9cigoJDCj8s5UcT0g==",
      "updater": "rhel-vex",
      "name": "CVE-2022-41409",
      "description": "A flaw was found in PCRE2, where it is susceptible to an integer overflow vulnerability triggered by a negative repeat value in the pcre2test subject line that causes infinite looping. This flaw allows a remote attacker to pass specially crafted data to the application, initiating an integer overflow and executing a denial of service (DoS) attack.",
      "issued": "2023-07-18T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2022-41409 https://bugzilla.redhat.com/show_bug.cgi?id=2260814 https://www.cve.org/CVERecord?id=CVE-2022-41409 https://nvd.nist.gov/vuln/detail/CVE-2022-41409 https://github.com/PCRE2Project/pcre2/commit/94e1c001761373b7d9450768aa15d04c25547a35 https://github.com/PCRE2Project/pcre2/issues/141 https://github.com/advisories/GHSA-4qfx-v7wh-3q4j https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-41409.json",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "pcre2",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "S8k5xDZW6CKWQt5V5/wRBA==": {
      "id": "S8k5xDZW6CKWQt5V5/wRBA==",
      "updater": "rhel-vex",
      "name": "CVE-2023-38546",
      "description": "A flaw was found in the Curl package. This flaw allows an attacker to insert cookies into a running program using libcurl if the specific series of conditions are met.",
      "issued": "2023-10-11T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-38546 https://bugzilla.redhat.com/show_bug.cgi?id=2241938 https://access.redhat.com/errata/RHSA-2024:2101 https://www.cve.org/CVERecord?id=CVE-2023-38546 https://nvd.nist.gov/vuln/detail/CVE-2023-38546 https://curl.se/docs/CVE-2023-38546.html https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-38546.json https://access.redhat.com/errata/RHSA-2023:6745",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "curl-minimal",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:7.76.1-26.el9_3.2",
      "arch_op": "pattern match"
    },
    "SH6jsaECmWs0mj3SMlChWA==": {
      "id": "SH6jsaECmWs0mj3SMlChWA==",
      "updater": "rhel-vex",
      "name": "CVE-2025-5278",
      "description": "A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.",
      "issued": "2025-05-27T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-5278 https://bugzilla.redhat.com/show_bug.cgi?id=2368764 https://www.cve.org/CVERecord?id=CVE-2025-5278 https://nvd.nist.gov/vuln/detail/CVE-2025-5278 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-5278.json",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "coreutils",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "SPfe8rryClHnE6BuUSP4YA==": {
      "id": "SPfe8rryClHnE6BuUSP4YA==",
      "updater": "rhel-vex",
      "name": "CVE-2024-33601",
      "description": "A flaw was found in the glibc netgroup cache. The netgroup cache uses xmalloc/xrealloc and may terminate the process due to a memory allocation failure.",
      "issued": "2024-04-24T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-33601 https://bugzilla.redhat.com/show_bug.cgi?id=2277205 https://www.cve.org/CVERecord?id=CVE-2024-33601 https://nvd.nist.gov/vuln/detail/CVE-2024-33601 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-33601.json https://access.redhat.com/errata/RHSA-2024:3339",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "glibc-common",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9_4.2",
      "arch_op": "pattern match"
    },
    "Syx/gjnL4FVa+aLlI5iPYA==": {
      "id": "Syx/gjnL4FVa+aLlI5iPYA==",
      "updater": "rhel-vex",
      "name": "CVE-2024-33599",
      "description": "A stack-based buffer overflow flaw was found in the glibc netgroup cache. In certain conditions, its possible to trigger a stack-based buffer overflow condition that can lead to a denial of service and potentially other malicious actions that impact confidentiality and integrity.",
      "issued": "2024-04-23T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-33599 https://bugzilla.redhat.com/show_bug.cgi?id=2277202 https://www.cve.org/CVERecord?id=CVE-2024-33599 https://nvd.nist.gov/vuln/detail/CVE-2024-33599 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-33599.json https://access.redhat.com/errata/RHSA-2024:3339",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "glibc",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9_4.2",
      "arch_op": "pattern match"
    },
    "ThmcBPFcasOrE2B95BADjQ==": {
      "id": "ThmcBPFcasOrE2B95BADjQ==",
      "updater": "rhel-vex",
      "name": "CVE-2024-33600",
      "description": "A flaw was found in the glibc netgroup cache. After a failed cache insertion, addgetnetgrentX tries to send the non-existing response after the not-found header. This can lead to a null pointer dereference that causes a crash or exit.",
      "issued": "2024-04-24T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-33600 https://bugzilla.redhat.com/show_bug.cgi?id=2277204 https://www.cve.org/CVERecord?id=CVE-2024-33600 https://nvd.nist.gov/vuln/detail/CVE-2024-33600 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-33600.json https://access.redhat.com/errata/RHSA-2024:3339",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glibc",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9_4.2",
      "arch_op": "pattern match"
    },
    "Toocv9UWe2zbLkvuaDfUkA==": {
      "id": "Toocv9UWe2zbLkvuaDfUkA==",
      "updater": "rhel-vex",
      "name": "CVE-2023-27533",
      "description": "A vulnerability in input validation exists in curl \u003c8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and \"telnet options\" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform option negotiation without the application's intent. This vulnerability could be exploited if an application allows user input, thereby enabling attackers to execute arbitrary code on the system.",
      "issued": "2023-03-20T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-27533 https://bugzilla.redhat.com/show_bug.cgi?id=2179062 https://www.cve.org/CVERecord?id=CVE-2023-27533 https://nvd.nist.gov/vuln/detail/CVE-2023-27533 https://curl.se/docs/CVE-2023-27533.html https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-27533.json https://access.redhat.com/errata/RHSA-2023:6679",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "libcurl-minimal",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:7.76.1-26.el9",
      "arch_op": "pattern match"
    },
    "U6qBKCP/toaRYToALpEUAg==": {
      "id": "U6qBKCP/toaRYToALpEUAg==",
      "updater": "rhel-vex",
      "name": "CVE-2023-5678",
      "description": "A flaw was found in OpenSSL, which caused the generation or checking of long X9.42 DH keys or parameters to be much slower than expected. This issue could lead to a denial of service.",
      "issued": "2023-10-24T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-5678 https://bugzilla.redhat.com/show_bug.cgi?id=2248616 https://www.cve.org/CVERecord?id=CVE-2023-5678 https://nvd.nist.gov/vuln/detail/CVE-2023-5678 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6 https://www.openssl.org/news/secadv/20231106.txt https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-5678.json https://access.redhat.com/errata/RHSA-2024:2447",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "openssl-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "1:3.0.7-27.el9",
      "arch_op": "pattern match"
    },
    "UNpQq3W7NuU/YvxyKob7dQ==": {
      "id": "UNpQq3W7NuU/YvxyKob7dQ==",
      "updater": "rhel-vex",
      "name": "CVE-2021-35938",
      "description": "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
      "issued": "2021-06-30T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2021-35938 https://bugzilla.redhat.com/show_bug.cgi?id=1964114 https://www.cve.org/CVERecord?id=CVE-2021-35938 https://nvd.nist.gov/vuln/detail/CVE-2021-35938 https://rpm.org/wiki/Releases/4.18.0 https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-35938.json https://access.redhat.com/errata/RHSA-2024:0463",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "rpm-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:4.16.1.3-27.el9_3",
      "arch_op": "pattern match"
    },
    "UcmwUm0wHBjv37lXXIJfRw==": {
      "id": "UcmwUm0wHBjv37lXXIJfRw==",
      "updater": "rhel-vex",
      "name": "CVE-2025-4802",
      "description": "A flaw was found in the glibc library. A statically linked setuid binary that calls dlopen(), including internal dlopen() calls after setlocale() or calls to NSS functions such as getaddrinfo(), may incorrectly search LD_LIBRARY_PATH to determine which library to load, allowing a local attacker to load malicious shared libraries, escalate privileges and execute arbitrary code.",
      "issued": "2025-05-16T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-4802 https://bugzilla.redhat.com/show_bug.cgi?id=2367468 https://www.cve.org/CVERecord?id=CVE-2025-4802 https://nvd.nist.gov/vuln/detail/CVE-2025-4802 https://www.openwall.com/lists/oss-security/2025/05/16/7 https://www.openwall.com/lists/oss-security/2025/05/17/2 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-4802.json https://access.redhat.com/errata/RHSA-2025:8655",
      "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glibc-minimal-langpack",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-168.el9_6.19",
      "arch_op": "pattern match"
    },
    "VMq7c5UxVfK0QVgxJQyC8w==": {
      "id": "VMq7c5UxVfK0QVgxJQyC8w==",
      "updater": "rhel-vex",
      "name": "CVE-2024-6119",
      "description": "A flaw was found in OpenSSL. Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address resulting in abnormal termination of the application process.",
      "issued": "2024-09-04T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-6119 https://bugzilla.redhat.com/show_bug.cgi?id=2306158 https://www.cve.org/CVERecord?id=CVE-2024-6119 https://nvd.nist.gov/vuln/detail/CVE-2024-6119 https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-6119.json https://access.redhat.com/errata/RHSA-2024:6783",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "openssl-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "1:3.0.7-28.el9_4",
      "arch_op": "pattern match"
    },
    "VOg7AkFDBokEo83cvkABxg==": {
      "id": "VOg7AkFDBokEo83cvkABxg==",
      "updater": "rhel-vex",
      "name": "CVE-2024-33601",
      "description": "A flaw was found in the glibc netgroup cache. The netgroup cache uses xmalloc/xrealloc and may terminate the process due to a memory allocation failure.",
      "issued": "2024-04-24T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-33601 https://bugzilla.redhat.com/show_bug.cgi?id=2277205 https://www.cve.org/CVERecord?id=CVE-2024-33601 https://nvd.nist.gov/vuln/detail/CVE-2024-33601 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-33601.json https://access.redhat.com/errata/RHSA-2024:3339",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "glibc-minimal-langpack",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9_4.2",
      "arch_op": "pattern match"
    },
    "VTdtsdUTUm6LaoM4gIpvYw==": {
      "id": "VTdtsdUTUm6LaoM4gIpvYw==",
      "updater": "rhel-vex",
      "name": "CVE-2022-49043",
      "description": "A flaw was found in libxml2 where improper handling of memory allocation failures in `libxml2` can lead to crashes, memory leaks, or inconsistent states. While an attacker cannot directly control allocation failures, they may trigger denial-of-service conditions under extreme system stress.",
      "issued": "2025-01-26T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2022-49043 https://bugzilla.redhat.com/show_bug.cgi?id=2342118 https://www.cve.org/CVERecord?id=CVE-2022-49043 https://nvd.nist.gov/vuln/detail/CVE-2022-49043 https://github.com/php/php-src/issues/17467 https://gitlab.gnome.org/GNOME/libxml2/-/commit/5a19e21605398cef6a8b1452477a8705cb41562b https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-49043.json https://access.redhat.com/errata/RHSA-2025:1350",
      "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "libxml2",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.9.13-6.el9_5.1",
      "arch_op": "pattern match"
    },
    "VWEbeFnFOHy1IkG21b5a5g==": {
      "id": "VWEbeFnFOHy1IkG21b5a5g==",
      "updater": "rhel-vex",
      "name": "CVE-2023-30571",
      "description": "A vulnerability was found in libarchive. This issue can cause a race condition in a multi-threaded use of archive_write_disk_header() on posix based systems, which could allow implicit directory creation with permissions 777, without sticky bit, which means any low privileged user on the system can delete and rename files inside those directories.",
      "issued": "2023-05-29T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-30571 https://bugzilla.redhat.com/show_bug.cgi?id=2210921 https://www.cve.org/CVERecord?id=CVE-2023-30571 https://nvd.nist.gov/vuln/detail/CVE-2023-30571 https://access.redhat.com/solutions/7033331 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-30571.json",
      "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "libarchive",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "W9IBxWrtUMKgo5IOhKlFMw==": {
      "id": "W9IBxWrtUMKgo5IOhKlFMw==",
      "updater": "rhel-vex",
      "name": "CVE-2024-33599",
      "description": "A stack-based buffer overflow flaw was found in the glibc netgroup cache. In certain conditions, its possible to trigger a stack-based buffer overflow condition that can lead to a denial of service and potentially other malicious actions that impact confidentiality and integrity.",
      "issued": "2024-04-23T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-33599 https://bugzilla.redhat.com/show_bug.cgi?id=2277202 https://www.cve.org/CVERecord?id=CVE-2024-33599 https://nvd.nist.gov/vuln/detail/CVE-2024-33599 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-33599.json https://access.redhat.com/errata/RHSA-2024:3339",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "glibc-common",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9_4.2",
      "arch_op": "pattern match"
    },
    "Wz8kfsjiUN7loN7RE4toRg==": {
      "id": "Wz8kfsjiUN7loN7RE4toRg==",
      "updater": "rhel-vex",
      "name": "CVE-2024-33600",
      "description": "A flaw was found in the glibc netgroup cache. After a failed cache insertion, addgetnetgrentX tries to send the non-existing response after the not-found header. This can lead to a null pointer dereference that causes a crash or exit.",
      "issued": "2024-04-24T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-33600 https://bugzilla.redhat.com/show_bug.cgi?id=2277204 https://www.cve.org/CVERecord?id=CVE-2024-33600 https://nvd.nist.gov/vuln/detail/CVE-2024-33600 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-33600.json https://access.redhat.com/errata/RHSA-2024:3339",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glibc-minimal-langpack",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9_4.2",
      "arch_op": "pattern match"
    },
    "X0yRty1CAF/BkqF0tnfBQQ==": {
      "id": "X0yRty1CAF/BkqF0tnfBQQ==",
      "updater": "rhel-vex",
      "name": "CVE-2023-32611",
      "description": "A flaw was found in GLib. GVariant deserialization is vulnerable to a slowdown issue where a crafted GVariant can cause excessive processing, leading to denial of service.",
      "issued": "2022-12-14T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-32611 https://bugzilla.redhat.com/show_bug.cgi?id=2211829 https://www.cve.org/CVERecord?id=CVE-2023-32611 https://nvd.nist.gov/vuln/detail/CVE-2023-32611 https://gitlab.gnome.org/GNOME/glib/-/issues/2797 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-32611.json https://access.redhat.com/errata/RHSA-2023:6631",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "glib2",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.68.4-11.el9",
      "arch_op": "pattern match"
    },
    "X1XbXShyT1+HQUnA5EVJNw==": {
      "id": "X1XbXShyT1+HQUnA5EVJNw==",
      "updater": "rhel-vex",
      "name": "CVE-2023-4813",
      "description": "A flaw was found in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge.",
      "issued": "2022-03-01T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-4813 https://bugzilla.redhat.com/show_bug.cgi?id=2237798 https://www.cve.org/CVERecord?id=CVE-2023-4813 https://nvd.nist.gov/vuln/detail/CVE-2023-4813 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-4813.json https://access.redhat.com/errata/RHBA-2024:2413",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glibc-minimal-langpack",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9",
      "arch_op": "pattern match"
    },
    "X2Ku0r4j5/TnyjHzd2AMwA==": {
      "id": "X2Ku0r4j5/TnyjHzd2AMwA==",
      "updater": "rhel-vex",
      "name": "CVE-2024-33602",
      "description": "A flaw was found in the glibc netgroup cache. The buffer-resizing code in addgetnetgrentX assumes that all string pointers point into the supplied buffer. This can potentially lead to memory corruption and cause a crash.",
      "issued": "2024-04-24T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-33602 https://bugzilla.redhat.com/show_bug.cgi?id=2277206 https://www.cve.org/CVERecord?id=CVE-2024-33602 https://nvd.nist.gov/vuln/detail/CVE-2024-33602 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-33602.json https://access.redhat.com/errata/RHSA-2024:3339",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "glibc-minimal-langpack",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9_4.2",
      "arch_op": "pattern match"
    },
    "XMZYTX/i7lOXfIPea0g5sg==": {
      "id": "XMZYTX/i7lOXfIPea0g5sg==",
      "updater": "rhel-vex",
      "name": "CVE-2025-32414",
      "description": "A flaw was found in libxml2. This vulnerability allows out-of-bounds memory access via incorrect handling of return values in xmlPythonFileRead and xmlPythonFileReadRaw, due to a mismatch between bytes and characters.",
      "issued": "2025-04-08T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-32414 https://bugzilla.redhat.com/show_bug.cgi?id=2358121 https://www.cve.org/CVERecord?id=CVE-2025-32414 https://nvd.nist.gov/vuln/detail/CVE-2025-32414 https://gitlab.gnome.org/GNOME/libxml2/-/issues/889 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-32414.json",
      "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "libxml2",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "XeJxNps2a1xzV61fNDZUHg==": {
      "id": "XeJxNps2a1xzV61fNDZUHg==",
      "updater": "rhel-vex",
      "name": "CVE-2023-7104",
      "description": "A vulnerability was found in SQLite3. This issue affects the sessionReadRecord function of the ext/session/sqlite3session.c function in the make alltest Handler component. Manipulation may cause a heap-based buffer overflow to occur.",
      "issued": "2023-12-29T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-7104 https://bugzilla.redhat.com/show_bug.cgi?id=2256194 https://www.cve.org/CVERecord?id=CVE-2023-7104 https://nvd.nist.gov/vuln/detail/CVE-2023-7104 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-7104.json https://access.redhat.com/errata/RHSA-2024:0465",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "sqlite-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:3.34.1-7.el9_3",
      "arch_op": "pattern match"
    },
    "XpTqsrTo5GhyVoXq1J6R1A==": {
      "id": "XpTqsrTo5GhyVoXq1J6R1A==",
      "updater": "rhel-vex",
      "name": "CVE-2024-2961",
      "description": "An out-of-bounds write flaw was found in the ISO-2022-CN-EXT plugin for glibc's iconv library. When converting from UCS4 charset, adding certain escape charterers is required to indicate where the charset was changed to the library. During this process, iconv improperly checks the boundaries of internal buffers, leading to a buffer overflow, which allows writing up to 3 bytes outside the desired memory location. This issue may allow an attacker to craft a malicious characters sequence that will trigger the out-of-bounds write and perform remote code execution, presenting a high impact to the Integrity, Confidentiality, and Availability triad.",
      "issued": "2024-04-17T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-2961 https://bugzilla.redhat.com/show_bug.cgi?id=2273404 https://www.cve.org/CVERecord?id=CVE-2024-2961 https://nvd.nist.gov/vuln/detail/CVE-2024-2961 https://www.openwall.com/lists/oss-security/2024/04/17/9 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-2961.json https://access.redhat.com/errata/RHSA-2024:3339",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "glibc-common",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9_4.2",
      "arch_op": "pattern match"
    },
    "Y3WKF6/Qa3b8kujepTuCsg==": {
      "id": "Y3WKF6/Qa3b8kujepTuCsg==",
      "updater": "rhel-vex",
      "name": "CVE-2022-27943",
      "description": "A flaw was found in binutils, where GNU GCC is vulnerable to a denial of service caused by a stack consumption in the demangle_const() function in ibiberty/rust-demangle.c. The vulnerability exists due to the application not properly controlling the consumption of internal resources. By persuading a victim to open a specially-crafted file, an attacker could cause a denial of service.",
      "issued": "2022-03-26T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2022-27943 https://bugzilla.redhat.com/show_bug.cgi?id=2071728 https://www.cve.org/CVERecord?id=CVE-2022-27943 https://nvd.nist.gov/vuln/detail/CVE-2022-27943 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-27943.json",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "gcc",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "YNMtsn/tcZvCfn+cUvP3pg==": {
      "id": "YNMtsn/tcZvCfn+cUvP3pg==",
      "updater": "rhel-vex",
      "name": "CVE-2023-4806",
      "description": "A flaw was found in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags.",
      "issued": "2023-09-12T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-4806 https://bugzilla.redhat.com/show_bug.cgi?id=2237782 https://www.cve.org/CVERecord?id=CVE-2023-4806 https://nvd.nist.gov/vuln/detail/CVE-2023-4806 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-4806.json https://access.redhat.com/errata/RHBA-2024:2413",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glibc-common",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9",
      "arch_op": "pattern match"
    },
    "YNouFTBaiJNQFxYyrJAQcA==": {
      "id": "YNouFTBaiJNQFxYyrJAQcA==",
      "updater": "rhel-vex",
      "name": "CVE-2023-4806",
      "description": "A flaw was found in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags.",
      "issued": "2023-09-12T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-4806 https://bugzilla.redhat.com/show_bug.cgi?id=2237782 https://www.cve.org/CVERecord?id=CVE-2023-4806 https://nvd.nist.gov/vuln/detail/CVE-2023-4806 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-4806.json https://access.redhat.com/errata/RHBA-2024:2413",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glibc-minimal-langpack",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9",
      "arch_op": "pattern match"
    },
    "YrX1xPwGMuZ6z8Qz+xH8CQ==": {
      "id": "YrX1xPwGMuZ6z8Qz+xH8CQ==",
      "updater": "rhel-vex",
      "name": "CVE-2024-28834",
      "description": "A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits, exposing a potential timing side-channel.",
      "issued": "2024-03-21T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-28834 https://bugzilla.redhat.com/show_bug.cgi?id=2269228 https://www.cve.org/CVERecord?id=CVE-2024-28834 https://nvd.nist.gov/vuln/detail/CVE-2024-28834 https://lists.gnupg.org/pipermail/gnutls-help/2024-March/004845.html https://minerva.crocs.fi.muni.cz/ https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-28834.json https://access.redhat.com/errata/RHSA-2024:1879",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "gnutls",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:3.7.6-23.el9_3.4",
      "arch_op": "pattern match"
    },
    "ZdCiHmwhX39f7Nxq9Dvfig==": {
      "id": "ZdCiHmwhX39f7Nxq9Dvfig==",
      "updater": "rhel-vex",
      "name": "CVE-2023-27536",
      "description": "A flaw was found in the Curl package. Libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. However, the GSS delegation setting was left out from the configuration match checks, making them match too easily, affecting krb5/kerberos/negotiate/GSSAPI transfers.",
      "issued": "2023-03-20T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-27536 https://bugzilla.redhat.com/show_bug.cgi?id=2179092 https://www.cve.org/CVERecord?id=CVE-2023-27536 https://nvd.nist.gov/vuln/detail/CVE-2023-27536 https://curl.se/docs/CVE-2023-27536.html https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-27536.json https://access.redhat.com/errata/RHSA-2023:6679",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "libcurl-minimal",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:7.76.1-26.el9",
      "arch_op": "pattern match"
    },
    "a7uz8mOwNYThyDdvXW+WsA==": {
      "id": "a7uz8mOwNYThyDdvXW+WsA==",
      "updater": "rhel-vex",
      "name": "CVE-2025-24528",
      "description": "A flaw was found in krb5. With incremental propagation enabled, an authenticated attacker can cause kadmind to write beyond the end of the mapped region for the iprop log file. This issue can trigger a process crash and lead to a denial of service.",
      "issued": "2024-01-28T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-24528 https://bugzilla.redhat.com/show_bug.cgi?id=2342796 https://www.cve.org/CVERecord?id=CVE-2025-24528 https://nvd.nist.gov/vuln/detail/CVE-2025-24528 https://github.com/krb5/krb5/commit/78ceba024b64d49612375be4a12d1c066b0bfbd0 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24528.json https://access.redhat.com/errata/RHSA-2025:7067",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "krb5-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:1.21.1-6.el9",
      "arch_op": "pattern match"
    },
    "a9FllBAJiFi5FeYl0KG4aQ==": {
      "id": "a9FllBAJiFi5FeYl0KG4aQ==",
      "updater": "rhel-vex",
      "name": "CVE-2024-11053",
      "description": "A flaw was found in curl. A logic error when processing credentials from the .netrc file while performing redirects allows the transfer of credentials from the original host to the followed-to host under certain circumstances, leaking the credentials to the followed-to host.",
      "issued": "2024-12-11T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-11053 https://bugzilla.redhat.com/show_bug.cgi?id=2331191 https://www.cve.org/CVERecord?id=CVE-2024-11053 https://nvd.nist.gov/vuln/detail/CVE-2024-11053 https://www.oracle.com/security-alerts/cpujan2025.html#AppendixMSQL https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-11053.json",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "curl",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "aJnNGTgV/SQw08JCZMvqeA==": {
      "id": "aJnNGTgV/SQw08JCZMvqeA==",
      "updater": "rhel-vex",
      "name": "CVE-2024-2398",
      "description": "A flaw was found in curl. When an application configures libcurl to use HTTP/2 server push and the amount of received headers for the push surpasses the maximum allowed limit, libcurl aborts the server push. When aborting, libcurl does not free all the previously allocated headers, resulting in a memory leak.",
      "issued": "2024-03-27T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-2398 https://bugzilla.redhat.com/show_bug.cgi?id=2270498 https://www.cve.org/CVERecord?id=CVE-2024-2398 https://nvd.nist.gov/vuln/detail/CVE-2024-2398 https://curl.se/docs/CVE-2024-2398.html https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-2398.json https://access.redhat.com/errata/RHSA-2024:5529",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "curl-minimal",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:7.76.1-29.el9_4.1",
      "arch_op": "pattern match"
    },
    "ac6BZ0tqO6i0QQDCZWfGNg==": {
      "id": "ac6BZ0tqO6i0QQDCZWfGNg==",
      "updater": "rhel-vex",
      "name": "CVE-2021-35937",
      "description": "A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
      "issued": "2021-06-30T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2021-35937 https://bugzilla.redhat.com/show_bug.cgi?id=1964125 https://www.cve.org/CVERecord?id=CVE-2021-35937 https://nvd.nist.gov/vuln/detail/CVE-2021-35937 https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-35937.json https://access.redhat.com/errata/RHSA-2024:0463",
      "severity": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "rpm",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:4.16.1.3-27.el9_3",
      "arch_op": "pattern match"
    },
    "akyADtY97pCYfGQtx4g3Vw==": {
      "id": "akyADtY97pCYfGQtx4g3Vw==",
      "updater": "rhel-vex",
      "name": "CVE-2021-43618",
      "description": "A flaw was found in gmp. An integer overflow vulnerability could allow an attacker to input an integer value leading to a crash. The highest threat from this vulnerability is to system availability.",
      "issued": "2021-11-15T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2021-43618 https://bugzilla.redhat.com/show_bug.cgi?id=2024904 https://www.cve.org/CVERecord?id=CVE-2021-43618 https://nvd.nist.gov/vuln/detail/CVE-2021-43618 https://bugs.debian.org/994405 https://gmplib.org/list-archives/gmp-bugs/2021-September/005077.html https://gmplib.org/repo/gmp-6.2/rev/561a9c25298e https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-43618.json https://access.redhat.com/errata/RHSA-2023:6661",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "gmp",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "1:6.2.0-13.el9",
      "arch_op": "pattern match"
    },
    "arTUuvS7/95E2eEJJD9lOQ==": {
      "id": "arTUuvS7/95E2eEJJD9lOQ==",
      "updater": "rhel-vex",
      "name": "CVE-2023-3817",
      "description": "A vulnerability was found in OpenSSL. This security issue occurs because the applications that use the DH_check(), DH_check_ex(), or EVP_PKEY_param_check() functions to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source may lead to a denial of service.",
      "issued": "2023-07-31T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-3817 https://bugzilla.redhat.com/show_bug.cgi?id=2227852 https://www.cve.org/CVERecord?id=CVE-2023-3817 https://nvd.nist.gov/vuln/detail/CVE-2023-3817 https://www.openssl.org/news/secadv/20230731.txt https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-3817.json https://access.redhat.com/errata/RHSA-2024:2447",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "openssl-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "1:3.0.7-27.el9",
      "arch_op": "pattern match"
    },
    "ax7ntKztjjUex0Fnm21atg==": {
      "id": "ax7ntKztjjUex0Fnm21atg==",
      "updater": "rhel-vex",
      "name": "CVE-2021-35938",
      "description": "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
      "issued": "2021-06-30T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2021-35938 https://bugzilla.redhat.com/show_bug.cgi?id=1964114 https://www.cve.org/CVERecord?id=CVE-2021-35938 https://nvd.nist.gov/vuln/detail/CVE-2021-35938 https://rpm.org/wiki/Releases/4.18.0 https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-35938.json https://access.redhat.com/errata/RHSA-2024:0463",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "rpm",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:4.16.1.3-27.el9_3",
      "arch_op": "pattern match"
    },
    "bkhxy13HX9frw7feognLPA==": {
      "id": "bkhxy13HX9frw7feognLPA==",
      "updater": "rhel-vex",
      "name": "CVE-2024-4741",
      "description": "A use-after-free vulnerability was found in OpenSSL. Calling the OpenSSL API SSL_free_buffers function may cause memory to be accessed that was previously freed in some situations.",
      "issued": "2024-05-28T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-4741 https://bugzilla.redhat.com/show_bug.cgi?id=2283757 https://www.cve.org/CVERecord?id=CVE-2024-4741 https://nvd.nist.gov/vuln/detail/CVE-2024-4741 https://www.openssl.org/news/secadv/20240528.txt https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-4741.json https://access.redhat.com/errata/RHSA-2024:9333",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "openssl-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "1:3.2.2-6.el9_5",
      "arch_op": "pattern match"
    },
    "bs/xgRqGmS+1ZakXV+VWbw==": {
      "id": "bs/xgRqGmS+1ZakXV+VWbw==",
      "updater": "rhel-vex",
      "name": "CVE-2024-33601",
      "description": "A flaw was found in the glibc netgroup cache. The netgroup cache uses xmalloc/xrealloc and may terminate the process due to a memory allocation failure.",
      "issued": "2024-04-24T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-33601 https://bugzilla.redhat.com/show_bug.cgi?id=2277205 https://www.cve.org/CVERecord?id=CVE-2024-33601 https://nvd.nist.gov/vuln/detail/CVE-2024-33601 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-33601.json https://access.redhat.com/errata/RHSA-2024:3339",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "glibc-minimal-langpack",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9_4.2",
      "arch_op": "pattern match"
    },
    "buJgcdzjkcqlPTjRHlv+aQ==": {
      "id": "buJgcdzjkcqlPTjRHlv+aQ==",
      "updater": "rhel-vex",
      "name": "CVE-2025-0395",
      "description": "A flaw was found in the GNU C Library (glibc). A buffer overflow condition via the `assert()` function may be triggered due to glibc not allocating enough space for the assertion failure message string and size information. In certain conditions, a local attacker can exploit this, potentially leading to an application crash or other undefined behavior.",
      "issued": "2025-01-22T13:11:30Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-0395 https://bugzilla.redhat.com/show_bug.cgi?id=2339460 https://www.cve.org/CVERecord?id=CVE-2025-0395 https://nvd.nist.gov/vuln/detail/CVE-2025-0395 https://sourceware.org/bugzilla/show_bug.cgi?id=32582 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-0395.json https://access.redhat.com/errata/RHSA-2025:4244",
      "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glibc-common",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-125.el9_5.8",
      "arch_op": "pattern match"
    },
    "cPlqbimjP0WfKIKsSfuixQ==": {
      "id": "cPlqbimjP0WfKIKsSfuixQ==",
      "updater": "rhel-vex",
      "name": "CVE-2023-29499",
      "description": "A flaw was found in GLib. GVariant deserialization fails to validate that the input conforms to the expected format, leading to denial of service.",
      "issued": "2022-12-14T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-29499 https://bugzilla.redhat.com/show_bug.cgi?id=2211828 https://www.cve.org/CVERecord?id=CVE-2023-29499 https://nvd.nist.gov/vuln/detail/CVE-2023-29499 https://gitlab.gnome.org/GNOME/glib/-/issues/2794 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-29499.json https://access.redhat.com/errata/RHSA-2023:6631",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "glib2",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.68.4-11.el9",
      "arch_op": "pattern match"
    },
    "cp/A6si6B6vWVQNk17XSnQ==": {
      "id": "cp/A6si6B6vWVQNk17XSnQ==",
      "updater": "rhel-vex",
      "name": "CVE-2023-46218",
      "description": "A flaw was found in curl that verifies a given cookie domain against the Public Suffix List. This issue could allow a malicious HTTP server to set \"super cookies\" in curl that are passed back to more origins than what is otherwise allowed or possible.",
      "issued": "2023-12-06T07:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-46218 https://bugzilla.redhat.com/show_bug.cgi?id=2252030 https://www.cve.org/CVERecord?id=CVE-2023-46218 https://nvd.nist.gov/vuln/detail/CVE-2023-46218 https://curl.se/docs/CVE-2023-46218.html https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-46218.json https://access.redhat.com/errata/RHSA-2024:1129",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "libcurl-minimal",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:7.76.1-26.el9_3.3",
      "arch_op": "pattern match"
    },
    "dDqXtPkCzlt66cmXbEzdNg==": {
      "id": "dDqXtPkCzlt66cmXbEzdNg==",
      "updater": "rhel-vex",
      "name": "CVE-2024-2961",
      "description": "An out-of-bounds write flaw was found in the ISO-2022-CN-EXT plugin for glibc's iconv library. When converting from UCS4 charset, adding certain escape charterers is required to indicate where the charset was changed to the library. During this process, iconv improperly checks the boundaries of internal buffers, leading to a buffer overflow, which allows writing up to 3 bytes outside the desired memory location. This issue may allow an attacker to craft a malicious characters sequence that will trigger the out-of-bounds write and perform remote code execution, presenting a high impact to the Integrity, Confidentiality, and Availability triad.",
      "issued": "2024-04-17T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-2961 https://bugzilla.redhat.com/show_bug.cgi?id=2273404 https://www.cve.org/CVERecord?id=CVE-2024-2961 https://nvd.nist.gov/vuln/detail/CVE-2024-2961 https://www.openwall.com/lists/oss-security/2024/04/17/9 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-2961.json https://access.redhat.com/errata/RHSA-2024:3339",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "glibc",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9_4.2",
      "arch_op": "pattern match"
    },
    "dQtkeBg4aMq+iqhRXRyUDQ==": {
      "id": "dQtkeBg4aMq+iqhRXRyUDQ==",
      "updater": "rhel-vex",
      "name": "CVE-2024-0567",
      "description": "A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.",
      "issued": "2024-01-16T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-0567 https://bugzilla.redhat.com/show_bug.cgi?id=2258544 https://www.cve.org/CVERecord?id=CVE-2024-0567 https://nvd.nist.gov/vuln/detail/CVE-2024-0567 https://gitlab.com/gnutls/gnutls/-/issues/1521 https://lists.gnupg.org/pipermail/gnutls-help/2024-January/004841.html https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-0567.json https://access.redhat.com/errata/RHSA-2024:0533",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "gnutls",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:3.7.6-23.el9_3.3",
      "arch_op": "pattern match"
    },
    "ddgghMsgXhjnixlaC8h3Zw==": {
      "id": "ddgghMsgXhjnixlaC8h3Zw==",
      "updater": "rhel-vex",
      "name": "CVE-2024-2961",
      "description": "An out-of-bounds write flaw was found in the ISO-2022-CN-EXT plugin for glibc's iconv library. When converting from UCS4 charset, adding certain escape charterers is required to indicate where the charset was changed to the library. During this process, iconv improperly checks the boundaries of internal buffers, leading to a buffer overflow, which allows writing up to 3 bytes outside the desired memory location. This issue may allow an attacker to craft a malicious characters sequence that will trigger the out-of-bounds write and perform remote code execution, presenting a high impact to the Integrity, Confidentiality, and Availability triad.",
      "issued": "2024-04-17T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-2961 https://bugzilla.redhat.com/show_bug.cgi?id=2273404 https://www.cve.org/CVERecord?id=CVE-2024-2961 https://nvd.nist.gov/vuln/detail/CVE-2024-2961 https://www.openwall.com/lists/oss-security/2024/04/17/9 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-2961.json https://access.redhat.com/errata/RHSA-2024:3339",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "glibc-common",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9_4.2",
      "arch_op": "pattern match"
    },
    "dx/et2OZXdYVZSrhJfSrZw==": {
      "id": "dx/et2OZXdYVZSrhJfSrZw==",
      "updater": "rhel-vex",
      "name": "CVE-2021-35937",
      "description": "A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
      "issued": "2021-06-30T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2021-35937 https://bugzilla.redhat.com/show_bug.cgi?id=1964125 https://www.cve.org/CVERecord?id=CVE-2021-35937 https://nvd.nist.gov/vuln/detail/CVE-2021-35937 https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-35937.json https://access.redhat.com/errata/RHSA-2024:0463",
      "severity": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "rpm-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:4.16.1.3-27.el9_3",
      "arch_op": "pattern match"
    },
    "e0VfCD1REapdkagkByCnXQ==": {
      "id": "e0VfCD1REapdkagkByCnXQ==",
      "updater": "rhel-vex",
      "name": "CVE-2025-3360",
      "description": "A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the g_date_time_new_from_iso8601() function.",
      "issued": "2025-04-07T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-3360 https://bugzilla.redhat.com/show_bug.cgi?id=2357754 https://www.cve.org/CVERecord?id=CVE-2025-3360 https://nvd.nist.gov/vuln/detail/CVE-2025-3360 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-3360.json",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "glib2",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "e8C6jymFUSIHopouPFGGFQ==": {
      "id": "e8C6jymFUSIHopouPFGGFQ==",
      "updater": "rhel-vex",
      "name": "CVE-2024-37370",
      "description": "A vulnerability was found in the MIT Kerberos 5 GSS krb5 wrap token, where an attacker can modify the plaintext Extra Count field, causing the unwrapped token to appear truncated to the application, occurs when the attacker alters the token data during transmission which can lead to improper handling of authentication tokens.",
      "issued": "2024-06-27T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-37370 https://bugzilla.redhat.com/show_bug.cgi?id=2294677 https://www.cve.org/CVERecord?id=CVE-2024-37370 https://nvd.nist.gov/vuln/detail/CVE-2024-37370 https://web.mit.edu/kerberos/www/krb5-1.21/ https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-37370.json https://access.redhat.com/errata/RHSA-2024:6166",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "krb5-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:1.21.1-2.el9_4",
      "arch_op": "pattern match"
    },
    "eLH64OubpdVT5P7gyNiMhw==": {
      "id": "eLH64OubpdVT5P7gyNiMhw==",
      "updater": "rhel-vex",
      "name": "CVE-2024-28834",
      "description": "A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits, exposing a potential timing side-channel.",
      "issued": "2024-03-21T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-28834 https://bugzilla.redhat.com/show_bug.cgi?id=2269228 https://www.cve.org/CVERecord?id=CVE-2024-28834 https://nvd.nist.gov/vuln/detail/CVE-2024-28834 https://lists.gnupg.org/pipermail/gnutls-help/2024-March/004845.html https://minerva.crocs.fi.muni.cz/ https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-28834.json https://access.redhat.com/errata/RHSA-2024:1879",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "gnutls",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:3.7.6-23.el9_3.4",
      "arch_op": "pattern match"
    },
    "ek3+7A2JecsNdDGEqoDjTQ==": {
      "id": "ek3+7A2JecsNdDGEqoDjTQ==",
      "updater": "rhel-vex",
      "name": "CVE-2023-36191",
      "description": "A segmentation fault was discovered in SQLite. This issue exists due to a boundary error within the /sqlite3_aflpp/shell.c which could allow a local user to send a specially crafted request to the database to trigger memory corruption and perform a denial of service (DoS) attack.",
      "issued": "2023-06-23T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-36191 https://bugzilla.redhat.com/show_bug.cgi?id=2216936 https://www.cve.org/CVERecord?id=CVE-2023-36191 https://nvd.nist.gov/vuln/detail/CVE-2023-36191 https://www.sqlite.org/forum/forumpost/19f55ef73b https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-36191.json",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "sqlite",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "enCBbxIBBG9uJBIJ2Silsw==": {
      "id": "enCBbxIBBG9uJBIJ2Silsw==",
      "updater": "rhel-vex",
      "name": "CVE-2023-7104",
      "description": "A vulnerability was found in SQLite3. This issue affects the sessionReadRecord function of the ext/session/sqlite3session.c function in the make alltest Handler component. Manipulation may cause a heap-based buffer overflow to occur.",
      "issued": "2023-12-29T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-7104 https://bugzilla.redhat.com/show_bug.cgi?id=2256194 https://www.cve.org/CVERecord?id=CVE-2023-7104 https://nvd.nist.gov/vuln/detail/CVE-2023-7104 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-7104.json https://access.redhat.com/errata/RHSA-2024:0465",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "sqlite-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:3.34.1-7.el9_3",
      "arch_op": "pattern match"
    },
    "epxZ48/SIfLXd06fZqIspg==": {
      "id": "epxZ48/SIfLXd06fZqIspg==",
      "updater": "rhel-vex",
      "name": "CVE-2024-33600",
      "description": "A flaw was found in the glibc netgroup cache. After a failed cache insertion, addgetnetgrentX tries to send the non-existing response after the not-found header. This can lead to a null pointer dereference that causes a crash or exit.",
      "issued": "2024-04-24T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-33600 https://bugzilla.redhat.com/show_bug.cgi?id=2277204 https://www.cve.org/CVERecord?id=CVE-2024-33600 https://nvd.nist.gov/vuln/detail/CVE-2024-33600 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-33600.json https://access.redhat.com/errata/RHSA-2024:3339",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glibc-minimal-langpack",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9_4.2",
      "arch_op": "pattern match"
    },
    "fLQFCII8wF0O4a+xMrB5uA==": {
      "id": "fLQFCII8wF0O4a+xMrB5uA==",
      "updater": "rhel-vex",
      "name": "CVE-2024-2398",
      "description": "A flaw was found in curl. When an application configures libcurl to use HTTP/2 server push and the amount of received headers for the push surpasses the maximum allowed limit, libcurl aborts the server push. When aborting, libcurl does not free all the previously allocated headers, resulting in a memory leak.",
      "issued": "2024-03-27T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-2398 https://bugzilla.redhat.com/show_bug.cgi?id=2270498 https://www.cve.org/CVERecord?id=CVE-2024-2398 https://nvd.nist.gov/vuln/detail/CVE-2024-2398 https://curl.se/docs/CVE-2024-2398.html https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-2398.json https://access.redhat.com/errata/RHSA-2024:5529",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "libcurl-minimal",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:7.76.1-29.el9_4.1",
      "arch_op": "pattern match"
    },
    "fbGCR/SwRYoDsuegA9WoiQ==": {
      "id": "fbGCR/SwRYoDsuegA9WoiQ==",
      "updater": "rhel-vex",
      "name": "CVE-2024-33599",
      "description": "A stack-based buffer overflow flaw was found in the glibc netgroup cache. In certain conditions, its possible to trigger a stack-based buffer overflow condition that can lead to a denial of service and potentially other malicious actions that impact confidentiality and integrity.",
      "issued": "2024-04-23T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-33599 https://bugzilla.redhat.com/show_bug.cgi?id=2277202 https://www.cve.org/CVERecord?id=CVE-2024-33599 https://nvd.nist.gov/vuln/detail/CVE-2024-33599 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-33599.json https://access.redhat.com/errata/RHSA-2024:3339",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "glibc-minimal-langpack",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9_4.2",
      "arch_op": "pattern match"
    },
    "fwfAtjf5gVRneidAp93edQ==": {
      "id": "fwfAtjf5gVRneidAp93edQ==",
      "updater": "rhel-vex",
      "name": "CVE-2025-5917",
      "description": "A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to unpredictable program behavior, crashes, or in specific circumstances, could be leveraged as a building block for more sophisticated exploitation.",
      "issued": "2025-05-20T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-5917 https://bugzilla.redhat.com/show_bug.cgi?id=2370874 https://www.cve.org/CVERecord?id=CVE-2025-5917 https://nvd.nist.gov/vuln/detail/CVE-2025-5917 https://github.com/libarchive/libarchive/pull/2588 https://github.com/libarchive/libarchive/releases/tag/v3.8.0 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-5917.json",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "libarchive",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "gC3dJaA81IvQxpeDciVx9Q==": {
      "id": "gC3dJaA81IvQxpeDciVx9Q==",
      "updater": "rhel-vex",
      "name": "CVE-2023-5363",
      "description": "A flaw was found in OpenSSL in how it processes key and initialization vector (IV) lengths. This issue can lead to potential truncation or overruns during the initialization of some symmetric ciphers. A truncation in the IV can result in non-uniqueness, which could result in loss of confidentiality for some cipher modes. Both truncations and overruns of the key and the IV will produce incorrect results and could, in some cases, trigger a memory exception.",
      "issued": "2023-10-24T15:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-5363 https://bugzilla.redhat.com/show_bug.cgi?id=2243839 https://www.cve.org/CVERecord?id=CVE-2023-5363 https://nvd.nist.gov/vuln/detail/CVE-2023-5363 https://www.openssl.org/news/secadv/20231024.txt https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-5363.json https://access.redhat.com/errata/RHSA-2024:0310",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "openssl-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "1:3.0.7-25.el9_3",
      "arch_op": "pattern match"
    },
    "gGstDOffozUq96qPOjU3Cw==": {
      "id": "gGstDOffozUq96qPOjU3Cw==",
      "updater": "rhel-vex",
      "name": "CVE-2024-34397",
      "description": "A flaw was found in GNOME GLib. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based client will wrongly interpret as having been sent by the trusted system service. This issue could lead to the GDBus-based client behaving incorrectly with an application-dependent impact.",
      "issued": "2024-05-07T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-34397 https://bugzilla.redhat.com/show_bug.cgi?id=2279632 https://www.cve.org/CVERecord?id=CVE-2024-34397 https://nvd.nist.gov/vuln/detail/CVE-2024-34397 https://gitlab.gnome.org/GNOME/glib/-/issues/3268 https://www.openwall.com/lists/oss-security/2024/05/07/5 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-34397.json https://access.redhat.com/errata/RHSA-2024:6464",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glib2",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.68.4-14.el9_4.1",
      "arch_op": "pattern match"
    },
    "gJB4UR04diqd8I+vxY+1fA==": {
      "id": "gJB4UR04diqd8I+vxY+1fA==",
      "updater": "rhel-vex",
      "name": "CVE-2023-5678",
      "description": "A flaw was found in OpenSSL, which caused the generation or checking of long X9.42 DH keys or parameters to be much slower than expected. This issue could lead to a denial of service.",
      "issued": "2023-10-24T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-5678 https://bugzilla.redhat.com/show_bug.cgi?id=2248616 https://www.cve.org/CVERecord?id=CVE-2023-5678 https://nvd.nist.gov/vuln/detail/CVE-2023-5678 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6 https://www.openssl.org/news/secadv/20231106.txt https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-5678.json https://access.redhat.com/errata/RHSA-2024:2447",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "openssl-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "1:3.0.7-27.el9",
      "arch_op": "pattern match"
    },
    "gW0KUmpTUJYEkCwOP2FqGA==": {
      "id": "gW0KUmpTUJYEkCwOP2FqGA==",
      "updater": "rhel-vex",
      "name": "CVE-2023-4911",
      "description": "A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.",
      "issued": "2023-10-03T17:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-4911 https://bugzilla.redhat.com/show_bug.cgi?id=2238352 https://www.cve.org/CVERecord?id=CVE-2023-4911 https://nvd.nist.gov/vuln/detail/CVE-2023-4911 https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt https://www.qualys.com/cve-2023-4911/ https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-4911.json https://access.redhat.com/errata/RHBA-2024:2413",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "glibc-minimal-langpack",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9",
      "arch_op": "pattern match"
    },
    "giLBrK6czoD3l3BDs0Jfcw==": {
      "id": "giLBrK6czoD3l3BDs0Jfcw==",
      "updater": "rhel-vex",
      "name": "CVE-2025-6021",
      "description": "A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.",
      "issued": "2025-06-12T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-6021 https://bugzilla.redhat.com/show_bug.cgi?id=2372406 https://www.cve.org/CVERecord?id=CVE-2025-6021 https://nvd.nist.gov/vuln/detail/CVE-2025-6021 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-6021.json",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "libxml2",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "gr6cX5pFzua7lsdikMJZaA==": {
      "id": "gr6cX5pFzua7lsdikMJZaA==",
      "updater": "rhel-vex",
      "name": "CVE-2025-5914",
      "description": "A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.",
      "issued": "2025-05-20T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-5914 https://bugzilla.redhat.com/show_bug.cgi?id=2370861 https://www.cve.org/CVERecord?id=CVE-2025-5914 https://nvd.nist.gov/vuln/detail/CVE-2025-5914 https://github.com/libarchive/libarchive/pull/2598 https://github.com/libarchive/libarchive/releases/tag/v3.8.0 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-5914.json",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "libarchive",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "grTEewXQ3rAV4agaHcml8w==": {
      "id": "grTEewXQ3rAV4agaHcml8w==",
      "updater": "rhel-vex",
      "name": "CVE-2024-33599",
      "description": "A stack-based buffer overflow flaw was found in the glibc netgroup cache. In certain conditions, its possible to trigger a stack-based buffer overflow condition that can lead to a denial of service and potentially other malicious actions that impact confidentiality and integrity.",
      "issued": "2024-04-23T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-33599 https://bugzilla.redhat.com/show_bug.cgi?id=2277202 https://www.cve.org/CVERecord?id=CVE-2024-33599 https://nvd.nist.gov/vuln/detail/CVE-2024-33599 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-33599.json https://access.redhat.com/errata/RHSA-2024:3339",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "glibc-minimal-langpack",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9_4.2",
      "arch_op": "pattern match"
    },
    "h08ca9AawAYymWtiO1A44A==": {
      "id": "h08ca9AawAYymWtiO1A44A==",
      "updater": "rhel-vex",
      "name": "CVE-2025-5916",
      "description": "A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing a Web Archive (WARC) file that claims to have more than INT64_MAX - 4 content bytes. An attacker could craft a malicious WARC archive to induce this overflow, potentially leading to unpredictable program behavior, memory corruption, or a denial-of-service condition within applications that process such archives using libarchive.",
      "issued": "2025-05-20T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-5916 https://bugzilla.redhat.com/show_bug.cgi?id=2370872 https://www.cve.org/CVERecord?id=CVE-2025-5916 https://nvd.nist.gov/vuln/detail/CVE-2025-5916 https://github.com/libarchive/libarchive/pull/2568 https://github.com/libarchive/libarchive/releases/tag/v3.8.0 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-5916.json",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "libarchive",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "hMkYbCHpeOKQraSBEl8+Aw==": {
      "id": "hMkYbCHpeOKQraSBEl8+Aw==",
      "updater": "rhel-vex",
      "name": "CVE-2021-43618",
      "description": "A flaw was found in gmp. An integer overflow vulnerability could allow an attacker to input an integer value leading to a crash. The highest threat from this vulnerability is to system availability.",
      "issued": "2021-11-15T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2021-43618 https://bugzilla.redhat.com/show_bug.cgi?id=2024904 https://www.cve.org/CVERecord?id=CVE-2021-43618 https://nvd.nist.gov/vuln/detail/CVE-2021-43618 https://bugs.debian.org/994405 https://gmplib.org/list-archives/gmp-bugs/2021-September/005077.html https://gmplib.org/repo/gmp-6.2/rev/561a9c25298e https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-43618.json https://access.redhat.com/errata/RHSA-2023:6661",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "gmp",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "1:6.2.0-13.el9",
      "arch_op": "pattern match"
    },
    "hQhn3O6sw4QusprpMJeLag==": {
      "id": "hQhn3O6sw4QusprpMJeLag==",
      "updater": "rhel-vex",
      "name": "CVE-2023-27536",
      "description": "A flaw was found in the Curl package. Libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. However, the GSS delegation setting was left out from the configuration match checks, making them match too easily, affecting krb5/kerberos/negotiate/GSSAPI transfers.",
      "issued": "2023-03-20T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-27536 https://bugzilla.redhat.com/show_bug.cgi?id=2179092 https://www.cve.org/CVERecord?id=CVE-2023-27536 https://nvd.nist.gov/vuln/detail/CVE-2023-27536 https://curl.se/docs/CVE-2023-27536.html https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-27536.json https://access.redhat.com/errata/RHSA-2023:6679",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "curl-minimal",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:7.76.1-26.el9",
      "arch_op": "pattern match"
    },
    "hRMmSXWNjnz6N6DylTgifg==": {
      "id": "hRMmSXWNjnz6N6DylTgifg==",
      "updater": "rhel-vex",
      "name": "CVE-2023-29491",
      "description": "A vulnerability was found in ncurses and occurs when used by a setuid application. This flaw allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.",
      "issued": "2023-04-12T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-29491 https://bugzilla.redhat.com/show_bug.cgi?id=2191704 https://www.cve.org/CVERecord?id=CVE-2023-29491 https://nvd.nist.gov/vuln/detail/CVE-2023-29491 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-29491.json https://access.redhat.com/errata/RHSA-2023:6698",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "ncurses-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:6.2-10.20210508.el9",
      "arch_op": "pattern match"
    },
    "hbOAbiOJ6F6ohNePMmRtlQ==": {
      "id": "hbOAbiOJ6F6ohNePMmRtlQ==",
      "updater": "rhel-vex",
      "name": "CVE-2025-29087",
      "description": "A flaw was found in SQLite. This vulnerability allows an attacker to cause an integer overflow via the concat_ws function.",
      "issued": "2025-04-07T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-29087 https://bugzilla.redhat.com/show_bug.cgi?id=2358028 https://www.cve.org/CVERecord?id=CVE-2025-29087 https://nvd.nist.gov/vuln/detail/CVE-2025-29087 https://gist.github.com/ylwango613/a44a29f1ef074fa783e29f04a0afd62a https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-29087.json",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "sqlite",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "hiF9bhRE95azD1Yk9fu+ZA==": {
      "id": "hiF9bhRE95azD1Yk9fu+ZA==",
      "updater": "rhel-vex",
      "name": "CVE-2023-27534",
      "description": "A path traversal vulnerability exists in curl \u003c8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can exploit this flaw to bypass filtering or execute arbitrary code by crafting a path like /~2/foo while accessing a server with a specific user.",
      "issued": "2023-03-20T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-27534 https://bugzilla.redhat.com/show_bug.cgi?id=2179069 https://www.cve.org/CVERecord?id=CVE-2023-27534 https://nvd.nist.gov/vuln/detail/CVE-2023-27534 https://curl.se/docs/CVE-2023-27534.html https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-27534.json https://access.redhat.com/errata/RHSA-2023:6679",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "curl-minimal",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:7.76.1-26.el9",
      "arch_op": "pattern match"
    },
    "iUX24ei3drbG8K2ZPOVF1w==": {
      "id": "iUX24ei3drbG8K2ZPOVF1w==",
      "updater": "rhel-vex",
      "name": "CVE-2025-0395",
      "description": "A flaw was found in the GNU C Library (glibc). A buffer overflow condition via the `assert()` function may be triggered due to glibc not allocating enough space for the assertion failure message string and size information. In certain conditions, a local attacker can exploit this, potentially leading to an application crash or other undefined behavior.",
      "issued": "2025-01-22T13:11:30Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-0395 https://bugzilla.redhat.com/show_bug.cgi?id=2339460 https://www.cve.org/CVERecord?id=CVE-2025-0395 https://nvd.nist.gov/vuln/detail/CVE-2025-0395 https://sourceware.org/bugzilla/show_bug.cgi?id=32582 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-0395.json https://access.redhat.com/errata/RHSA-2025:4244",
      "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glibc",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-125.el9_5.8",
      "arch_op": "pattern match"
    },
    "irh5kSvT+LkcgG9ddEDxbg==": {
      "id": "irh5kSvT+LkcgG9ddEDxbg==",
      "updater": "rhel-vex",
      "name": "CVE-2024-28835",
      "description": "A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the \"certtool --verify-chain\" command.",
      "issued": "2024-03-21T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-28835 https://bugzilla.redhat.com/show_bug.cgi?id=2269084 https://www.cve.org/CVERecord?id=CVE-2024-28835 https://nvd.nist.gov/vuln/detail/CVE-2024-28835 https://lists.gnupg.org/pipermail/gnutls-help/2024-March/004845.html https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-28835.json https://access.redhat.com/errata/RHSA-2024:1879",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "gnutls",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:3.7.6-23.el9_3.4",
      "arch_op": "pattern match"
    },
    "ixc06f0H9vqMfsbwQSwwvA==": {
      "id": "ixc06f0H9vqMfsbwQSwwvA==",
      "updater": "rhel-vex",
      "name": "CVE-2023-32636",
      "description": "A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect glib distributors who followed the guidance of glib developers to backport the initial fix for CVE-2023-29499.",
      "issued": "2022-12-14T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-32636 https://bugzilla.redhat.com/show_bug.cgi?id=2211833 https://www.cve.org/CVERecord?id=CVE-2023-32636 https://nvd.nist.gov/vuln/detail/CVE-2023-32636 https://discourse.gnome.org/t/multiple-fixes-for-gvariant-normalisation-issues-in-glib/12835 https://gitlab.gnome.org/GNOME/glib/-/issues/2841 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-32636.json",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "glib2",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "izjZI/AsSlkRCQFNfC3oCA==": {
      "id": "izjZI/AsSlkRCQFNfC3oCA==",
      "updater": "rhel-vex",
      "name": "CVE-2023-38545",
      "description": "A heap-based buffer overflow flaw was found in the SOCKS5 proxy handshake in the Curl package. If Curl is unable to resolve the address itself, it passes the hostname to the SOCKS5 proxy. However, the maximum length of the hostname that can be passed is 255 bytes. If the hostname is longer, then Curl switches to the local name resolving and passes the resolved address only to the proxy. The local variable that instructs Curl to \"let the host resolve the name\" could obtain the wrong value during a slow SOCKS5 handshake, resulting in the too-long hostname being copied to the target buffer instead of the resolved address, which was not the intended behavior.",
      "issued": "2023-10-11T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-38545 https://bugzilla.redhat.com/show_bug.cgi?id=2241933 https://www.cve.org/CVERecord?id=CVE-2023-38545 https://nvd.nist.gov/vuln/detail/CVE-2023-38545 https://curl.se/docs/CVE-2023-38545.html https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-38545.json https://access.redhat.com/errata/RHSA-2023:6745",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "curl-minimal",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:7.76.1-26.el9_3.2",
      "arch_op": "pattern match"
    },
    "jD8UkMRQckMY49rmmq/l/w==": {
      "id": "jD8UkMRQckMY49rmmq/l/w==",
      "updater": "rhel-vex",
      "name": "CVE-2024-12243",
      "description": "A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially crafted certificate, causing GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition.",
      "issued": "2025-02-10T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-12243 https://bugzilla.redhat.com/show_bug.cgi?id=2344615 https://www.cve.org/CVERecord?id=CVE-2024-12243 https://nvd.nist.gov/vuln/detail/CVE-2024-12243 https://gitlab.com/gnutls/libtasn1/-/issues/52 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-12243.json https://access.redhat.com/errata/RHSA-2025:7076",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "gnutls",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:3.8.3-6.el9",
      "arch_op": "pattern match"
    },
    "jU6R01smYIMn3KeQZsQ68g==": {
      "id": "jU6R01smYIMn3KeQZsQ68g==",
      "updater": "rhel-vex",
      "name": "CVE-2023-27536",
      "description": "A flaw was found in the Curl package. Libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. However, the GSS delegation setting was left out from the configuration match checks, making them match too easily, affecting krb5/kerberos/negotiate/GSSAPI transfers.",
      "issued": "2023-03-20T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-27536 https://bugzilla.redhat.com/show_bug.cgi?id=2179092 https://www.cve.org/CVERecord?id=CVE-2023-27536 https://nvd.nist.gov/vuln/detail/CVE-2023-27536 https://curl.se/docs/CVE-2023-27536.html https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-27536.json https://access.redhat.com/errata/RHSA-2023:6679",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "curl-minimal",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:7.76.1-26.el9",
      "arch_op": "pattern match"
    },
    "jiVVTQmOtKqVixv7agF/Hg==": {
      "id": "jiVVTQmOtKqVixv7agF/Hg==",
      "updater": "rhel-vex",
      "name": "CVE-2025-27113",
      "description": "A flaw was found in libxml2. This vulnerability allows a NULL pointer dereference, leading to a potential crash or denial of service via a crafted XML pattern.",
      "issued": "2025-02-18T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-27113 https://bugzilla.redhat.com/show_bug.cgi?id=2346410 https://www.cve.org/CVERecord?id=CVE-2025-27113 https://nvd.nist.gov/vuln/detail/CVE-2025-27113 https://gitlab.gnome.org/GNOME/libxml2/-/issues/861 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-27113.json",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "libxml2",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "jlGZMt4HZ4sFDGyWBYiG5A==": {
      "id": "jlGZMt4HZ4sFDGyWBYiG5A==",
      "updater": "rhel-vex",
      "name": "CVE-2024-28835",
      "description": "A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the \"certtool --verify-chain\" command.",
      "issued": "2024-03-21T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-28835 https://bugzilla.redhat.com/show_bug.cgi?id=2269084 https://www.cve.org/CVERecord?id=CVE-2024-28835 https://nvd.nist.gov/vuln/detail/CVE-2024-28835 https://lists.gnupg.org/pipermail/gnutls-help/2024-March/004845.html https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-28835.json https://access.redhat.com/errata/RHSA-2024:1879",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "gnutls",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:3.7.6-23.el9_3.4",
      "arch_op": "pattern match"
    },
    "jlhRpuK0j9viGlxiAnKR7w==": {
      "id": "jlhRpuK0j9viGlxiAnKR7w==",
      "updater": "rhel-vex",
      "name": "CVE-2021-35939",
      "description": "It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
      "issued": "2021-06-30T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2021-35939 https://bugzilla.redhat.com/show_bug.cgi?id=1964129 https://www.cve.org/CVERecord?id=CVE-2021-35939 https://nvd.nist.gov/vuln/detail/CVE-2021-35939 https://rpm.org/wiki/Releases/4.18.0 https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-35939.json https://access.redhat.com/errata/RHSA-2024:0463",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "rpm-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:4.16.1.3-27.el9_3",
      "arch_op": "pattern match"
    },
    "k/CdFos3+OXmV6TI04xnUQ==": {
      "id": "k/CdFos3+OXmV6TI04xnUQ==",
      "updater": "rhel-vex",
      "name": "CVE-2021-35939",
      "description": "It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
      "issued": "2021-06-30T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2021-35939 https://bugzilla.redhat.com/show_bug.cgi?id=1964129 https://www.cve.org/CVERecord?id=CVE-2021-35939 https://nvd.nist.gov/vuln/detail/CVE-2021-35939 https://rpm.org/wiki/Releases/4.18.0 https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-35939.json https://access.redhat.com/errata/RHSA-2024:0463",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "rpm",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:4.16.1.3-27.el9_3",
      "arch_op": "pattern match"
    },
    "kAqWBUicknsNlYe6T7rf3w==": {
      "id": "kAqWBUicknsNlYe6T7rf3w==",
      "updater": "rhel-vex",
      "name": "CVE-2023-4806",
      "description": "A flaw was found in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags.",
      "issued": "2023-09-12T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-4806 https://bugzilla.redhat.com/show_bug.cgi?id=2237782 https://www.cve.org/CVERecord?id=CVE-2023-4806 https://nvd.nist.gov/vuln/detail/CVE-2023-4806 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-4806.json https://access.redhat.com/errata/RHBA-2024:2413",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glibc",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9",
      "arch_op": "pattern match"
    },
    "kHjC5QVIEbAPA3Kvkur0dg==": {
      "id": "kHjC5QVIEbAPA3Kvkur0dg==",
      "updater": "rhel-vex",
      "name": "CVE-2023-38546",
      "description": "A flaw was found in the Curl package. This flaw allows an attacker to insert cookies into a running program using libcurl if the specific series of conditions are met.",
      "issued": "2023-10-11T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-38546 https://bugzilla.redhat.com/show_bug.cgi?id=2241938 https://access.redhat.com/errata/RHSA-2024:2101 https://www.cve.org/CVERecord?id=CVE-2023-38546 https://nvd.nist.gov/vuln/detail/CVE-2023-38546 https://curl.se/docs/CVE-2023-38546.html https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-38546.json https://access.redhat.com/errata/RHSA-2023:6745",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "curl-minimal",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:7.76.1-26.el9_3.2",
      "arch_op": "pattern match"
    },
    "lDV5qcTcJkBCbILUcFq4dA==": {
      "id": "lDV5qcTcJkBCbILUcFq4dA==",
      "updater": "rhel-vex",
      "name": "CVE-2023-2953",
      "description": "A vulnerability was found in OpenLDAP, in ber_memalloc_x() function, leading to a null pointer dereference. This flaw can result in reduced system memory and cause LDAP authentication failures. The impact is primarily a disruption in authentication processes, which may hinder user access or service operations relying on LDAP for authentication.",
      "issued": "2023-05-29T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-2953 https://bugzilla.redhat.com/show_bug.cgi?id=2210651 https://www.cve.org/CVERecord?id=CVE-2023-2953 https://nvd.nist.gov/vuln/detail/CVE-2023-2953 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-2953.json",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "openldap",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "lJeTT/Y9HVuGmrDkd/kJpw==": {
      "id": "lJeTT/Y9HVuGmrDkd/kJpw==",
      "updater": "rhel-vex",
      "name": "CVE-2020-11023",
      "description": "A flaw was found in jQuery. HTML containing \\\u003coption\\\u003e elements from untrusted sources are passed, even after sanitizing, to one of jQuery's DOM manipulation methods, which may execute untrusted code. The highest threat from this vulnerability is to data confidentiality and integrity.",
      "issued": "2020-04-29T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2020-11023 https://bugzilla.redhat.com/show_bug.cgi?id=1850004 https://www.cve.org/CVERecord?id=CVE-2020-11023 https://nvd.nist.gov/vuln/detail/CVE-2020-11023 https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/ https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://security.access.redhat.com/data/csaf/v2/vex/2020/cve-2020-11023.json https://access.redhat.com/errata/RHSA-2025:1346",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "libstdc++",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:11.5.0-5.el9_5",
      "arch_op": "pattern match"
    },
    "lKniGV6mBq1xFWJ6V0QVvA==": {
      "id": "lKniGV6mBq1xFWJ6V0QVvA==",
      "updater": "rhel-vex",
      "name": "CVE-2023-29491",
      "description": "A vulnerability was found in ncurses and occurs when used by a setuid application. This flaw allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.",
      "issued": "2023-04-12T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-29491 https://bugzilla.redhat.com/show_bug.cgi?id=2191704 https://www.cve.org/CVERecord?id=CVE-2023-29491 https://nvd.nist.gov/vuln/detail/CVE-2023-29491 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-29491.json https://access.redhat.com/errata/RHSA-2023:6698",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "ncurses-base",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "noarch",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:6.2-10.20210508.el9",
      "arch_op": "pattern match"
    },
    "lShNjxk/0kUQZo1dsKp7Lg==": {
      "id": "lShNjxk/0kUQZo1dsKp7Lg==",
      "updater": "rhel-vex",
      "name": "CVE-2025-4802",
      "description": "A flaw was found in the glibc library. A statically linked setuid binary that calls dlopen(), including internal dlopen() calls after setlocale() or calls to NSS functions such as getaddrinfo(), may incorrectly search LD_LIBRARY_PATH to determine which library to load, allowing a local attacker to load malicious shared libraries, escalate privileges and execute arbitrary code.",
      "issued": "2025-05-16T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-4802 https://bugzilla.redhat.com/show_bug.cgi?id=2367468 https://www.cve.org/CVERecord?id=CVE-2025-4802 https://nvd.nist.gov/vuln/detail/CVE-2025-4802 https://www.openwall.com/lists/oss-security/2025/05/16/7 https://www.openwall.com/lists/oss-security/2025/05/17/2 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-4802.json https://access.redhat.com/errata/RHSA-2025:8655",
      "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glibc",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-168.el9_6.19",
      "arch_op": "pattern match"
    },
    "lzzMoGjfCQVwFi4bhK2jEA==": {
      "id": "lzzMoGjfCQVwFi4bhK2jEA==",
      "updater": "rhel-vex",
      "name": "CVE-2024-33600",
      "description": "A flaw was found in the glibc netgroup cache. After a failed cache insertion, addgetnetgrentX tries to send the non-existing response after the not-found header. This can lead to a null pointer dereference that causes a crash or exit.",
      "issued": "2024-04-24T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-33600 https://bugzilla.redhat.com/show_bug.cgi?id=2277204 https://www.cve.org/CVERecord?id=CVE-2024-33600 https://nvd.nist.gov/vuln/detail/CVE-2024-33600 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-33600.json https://access.redhat.com/errata/RHSA-2024:3339",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glibc",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9_4.2",
      "arch_op": "pattern match"
    },
    "m8JLumk5EhM5fKwi6Y9sfw==": {
      "id": "m8JLumk5EhM5fKwi6Y9sfw==",
      "updater": "rhel-vex",
      "name": "CVE-2023-4813",
      "description": "A flaw was found in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge.",
      "issued": "2022-03-01T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-4813 https://bugzilla.redhat.com/show_bug.cgi?id=2237798 https://www.cve.org/CVERecord?id=CVE-2023-4813 https://nvd.nist.gov/vuln/detail/CVE-2023-4813 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-4813.json https://access.redhat.com/errata/RHBA-2024:2413",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glibc-minimal-langpack",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9",
      "arch_op": "pattern match"
    },
    "mGnF1yHBoKIJbRzNCdab+Q==": {
      "id": "mGnF1yHBoKIJbRzNCdab+Q==",
      "updater": "rhel-vex",
      "name": "CVE-2025-0395",
      "description": "A flaw was found in the GNU C Library (glibc). A buffer overflow condition via the `assert()` function may be triggered due to glibc not allocating enough space for the assertion failure message string and size information. In certain conditions, a local attacker can exploit this, potentially leading to an application crash or other undefined behavior.",
      "issued": "2025-01-22T13:11:30Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-0395 https://bugzilla.redhat.com/show_bug.cgi?id=2339460 https://www.cve.org/CVERecord?id=CVE-2025-0395 https://nvd.nist.gov/vuln/detail/CVE-2025-0395 https://sourceware.org/bugzilla/show_bug.cgi?id=32582 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-0395.json https://access.redhat.com/errata/RHSA-2025:4244",
      "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glibc-minimal-langpack",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-125.el9_5.8",
      "arch_op": "pattern match"
    },
    "mTe73yDGtNKBR9vMgderPA==": {
      "id": "mTe73yDGtNKBR9vMgderPA==",
      "updater": "rhel-vex",
      "name": "CVE-2024-3596",
      "description": "A vulnerability in the RADIUS (Remote Authentication Dial-In User Service) protocol allows attackers to forge authentication responses when the Message-Authenticator attribute is not enforced. This issue arises from a cryptographically insecure integrity check using MD5, enabling attackers to spoof UDP-based RADIUS response packets. This can result in unauthorized access by modifying an Access-Reject response to an Access-Accept response, thereby compromising the authentication process.",
      "issued": "2024-07-09T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-3596 https://bugzilla.redhat.com/show_bug.cgi?id=2263240 https://www.cve.org/CVERecord?id=CVE-2024-3596 https://nvd.nist.gov/vuln/detail/CVE-2024-3596 https://datatracker.ietf.org/doc/draft-ietf-radext-deprecating-radius/ https://datatracker.ietf.org/doc/html/rfc2865 https://networkradius.com/assets/pdf/radius_and_md5_collisions.pdf https://w1.fi/security/2024-1/hostapd-and-radius-protocol-forgery-attacks.txt https://www.blastradius.fail/ https://www.kb.cert.org/vuls/id/456537 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-3596.json https://access.redhat.com/errata/RHSA-2024:9474",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "krb5-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:1.21.1-4.el9_5",
      "arch_op": "pattern match"
    },
    "mk1XE0ocPMZ1zLQU00rlYA==": {
      "id": "mk1XE0ocPMZ1zLQU00rlYA==",
      "updater": "rhel-vex",
      "name": "CVE-2023-39975",
      "description": "A vulnerability was found in MIT krb5, where an authenticated attacker can cause a KDC to free the same pointer twice if it can induce a failure in authorization data handling.",
      "issued": "2023-08-16T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-39975 https://bugzilla.redhat.com/show_bug.cgi?id=2232682 https://www.cve.org/CVERecord?id=CVE-2023-39975 https://nvd.nist.gov/vuln/detail/CVE-2023-39975 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-39975.json https://access.redhat.com/errata/RHSA-2023:6699",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "krb5-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:1.21.1-1.el9",
      "arch_op": "pattern match"
    },
    "mzudbhzyxeahL7ZqcHKBNA==": {
      "id": "mzudbhzyxeahL7ZqcHKBNA==",
      "updater": "rhel-vex",
      "name": "CVE-2023-38545",
      "description": "A heap-based buffer overflow flaw was found in the SOCKS5 proxy handshake in the Curl package. If Curl is unable to resolve the address itself, it passes the hostname to the SOCKS5 proxy. However, the maximum length of the hostname that can be passed is 255 bytes. If the hostname is longer, then Curl switches to the local name resolving and passes the resolved address only to the proxy. The local variable that instructs Curl to \"let the host resolve the name\" could obtain the wrong value during a slow SOCKS5 handshake, resulting in the too-long hostname being copied to the target buffer instead of the resolved address, which was not the intended behavior.",
      "issued": "2023-10-11T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-38545 https://bugzilla.redhat.com/show_bug.cgi?id=2241933 https://www.cve.org/CVERecord?id=CVE-2023-38545 https://nvd.nist.gov/vuln/detail/CVE-2023-38545 https://curl.se/docs/CVE-2023-38545.html https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-38545.json https://access.redhat.com/errata/RHSA-2023:6745",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "libcurl-minimal",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:7.76.1-26.el9_3.2",
      "arch_op": "pattern match"
    },
    "nPSgEkWJB1b5/FQHoj8iDQ==": {
      "id": "nPSgEkWJB1b5/FQHoj8iDQ==",
      "updater": "rhel-vex",
      "name": "CVE-2023-2975",
      "description": "A vulnerability was found in OpenSSL. The AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries, which are unauthenticated as a consequence. Applications that use the AES-SIV algorithm and want to authenticate empty data entries as associated data can be misled by removing, adding, or reordering such empty entries as these are ignored by the OpenSSL implementation. The AES-SIV algorithm allows for the authentication of multiple associated data entries and encryption. To authenticate empty data, the application has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with a NULL pointer as the output buffer and 0 as the input buffer length. The AES-SIV implementation in OpenSSL returns success for such a call instead of performing the associated data authentication operation. Thus, the empty data will not be authenticated.",
      "issued": "2023-07-07T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-2975 https://bugzilla.redhat.com/show_bug.cgi?id=2223016 https://www.cve.org/CVERecord?id=CVE-2023-2975 https://nvd.nist.gov/vuln/detail/CVE-2023-2975 https://www.openssl.org/news/secadv/20230714.txt https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-2975.json https://access.redhat.com/errata/RHSA-2024:2447",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "openssl-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "1:3.0.7-27.el9",
      "arch_op": "pattern match"
    },
    "nXKbfJDunfdn7rpKOTEQaQ==": {
      "id": "nXKbfJDunfdn7rpKOTEQaQ==",
      "updater": "rhel-vex",
      "name": "CVE-2024-2236",
      "description": "A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts.",
      "issued": "2024-03-06T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-2236 https://bugzilla.redhat.com/show_bug.cgi?id=2245218 https://www.cve.org/CVERecord?id=CVE-2024-2236 https://nvd.nist.gov/vuln/detail/CVE-2024-2236 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-2236.json https://access.redhat.com/errata/RHSA-2024:9404",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "libgcrypt",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:1.10.0-11.el9",
      "arch_op": "pattern match"
    },
    "o4XSf3iuWcKQUGp2hHoEXw==": {
      "id": "o4XSf3iuWcKQUGp2hHoEXw==",
      "updater": "rhel-vex",
      "name": "CVE-2023-38545",
      "description": "A heap-based buffer overflow flaw was found in the SOCKS5 proxy handshake in the Curl package. If Curl is unable to resolve the address itself, it passes the hostname to the SOCKS5 proxy. However, the maximum length of the hostname that can be passed is 255 bytes. If the hostname is longer, then Curl switches to the local name resolving and passes the resolved address only to the proxy. The local variable that instructs Curl to \"let the host resolve the name\" could obtain the wrong value during a slow SOCKS5 handshake, resulting in the too-long hostname being copied to the target buffer instead of the resolved address, which was not the intended behavior.",
      "issued": "2023-10-11T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-38545 https://bugzilla.redhat.com/show_bug.cgi?id=2241933 https://www.cve.org/CVERecord?id=CVE-2023-38545 https://nvd.nist.gov/vuln/detail/CVE-2023-38545 https://curl.se/docs/CVE-2023-38545.html https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-38545.json https://access.redhat.com/errata/RHSA-2023:6745",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "libcurl-minimal",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:7.76.1-26.el9_3.2",
      "arch_op": "pattern match"
    },
    "o7Wt0RgmjSYSjMhb6uYQ8A==": {
      "id": "o7Wt0RgmjSYSjMhb6uYQ8A==",
      "updater": "rhel-vex",
      "name": "CVE-2024-25062",
      "description": "A use-after-free flaw was found in libxml2. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.",
      "issued": "2024-02-04T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-25062 https://bugzilla.redhat.com/show_bug.cgi?id=2262726 https://www.cve.org/CVERecord?id=CVE-2024-25062 https://nvd.nist.gov/vuln/detail/CVE-2024-25062 https://gitlab.gnome.org/GNOME/libxml2/-/issues/604 https://gitlab.gnome.org/GNOME/libxml2/-/tags https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-25062.json https://access.redhat.com/errata/RHSA-2024:2679",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "libxml2",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.9.13-6.el9_4",
      "arch_op": "pattern match"
    },
    "oUkJIbYpxyFXjg//yD+o4A==": {
      "id": "oUkJIbYpxyFXjg//yD+o4A==",
      "updater": "rhel-vex",
      "name": "CVE-2023-39615",
      "description": "A flaw was found in Libxml2, where it contains a global buffer overflow via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a denial of service (DoS) by supplying a crafted XML file.",
      "issued": "2023-08-29T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-39615 https://bugzilla.redhat.com/show_bug.cgi?id=2235864 https://www.cve.org/CVERecord?id=CVE-2023-39615 https://nvd.nist.gov/vuln/detail/CVE-2023-39615 https://gitlab.gnome.org/GNOME/libxml2/-/issues/535 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-39615.json https://access.redhat.com/errata/RHSA-2023:7747",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "libxml2",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.9.13-5.el9_3",
      "arch_op": "pattern match"
    },
    "oc1sV4g+opFl9qII5XGKRQ==": {
      "id": "oc1sV4g+opFl9qII5XGKRQ==",
      "updater": "rhel-vex",
      "name": "CVE-2025-3576",
      "description": "A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes. This may lead to unauthorized message tampering.",
      "issued": "2025-04-15T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-3576 https://bugzilla.redhat.com/show_bug.cgi?id=2359465 https://www.cve.org/CVERecord?id=CVE-2025-3576 https://nvd.nist.gov/vuln/detail/CVE-2025-3576 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-3576.json",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "krb5",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "oov3ViUtB6SINzpltF5uvg==": {
      "id": "oov3ViUtB6SINzpltF5uvg==",
      "updater": "rhel-vex",
      "name": "CVE-2023-4813",
      "description": "A flaw was found in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge.",
      "issued": "2022-03-01T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-4813 https://bugzilla.redhat.com/show_bug.cgi?id=2237798 https://www.cve.org/CVERecord?id=CVE-2023-4813 https://nvd.nist.gov/vuln/detail/CVE-2023-4813 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-4813.json https://access.redhat.com/errata/RHBA-2024:2413",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glibc",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9",
      "arch_op": "pattern match"
    },
    "oqSc7q4k6wTno/u9knscCQ==": {
      "id": "oqSc7q4k6wTno/u9knscCQ==",
      "updater": "rhel-vex",
      "name": "CVE-2024-9681",
      "description": "A vulnerability was found in curl. When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it end sooner or later than intended.",
      "issued": "2024-11-06T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-9681 https://bugzilla.redhat.com/show_bug.cgi?id=2322969 https://www.cve.org/CVERecord?id=CVE-2024-9681 https://nvd.nist.gov/vuln/detail/CVE-2024-9681 https://hackerone.com/reports/2764830 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-9681.json",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "curl",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "osF/ky4wSM3Q72U3bD1FWg==": {
      "id": "osF/ky4wSM3Q72U3bD1FWg==",
      "updater": "rhel-vex",
      "name": "CVE-2024-26461",
      "description": "A memory leak flaw was found in krb5 in /krb5/src/lib/gssapi/krb5/k5sealv3.c. This issue can lead to a denial of service through memory exhaustion.",
      "issued": "2024-02-28T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-26461 https://bugzilla.redhat.com/show_bug.cgi?id=2266740 https://www.cve.org/CVERecord?id=CVE-2024-26461 https://nvd.nist.gov/vuln/detail/CVE-2024-26461 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-26461.json https://access.redhat.com/errata/RHSA-2024:9331",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "krb5-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:1.21.1-3.el9",
      "arch_op": "pattern match"
    },
    "pBoQ+PsAQ5BZXsP3ZwzxpA==": {
      "id": "pBoQ+PsAQ5BZXsP3ZwzxpA==",
      "updater": "rhel-vex",
      "name": "CVE-2023-4813",
      "description": "A flaw was found in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge.",
      "issued": "2022-03-01T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-4813 https://bugzilla.redhat.com/show_bug.cgi?id=2237798 https://www.cve.org/CVERecord?id=CVE-2023-4813 https://nvd.nist.gov/vuln/detail/CVE-2023-4813 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-4813.json https://access.redhat.com/errata/RHBA-2024:2413",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glibc-common",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9",
      "arch_op": "pattern match"
    },
    "pH8+w8Xtk7zJJtrUbdYyhA==": {
      "id": "pH8+w8Xtk7zJJtrUbdYyhA==",
      "updater": "rhel-vex",
      "name": "CVE-2023-4806",
      "description": "A flaw was found in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags.",
      "issued": "2023-09-12T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-4806 https://bugzilla.redhat.com/show_bug.cgi?id=2237782 https://www.cve.org/CVERecord?id=CVE-2023-4806 https://nvd.nist.gov/vuln/detail/CVE-2023-4806 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-4806.json https://access.redhat.com/errata/RHBA-2024:2413",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glibc-minimal-langpack",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9",
      "arch_op": "pattern match"
    },
    "pn8svlPRhNDdX1blrq/avQ==": {
      "id": "pn8svlPRhNDdX1blrq/avQ==",
      "updater": "rhel-vex",
      "name": "CVE-2024-34397",
      "description": "A flaw was found in GNOME GLib. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based client will wrongly interpret as having been sent by the trusted system service. This issue could lead to the GDBus-based client behaving incorrectly with an application-dependent impact.",
      "issued": "2024-05-07T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-34397 https://bugzilla.redhat.com/show_bug.cgi?id=2279632 https://www.cve.org/CVERecord?id=CVE-2024-34397 https://nvd.nist.gov/vuln/detail/CVE-2024-34397 https://gitlab.gnome.org/GNOME/glib/-/issues/3268 https://www.openwall.com/lists/oss-security/2024/05/07/5 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-34397.json https://access.redhat.com/errata/RHSA-2024:6464",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glib2",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.68.4-14.el9_4.1",
      "arch_op": "pattern match"
    },
    "q7sBMd/vv2s2xJ4pQXPOHg==": {
      "id": "q7sBMd/vv2s2xJ4pQXPOHg==",
      "updater": "rhel-vex",
      "name": "CVE-2023-39975",
      "description": "A vulnerability was found in MIT krb5, where an authenticated attacker can cause a KDC to free the same pointer twice if it can induce a failure in authorization data handling.",
      "issued": "2023-08-16T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-39975 https://bugzilla.redhat.com/show_bug.cgi?id=2232682 https://www.cve.org/CVERecord?id=CVE-2023-39975 https://nvd.nist.gov/vuln/detail/CVE-2023-39975 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-39975.json https://access.redhat.com/errata/RHSA-2023:6699",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "krb5-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:1.21.1-1.el9",
      "arch_op": "pattern match"
    },
    "qEeYDq0eQPLYgykJCgjNbg==": {
      "id": "qEeYDq0eQPLYgykJCgjNbg==",
      "updater": "rhel-vex",
      "name": "CVE-2024-28835",
      "description": "A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the \"certtool --verify-chain\" command.",
      "issued": "2024-03-21T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-28835 https://bugzilla.redhat.com/show_bug.cgi?id=2269084 https://www.cve.org/CVERecord?id=CVE-2024-28835 https://nvd.nist.gov/vuln/detail/CVE-2024-28835 https://lists.gnupg.org/pipermail/gnutls-help/2024-March/004845.html https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-28835.json https://access.redhat.com/errata/RHSA-2024:2570",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "gnutls",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:3.8.3-4.el9_4",
      "arch_op": "pattern match"
    },
    "qiEX0D3xIH6PsLjz8RerYA==": {
      "id": "qiEX0D3xIH6PsLjz8RerYA==",
      "updater": "rhel-vex",
      "name": "CVE-2024-33602",
      "description": "A flaw was found in the glibc netgroup cache. The buffer-resizing code in addgetnetgrentX assumes that all string pointers point into the supplied buffer. This can potentially lead to memory corruption and cause a crash.",
      "issued": "2024-04-24T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-33602 https://bugzilla.redhat.com/show_bug.cgi?id=2277206 https://www.cve.org/CVERecord?id=CVE-2024-33602 https://nvd.nist.gov/vuln/detail/CVE-2024-33602 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-33602.json https://access.redhat.com/errata/RHSA-2024:3339",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "glibc",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9_4.2",
      "arch_op": "pattern match"
    },
    "r7FjmMNb7gvjumuk3FvyAw==": {
      "id": "r7FjmMNb7gvjumuk3FvyAw==",
      "updater": "rhel-vex",
      "name": "CVE-2021-35938",
      "description": "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
      "issued": "2021-06-30T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2021-35938 https://bugzilla.redhat.com/show_bug.cgi?id=1964114 https://www.cve.org/CVERecord?id=CVE-2021-35938 https://nvd.nist.gov/vuln/detail/CVE-2021-35938 https://rpm.org/wiki/Releases/4.18.0 https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-35938.json https://access.redhat.com/errata/RHSA-2024:0463",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "rpm",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:4.16.1.3-27.el9_3",
      "arch_op": "pattern match"
    },
    "rGjgjD/Clgx7UEcIO0/VxQ==": {
      "id": "rGjgjD/Clgx7UEcIO0/VxQ==",
      "updater": "rhel-vex",
      "name": "CVE-2023-4911",
      "description": "A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.",
      "issued": "2023-10-03T17:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-4911 https://bugzilla.redhat.com/show_bug.cgi?id=2238352 https://www.cve.org/CVERecord?id=CVE-2023-4911 https://nvd.nist.gov/vuln/detail/CVE-2023-4911 https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt https://www.qualys.com/cve-2023-4911/ https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-4911.json https://access.redhat.com/errata/RHBA-2024:2413",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "glibc",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9",
      "arch_op": "pattern match"
    },
    "rc91cmUN6sQ7UsqR+Khjcw==": {
      "id": "rc91cmUN6sQ7UsqR+Khjcw==",
      "updater": "rhel-vex",
      "name": "CVE-2024-28835",
      "description": "A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the \"certtool --verify-chain\" command.",
      "issued": "2024-03-21T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-28835 https://bugzilla.redhat.com/show_bug.cgi?id=2269084 https://www.cve.org/CVERecord?id=CVE-2024-28835 https://nvd.nist.gov/vuln/detail/CVE-2024-28835 https://lists.gnupg.org/pipermail/gnutls-help/2024-March/004845.html https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-28835.json https://access.redhat.com/errata/RHSA-2024:2570",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "gnutls",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:3.8.3-4.el9_4",
      "arch_op": "pattern match"
    },
    "rqTT1PftBwEJGbicjw/9lQ==": {
      "id": "rqTT1PftBwEJGbicjw/9lQ==",
      "updater": "rhel-vex",
      "name": "CVE-2024-33602",
      "description": "A flaw was found in the glibc netgroup cache. The buffer-resizing code in addgetnetgrentX assumes that all string pointers point into the supplied buffer. This can potentially lead to memory corruption and cause a crash.",
      "issued": "2024-04-24T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-33602 https://bugzilla.redhat.com/show_bug.cgi?id=2277206 https://www.cve.org/CVERecord?id=CVE-2024-33602 https://nvd.nist.gov/vuln/detail/CVE-2024-33602 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-33602.json https://access.redhat.com/errata/RHSA-2024:3339",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "glibc-minimal-langpack",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9_4.2",
      "arch_op": "pattern match"
    },
    "s/Jfbx1UXOiwzCCMDalr1A==": {
      "id": "s/Jfbx1UXOiwzCCMDalr1A==",
      "updater": "rhel-vex",
      "name": "CVE-2023-4813",
      "description": "A flaw was found in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge.",
      "issued": "2022-03-01T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-4813 https://bugzilla.redhat.com/show_bug.cgi?id=2237798 https://www.cve.org/CVERecord?id=CVE-2023-4813 https://nvd.nist.gov/vuln/detail/CVE-2023-4813 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-4813.json https://access.redhat.com/errata/RHBA-2024:2413",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glibc",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9",
      "arch_op": "pattern match"
    },
    "s7lhI3LbQwMT+dukpP3kmg==": {
      "id": "s7lhI3LbQwMT+dukpP3kmg==",
      "updater": "rhel-vex",
      "name": "CVE-2023-6129",
      "description": "A flaw was found in in the POLY1305 MAC (message authentication code) implementation in OpenSSL, affecting applications running on PowerPC CPU-based platforms that utilize vector instructions, and has the potential to corrupt the internal state of these applications. If an attacker can manipulate the utilization of the POLY1305 MAC algorithm, it may lead to the corruption of the application state, resulting in various application-dependent consequences, often resulting in a crash and leading to a denial of service.",
      "issued": "2024-01-09T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-6129 https://bugzilla.redhat.com/show_bug.cgi?id=2257571 https://www.cve.org/CVERecord?id=CVE-2023-6129 https://nvd.nist.gov/vuln/detail/CVE-2023-6129 https://www.openssl.org/news/secadv/20240109.txt https://www.openwall.com/lists/oss-security/2024/01/09/1 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-6129.json https://access.redhat.com/errata/RHSA-2024:2447",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "openssl-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "1:3.0.7-27.el9",
      "arch_op": "pattern match"
    },
    "sJATpvVjqsVCTDPuxN1ZOw==": {
      "id": "sJATpvVjqsVCTDPuxN1ZOw==",
      "updater": "rhel-vex",
      "name": "CVE-2024-4603",
      "description": "A flaw was found in OpenSSL. Applications that use the EVP_PKEY_param_check() or EVP_PKEY_public_check() function to check a DSA public key or DSA parameters may experience long delays when checking excessively long DSA keys or parameters.  In applications that allow untrusted sources to provide the key or parameters that are checked, an attacker may be able to cause a denial of service. These functions are not called by OpenSSL on untrusted DSA keys. The applications that directly call these functions are the ones that may be vulnerable to this issue.",
      "issued": "2024-05-16T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-4603 https://bugzilla.redhat.com/show_bug.cgi?id=2281029 https://www.cve.org/CVERecord?id=CVE-2024-4603 https://nvd.nist.gov/vuln/detail/CVE-2024-4603 https://www.openssl.org/news/secadv/20240516.txt https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-4603.json https://access.redhat.com/errata/RHSA-2024:9333",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "openssl-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "1:3.2.2-6.el9_5",
      "arch_op": "pattern match"
    },
    "scu0fznRerd9B16y1/RO8g==": {
      "id": "scu0fznRerd9B16y1/RO8g==",
      "updater": "rhel-vex",
      "name": "CVE-2023-5363",
      "description": "A flaw was found in OpenSSL in how it processes key and initialization vector (IV) lengths. This issue can lead to potential truncation or overruns during the initialization of some symmetric ciphers. A truncation in the IV can result in non-uniqueness, which could result in loss of confidentiality for some cipher modes. Both truncations and overruns of the key and the IV will produce incorrect results and could, in some cases, trigger a memory exception.",
      "issued": "2023-10-24T15:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-5363 https://bugzilla.redhat.com/show_bug.cgi?id=2243839 https://www.cve.org/CVERecord?id=CVE-2023-5363 https://nvd.nist.gov/vuln/detail/CVE-2023-5363 https://www.openssl.org/news/secadv/20231024.txt https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-5363.json https://access.redhat.com/errata/RHSA-2024:0310",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "openssl-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "1:3.0.7-25.el9_3",
      "arch_op": "pattern match"
    },
    "sut2Jyi9Sg5GxKwdaNmHPg==": {
      "id": "sut2Jyi9Sg5GxKwdaNmHPg==",
      "updater": "rhel-vex",
      "name": "CVE-2019-12900",
      "description": "A data integrity error was found in the bzip2 (User-space package) functionality when decompressing. This issue occurs when a user decompresses a particular kind of .bz2 files. A local user could get unexpected results (or corrupted data) as result of decompressing these files.",
      "issued": "2024-11-15T10:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2019-12900 https://bugzilla.redhat.com/show_bug.cgi?id=2332075 https://www.cve.org/CVERecord?id=CVE-2019-12900 https://nvd.nist.gov/vuln/detail/CVE-2019-12900 https://security.access.redhat.com/data/csaf/v2/vex/2019/cve-2019-12900.json https://access.redhat.com/errata/RHSA-2025:0925",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "bzip2-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:1.0.8-10.el9_5",
      "arch_op": "pattern match"
    },
    "svTCiyRDx3OvFYJBUhuURw==": {
      "id": "svTCiyRDx3OvFYJBUhuURw==",
      "updater": "rhel-vex",
      "name": "CVE-2023-6237",
      "description": "A flaw was found in OpenSSL. When the EVP_PKEY_public_check() function is called in RSA public keys, a computation is done to confirm that the RSA modulus, n, is composite. For valid RSA keys, n is a product of two or more large primes and this computation completes quickly. However, if n is a large prime, this computation takes a long time. An application that calls EVP_PKEY_public_check() and supplies an RSA key obtained from an untrusted source could be vulnerable to a Denial of Service attack.",
      "issued": "2024-01-15T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-6237 https://bugzilla.redhat.com/show_bug.cgi?id=2258502 https://www.cve.org/CVERecord?id=CVE-2023-6237 https://nvd.nist.gov/vuln/detail/CVE-2023-6237 https://www.openssl.org/news/secadv/20240115.txt https://www.openwall.com/lists/oss-security/2024/01/15/2 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-6237.json https://access.redhat.com/errata/RHSA-2024:2447",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "openssl-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "1:3.0.7-27.el9",
      "arch_op": "pattern match"
    },
    "sxAqBgO+QgJyY1S376mbKA==": {
      "id": "sxAqBgO+QgJyY1S376mbKA==",
      "updater": "rhel-vex",
      "name": "CVE-2025-4802",
      "description": "A flaw was found in the glibc library. A statically linked setuid binary that calls dlopen(), including internal dlopen() calls after setlocale() or calls to NSS functions such as getaddrinfo(), may incorrectly search LD_LIBRARY_PATH to determine which library to load, allowing a local attacker to load malicious shared libraries, escalate privileges and execute arbitrary code.",
      "issued": "2025-05-16T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-4802 https://bugzilla.redhat.com/show_bug.cgi?id=2367468 https://www.cve.org/CVERecord?id=CVE-2025-4802 https://nvd.nist.gov/vuln/detail/CVE-2025-4802 https://www.openwall.com/lists/oss-security/2025/05/16/7 https://www.openwall.com/lists/oss-security/2025/05/17/2 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-4802.json https://access.redhat.com/errata/RHSA-2025:8655",
      "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glibc-common",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-168.el9_6.19",
      "arch_op": "pattern match"
    },
    "t+BDL+U2MMfFVxGH0afsVA==": {
      "id": "t+BDL+U2MMfFVxGH0afsVA==",
      "updater": "rhel-vex",
      "name": "CVE-2021-35937",
      "description": "A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
      "issued": "2021-06-30T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2021-35937 https://bugzilla.redhat.com/show_bug.cgi?id=1964125 https://www.cve.org/CVERecord?id=CVE-2021-35937 https://nvd.nist.gov/vuln/detail/CVE-2021-35937 https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-35937.json https://access.redhat.com/errata/RHSA-2024:0463",
      "severity": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "rpm",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:4.16.1.3-27.el9_3",
      "arch_op": "pattern match"
    },
    "t+NryM+08plBxhjTGAyZtQ==": {
      "id": "t+NryM+08plBxhjTGAyZtQ==",
      "updater": "rhel-vex",
      "name": "CVE-2024-2961",
      "description": "An out-of-bounds write flaw was found in the ISO-2022-CN-EXT plugin for glibc's iconv library. When converting from UCS4 charset, adding certain escape charterers is required to indicate where the charset was changed to the library. During this process, iconv improperly checks the boundaries of internal buffers, leading to a buffer overflow, which allows writing up to 3 bytes outside the desired memory location. This issue may allow an attacker to craft a malicious characters sequence that will trigger the out-of-bounds write and perform remote code execution, presenting a high impact to the Integrity, Confidentiality, and Availability triad.",
      "issued": "2024-04-17T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-2961 https://bugzilla.redhat.com/show_bug.cgi?id=2273404 https://www.cve.org/CVERecord?id=CVE-2024-2961 https://nvd.nist.gov/vuln/detail/CVE-2024-2961 https://www.openwall.com/lists/oss-security/2024/04/17/9 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-2961.json https://access.redhat.com/errata/RHSA-2024:3339",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "glibc-minimal-langpack",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9_4.2",
      "arch_op": "pattern match"
    },
    "t7klIbkcqJpX+Hibob7+Dg==": {
      "id": "t7klIbkcqJpX+Hibob7+Dg==",
      "updater": "rhel-vex",
      "name": "CVE-2022-29458",
      "description": "A segmentation fault vulnerability was found in ncurses's convert_strings() function of tinfo/read_entry.c file. This flaw occurs due to corrupted terminfo data, triggering an out-of-bounds read error.",
      "issued": "2022-04-18T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2022-29458 https://bugzilla.redhat.com/show_bug.cgi?id=2076483 https://www.cve.org/CVERecord?id=CVE-2022-29458 https://nvd.nist.gov/vuln/detail/CVE-2022-29458 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-29458.json",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "ncurses",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "tYNhc55MEKpBCY8cSsXw5Q==": {
      "id": "tYNhc55MEKpBCY8cSsXw5Q==",
      "updater": "rhel-vex",
      "name": "CVE-2024-56171",
      "description": "A flaw was found in libxml2. This vulnerability allows a use-after-free via a crafted XML document validated against an XML schema with certain identity constraints or a crafted XML schema.",
      "issued": "2025-02-18T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-56171 https://bugzilla.redhat.com/show_bug.cgi?id=2346416 https://www.cve.org/CVERecord?id=CVE-2024-56171 https://nvd.nist.gov/vuln/detail/CVE-2024-56171 https://gitlab.gnome.org/GNOME/libxml2/-/issues/828 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-56171.json https://access.redhat.com/errata/RHSA-2025:2679",
      "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "libxml2",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.9.13-6.el9_5.2",
      "arch_op": "pattern match"
    },
    "tbhLz74i3ShwS72WbIsoOA==": {
      "id": "tbhLz74i3ShwS72WbIsoOA==",
      "updater": "rhel-vex",
      "name": "CVE-2023-50495",
      "description": "A vulnerability was found in the NCurses package, where a segmentation fault may be triggered through _nc_wrap_entry().",
      "issued": "2023-12-12T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-50495 https://bugzilla.redhat.com/show_bug.cgi?id=2254244 https://www.cve.org/CVERecord?id=CVE-2023-50495 https://nvd.nist.gov/vuln/detail/CVE-2023-50495 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-50495.json",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "ncurses",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "uivtLheXzNSAAluN6T99Wg==": {
      "id": "uivtLheXzNSAAluN6T99Wg==",
      "updater": "rhel-vex",
      "name": "CVE-2024-33599",
      "description": "A stack-based buffer overflow flaw was found in the glibc netgroup cache. In certain conditions, its possible to trigger a stack-based buffer overflow condition that can lead to a denial of service and potentially other malicious actions that impact confidentiality and integrity.",
      "issued": "2024-04-23T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-33599 https://bugzilla.redhat.com/show_bug.cgi?id=2277202 https://www.cve.org/CVERecord?id=CVE-2024-33599 https://nvd.nist.gov/vuln/detail/CVE-2024-33599 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-33599.json https://access.redhat.com/errata/RHSA-2024:3339",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "glibc-common",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9_4.2",
      "arch_op": "pattern match"
    },
    "uv0xK+bSjUByf+SifqjJ2Q==": {
      "id": "uv0xK+bSjUByf+SifqjJ2Q==",
      "updater": "rhel-vex",
      "name": "CVE-2025-24928",
      "description": "A flaw was found in libxml2. This vulnerability allows a stack-based buffer overflow via DTD validation of an untrusted document or untrusted DTD.",
      "issued": "2025-02-18T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-24928 https://bugzilla.redhat.com/show_bug.cgi?id=2346421 https://www.cve.org/CVERecord?id=CVE-2025-24928 https://nvd.nist.gov/vuln/detail/CVE-2025-24928 https://gitlab.gnome.org/GNOME/libxml2/-/issues/847 https://issues.oss-fuzz.com/issues/392687022 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24928.json https://access.redhat.com/errata/RHSA-2025:2679",
      "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "libxml2",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.9.13-6.el9_5.2",
      "arch_op": "pattern match"
    },
    "v/e7DnxVAlpegLOsTN2UPQ==": {
      "id": "v/e7DnxVAlpegLOsTN2UPQ==",
      "updater": "rhel-vex",
      "name": "CVE-2023-27534",
      "description": "A path traversal vulnerability exists in curl \u003c8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can exploit this flaw to bypass filtering or execute arbitrary code by crafting a path like /~2/foo while accessing a server with a specific user.",
      "issued": "2023-03-20T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-27534 https://bugzilla.redhat.com/show_bug.cgi?id=2179069 https://www.cve.org/CVERecord?id=CVE-2023-27534 https://nvd.nist.gov/vuln/detail/CVE-2023-27534 https://curl.se/docs/CVE-2023-27534.html https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-27534.json https://access.redhat.com/errata/RHSA-2023:6679",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "libcurl-minimal",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:7.76.1-26.el9",
      "arch_op": "pattern match"
    },
    "vFqFaRQ2FFEeoiQHO0D5Rw==": {
      "id": "vFqFaRQ2FFEeoiQHO0D5Rw==",
      "updater": "rhel-vex",
      "name": "CVE-2024-52533",
      "description": "A flaw was found in the Glib library. A buffer overflow condition can be triggered in certain conditions due to an off-by-one error in SOCKS4_CONN_MSG_LEN. This issue may lead to an application crash or other undefined behavior.",
      "issued": "2024-11-11T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-52533 https://bugzilla.redhat.com/show_bug.cgi?id=2325340 https://www.cve.org/CVERecord?id=CVE-2024-52533 https://nvd.nist.gov/vuln/detail/CVE-2024-52533 https://gitlab.gnome.org/GNOME/glib/-/issues/3461 https://gitlab.gnome.org/GNOME/glib/-/releases/2.82.1 https://gitlab.gnome.org/Teams/Releng/security/-/wikis/home https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-52533.json",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glib2",
        "version": "",
        "kind": "source",
        "normalized_version": "",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*"
      },
      "fixed_in_version": ""
    },
    "vSprYPjt0fuICUjiB4/LWg==": {
      "id": "vSprYPjt0fuICUjiB4/LWg==",
      "updater": "rhel-vex",
      "name": "CVE-2025-4802",
      "description": "A flaw was found in the glibc library. A statically linked setuid binary that calls dlopen(), including internal dlopen() calls after setlocale() or calls to NSS functions such as getaddrinfo(), may incorrectly search LD_LIBRARY_PATH to determine which library to load, allowing a local attacker to load malicious shared libraries, escalate privileges and execute arbitrary code.",
      "issued": "2025-05-16T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-4802 https://bugzilla.redhat.com/show_bug.cgi?id=2367468 https://www.cve.org/CVERecord?id=CVE-2025-4802 https://nvd.nist.gov/vuln/detail/CVE-2025-4802 https://www.openwall.com/lists/oss-security/2025/05/16/7 https://www.openwall.com/lists/oss-security/2025/05/17/2 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-4802.json https://access.redhat.com/errata/RHSA-2025:8655",
      "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glibc-common",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-168.el9_6.19",
      "arch_op": "pattern match"
    },
    "vYVfNkdHVoix1j9S6G4zoQ==": {
      "id": "vYVfNkdHVoix1j9S6G4zoQ==",
      "updater": "rhel-vex",
      "name": "CVE-2024-37370",
      "description": "A vulnerability was found in the MIT Kerberos 5 GSS krb5 wrap token, where an attacker can modify the plaintext Extra Count field, causing the unwrapped token to appear truncated to the application, occurs when the attacker alters the token data during transmission which can lead to improper handling of authentication tokens.",
      "issued": "2024-06-27T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-37370 https://bugzilla.redhat.com/show_bug.cgi?id=2294677 https://www.cve.org/CVERecord?id=CVE-2024-37370 https://nvd.nist.gov/vuln/detail/CVE-2024-37370 https://web.mit.edu/kerberos/www/krb5-1.21/ https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-37370.json https://access.redhat.com/errata/RHSA-2024:6166",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "krb5-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:1.21.1-2.el9_4",
      "arch_op": "pattern match"
    },
    "wQDBiN+ZfYCbBccIgJzPcQ==": {
      "id": "wQDBiN+ZfYCbBccIgJzPcQ==",
      "updater": "rhel-vex",
      "name": "CVE-2023-32665",
      "description": "A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue where a crafted GVariant can cause excessive processing, leading to denial of service.",
      "issued": "2022-12-14T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-32665 https://bugzilla.redhat.com/show_bug.cgi?id=2211827 https://www.cve.org/CVERecord?id=CVE-2023-32665 https://nvd.nist.gov/vuln/detail/CVE-2023-32665 https://gitlab.gnome.org/GNOME/glib/-/issues/2121 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-32665.json https://access.redhat.com/errata/RHSA-2023:6631",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "glib2",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.68.4-11.el9",
      "arch_op": "pattern match"
    },
    "wZIEsQ9bd8H+dXqqJhsClg==": {
      "id": "wZIEsQ9bd8H+dXqqJhsClg==",
      "updater": "rhel-vex",
      "name": "CVE-2025-24528",
      "description": "A flaw was found in krb5. With incremental propagation enabled, an authenticated attacker can cause kadmind to write beyond the end of the mapped region for the iprop log file. This issue can trigger a process crash and lead to a denial of service.",
      "issued": "2024-01-28T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-24528 https://bugzilla.redhat.com/show_bug.cgi?id=2342796 https://www.cve.org/CVERecord?id=CVE-2025-24528 https://nvd.nist.gov/vuln/detail/CVE-2025-24528 https://github.com/krb5/krb5/commit/78ceba024b64d49612375be4a12d1c066b0bfbd0 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24528.json https://access.redhat.com/errata/RHSA-2025:7067",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "krb5-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:1.21.1-6.el9",
      "arch_op": "pattern match"
    },
    "x9N9k4kphpFolh1H8PHEEA==": {
      "id": "x9N9k4kphpFolh1H8PHEEA==",
      "updater": "rhel-vex",
      "name": "CVE-2025-4802",
      "description": "A flaw was found in the glibc library. A statically linked setuid binary that calls dlopen(), including internal dlopen() calls after setlocale() or calls to NSS functions such as getaddrinfo(), may incorrectly search LD_LIBRARY_PATH to determine which library to load, allowing a local attacker to load malicious shared libraries, escalate privileges and execute arbitrary code.",
      "issued": "2025-05-16T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2025-4802 https://bugzilla.redhat.com/show_bug.cgi?id=2367468 https://www.cve.org/CVERecord?id=CVE-2025-4802 https://nvd.nist.gov/vuln/detail/CVE-2025-4802 https://www.openwall.com/lists/oss-security/2025/05/16/7 https://www.openwall.com/lists/oss-security/2025/05/17/2 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-4802.json https://access.redhat.com/errata/RHSA-2025:8655",
      "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "glibc",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-168.el9_6.19",
      "arch_op": "pattern match"
    },
    "xKwaDB7aG2oH2GrBtebXYQ==": {
      "id": "xKwaDB7aG2oH2GrBtebXYQ==",
      "updater": "rhel-vex",
      "name": "CVE-2023-2975",
      "description": "A vulnerability was found in OpenSSL. The AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries, which are unauthenticated as a consequence. Applications that use the AES-SIV algorithm and want to authenticate empty data entries as associated data can be misled by removing, adding, or reordering such empty entries as these are ignored by the OpenSSL implementation. The AES-SIV algorithm allows for the authentication of multiple associated data entries and encryption. To authenticate empty data, the application has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with a NULL pointer as the output buffer and 0 as the input buffer length. The AES-SIV implementation in OpenSSL returns success for such a call instead of performing the associated data authentication operation. Thus, the empty data will not be authenticated.",
      "issued": "2023-07-07T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-2975 https://bugzilla.redhat.com/show_bug.cgi?id=2223016 https://www.cve.org/CVERecord?id=CVE-2023-2975 https://nvd.nist.gov/vuln/detail/CVE-2023-2975 https://www.openssl.org/news/secadv/20230714.txt https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-2975.json https://access.redhat.com/errata/RHSA-2024:2447",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
      "normalized_severity": "Low",
      "package": {
        "id": "",
        "name": "openssl-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*"
      },
      "fixed_in_version": "1:3.0.7-27.el9",
      "arch_op": "pattern match"
    },
    "xoBHgfp5wgIWy3GYQTKJQQ==": {
      "id": "xoBHgfp5wgIWy3GYQTKJQQ==",
      "updater": "rhel-vex",
      "name": "CVE-2024-12133",
      "description": "A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack.",
      "issued": "2025-02-10T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-12133 https://bugzilla.redhat.com/show_bug.cgi?id=2344611 https://www.cve.org/CVERecord?id=CVE-2024-12133 https://nvd.nist.gov/vuln/detail/CVE-2024-12133 https://gitlab.com/gnutls/libtasn1/-/issues/52 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-12133.json https://access.redhat.com/errata/RHSA-2025:7077",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "libtasn1",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:4.16.0-9.el9",
      "arch_op": "pattern match"
    },
    "y7LeLW+UNa9OXTJsedT1pg==": {
      "id": "y7LeLW+UNa9OXTJsedT1pg==",
      "updater": "rhel-vex",
      "name": "CVE-2024-28834",
      "description": "A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits, exposing a potential timing side-channel.",
      "issued": "2024-03-21T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-28834 https://bugzilla.redhat.com/show_bug.cgi?id=2269228 https://www.cve.org/CVERecord?id=CVE-2024-28834 https://nvd.nist.gov/vuln/detail/CVE-2024-28834 https://lists.gnupg.org/pipermail/gnutls-help/2024-March/004845.html https://minerva.crocs.fi.muni.cz/ https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-28834.json https://access.redhat.com/errata/RHSA-2024:2570",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "gnutls",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|src|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:3.8.3-4.el9_4",
      "arch_op": "pattern match"
    },
    "yFyXcq1E5bw+omyiCv+CnQ==": {
      "id": "yFyXcq1E5bw+omyiCv+CnQ==",
      "updater": "rhel-vex",
      "name": "CVE-2023-7008",
      "description": "A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.",
      "issued": "2022-12-08T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-7008 https://bugzilla.redhat.com/show_bug.cgi?id=2222672 https://www.cve.org/CVERecord?id=CVE-2023-7008 https://nvd.nist.gov/vuln/detail/CVE-2023-7008 https://bugzilla.redhat.com/show_bug.cgi?id=2222261 https://github.com/systemd/systemd/issues/25676 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-7008.json https://access.redhat.com/errata/RHSA-2024:2463",
      "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "systemd-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:252-32.el9_4",
      "arch_op": "pattern match"
    },
    "yHqTDX5RE8eUKM9rdC//Mg==": {
      "id": "yHqTDX5RE8eUKM9rdC//Mg==",
      "updater": "rhel-vex",
      "name": "CVE-2024-26462",
      "description": "A memory leak flaw was found in krb5 in /krb5/src/kdc/ndr.c. This issue can lead to a denial of service through memory exhaustion.",
      "issued": "2024-02-28T00:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2024-26462 https://bugzilla.redhat.com/show_bug.cgi?id=2266742 https://www.cve.org/CVERecord?id=CVE-2024-26462 https://nvd.nist.gov/vuln/detail/CVE-2024-26462 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-26462.json https://access.redhat.com/errata/RHSA-2024:9331",
      "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "normalized_severity": "Medium",
      "package": {
        "id": "",
        "name": "krb5-libs",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|i686|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:1.21.1-3.el9",
      "arch_op": "pattern match"
    },
    "zw0cARVh3jgrbyVziYo6DQ==": {
      "id": "zw0cARVh3jgrbyVziYo6DQ==",
      "updater": "rhel-vex",
      "name": "CVE-2023-4911",
      "description": "A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.",
      "issued": "2023-10-03T17:00:00Z",
      "links": "https://access.redhat.com/security/cve/CVE-2023-4911 https://bugzilla.redhat.com/show_bug.cgi?id=2238352 https://www.cve.org/CVERecord?id=CVE-2023-4911 https://nvd.nist.gov/vuln/detail/CVE-2023-4911 https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt https://www.qualys.com/cve-2023-4911/ https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-4911.json https://access.redhat.com/errata/RHBA-2024:2413",
      "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "normalized_severity": "High",
      "package": {
        "id": "",
        "name": "glibc-common",
        "version": "",
        "kind": "binary",
        "normalized_version": "",
        "arch": "aarch64|ppc64le|s390x|x86_64",
        "cpe": ""
      },
      "distribution": {
        "id": "",
        "did": "",
        "name": "",
        "version": "",
        "version_code_name": "",
        "version_id": "",
        "arch": "",
        "cpe": "",
        "pretty_name": ""
      },
      "repository": {
        "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
        "key": "rhel-cpe-repository",
        "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*"
      },
      "fixed_in_version": "0:2.34-100.el9",
      "arch_op": "pattern match"
    }
  },
  "package_vulnerabilities": {
    "+UVLfP94O7FKWQedQPvwWw==": [
      "OXQ7H2CaA5DhIn9wkh9zjA==",
      "5DWxn7dmJcIfTQzzUA2+nA==",
      "9O8vLtOdyUMO1soTy2OBGw==",
      "irh5kSvT+LkcgG9ddEDxbg==",
      "qEeYDq0eQPLYgykJCgjNbg==",
      "YrX1xPwGMuZ6z8Qz+xH8CQ==",
      "y7LeLW+UNa9OXTJsedT1pg==",
      "FdHZNK1wtI6/xHHLNOjd7w==",
      "A7bcOuxkjccnpaTXIAxpLw==",
      "jD8UkMRQckMY49rmmq/l/w==",
      "I6USarzQiNF0WDmxnwYl6Q==",
      "jlGZMt4HZ4sFDGyWBYiG5A==",
      "rc91cmUN6sQ7UsqR+Khjcw==",
      "eLH64OubpdVT5P7gyNiMhw==",
      "DAaQgj58NrubTxbgg0RwcA==",
      "dQtkeBg4aMq+iqhRXRyUDQ=="
    ],
    "0A/c+uC9xs5LmvEMZeRwuQ==": [
      "S3QNU6jy5TEnJU2t9h6F+A==",
      "Dx77Vhdnp5MtAgyIT881TQ==",
      "PAUv+MU3xwsjx5jndGYXQA==",
      "vYVfNkdHVoix1j9S6G4zoQ==",
      "yHqTDX5RE8eUKM9rdC//Mg==",
      "RfP0HFLmxGH5ZWk1oGaF+A==",
      "mk1XE0ocPMZ1zLQU00rlYA==",
      "mTe73yDGtNKBR9vMgderPA==",
      "wZIEsQ9bd8H+dXqqJhsClg==",
      "oc1sV4g+opFl9qII5XGKRQ==",
      "L2MoZbVdo8+qepBivoAPsQ==",
      "6hxITWtIkDQpBjQM5vKOkA==",
      "0zv+xomxIiCvJFT5PKrlsg==",
      "e8C6jymFUSIHopouPFGGFQ==",
      "/eopcBL7Sl3Br4tMJEoF+Q==",
      "osF/ky4wSM3Q72U3bD1FWg==",
      "q7sBMd/vv2s2xJ4pQXPOHg==",
      "C0CVf3gKIXy0pxUEC+HbFA==",
      "a7uz8mOwNYThyDdvXW+WsA=="
    ],
    "1h9uHE0QiXBO/zpJrT0VjA==": [
      "1lRtJofWFCTkQi0dreTmvg==",
      "P9a8nTOFDYbTUSMNt0VDfg==",
      "t7klIbkcqJpX+Hibob7+Dg==",
      "tbhLz74i3ShwS72WbIsoOA==",
      "lKniGV6mBq1xFWJ6V0QVvA=="
    ],
    "2fg1ZRYCSPKKOgCxCcA36w==": [
      "sut2Jyi9Sg5GxKwdaNmHPg==",
      "OAFgQI0NLiTuwa5m3oeKvw=="
    ],
    "2o98V0sT38kVqiwC3FlZKw==": [
      "4asubKvJrlJVsaeeKleZeQ==",
      "RIwina92/O63CIQtdCj6Ug=="
    ],
    "7kedTb4EJLDAcGarhqe+lQ==": [
      "/WQB0Cmnj06XJWCr3nqOoA==",
      "r7FjmMNb7gvjumuk3FvyAw==",
      "ac6BZ0tqO6i0QQDCZWfGNg==",
      "k/CdFos3+OXmV6TI04xnUQ==",
      "ax7ntKztjjUex0Fnm21atg==",
      "t+BDL+U2MMfFVxGH0afsVA=="
    ],
    "9m+4P/rW2R4cZr2RRaGc7A==": [
      "vSprYPjt0fuICUjiB4/LWg==",
      "zw0cARVh3jgrbyVziYo6DQ==",
      "SPfe8rryClHnE6BuUSP4YA==",
      "0QiVY9M19b7tjbpn/ViWqA==",
      "uivtLheXzNSAAluN6T99Wg==",
      "XpTqsrTo5GhyVoXq1J6R1A==",
      "pBoQ+PsAQ5BZXsP3ZwzxpA==",
      "AqIetzkTw3mVI6hiusMy1w==",
      "buJgcdzjkcqlPTjRHlv+aQ==",
      "4bsXMyNX8A2vDNbincmT7A==",
      "06nVp3HoQkp2GMYq8FEEOw==",
      "sxAqBgO+QgJyY1S376mbKA==",
      "CCTTGeQPsaGe9k69jAJeHQ==",
      "OELX0txDNvSSX5G8K8KlJg==",
      "RTIOYNKa5k5ts9Kih1+7yw==",
      "W9IBxWrtUMKgo5IOhKlFMw==",
      "ddgghMsgXhjnixlaC8h3Zw==",
      "ABgAEtKLJJ3BQYa4+jCHyg==",
      "YNMtsn/tcZvCfn+cUvP3pg==",
      "M9ekoeOzelYJSf4p5TpoJg==",
      "0s+Oo3nd8zFM1b/9W/xFMg=="
    ],
    "AnHvlYoTKSxzg0JMVMiJkg==": [
      "lDV5qcTcJkBCbILUcFq4dA=="
    ],
    "C7VGVckK0YZj4RiVmStEsA==": [
      "enCBbxIBBG9uJBIJ2Silsw==",
      "ek3+7A2JecsNdDGEqoDjTQ==",
      "HxI42iSjURjRki+uV6q/9w==",
      "hbOAbiOJ6F6ohNePMmRtlQ==",
      "XeJxNps2a1xzV61fNDZUHg=="
    ],
    "Clbp1ERO3UWUCfklcBdPow==": [
      "SH6jsaECmWs0mj3SMlChWA=="
    ],
    "DF9A9iyHS74eLz1WptgqEw==": [
      "DLttSzeHzaVnO33nSnt80A==",
      "F/E7m2THTaTl0s46g5J9Qw==",
      "/oK+zNt0cQ+IZv2Cz+p1ow==",
      "jU6R01smYIMn3KeQZsQ68g==",
      "hiF9bhRE95azD1Yk9fu+ZA==",
      "FL8qoTgXQjuCQf4vtGJ2JA==",
      "aJnNGTgV/SQw08JCZMvqeA==",
      "kHjC5QVIEbAPA3Kvkur0dg==",
      "a9FllBAJiFi5FeYl0KG4aQ==",
      "Pza9Y2xtH9MChVMkZwgw2A==",
      "oqSc7q4k6wTno/u9knscCQ==",
      "7nWSET5rvC0ef4ukzNTUGQ==",
      "9O6eBDd9OtueXKQaS30JHQ==",
      "NETfvu2mgbpmZZcrjbxOYg==",
      "hQhn3O6sw4QusprpMJeLag==",
      "M3U4dY4DNzzwTtzYkhXUMA==",
      "izjZI/AsSlkRCQFNfC3oCA==",
      "O1JHrWWpvsl8fn/ssFRoQg==",
      "S8k5xDZW6CKWQt5V5/wRBA=="
    ],
    "HbglDdnV9yne0i8jQL30HA==": [
      "xoBHgfp5wgIWy3GYQTKJQQ==",
      "NcPLoHAzsoXhM7GdshqtXA=="
    ],
    "JQNq+OC3WhGyVEKcjFoRxg==": [
      "yFyXcq1E5bw+omyiCv+CnQ==",
      "AsiuN/8gu7sZ0PJCLihjmw==",
      "0XyIJoIqTLxnYiZet4x5Yg==",
      "6eMjths7OctCI6zbpR/CJw=="
    ],
    "PTFUIquIrYO4PcMvo6vxMg==": [
      "jlhRpuK0j9viGlxiAnKR7w==",
      "UNpQq3W7NuU/YvxyKob7dQ==",
      "2CeZCuCny7jSZBuuaMXULg==",
      "Dmj+1Th9y/xKrHIFa6FtQA==",
      "AOqYiSRMsYI7D2mmuqAtJA==",
      "dx/et2OZXdYVZSrhJfSrZw=="
    ],
    "PW1RAxkiwx83tVBhyQViyw==": [
      "lJeTT/Y9HVuGmrDkd/kJpw==",
      "Y3WKF6/Qa3b8kujepTuCsg==",
      "BLkI3n1XefyybyaipLStXA=="
    ],
    "R9VobIcNNshV6E8DetHeXA==": [
      "U6qBKCP/toaRYToALpEUAg==",
      "NHVF8uSdIs3qjmJ3d32Guw==",
      "PT1sohtQtbutC5G9fp60Bw==",
      "s7lhI3LbQwMT+dukpP3kmg==",
      "svTCiyRDx3OvFYJBUhuURw==",
      "/s1A0DUzgN/pTr1DN27Mlg==",
      "arTUuvS7/95E2eEJJD9lOQ==",
      "nPSgEkWJB1b5/FQHoj8iDQ==",
      "Q9ZepVg3erGzmkHdoohUTw==",
      "4flqiPbmTauic3ijyT75yw==",
      "O6K8wxAPcmLr8qOIbQ6uMA==",
      "scu0fznRerd9B16y1/RO8g==",
      "21rba03Cro+scmMld7bHyw==",
      "Gt1/7zqpYq3ilRksfYs0Fw==",
      "1CEt59+PK/QZsDtTC+bpGg==",
      "6hAQW3vY9ZA/8datv1rY4g==",
      "gJB4UR04diqd8I+vxY+1fA==",
      "0DMa5ftnj+HYBOgjKFl2gQ==",
      "KcLk8c2v0kqHAbhhwfgdpA==",
      "Mg8SgrJU+lTo8Y3PGUgkTA==",
      "P3nYYaDmet+LJ8m5KZeEvw==",
      "sJATpvVjqsVCTDPuxN1ZOw==",
      "58xY9Xj25VNzU8f4Nsn43Q==",
      "xKwaDB7aG2oH2GrBtebXYQ==",
      "bkhxy13HX9frw7feognLPA==",
      "VMq7c5UxVfK0QVgxJQyC8w==",
      "NrmEp7ITzyyHtVTCw3MlhQ==",
      "gC3dJaA81IvQxpeDciVx9Q==",
      "3xq4PznUGaWv+UklhKhOCw==",
      "4WTOrslnIqtUscmv3OpUqw=="
    ],
    "SILSy5+vMjyw0TX1rOWbmg==": [
      "+6d/SeOQYGr+iTSAhpcDwA==",
      "53g2lPwzOLmoqCCLIr2InQ==",
      "bs/xgRqGmS+1ZakXV+VWbw==",
      "epxZ48/SIfLXd06fZqIspg==",
      "grTEewXQ3rAV4agaHcml8w==",
      "0ZY5ysR3Nkqr0/VhSIiqfw==",
      "X1XbXShyT1+HQUnA5EVJNw==",
      "pH8+w8Xtk7zJJtrUbdYyhA==",
      "mGnF1yHBoKIJbRzNCdab+Q==",
      "rqTT1PftBwEJGbicjw/9lQ==",
      "06nVp3HoQkp2GMYq8FEEOw==",
      "UcmwUm0wHBjv37lXXIJfRw==",
      "gW0KUmpTUJYEkCwOP2FqGA==",
      "VOg7AkFDBokEo83cvkABxg==",
      "Wz8kfsjiUN7loN7RE4toRg==",
      "fbGCR/SwRYoDsuegA9WoiQ==",
      "t+NryM+08plBxhjTGAyZtQ==",
      "m8JLumk5EhM5fKwi6Y9sfw==",
      "YNouFTBaiJNQFxYyrJAQcA==",
      "8E2ckAPYq5vgQQfdGbTALQ==",
      "X2Ku0r4j5/TnyjHzd2AMwA=="
    ],
    "SSFXEK4vNCR4s9ImWtXtgA==": [
      "AUiFITCnRjRxctzqqbDeeA==",
      "GAn7gWUe2pFr7PbwechqxA=="
    ],
    "Vq6OZiGbhChZZ27EcmF1PA==": [
      "nXKbfJDunfdn7rpKOTEQaQ==",
      "8090a+9YHf/MvdRFP7qTAw=="
    ],
    "W4amAY83CsyR7zQ0GM7zsg==": [
      "S5Dzz9cigoJDCj8s5UcT0g=="
    ],
    "bbOmNWQZu2GtbHRNTT5LbA==": [
      "S5Dzz9cigoJDCj8s5UcT0g=="
    ],
    "dMY7Qly4vcBOdARECvhzxQ==": [
      "hRMmSXWNjnz6N6DylTgifg==",
      "P9a8nTOFDYbTUSMNt0VDfg==",
      "t7klIbkcqJpX+Hibob7+Dg==",
      "tbhLz74i3ShwS72WbIsoOA==",
      "AtWoYkoBl9avwxLPtk70fw=="
    ],
    "fhqVflOEiGLnOOgEUvGuSQ==": [
      "06nVp3HoQkp2GMYq8FEEOw==",
      "x9N9k4kphpFolh1H8PHEEA==",
      "0INnWKjjSMNVc6OCjv18YA==",
      "0+YAs+Dy3SPd130Wus0uxQ==",
      "lzzMoGjfCQVwFi4bhK2jEA==",
      "Syx/gjnL4FVa+aLlI5iPYA==",
      "CKyr7yp8MCOkPhmRI+ObRw==",
      "s/Jfbx1UXOiwzCCMDalr1A==",
      "kAqWBUicknsNlYe6T7rf3w==",
      "iUX24ei3drbG8K2ZPOVF1w==",
      "qiEX0D3xIH6PsLjz8RerYA==",
      "lShNjxk/0kUQZo1dsKp7Lg==",
      "rGjgjD/Clgx7UEcIO0/VxQ==",
      "S26cXHzIjCvMHy8DUlbXOg==",
      "ThmcBPFcasOrE2B95BADjQ==",
      "JNF5Te1xcV1nlv2CXSyRdg==",
      "dDqXtPkCzlt66cmXbEzdNg==",
      "oov3ViUtB6SINzpltF5uvg==",
      "EoQrZ5N7i4JBUoj0xAeL3Q==",
      "JlVcDBeAbzDMosineu4gZQ==",
      "51LUS52PmOp1zHrTW3se6w=="
    ],
    "gqOdH0Kiuf6AbkqFcLH1hg==": [
      "Kqq2xlybjD/tOLmQWu2xPw==",
      "gr6cX5pFzua7lsdikMJZaA==",
      "VWEbeFnFOHy1IkG21b5a5g==",
      "h08ca9AawAYymWtiO1A44A==",
      "2SApI7oHpcm9Z48+2Hj11w==",
      "Ku0iCN64UKn/F7rmu3Ggjg==",
      "fwfAtjf5gVRneidAp93edQ==",
      "Rs2w9Uui+dW2Lg48Ml6jpw=="
    ],
    "iODVJwGc39HK9YJaL/S8oA==": [
      "RtSOg3g9DhQAy4EV/TL4ow==",
      "ixc06f0H9vqMfsbwQSwwvA==",
      "vFqFaRQ2FFEeoiQHO0D5Rw==",
      "e0VfCD1REapdkagkByCnXQ==",
      "X0yRty1CAF/BkqF0tnfBQQ==",
      "3XaVgHeIFJL3w2B85i3krw==",
      "pn8svlPRhNDdX1blrq/avQ==",
      "71mUiqp9K+KrPPMFd0Gr9A==",
      "BrBV5lr2Oniu9+XAGvI91A==",
      "wQDBiN+ZfYCbBccIgJzPcQ==",
      "gGstDOffozUq96qPOjU3Cw==",
      "cPlqbimjP0WfKIKsSfuixQ=="
    ],
    "kdml4TiffKDDUHJjP7R1Tg==": [
      "lDV5qcTcJkBCbILUcFq4dA=="
    ],
    "l0z+eHWKZYYL3mOicWgc2w==": [
      "IpfgPSRwb+bSNtOR59K02g==",
      "Y3WKF6/Qa3b8kujepTuCsg==",
      "9FKHFApkWswWkHyGdodK0g=="
    ],
    "rY/kE/V4JnxYoqV+lmc9mg==": [
      "DDxCHnX+kCqcRQj9b90/cg=="
    ],
    "uwkXfq5VvKEldZwWOwGq4w==": [
      "hMkYbCHpeOKQraSBEl8+Aw==",
      "akyADtY97pCYfGQtx4g3Vw=="
    ],
    "xDkggOSr/Uc0l1xliF0UBA==": [
      "3ktHS+YZSMYXCkYy+yNUcA==",
      "EfJQ14qFSb1S0rB4VJRXzg=="
    ],
    "xmGRecRK4z0HZrD157U0cw==": [
      "JSxIEGIOCwboUDoJZgS9fA=="
    ],
    "xzagOg0jEKrK7kuJB0AXWg==": [
      "RrbNEAZ+bJrZ+zzACvAjBw==",
      "cp/A6si6B6vWVQNk17XSnQ==",
      "K3j3nYCvhPD02WXNRIsNow==",
      "NqnvbAJ9TE8i+K0jPU+gTA==",
      "v/e7DnxVAlpegLOsTN2UPQ==",
      "mzudbhzyxeahL7ZqcHKBNA==",
      "8aaFS1jGAsM+0YwLvTiCyw==",
      "RIB897UdZi2GShqV1cDBcw==",
      "a9FllBAJiFi5FeYl0KG4aQ==",
      "Pza9Y2xtH9MChVMkZwgw2A==",
      "oqSc7q4k6wTno/u9knscCQ==",
      "J4b5dVoVJ6TOvSQqt+geLg==",
      "F6QBkHsQuDYkHPuVPox4pw==",
      "Toocv9UWe2zbLkvuaDfUkA==",
      "ZdCiHmwhX39f7Nxq9Dvfig==",
      "EdSmJzT79gNsCaz3hmp+zw==",
      "o4XSf3iuWcKQUGp2hHoEXw==",
      "fLQFCII8wF0O4a+xMrB5uA==",
      "2sdR4GjmaEV2ZFIV+TVU6A=="
    ],
    "zk7rVs3iwRY0RF5GLXu1Lw==": [
      "giLBrK6czoD3l3BDs0Jfcw==",
      "OFIelSTGJAvnMHk6/6CzoA==",
      "3+Tq4mPPOiL6olm2GLk5Mg==",
      "3VdtHqtIaf9cjYBkwOn6/g==",
      "jiVVTQmOtKqVixv7agF/Hg==",
      "XMZYTX/i7lOXfIPea0g5sg==",
      "8kndQj/aRn+NNJdGVP9v4g==",
      "FE/mnRiATGHgivPxG+13dw==",
      "InyvNMAfT1Zl5TKOPF5zkw==",
      "AwYRRq6SmgfJLn2NZxQUdw==",
      "o7Wt0RgmjSYSjMhb6uYQ8A==",
      "uv0xK+bSjUByf+SifqjJ2Q==",
      "8UUCxMXAfRtBuDf07+fISg==",
      "BO4mpvHlpA2VMxVuGCs5Gw==",
      "KwrizcJTvx0lAr8NWSRHvQ==",
      "GklzFsX1Kbjw7XUdLCRFCA==",
      "7JZ3MHJevu7noH+KiM70cQ==",
      "tYNhc55MEKpBCY8cSsXw5Q==",
      "VTdtsdUTUm6LaoM4gIpvYw==",
      "oUkJIbYpxyFXjg//yD+o4A=="
    ]
  },
  "enrichments": {
    "message/vnd.clair.map.vulnerability; enricher=clair.cvss schema=https://csrc.nist.gov/schema/nvd/feed/1.1/cvss-v3.x.json": [
      {
        "/WQB0Cmnj06XJWCr3nqOoA==": [
          {
            "version": "3.0",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH"
          },
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "HIGH",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM"
          }
        ],
        "/eopcBL7Sl3Br4tMJEoF+Q==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM"
          }
        ],
        "/oK+zNt0cQ+IZv2Cz+p1ow==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "REQUIRED",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH"
          }
        ],
        "0DMa5ftnj+HYBOgjKFl2gQ==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM"
          }
        ],
        "0INnWKjjSMNVc6OCjv18YA==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH"
          }
        ],
        "0XyIJoIqTLxnYiZet4x5Yg==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM"
          }
        ],
        "0zv+xomxIiCvJFT5PKrlsg==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL"
          }
        ],
        "1lRtJofWFCTkQi0dreTmvg==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH"
          }
        ],
        "2CeZCuCny7jSZBuuaMXULg==": [
          {
            "version": "3.0",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH"
          },
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "HIGH",
            "privilegesRequired": "HIGH",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM"
          }
        ],
        "2SApI7oHpcm9Z48+2Hj11w==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "REQUIRED",
            "scope": "UNCHANGED",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "availabilityImpact": "LOW",
            "baseScore": 3.9,
            "baseSeverity": "LOW"
          }
        ],
        "2sdR4GjmaEV2ZFIV+TVU6A==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW"
          }
        ],
        "3+Tq4mPPOiL6olm2GLk5Mg==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH"
          }
        ],
        "3VdtHqtIaf9cjYBkwOn6/g==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL"
          }
        ],
        "3XaVgHeIFJL3w2B85i3krw==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "REQUIRED",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM"
          }
        ],
        "3ktHS+YZSMYXCkYy+yNUcA==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "REQUIRED",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM"
          }
        ],
        "4flqiPbmTauic3ijyT75yw==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH"
          }
        ],
        "53g2lPwzOLmoqCCLIr2InQ==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH"
          }
        ],
        "58xY9Xj25VNzU8f4Nsn43Q==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM"
          }
        ],
        "6eMjths7OctCI6zbpR/CJw==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM"
          }
        ],
        "71mUiqp9K+KrPPMFd0Gr9A==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH"
          }
        ],
        "7nWSET5rvC0ef4ukzNTUGQ==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM"
          }
        ],
        "8kndQj/aRn+NNJdGVP9v4g==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "REQUIRED",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM"
          }
        ],
        "9FKHFApkWswWkHyGdodK0g==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "REQUIRED",
            "scope": "CHANGED",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM"
          }
        ],
        "9O6eBDd9OtueXKQaS30JHQ==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM"
          }
        ],
        "9O8vLtOdyUMO1soTy2OBGw==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM"
          },
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH"
          }
        ],
        "A7bcOuxkjccnpaTXIAxpLw==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM"
          }
        ],
        "ABgAEtKLJJ3BQYa4+jCHyg==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM"
          }
        ],
        "AOqYiSRMsYI7D2mmuqAtJA==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "HIGH",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM"
          }
        ],
        "AUiFITCnRjRxctzqqbDeeA==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "LOW",
            "baseScore": 3.3,
            "baseSeverity": "LOW"
          }
        ],
        "AqIetzkTw3mVI6hiusMy1w==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM"
          }
        ],
        "AtWoYkoBl9avwxLPtk70fw==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH"
          }
        ],
        "BLkI3n1XefyybyaipLStXA==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "REQUIRED",
            "scope": "CHANGED",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM"
          }
        ],
        "BrBV5lr2Oniu9+XAGvI91A==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "REQUIRED",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM"
          }
        ],
        "C0CVf3gKIXy0pxUEC+HbFA==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "CHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 9.0,
            "baseSeverity": "CRITICAL"
          }
        ],
        "CCTTGeQPsaGe9k69jAJeHQ==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH"
          }
        ],
        "DDxCHnX+kCqcRQj9b90/cg==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "REQUIRED",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH"
          }
        ],
        "DLttSzeHzaVnO33nSnt80A==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM"
          }
        ],
        "Dmj+1Th9y/xKrHIFa6FtQA==": [
          {
            "version": "3.0",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH"
          },
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "HIGH",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM"
          }
        ],
        "EdSmJzT79gNsCaz3hmp+zw==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH"
          }
        ],
        "EfJQ14qFSb1S0rB4VJRXzg==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "REQUIRED",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM"
          }
        ],
        "EoQrZ5N7i4JBUoj0xAeL3Q==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM"
          }
        ],
        "F/E7m2THTaTl0s46g5J9Qw==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM"
          }
        ],
        "F6QBkHsQuDYkHPuVPox4pw==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM"
          }
        ],
        "FE/mnRiATGHgivPxG+13dw==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "attackVector": "LOCAL",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "REQUIRED",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "LOW",
            "baseScore": 2.5,
            "baseSeverity": "LOW"
          }
        ],
        "FL8qoTgXQjuCQf4vtGJ2JA==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL"
          }
        ],
        "FdHZNK1wtI6/xHHLNOjd7w==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH"
          }
        ],
        "GklzFsX1Kbjw7XUdLCRFCA==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH"
          }
        ],
        "HxI42iSjURjRki+uV6q/9w==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "REQUIRED",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM"
          }
        ],
        "I6USarzQiNF0WDmxnwYl6Q==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM"
          },
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH"
          }
        ],
        "InyvNMAfT1Zl5TKOPF5zkw==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL"
          }
        ],
        "IpfgPSRwb+bSNtOR59K02g==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "REQUIRED",
            "scope": "CHANGED",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM"
          }
        ],
        "J4b5dVoVJ6TOvSQqt+geLg==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM"
          }
        ],
        "JSxIEGIOCwboUDoJZgS9fA==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL"
          }
        ],
        "K3j3nYCvhPD02WXNRIsNow==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "REQUIRED",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH"
          }
        ],
        "Kqq2xlybjD/tOLmQWu2xPw==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "REQUIRED",
            "scope": "UNCHANGED",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "availabilityImpact": "LOW",
            "baseScore": 3.9,
            "baseSeverity": "LOW"
          }
        ],
        "KwrizcJTvx0lAr8NWSRHvQ==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "REQUIRED",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM"
          }
        ],
        "L2MoZbVdo8+qepBivoAPsQ==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM"
          }
        ],
        "M3U4dY4DNzzwTtzYkhXUMA==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH"
          }
        ],
        "Mg8SgrJU+lTo8Y3PGUgkTA==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM"
          }
        ],
        "NETfvu2mgbpmZZcrjbxOYg==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "REQUIRED",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH"
          }
        ],
        "NHVF8uSdIs3qjmJ3d32Guw==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM"
          }
        ],
        "NqnvbAJ9TE8i+K0jPU+gTA==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM"
          }
        ],
        "NrmEp7ITzyyHtVTCw3MlhQ==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "REQUIRED",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM"
          }
        ],
        "O6K8wxAPcmLr8qOIbQ6uMA==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "REQUIRED",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM"
          }
        ],
        "OAFgQI0NLiTuwa5m3oeKvw==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL"
          }
        ],
        "OFIelSTGJAvnMHk6/6CzoA==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH"
          }
        ],
        "OXQ7H2CaA5DhIn9wkh9zjA==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM"
          }
        ],
        "PAUv+MU3xwsjx5jndGYXQA==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL"
          }
        ],
        "Pza9Y2xtH9MChVMkZwgw2A==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "REQUIRED",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM"
          }
        ],
        "RIB897UdZi2GShqV1cDBcw==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW"
          }
        ],
        "RIwina92/O63CIQtdCj6Ug==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH"
          },
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH"
          }
        ],
        "RrbNEAZ+bJrZ+zzACvAjBw==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM"
          }
        ],
        "Rs2w9Uui+dW2Lg48Ml6jpw==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM"
          }
        ],
        "S3QNU6jy5TEnJU2t9h6F+A==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM"
          }
        ],
        "S5Dzz9cigoJDCj8s5UcT0g==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH"
          }
        ],
        "S8k5xDZW6CKWQt5V5/wRBA==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW"
          }
        ],
        "Toocv9UWe2zbLkvuaDfUkA==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "REQUIRED",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH"
          }
        ],
        "U6qBKCP/toaRYToALpEUAg==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM"
          }
        ],
        "UNpQq3W7NuU/YvxyKob7dQ==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "HIGH",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM"
          }
        ],
        "VMq7c5UxVfK0QVgxJQyC8w==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH"
          }
        ],
        "VWEbeFnFOHy1IkG21b5a5g==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "HIGH",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM"
          }
        ],
        "X0yRty1CAF/BkqF0tnfBQQ==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "REQUIRED",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM"
          }
        ],
        "X1XbXShyT1+HQUnA5EVJNw==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM"
          }
        ],
        "XMZYTX/i7lOXfIPea0g5sg==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH"
          }
        ],
        "XeJxNps2a1xzV61fNDZUHg==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "availabilityImpact": "LOW",
            "baseScore": 7.3,
            "baseSeverity": "HIGH"
          }
        ],
        "Y3WKF6/Qa3b8kujepTuCsg==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "REQUIRED",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM"
          }
        ],
        "YNMtsn/tcZvCfn+cUvP3pg==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM"
          }
        ],
        "YNouFTBaiJNQFxYyrJAQcA==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM"
          }
        ],
        "ZdCiHmwhX39f7Nxq9Dvfig==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM"
          }
        ],
        "ac6BZ0tqO6i0QQDCZWfGNg==": [
          {
            "version": "3.0",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH"
          },
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "HIGH",
            "privilegesRequired": "HIGH",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM"
          }
        ],
        "akyADtY97pCYfGQtx4g3Vw==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH"
          }
        ],
        "arTUuvS7/95E2eEJJD9lOQ==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM"
          }
        ],
        "ax7ntKztjjUex0Fnm21atg==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "HIGH",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM"
          }
        ],
        "cPlqbimjP0WfKIKsSfuixQ==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH"
          }
        ],
        "cp/A6si6B6vWVQNk17XSnQ==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM"
          }
        ],
        "dQtkeBg4aMq+iqhRXRyUDQ==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH"
          }
        ],
        "dx/et2OZXdYVZSrhJfSrZw==": [
          {
            "version": "3.0",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH"
          },
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "HIGH",
            "privilegesRequired": "HIGH",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM"
          }
        ],
        "e8C6jymFUSIHopouPFGGFQ==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH"
          }
        ],
        "enCBbxIBBG9uJBIJ2Silsw==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "availabilityImpact": "LOW",
            "baseScore": 7.3,
            "baseSeverity": "HIGH"
          }
        ],
        "fwfAtjf5gVRneidAp93edQ==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "REQUIRED",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "LOW",
            "baseScore": 2.8,
            "baseSeverity": "LOW"
          }
        ],
        "gC3dJaA81IvQxpeDciVx9Q==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH"
          }
        ],
        "gJB4UR04diqd8I+vxY+1fA==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM"
          }
        ],
        "gW0KUmpTUJYEkCwOP2FqGA==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH"
          }
        ],
        "giLBrK6czoD3l3BDs0Jfcw==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH"
          }
        ],
        "h08ca9AawAYymWtiO1A44A==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "REQUIRED",
            "scope": "UNCHANGED",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "availabilityImpact": "LOW",
            "baseScore": 3.9,
            "baseSeverity": "LOW"
          }
        ],
        "hMkYbCHpeOKQraSBEl8+Aw==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH"
          }
        ],
        "hQhn3O6sw4QusprpMJeLag==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM"
          }
        ],
        "hRMmSXWNjnz6N6DylTgifg==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH"
          }
        ],
        "hbOAbiOJ6F6ohNePMmRtlQ==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH"
          }
        ],
        "hiF9bhRE95azD1Yk9fu+ZA==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH"
          }
        ],
        "ixc06f0H9vqMfsbwQSwwvA==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH"
          },
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH"
          }
        ],
        "izjZI/AsSlkRCQFNfC3oCA==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL"
          }
        ],
        "jU6R01smYIMn3KeQZsQ68g==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM"
          }
        ],
        "jiVVTQmOtKqVixv7agF/Hg==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH"
          }
        ],
        "jlhRpuK0j9viGlxiAnKR7w==": [
          {
            "version": "3.0",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH"
          },
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "HIGH",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM"
          }
        ],
        "k/CdFos3+OXmV6TI04xnUQ==": [
          {
            "version": "3.0",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH"
          },
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "HIGH",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM"
          }
        ],
        "kAqWBUicknsNlYe6T7rf3w==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM"
          }
        ],
        "kHjC5QVIEbAPA3Kvkur0dg==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW"
          }
        ],
        "lDV5qcTcJkBCbILUcFq4dA==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH"
          }
        ],
        "lJeTT/Y9HVuGmrDkd/kJpw==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "REQUIRED",
            "scope": "CHANGED",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM"
          }
        ],
        "lKniGV6mBq1xFWJ6V0QVvA==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH"
          }
        ],
        "m8JLumk5EhM5fKwi6Y9sfw==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM"
          }
        ],
        "mTe73yDGtNKBR9vMgderPA==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "CHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 9.0,
            "baseSeverity": "CRITICAL"
          }
        ],
        "mk1XE0ocPMZ1zLQU00rlYA==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH"
          }
        ],
        "mzudbhzyxeahL7ZqcHKBNA==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL"
          }
        ],
        "nPSgEkWJB1b5/FQHoj8iDQ==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM"
          }
        ],
        "o4XSf3iuWcKQUGp2hHoEXw==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL"
          }
        ],
        "o7Wt0RgmjSYSjMhb6uYQ8A==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH"
          }
        ],
        "oUkJIbYpxyFXjg//yD+o4A==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "REQUIRED",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM"
          }
        ],
        "oov3ViUtB6SINzpltF5uvg==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM"
          }
        ],
        "oqSc7q4k6wTno/u9knscCQ==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "availabilityImpact": "LOW",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM"
          }
        ],
        "pBoQ+PsAQ5BZXsP3ZwzxpA==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM"
          }
        ],
        "pH8+w8Xtk7zJJtrUbdYyhA==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM"
          }
        ],
        "q7sBMd/vv2s2xJ4pQXPOHg==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH"
          }
        ],
        "r7FjmMNb7gvjumuk3FvyAw==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "HIGH",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM"
          }
        ],
        "rGjgjD/Clgx7UEcIO0/VxQ==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH"
          }
        ],
        "s/Jfbx1UXOiwzCCMDalr1A==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM"
          }
        ],
        "s7lhI3LbQwMT+dukpP3kmg==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM"
          }
        ],
        "scu0fznRerd9B16y1/RO8g==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH"
          }
        ],
        "sut2Jyi9Sg5GxKwdaNmHPg==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL"
          }
        ],
        "t+BDL+U2MMfFVxGH0afsVA==": [
          {
            "version": "3.0",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH"
          },
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "HIGH",
            "privilegesRequired": "HIGH",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM"
          }
        ],
        "t7klIbkcqJpX+Hibob7+Dg==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "REQUIRED",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH"
          }
        ],
        "tbhLz74i3ShwS72WbIsoOA==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "REQUIRED",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM"
          }
        ],
        "v/e7DnxVAlpegLOsTN2UPQ==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH"
          }
        ],
        "vYVfNkdHVoix1j9S6G4zoQ==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH"
          }
        ],
        "wQDBiN+ZfYCbBccIgJzPcQ==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "REQUIRED",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM"
          }
        ],
        "xKwaDB7aG2oH2GrBtebXYQ==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM"
          }
        ],
        "yFyXcq1E5bw+omyiCv+CnQ==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM"
          }
        ],
        "yHqTDX5RE8eUKM9rdC//Mg==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM"
          }
        ],
        "zw0cARVh3jgrbyVziYo6DQ==": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH"
          }
        ]
      }
    ]
  }
}

pod: gl-multi-component-parent-frae-on-push-p2fns-clair-scan-pod | container step-oci-attach-report: 
Selecting auth
Using token for quay.io/redhat-appstudio-qe/build-e2e-rinw/gl-multi-component-parent-frae
Attaching clair-report-amd64.json to quay.io/redhat-appstudio-qe/build-e2e-rinw/gl-multi-component-parent-frae@sha256:cb899cbfa3e2bd36c0f6f0459e2579b4059fa9c2a8543235443d8c101d5dc13f
Executing: oras attach --no-tty --format go-template={{.digest}} --registry-config /home/oras/auth.json --artifact-type application/vnd.redhat.clair-report+json quay.io/redhat-appstudio-qe/build-e2e-rinw/gl-multi-component-parent-frae@sha256:cb899cbfa3e2bd36c0f6f0459e2579b4059fa9c2a8543235443d8c101d5dc13f clair-report-amd64.json:application/vnd.redhat.clair-report+json

pod: gl-multi-component-parent-frae-on-push-p2fns-clair-scan-pod | container step-conftest-vulnerabilities: 
[
	{
		"filename": "/tekton/home/clair-result-amd64.json",
		"namespace": "required_checks",
		"successes": 4,
		"warnings": [
			{
				"msg": "Found packages with high vulnerabilities associated with RHSA fixes. Consider updating to a newer version of those packages, they may no longer be affected by the reported CVEs.",
				"metadata": {
					"details": {
						"description": "Vulnerabilities found: glibc-common-2.34-60.el9_2.7 (CVE-2024-2961, CVE-2024-33599), libnghttp2-1.43.0-5.el9_2.1 (CVE-2023-44487), krb5-libs-1.20.1-9.el9_2 (CVE-2024-3596), openssl-libs-1:3.0.7-17.el9_2 (CVE-2024-12797), glibc-minimal-langpack-2.34-60.el9_2.7 (CVE-2024-2961, CVE-2024-33599), curl-minimal-7.76.1-23.el9_2.4 (CVE-2023-38545), glibc-2.34-60.el9_2.7 (CVE-2024-2961, CVE-2024-33599), libcurl-minimal-7.76.1-23.el9_2.4 (CVE-2023-38545), libxml2-2.9.13-3.el9_2.1 (CVE-2024-56171, CVE-2025-24928)",
						"name": "clair_high_vulnerabilities",
						"url": "https://access.redhat.com/articles/red_hat_vulnerability_tutorial"
					},
					"vulnerabilities_number": 13
				}
			},
			{
				"msg": "Found packages with unpatched high vulnerabilities. These vulnerabilities don't have a known fix at this time.",
				"metadata": {
					"details": {
						"description": "Vulnerabilities found: glibc-common-2.34-60.el9_2.7 (CVE-2023-4911), glibc-minimal-langpack-2.34-60.el9_2.7 (CVE-2023-4911), glibc-2.34-60.el9_2.7 (CVE-2023-4911), libxml2-2.9.13-3.el9_2.1 (CVE-2025-49794, CVE-2025-49795, CVE-2025-49796)",
						"name": "clair_unpatched_high_vulnerabilities",
						"url": "https://access.redhat.com/articles/red_hat_vulnerability_tutorial"
					},
					"vulnerabilities_number": 6
				}
			},
			{
				"msg": "Found packages with medium vulnerabilities associated with RHSA fixes. Consider updating to a newer version of those packages, they may no longer be affected by the reported CVEs.",
				"metadata": {
					"details": {
						"description": "Vulnerabilities found: glibc-common-2.34-60.el9_2.7 (CVE-2024-33600, CVE-2025-0395, CVE-2025-4802), ncurses-base-6.2-8.20210508.el9 (CVE-2023-29491), rpm-libs-4.16.1.3-22.el9 (CVE-2021-35937, CVE-2021-35938, CVE-2021-35939), glib2-2.68.4-6.el9 (CVE-2024-34397), libstdc++-11.3.1-4.3.el9 (CVE-2020-11023), libnghttp2-1.43.0-5.el9_2.1 (CVE-2024-28182), krb5-libs-1.20.1-9.el9_2 (CVE-2023-36054, CVE-2023-39975, CVE-2024-26462, CVE-2024-37370, CVE-2024-37371, CVE-2025-24528), libgcrypt-1.10.0-10.el9_2 (CVE-2024-2236), bzip2-libs-1.0.8-8.el9 (CVE-2019-12900), sqlite-libs-3.34.1-6.el9_1 (CVE-2023-7104), ncurses-libs-6.2-8.20210508.el9 (CVE-2023-29491), openssl-libs-1:3.0.7-17.el9_2 (CVE-2023-5363, CVE-2024-6119), glibc-minimal-langpack-2.34-60.el9_2.7 (CVE-2024-33600, CVE-2025-0395, CVE-2025-4802), rpm-4.16.1.3-22.el9 (CVE-2021-35937, CVE-2021-35938, CVE-2021-35939), curl-minimal-7.76.1-23.el9_2.4 (CVE-2023-27536, CVE-2023-27538, CVE-2023-46218, CVE-2024-2398), glibc-2.34-60.el9_2.7 (CVE-2024-33600, CVE-2025-0395, CVE-2025-4802), gnutls-3.7.6-21.el9_2 (CVE-2023-5981, CVE-2024-0553, CVE-2024-0567, CVE-2024-12243, CVE-2024-28834, CVE-2024-28835), systemd-libs-252-14.el9_2.3 (CVE-2023-7008), libcurl-minimal-7.76.1-23.el9_2.4 (CVE-2023-27536, CVE-2023-27538, CVE-2023-46218, CVE-2024-2398), libgcc-11.3.1-4.3.el9 (CVE-2020-11023), gmp-1:6.2.0-10.el9 (CVE-2021-43618), libtasn1-4.16.0-8.el9_1 (CVE-2024-12133), libxml2-2.9.13-3.el9_2.1 (CVE-2022-49043, CVE-2023-39615, CVE-2024-25062)",
						"name": "clair_medium_vulnerabilities",
						"url": "https://access.redhat.com/articles/red_hat_vulnerability_tutorial"
					},
					"vulnerabilities_number": 52
				}
			},
			{
				"msg": "Found packages with unpatched medium vulnerabilities. These vulnerabilities don't have a known fix at this time.",
				"metadata": {
					"details": {
						"description": "Vulnerabilities found: glibc-common-2.34-60.el9_2.7 (CVE-2023-4806, CVE-2023-4813, CVE-2025-5702), glib2-2.68.4-6.el9 (CVE-2024-52533, CVE-2025-4373), libarchive-3.5.3-4.el9 (CVE-2023-30571, CVE-2025-25724), krb5-libs-1.20.1-9.el9_2 (CVE-2025-3576), sqlite-libs-3.34.1-6.el9_1 (CVE-2025-29087), glibc-minimal-langpack-2.34-60.el9_2.7 (CVE-2023-4806, CVE-2023-4813, CVE-2025-5702), glibc-2.34-60.el9_2.7 (CVE-2023-4806, CVE-2023-4813, CVE-2025-5702), systemd-libs-252-14.el9_2.3 (CVE-2021-3997, CVE-2025-4598), coreutils-single-8.32-34.el9 (CVE-2025-5278), libxml2-2.9.13-3.el9_2.1 (CVE-2025-32414, CVE-2025-6021)",
						"name": "clair_unpatched_medium_vulnerabilities",
						"url": "https://access.redhat.com/articles/red_hat_vulnerability_tutorial"
					},
					"vulnerabilities_number": 20
				}
			},
			{
				"msg": "Found packages with low/negligible vulnerabilities associated with RHSA fixes. Consider updating to a newer version of those packages, they may no longer be affected by the reported CVEs.",
				"metadata": {
					"details": {
						"description": "Vulnerabilities found: glibc-common-2.34-60.el9_2.7 (CVE-2024-33601, CVE-2024-33602), glib2-2.68.4-6.el9 (CVE-2023-29499, CVE-2023-32611, CVE-2023-32665), file-libs-5.39-12.1.el9_2 (CVE-2022-48554), krb5-libs-1.20.1-9.el9_2 (CVE-2024-26458, CVE-2024-26461), openssl-libs-1:3.0.7-17.el9_2 (CVE-2023-2975, CVE-2023-3446, CVE-2023-3817, CVE-2023-5678, CVE-2023-6129, CVE-2023-6237, CVE-2024-0727, CVE-2024-2511, CVE-2024-4603, CVE-2024-4741, CVE-2024-5535), glibc-minimal-langpack-2.34-60.el9_2.7 (CVE-2024-33601, CVE-2024-33602), curl-minimal-7.76.1-23.el9_2.4 (CVE-2023-27533, CVE-2023-27534, CVE-2023-38546), glibc-2.34-60.el9_2.7 (CVE-2024-33601, CVE-2024-33602), libcurl-minimal-7.76.1-23.el9_2.4 (CVE-2023-27533, CVE-2023-27534, CVE-2023-38546)",
						"name": "clair_low_vulnerabilities",
						"url": "https://access.redhat.com/articles/red_hat_vulnerability_tutorial"
					},
					"vulnerabilities_number": 29
				}
			},
			{
				"msg": "Found packages with unpatched low/negligible vulnerabilities. These vulnerabilities don't have a known fix at this time.",
				"metadata": {
					"details": {
						"description": "Vulnerabilities found: pcre2-syntax-10.40-2.el9 (CVE-2022-41409), ca-certificates-2023.2.60_v7.0.306-90.1.el9_2 (CVE-2023-37920), ncurses-base-6.2-8.20210508.el9 (CVE-2022-29458, CVE-2023-45918, CVE-2023-50495), gawk-5.1.0-6.el9 (CVE-2023-4156), glib2-2.68.4-6.el9 (CVE-2023-32636, CVE-2025-3360), libstdc++-11.3.1-4.3.el9 (CVE-2022-27943), libarchive-3.5.3-4.el9 (CVE-2025-1632, CVE-2025-5914, CVE-2025-5915, CVE-2025-5916, CVE-2025-5917, CVE-2025-5918), sqlite-libs-3.34.1-6.el9_1 (CVE-2023-36191, CVE-2024-0232), ncurses-libs-6.2-8.20210508.el9 (CVE-2022-29458, CVE-2023-45918, CVE-2023-50495), openssl-libs-1:3.0.7-17.el9_2 (CVE-2024-13176, CVE-2024-41996), openldap-compat-2.6.2-3.el9 (CVE-2023-2953), openldap-2.6.2-3.el9 (CVE-2023-2953), curl-minimal-7.76.1-23.el9_2.4 (CVE-2024-11053, CVE-2024-7264, CVE-2024-9681), libcurl-minimal-7.76.1-23.el9_2.4 (CVE-2024-11053, CVE-2024-7264, CVE-2024-9681), libgcc-11.3.1-4.3.el9 (CVE-2022-27943), libxml2-2.9.13-3.el9_2.1 (CVE-2023-45322, CVE-2024-34459, CVE-2025-27113, CVE-2025-32415, CVE-2025-6170), gnupg2-2.3.3-2.el9_0 (CVE-2022-3219, CVE-2025-30258), pcre2-10.40-2.el9 (CVE-2022-41409)",
						"name": "clair_unpatched_low_vulnerabilities",
						"url": "https://access.redhat.com/articles/red_hat_vulnerability_tutorial"
					},
					"vulnerabilities_number": 39
				}
			}
		]
	}
]
{"vulnerabilities":{"critical":0,"high":13,"medium":52,"low":29,"unknown":0},"unpatched_vulnerabilities":{"critical":0,"high":6,"medium":20,"low":39,"unknown":0}}
{"image": {"pullspec": "quay.io/redhat-appstudio-qe/build-e2e-rinw/gl-multi-component-parent-frae:9e1c6e3180a81835c035b817182736b6e9ee27f7", "digests": ["sha256:cb899cbfa3e2bd36c0f6f0459e2579b4059fa9c2a8543235443d8c101d5dc13f"]}}
{"result":"SUCCESS","timestamp":"2025-09-11T13:43:40+00:00","note":"Task clair-scan completed: Refer to Tekton task result SCAN_OUTPUT for vulnerabilities scanned by Clair.","namespace":"default","successes":0,"failures":0,"warnings":0}

 pod: gl-multi-component-parent-frae-on-push-p2fns-clamav-scan-pod | init container: prepare
2025/09/11 13:42:58 Entrypoint initialization

 pod: gl-multi-component-parent-frae-on-push-p2fns-clamav-scan-pod | init container: place-scripts
2025/09/11 13:43:01 Decoded script /tekton/scripts/script-0-d8tdp
2025/09/11 13:43:01 Decoded script /tekton/scripts/script-1-hv6ld

pod: gl-multi-component-parent-frae-on-push-p2fns-clamav-scan-pod | container step-extract-and-scan-image: 
Starting clamd ...
clamd is ready!
Extracting image(s).
Running "oc image extract" on image of arch amd64
Scanning image for arch amd64. This operation may take a while.

----------- SCAN SUMMARY -----------
Infected files: 0
Time: 1.747 sec (0 m 1 s)
Start Date: 2025:09:11 13:43:22
End Date:   2025:09:11 13:43:24
Executed-on: Scan was executed on clamsdcan version - ClamAV 1.4.3/27759/Wed Sep 10 08:27:04 2025 Database version: 27759
[
	{
		"filename": "/work/logs/clamscan-result-log-amd64.json",
		"namespace": "required_checks",
		"successes": 2
	}
]
{"timestamp":"1757598204","namespace":"required_checks","successes":2,"failures":0,"warnings":0,"result":"SUCCESS","note":"All checks passed successfully"}
{"timestamp":"1757598204","namespace":"required_checks","successes":2,"failures":0,"warnings":0,"result":"SUCCESS","note":"All checks passed successfully"}
{"timestamp":"1757598204","namespace":"required_checks","successes":2,"failures":0,"warnings":0,"result":"SUCCESS","note":"All checks passed successfully"}
{"image": {"pullspec": "quay.io/redhat-appstudio-qe/build-e2e-rinw/gl-multi-component-parent-frae:9e1c6e3180a81835c035b817182736b6e9ee27f7", "digests": ["sha256:cb899cbfa3e2bd36c0f6f0459e2579b4059fa9c2a8543235443d8c101d5dc13f"]}}

pod: gl-multi-component-parent-frae-on-push-p2fns-clamav-scan-pod | container step-upload: 
Selecting auth
Using token for quay.io/redhat-appstudio-qe/build-e2e-rinw/gl-multi-component-parent-frae
Attaching to quay.io/redhat-appstudio-qe/build-e2e-rinw/gl-multi-component-parent-frae:9e1c6e3180a81835c035b817182736b6e9ee27f7
Executing (attempt 1):  $ oras attach --no-tty --registry-config /home/oras/auth.json --artifact-type application/vnd.clamav quay.io/redhat-appstudio-qe/build-e2e-rinw/gl-multi-component-parent-frae:9e1c6e3180a81835c035b817182736b6e9ee27f7@sha256:cb899cbfa3e2bd36c0f6f0459e2579b4059fa9c2a8543235443d8c101d5dc13f clamscan-result-amd64.log:text/vnd.clamav clamscan-ec-test-amd64.json:application/vnd.konflux.test_output+json
Uploading ca1f7e6f94a9 clamscan-ec-test-amd64.json
Uploading 58fff18372c4 clamscan-result-amd64.log
Uploaded  ca1f7e6f94a9 clamscan-ec-test-amd64.json
Uploaded  58fff18372c4 clamscan-result-amd64.log
Attached to [registry] quay.io/redhat-appstudio-qe/build-e2e-rinw/gl-multi-component-parent-frae:9e1c6e3180a81835c035b817182736b6e9ee27f7@sha256:cb899cbfa3e2bd36c0f6f0459e2579b4059fa9c2a8543235443d8c101d5dc13f
Digest: sha256:c0047bda8c62e41bf173b05fab555a817934812e909f29ed4c8895b675b383b2

 pod: gl-multi-component-parent-frae-on-push-p2fns-init-pod | init container: prepare
2025/09/11 13:41:03 Entrypoint initialization

 pod: gl-multi-component-parent-frae-on-push-p2fns-init-pod | init container: place-scripts
2025/09/11 13:41:03 Decoded script /tekton/scripts/script-0-4hmmf

pod: gl-multi-component-parent-frae-on-push-p2fns-init-pod | container step-init: 
Build Initialize: quay.io/redhat-appstudio-qe/build-e2e-rinw/gl-multi-component-parent-frae:9e1c6e3180a81835c035b817182736b6e9ee27f7

Determine if Image Already Exists

 pod: gl-multi-component-parent-frae-on-push-p2fns-show-summary-pod | init container: prepare
2025/09/11 13:43:50 Entrypoint initialization

 pod: gl-multi-component-parent-frae-on-push-p2fns-show-summary-pod | init container: place-scripts
2025/09/11 13:43:53 Decoded script /tekton/scripts/script-0-6bdm4

pod: gl-multi-component-parent-frae-on-push-p2fns-show-summary-pod | container step-appstudio-summary: 

Build Summary:

Build repository: https://gitlab.com/konflux-qe/build-nudge-parent?rev=9e1c6e3180a81835c035b817182736b6e9ee27f7
Generated Image is in : quay.io/redhat-appstudio-qe/build-e2e-rinw/gl-multi-component-parent-frae:9e1c6e3180a81835c035b817182736b6e9ee27f7

End Summary