{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Low" }, "category": "csaf_vex", "csaf_version": "2.0", "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "title": "excessive memory allocation when reading a specially crafted ZIP archive or a derived formats", "tracking": { "current_release_date": "2026-08-14T04:33:29+00:00", "generator": { "date": "2026-08-14T04:33:29+00:00", "engine": { "name": "CSAF Generator", "version": "3.3.0" } }, "id": "CVE-2021-36374", "initial_release_date": "2021-07-13T00:00:00+00:00", "revision_history": [ { "date": "2026-08-14T04:33:29+00:00", "number": "1", "summary": "Last generated version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "category": "vendor", "name": "Red Hat", "branches": [ { "category": "product_name", "name": "OpenShift Container Platform 4.19", "product": { "name": "OpenShift Container Platform 4.19", "product_id": "openshift-4", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4" } } }, { "category": "product_name", "name": "OpenShift Container Platform 4.12", "product": { "name": "OpenShift Container Platform 4.12", "product_id": "openshift-4.12.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.12" } } }, { "category": "product_name", "name": "OpenShift Container Platform 4.13", "product": { "name": "OpenShift Container Platform 4.13", "product_id": "openshift-4.13.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.13" } } }, { "category": "product_name", "name": "OpenShift Container Platform 4.14", "product": { "name": "OpenShift Container Platform 4.14", "product_id": "openshift-4.14.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.14" } } }, { "category": "product_name", "name": "OpenShift Container Platform 4.15.z", "product": { "name": "OpenShift Container Platform 4.15.z", "product_id": "openshift-4.15.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.15" } } }, { "category": "product_name", "name": "OpenShift Container Platform 4.16.z", "product": { "name": "OpenShift Container Platform 4.16.z", "product_id": "openshift-4.16.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.16" } } }, { "category": "product_name", "name": "OpenShift Container Platform 4.17", "product": { "name": "OpenShift Container Platform 4.17", "product_id": "openshift-4.17", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.17" } } }, { "category": "product_name", "name": "OpenShift Container Platform 4.18", "product": { "name": "OpenShift Container Platform 4.18", "product_id": "openshift-4.18", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.18" } } }, { "category": "product_name", "name": "OpenShift Container Platform 4.19", "product": { "name": "OpenShift Container Platform 4.19", "product_id": "openshift-4.19", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.19" } } }, { "category": "product_name", "name": "OpenShift Container Platform 4.20", "product": { "name": "OpenShift Container Platform 4.20", "product_id": "openshift-4.20", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.20" } } }, { "category": "product_name", "name": "OpenShift Container Platform 3.11.0", "product": { "name": "OpenShift Container Platform 3.11.0", "product_id": "openshift-enterprise-3.11-default", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:3.11" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 6-els", "product": { "name": "Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_els:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 7-els", "product": { "name": "Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_els:7" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.10.z", "product": { "name": "Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.0", "product": { "name": "Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9" } } }, { "category": "product_name", "name": "Red Hat Software Collections", "product": { "name": "Red Hat Software Collections", "product_id": "rhscl-3", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3" } } }, { "category": "product_version", "name": "ant", "product": { "name": "ant", "product_id": "ant", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant" } } }, { "category": "product_version", "name": "ant-antlr", "product": { "name": "ant-antlr", "product_id": "ant-antlr", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant-antlr" } } }, { "category": "product_version", "name": "ant-apache-bcel", "product": { "name": "ant-apache-bcel", "product_id": "ant-apache-bcel", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant-apache-bcel" } } }, { "category": "product_version", "name": "ant-apache-bsf", "product": { "name": "ant-apache-bsf", "product_id": "ant-apache-bsf", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant-apache-bsf" } } }, { "category": "product_version", "name": "ant-apache-log4j", "product": { "name": "ant-apache-log4j", "product_id": "ant-apache-log4j", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant-apache-log4j" } } }, { "category": "product_version", "name": "ant-apache-oro", "product": { "name": "ant-apache-oro", "product_id": "ant-apache-oro", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant-apache-oro" } } }, { "category": "product_version", "name": "ant-apache-regexp", "product": { "name": "ant-apache-regexp", "product_id": "ant-apache-regexp", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant-apache-regexp" } } }, { "category": "product_version", "name": "ant-apache-resolver", "product": { "name": "ant-apache-resolver", "product_id": "ant-apache-resolver", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant-apache-resolver" } } }, { "category": "product_version", "name": "ant-apache-xalan2", "product": { "name": "ant-apache-xalan2", "product_id": "ant-apache-xalan2", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant-apache-xalan2" } } }, { "category": "product_version", "name": "ant-commons-logging", "product": { "name": "ant-commons-logging", "product_id": "ant-commons-logging", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant-commons-logging" } } }, { "category": "product_version", "name": "ant-commons-net", "product": { "name": "ant-commons-net", "product_id": "ant-commons-net", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant-commons-net" } } }, { "category": "product_version", "name": "ant-debuginfo", "product": { "name": "ant-debuginfo", "product_id": "ant-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant-debuginfo" } } }, { "category": "product_version", "name": "ant-javadoc", "product": { "name": "ant-javadoc", "product_id": "ant-javadoc", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant-javadoc" } } }, { "category": "product_version", "name": "ant-javamail", "product": { "name": "ant-javamail", "product_id": "ant-javamail", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant-javamail" } } }, { "category": "product_version", "name": "ant-jdepend", "product": { "name": "ant-jdepend", "product_id": "ant-jdepend", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant-jdepend" } } }, { "category": "product_version", "name": "ant-jmf", "product": { "name": "ant-jmf", "product_id": "ant-jmf", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant-jmf" } } }, { "category": "product_version", "name": "ant-jsch", "product": { "name": "ant-jsch", "product_id": "ant-jsch", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant-jsch" } } }, { "category": "product_version", "name": "ant-junit", "product": { "name": "ant-junit", "product_id": "ant-junit", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant-junit" } } }, { "category": "product_version", "name": "ant-junit5", "product": { "name": "ant-junit5", "product_id": "ant-junit5", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant-junit5" } } }, { "category": "product_version", "name": "ant-lib", "product": { "name": "ant-lib", "product_id": "ant-lib", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant-lib" } } }, { "category": "product_version", "name": "ant-manual", "product": { "name": "ant-manual", "product_id": "ant-manual", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant-manual" } } }, { "category": "product_version", "name": "ant-nodeps", "product": { "name": "ant-nodeps", "product_id": "ant-nodeps", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant-nodeps" } } }, { "category": "product_version", "name": "ant-openjdk11", "product": { "name": "ant-openjdk11", "product_id": "ant-openjdk11", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant-openjdk11" } } }, { "category": "product_version", "name": "ant-openjdk17", "product": { "name": "ant-openjdk17", "product_id": "ant-openjdk17", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant-openjdk17" } } }, { "category": "product_version", "name": "ant-openjdk21", "product": { "name": "ant-openjdk21", "product_id": "ant-openjdk21", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant-openjdk21" } } }, { "category": "product_version", "name": "ant-openjdk8", "product": { "name": "ant-openjdk8", "product_id": "ant-openjdk8", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant-openjdk8" } } }, { "category": "product_version", "name": "ant-scripts", "product": { "name": "ant-scripts", "product_id": "ant-scripts", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant-scripts" } } }, { "category": "product_version", "name": "ant-swing", "product": { "name": "ant-swing", "product_id": "ant-swing", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant-swing" } } }, { "category": "product_version", "name": "ant-testutil", "product": { "name": "ant-testutil", "product_id": "ant-testutil", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant-testutil" } } }, { "category": "product_version", "name": "ant-trax", "product": { "name": "ant-trax", "product_id": "ant-trax", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant-trax" } } }, { "category": "product_version", "name": "ant-unbound", "product": { "name": "ant-unbound", "product_id": "ant-unbound", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant-unbound" } } }, { "category": "product_version", "name": "ant-xz", "product": { "name": "ant-xz", "product_id": "ant-xz", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant-xz" } } }, { "category": "product_version", "name": "ant", "product": { "name": "ant", "product_id": "ant.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant?arch=src" } } }, { "category": "product_version", "name": "ant:1.10/ant", "product": { "name": "ant:1.10/ant", "product_id": "ant:1.10/ant.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/ant?arch=src&rpmmod=ant:1.10" } } }, { "category": "product_version", "name": "jenkins", "product": { "name": "jenkins", "product_id": "jenkins", "product_identification_helper": { "purl": "pkg:rpm/redhat/jenkins" } } }, { "category": "product_version", "name": "jenkins", "product": { "name": "jenkins", "product_id": "jenkins.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jenkins?arch=src" } } }, { "category": "product_version", "name": "openshift4/ose-metering-hive", "product": { "name": "openshift4/ose-metering-hive", "product_id": "openshift4/ose-metering-hive", "product_identification_helper": { "purl": "pkg:oci/ose-metering-hive?repository_url=registry.redhat.io/openshift4/ose-metering-hive" } } }, { "category": "product_version", "name": "rh-maven36-ant", "product": { "name": "rh-maven36-ant", "product_id": "rh-maven36-ant", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-maven36-ant" } } }, { "category": "product_version", "name": "rh-maven36-ant-antlr", "product": { "name": "rh-maven36-ant-antlr", "product_id": "rh-maven36-ant-antlr", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-maven36-ant-antlr" } } }, { "category": "product_version", "name": "rh-maven36-ant-apache-bcel", "product": { "name": "rh-maven36-ant-apache-bcel", "product_id": "rh-maven36-ant-apache-bcel", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-maven36-ant-apache-bcel" } } }, { "category": "product_version", "name": "rh-maven36-ant-apache-bsf", "product": { "name": "rh-maven36-ant-apache-bsf", "product_id": "rh-maven36-ant-apache-bsf", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-maven36-ant-apache-bsf" } } }, { "category": "product_version", "name": "rh-maven36-ant-apache-log4j", "product": { "name": "rh-maven36-ant-apache-log4j", "product_id": "rh-maven36-ant-apache-log4j", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-maven36-ant-apache-log4j" } } }, { "category": "product_version", "name": "rh-maven36-ant-apache-oro", "product": { "name": "rh-maven36-ant-apache-oro", "product_id": "rh-maven36-ant-apache-oro", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-maven36-ant-apache-oro" } } }, { "category": "product_version", "name": "rh-maven36-ant-apache-regexp", "product": { "name": "rh-maven36-ant-apache-regexp", "product_id": "rh-maven36-ant-apache-regexp", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-maven36-ant-apache-regexp" } } }, { "category": "product_version", "name": "rh-maven36-ant-apache-resolver", "product": { "name": "rh-maven36-ant-apache-resolver", "product_id": "rh-maven36-ant-apache-resolver", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-maven36-ant-apache-resolver" } } }, { "category": "product_version", "name": "rh-maven36-ant-apache-xalan2", "product": { "name": "rh-maven36-ant-apache-xalan2", "product_id": "rh-maven36-ant-apache-xalan2", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-maven36-ant-apache-xalan2" } } }, { "category": "product_version", "name": "rh-maven36-ant-commons-logging", "product": { "name": "rh-maven36-ant-commons-logging", "product_id": "rh-maven36-ant-commons-logging", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-maven36-ant-commons-logging" } } }, { "category": "product_version", "name": "rh-maven36-ant-commons-net", "product": { "name": "rh-maven36-ant-commons-net", "product_id": "rh-maven36-ant-commons-net", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-maven36-ant-commons-net" } } }, { "category": "product_version", "name": "rh-maven36-ant-imageio", "product": { "name": "rh-maven36-ant-imageio", "product_id": "rh-maven36-ant-imageio", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-maven36-ant-imageio" } } }, { "category": "product_version", "name": "rh-maven36-ant-javadoc", "product": { "name": "rh-maven36-ant-javadoc", "product_id": "rh-maven36-ant-javadoc", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-maven36-ant-javadoc" } } }, { "category": "product_version", "name": "rh-maven36-ant-javamail", "product": { "name": "rh-maven36-ant-javamail", "product_id": "rh-maven36-ant-javamail", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-maven36-ant-javamail" } } }, { "category": "product_version", "name": "rh-maven36-ant-jdepend", "product": { "name": "rh-maven36-ant-jdepend", "product_id": "rh-maven36-ant-jdepend", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-maven36-ant-jdepend" } } }, { "category": "product_version", "name": "rh-maven36-ant-jmf", "product": { "name": "rh-maven36-ant-jmf", "product_id": "rh-maven36-ant-jmf", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-maven36-ant-jmf" } } }, { "category": "product_version", "name": "rh-maven36-ant-jsch", "product": { "name": "rh-maven36-ant-jsch", "product_id": "rh-maven36-ant-jsch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-maven36-ant-jsch" } } }, { "category": "product_version", "name": "rh-maven36-ant-junit", "product": { "name": "rh-maven36-ant-junit", "product_id": "rh-maven36-ant-junit", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-maven36-ant-junit" } } }, { "category": "product_version", "name": "rh-maven36-ant-junit5", "product": { "name": "rh-maven36-ant-junit5", "product_id": "rh-maven36-ant-junit5", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-maven36-ant-junit5" } } }, { "category": "product_version", "name": "rh-maven36-ant-lib", "product": { "name": "rh-maven36-ant-lib", "product_id": "rh-maven36-ant-lib", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-maven36-ant-lib" } } }, { "category": "product_version", "name": "rh-maven36-ant-manual", "product": { "name": "rh-maven36-ant-manual", "product_id": "rh-maven36-ant-manual", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-maven36-ant-manual" } } }, { "category": "product_version", "name": "rh-maven36-ant-swing", "product": { "name": "rh-maven36-ant-swing", "product_id": "rh-maven36-ant-swing", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-maven36-ant-swing" } } }, { "category": "product_version", "name": "rh-maven36-ant-testutil", "product": { "name": "rh-maven36-ant-testutil", "product_id": "rh-maven36-ant-testutil", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-maven36-ant-testutil" } } }, { "category": "product_version", "name": "rh-maven36-ant-xz", "product": { "name": "rh-maven36-ant-xz", "product_id": "rh-maven36-ant-xz", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-maven36-ant-xz" } } }, { "category": "product_version", "name": "rh-maven36-ant", "product": { "name": "rh-maven36-ant", "product_id": "rh-maven36-ant.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-maven36-ant?arch=src" } } } ] } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "ant as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:ant" }, "product_reference": "ant", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "ant as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:ant" }, "product_reference": "ant", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:ant" }, "product_reference": "ant", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "ant as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:ant" }, "product_reference": "ant", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-antlr as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:ant-antlr" }, "product_reference": "ant-antlr", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-antlr as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:ant-antlr" }, "product_reference": "ant-antlr", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "ant-antlr as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:ant-antlr" }, "product_reference": "ant-antlr", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "ant-antlr as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:ant-antlr" }, "product_reference": "ant-antlr", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-apache-bcel as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:ant-apache-bcel" }, "product_reference": "ant-apache-bcel", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-apache-bcel as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:ant-apache-bcel" }, "product_reference": "ant-apache-bcel", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "ant-apache-bcel as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:ant-apache-bcel" }, "product_reference": "ant-apache-bcel", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-apache-bcel as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:ant-apache-bcel" }, "product_reference": "ant-apache-bcel", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "ant-apache-bsf as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:ant-apache-bsf" }, "product_reference": "ant-apache-bsf", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "ant-apache-bsf as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:ant-apache-bsf" }, "product_reference": "ant-apache-bsf", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "ant-apache-bsf as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:ant-apache-bsf" }, "product_reference": "ant-apache-bsf", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-apache-bsf as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:ant-apache-bsf" }, "product_reference": "ant-apache-bsf", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-apache-log4j as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:ant-apache-log4j" }, "product_reference": "ant-apache-log4j", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "ant-apache-log4j as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:ant-apache-log4j" }, "product_reference": "ant-apache-log4j", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-apache-log4j as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:ant-apache-log4j" }, "product_reference": "ant-apache-log4j", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-apache-oro as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:ant-apache-oro" }, "product_reference": "ant-apache-oro", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "ant-apache-oro as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:ant-apache-oro" }, "product_reference": "ant-apache-oro", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-apache-oro as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:ant-apache-oro" }, "product_reference": "ant-apache-oro", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "ant-apache-oro as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:ant-apache-oro" }, "product_reference": "ant-apache-oro", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-apache-regexp as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:ant-apache-regexp" }, "product_reference": "ant-apache-regexp", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "ant-apache-regexp as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:ant-apache-regexp" }, "product_reference": "ant-apache-regexp", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-apache-regexp as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:ant-apache-regexp" }, "product_reference": "ant-apache-regexp", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "ant-apache-regexp as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:ant-apache-regexp" }, "product_reference": "ant-apache-regexp", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-apache-resolver as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:ant-apache-resolver" }, "product_reference": "ant-apache-resolver", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "ant-apache-resolver as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:ant-apache-resolver" }, "product_reference": "ant-apache-resolver", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-apache-resolver as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:ant-apache-resolver" }, "product_reference": "ant-apache-resolver", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "ant-apache-resolver as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:ant-apache-resolver" }, "product_reference": "ant-apache-resolver", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-apache-xalan2 as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:ant-apache-xalan2" }, "product_reference": "ant-apache-xalan2", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-apache-xalan2 as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:ant-apache-xalan2" }, "product_reference": "ant-apache-xalan2", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "ant-apache-xalan2 as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:ant-apache-xalan2" }, "product_reference": "ant-apache-xalan2", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "ant-commons-logging as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:ant-commons-logging" }, "product_reference": "ant-commons-logging", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "ant-commons-logging as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:ant-commons-logging" }, "product_reference": "ant-commons-logging", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "ant-commons-logging as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:ant-commons-logging" }, "product_reference": "ant-commons-logging", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-commons-logging as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:ant-commons-logging" }, "product_reference": "ant-commons-logging", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-commons-net as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:ant-commons-net" }, "product_reference": "ant-commons-net", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "ant-commons-net as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:ant-commons-net" }, "product_reference": "ant-commons-net", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "ant-commons-net as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:ant-commons-net" }, "product_reference": "ant-commons-net", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-commons-net as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:ant-commons-net" }, "product_reference": "ant-commons-net", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-debuginfo as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:ant-debuginfo" }, "product_reference": "ant-debuginfo", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-javadoc as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:ant-javadoc" }, "product_reference": "ant-javadoc", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-javadoc as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:ant-javadoc" }, "product_reference": "ant-javadoc", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "ant-javadoc as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:ant-javadoc" }, "product_reference": "ant-javadoc", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-javamail as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:ant-javamail" }, "product_reference": "ant-javamail", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-javamail as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:ant-javamail" }, "product_reference": "ant-javamail", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "ant-javamail as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:ant-javamail" }, "product_reference": "ant-javamail", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-javamail as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:ant-javamail" }, "product_reference": "ant-javamail", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "ant-jdepend as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:ant-jdepend" }, "product_reference": "ant-jdepend", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "ant-jdepend as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:ant-jdepend" }, "product_reference": "ant-jdepend", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-jdepend as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:ant-jdepend" }, "product_reference": "ant-jdepend", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "ant-jdepend as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:ant-jdepend" }, "product_reference": "ant-jdepend", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-jmf as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:ant-jmf" }, "product_reference": "ant-jmf", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "ant-jmf as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:ant-jmf" }, "product_reference": "ant-jmf", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-jmf as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:ant-jmf" }, "product_reference": "ant-jmf", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "ant-jmf as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:ant-jmf" }, "product_reference": "ant-jmf", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-jsch as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:ant-jsch" }, "product_reference": "ant-jsch", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "ant-jsch as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:ant-jsch" }, "product_reference": "ant-jsch", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-jsch as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:ant-jsch" }, "product_reference": "ant-jsch", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-jsch as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:ant-jsch" }, "product_reference": "ant-jsch", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "ant-junit as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:ant-junit" }, "product_reference": "ant-junit", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "ant-junit as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:ant-junit" }, "product_reference": "ant-junit", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-junit as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:ant-junit" }, "product_reference": "ant-junit", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "ant-junit as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:ant-junit" }, "product_reference": "ant-junit", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-junit5 as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:ant-junit5" }, "product_reference": "ant-junit5", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "ant-lib as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:ant-lib" }, "product_reference": "ant-lib", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "ant-lib as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:ant-lib" }, "product_reference": "ant-lib", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "ant-manual as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:ant-manual" }, "product_reference": "ant-manual", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-manual as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:ant-manual" }, "product_reference": "ant-manual", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "ant-manual as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:ant-manual" }, "product_reference": "ant-manual", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "ant-manual as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:ant-manual" }, "product_reference": "ant-manual", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-nodeps as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:ant-nodeps" }, "product_reference": "ant-nodeps", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-openjdk11 as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:ant-openjdk11" }, "product_reference": "ant-openjdk11", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "ant-openjdk17 as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:ant-openjdk17" }, "product_reference": "ant-openjdk17", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "ant-openjdk21 as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:ant-openjdk21" }, "product_reference": "ant-openjdk21", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "ant-openjdk8 as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:ant-openjdk8" }, "product_reference": "ant-openjdk8", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "ant-scripts as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:ant-scripts" }, "product_reference": "ant-scripts", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-swing as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:ant-swing" }, "product_reference": "ant-swing", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "ant-swing as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:ant-swing" }, "product_reference": "ant-swing", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-swing as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:ant-swing" }, "product_reference": "ant-swing", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "ant-swing as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:ant-swing" }, "product_reference": "ant-swing", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-testutil as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:ant-testutil" }, "product_reference": "ant-testutil", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-testutil as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:ant-testutil" }, "product_reference": "ant-testutil", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "ant-testutil as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:ant-testutil" }, "product_reference": "ant-testutil", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "ant-trax as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:ant-trax" }, "product_reference": "ant-trax", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant-unbound as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:ant-unbound" }, "product_reference": "ant-unbound", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "ant-xz as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:ant-xz" }, "product_reference": "ant-xz", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "ant-xz as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:ant-xz" }, "product_reference": "ant-xz", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "ant.src as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:ant.src" }, "product_reference": "ant.src", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "ant.src as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:ant.src" }, "product_reference": "ant.src", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant.src as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:ant.src" }, "product_reference": "ant.src", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "ant:1.10/ant.src as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:ant:1.10/ant.src" }, "product_reference": "ant:1.10/ant.src", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "jenkins as a component of OpenShift Container Platform 4.19", "product_id": "openshift-4:jenkins" }, "product_reference": "jenkins", "relates_to_product_reference": "openshift-4" }, { "category": "default_component_of", "full_product_name": { "name": "jenkins as a component of OpenShift Container Platform 3.11.0", "product_id": "openshift-enterprise-3.11-default:jenkins" }, "product_reference": "jenkins", "relates_to_product_reference": "openshift-enterprise-3.11-default" }, { "category": "default_component_of", "full_product_name": { "name": "jenkins.src as a component of OpenShift Container Platform 3.11.0", "product_id": "openshift-enterprise-3.11-default:jenkins.src" }, "product_reference": "jenkins.src", "relates_to_product_reference": "openshift-enterprise-3.11-default" }, { "category": "default_component_of", "full_product_name": { "name": "jenkins.src as a component of OpenShift Container Platform 4.19", "product_id": "openshift-4:jenkins.src" }, "product_reference": "jenkins.src", "relates_to_product_reference": "openshift-4" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-metering-hive as a component of OpenShift Container Platform 4.14", "product_id": "openshift-4.14.z:openshift4/ose-metering-hive" }, "product_reference": "openshift4/ose-metering-hive", "relates_to_product_reference": "openshift-4.14.z" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-metering-hive as a component of OpenShift Container Platform 4.19", "product_id": "openshift-4.19:openshift4/ose-metering-hive" }, "product_reference": "openshift4/ose-metering-hive", "relates_to_product_reference": "openshift-4.19" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-metering-hive as a component of OpenShift Container Platform 4.13", "product_id": "openshift-4.13.z:openshift4/ose-metering-hive" }, "product_reference": "openshift4/ose-metering-hive", "relates_to_product_reference": "openshift-4.13.z" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-metering-hive as a component of OpenShift Container Platform 4.20", "product_id": "openshift-4.20:openshift4/ose-metering-hive" }, "product_reference": "openshift4/ose-metering-hive", "relates_to_product_reference": "openshift-4.20" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-metering-hive as a component of OpenShift Container Platform 4.16.z", "product_id": "openshift-4.16.z:openshift4/ose-metering-hive" }, "product_reference": "openshift4/ose-metering-hive", "relates_to_product_reference": "openshift-4.16.z" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-metering-hive as a component of OpenShift Container Platform 4.15.z", "product_id": "openshift-4.15.z:openshift4/ose-metering-hive" }, "product_reference": "openshift4/ose-metering-hive", "relates_to_product_reference": "openshift-4.15.z" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-metering-hive as a component of OpenShift Container Platform 4.18", "product_id": "openshift-4.18:openshift4/ose-metering-hive" }, "product_reference": "openshift4/ose-metering-hive", "relates_to_product_reference": "openshift-4.18" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-metering-hive as a component of OpenShift Container Platform 4.12", "product_id": "openshift-4.12.z:openshift4/ose-metering-hive" }, "product_reference": "openshift4/ose-metering-hive", "relates_to_product_reference": "openshift-4.12.z" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-metering-hive as a component of OpenShift Container Platform 4.17", "product_id": "openshift-4.17:openshift4/ose-metering-hive" }, "product_reference": "openshift4/ose-metering-hive", "relates_to_product_reference": "openshift-4.17" }, { "category": "default_component_of", "full_product_name": { "name": "rh-maven36-ant as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-maven36-ant" }, "product_reference": "rh-maven36-ant", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-maven36-ant-antlr as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-maven36-ant-antlr" }, "product_reference": "rh-maven36-ant-antlr", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-maven36-ant-apache-bcel as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-maven36-ant-apache-bcel" }, "product_reference": "rh-maven36-ant-apache-bcel", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-maven36-ant-apache-bsf as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-maven36-ant-apache-bsf" }, "product_reference": "rh-maven36-ant-apache-bsf", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-maven36-ant-apache-log4j as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-maven36-ant-apache-log4j" }, "product_reference": "rh-maven36-ant-apache-log4j", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-maven36-ant-apache-oro as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-maven36-ant-apache-oro" }, "product_reference": "rh-maven36-ant-apache-oro", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-maven36-ant-apache-regexp as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-maven36-ant-apache-regexp" }, "product_reference": "rh-maven36-ant-apache-regexp", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-maven36-ant-apache-resolver as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-maven36-ant-apache-resolver" }, "product_reference": "rh-maven36-ant-apache-resolver", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-maven36-ant-apache-xalan2 as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-maven36-ant-apache-xalan2" }, "product_reference": "rh-maven36-ant-apache-xalan2", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-maven36-ant-commons-logging as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-maven36-ant-commons-logging" }, "product_reference": "rh-maven36-ant-commons-logging", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-maven36-ant-commons-net as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-maven36-ant-commons-net" }, "product_reference": "rh-maven36-ant-commons-net", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-maven36-ant-imageio as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-maven36-ant-imageio" }, "product_reference": "rh-maven36-ant-imageio", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-maven36-ant-javadoc as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-maven36-ant-javadoc" }, "product_reference": "rh-maven36-ant-javadoc", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-maven36-ant-javamail as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-maven36-ant-javamail" }, "product_reference": "rh-maven36-ant-javamail", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-maven36-ant-jdepend as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-maven36-ant-jdepend" }, "product_reference": "rh-maven36-ant-jdepend", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-maven36-ant-jmf as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-maven36-ant-jmf" }, "product_reference": "rh-maven36-ant-jmf", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-maven36-ant-jsch as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-maven36-ant-jsch" }, "product_reference": "rh-maven36-ant-jsch", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-maven36-ant-junit as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-maven36-ant-junit" }, "product_reference": "rh-maven36-ant-junit", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-maven36-ant-junit5 as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-maven36-ant-junit5" }, "product_reference": "rh-maven36-ant-junit5", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-maven36-ant-lib as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-maven36-ant-lib" }, "product_reference": "rh-maven36-ant-lib", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-maven36-ant-manual as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-maven36-ant-manual" }, "product_reference": "rh-maven36-ant-manual", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-maven36-ant-swing as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-maven36-ant-swing" }, "product_reference": "rh-maven36-ant-swing", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-maven36-ant-testutil as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-maven36-ant-testutil" }, "product_reference": "rh-maven36-ant-testutil", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-maven36-ant-xz as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-maven36-ant-xz" }, "product_reference": "rh-maven36-ant-xz", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-maven36-ant.src as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-maven36-ant.src" }, "product_reference": "rh-maven36-ant.src", "relates_to_product_reference": "rhscl-3" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-36374", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2021-07-14T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "rhel-6-els.els:ant-debuginfo", "rhel-6-els.els:ant-javadoc", "rhel-6-els.els:ant-manual", "rhel-7-els.els:ant-javadoc", "rhel-7-els.els:ant-manual", "rhel-8:ant-javadoc", "rhel-8:ant-manual", "rhel-9.0:ant-manual", "rhscl-3:rh-maven36-ant-javadoc", "rhscl-3:rh-maven36-ant-manual" ] } ], "notes": [ { "category": "other", "text": "OpenShift Container Platform 4 (OCP) ships affected version of Apache Ant in the ose-metering-hive container, however the metering operator is deprecated since 4.6[1]. This issue is not currently planned to be addressed in future updates and hence ose-metering-hive container has been marked as 'will not fix'.\n\n[1] https://docs.openshift.com/container-platform/4.6/metering/metering-about-metering.html", "title": "Statement" }, { "category": "description", "text": "When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives are for instance JAR files and many office files. Apache Ant prior to 1.9.16 and 1.10.11 were affected.", "title": "Vulnerability description" } ], "product_status": { "known_affected": [ "openshift-4.12.z:openshift4/ose-metering-hive", "openshift-4.13.z:openshift4/ose-metering-hive", "openshift-4.14.z:openshift4/ose-metering-hive", "openshift-4.15.z:openshift4/ose-metering-hive", "openshift-4.16.z:openshift4/ose-metering-hive", "openshift-4.17:openshift4/ose-metering-hive", "openshift-4.18:openshift4/ose-metering-hive", "openshift-4.19:openshift4/ose-metering-hive", "openshift-4.20:openshift4/ose-metering-hive", "openshift-4:jenkins", "openshift-4:jenkins.src", "openshift-enterprise-3.11-default:jenkins", "openshift-enterprise-3.11-default:jenkins.src", "rhel-6-els.els:ant", "rhel-6-els.els:ant-antlr", "rhel-6-els.els:ant-apache-bcel", "rhel-6-els.els:ant-apache-bsf", "rhel-6-els.els:ant-apache-log4j", "rhel-6-els.els:ant-apache-oro", "rhel-6-els.els:ant-apache-regexp", "rhel-6-els.els:ant-apache-resolver", "rhel-6-els.els:ant-commons-logging", "rhel-6-els.els:ant-commons-net", "rhel-6-els.els:ant-javamail", "rhel-6-els.els:ant-jdepend", "rhel-6-els.els:ant-jmf", "rhel-6-els.els:ant-jsch", "rhel-6-els.els:ant-junit", "rhel-6-els.els:ant-nodeps", "rhel-6-els.els:ant-scripts", "rhel-6-els.els:ant-swing", "rhel-6-els.els:ant-trax", "rhel-6-els.els:ant.src", "rhel-7-els.els:ant", "rhel-7-els.els:ant-antlr", "rhel-7-els.els:ant-apache-bcel", "rhel-7-els.els:ant-apache-bsf", "rhel-7-els.els:ant-apache-log4j", "rhel-7-els.els:ant-apache-oro", "rhel-7-els.els:ant-apache-regexp", "rhel-7-els.els:ant-apache-resolver", "rhel-7-els.els:ant-apache-xalan2", "rhel-7-els.els:ant-commons-logging", "rhel-7-els.els:ant-commons-net", "rhel-7-els.els:ant-javamail", "rhel-7-els.els:ant-jdepend", "rhel-7-els.els:ant-jmf", "rhel-7-els.els:ant-jsch", "rhel-7-els.els:ant-junit", "rhel-7-els.els:ant-swing", "rhel-7-els.els:ant-testutil", "rhel-7-els.els:ant.src", "rhel-8:ant", "rhel-8:ant-antlr", "rhel-8:ant-apache-bcel", "rhel-8:ant-apache-bsf", "rhel-8:ant-apache-log4j", "rhel-8:ant-apache-oro", "rhel-8:ant-apache-regexp", "rhel-8:ant-apache-resolver", "rhel-8:ant-apache-xalan2", "rhel-8:ant-commons-logging", "rhel-8:ant-commons-net", "rhel-8:ant-javamail", "rhel-8:ant-jdepend", "rhel-8:ant-jmf", "rhel-8:ant-jsch", "rhel-8:ant-junit", "rhel-8:ant-lib", "rhel-8:ant-swing", "rhel-8:ant-testutil", "rhel-8:ant-xz", "rhel-8:ant:1.10/ant.src", "rhel-9.0:ant", "rhel-9.0:ant-antlr", "rhel-9.0:ant-apache-bcel", "rhel-9.0:ant-apache-bsf", "rhel-9.0:ant-apache-oro", "rhel-9.0:ant-apache-regexp", "rhel-9.0:ant-apache-resolver", "rhel-9.0:ant-apache-xalan2", "rhel-9.0:ant-commons-logging", "rhel-9.0:ant-commons-net", "rhel-9.0:ant-javamail", "rhel-9.0:ant-jdepend", "rhel-9.0:ant-jmf", "rhel-9.0:ant-jsch", "rhel-9.0:ant-junit", "rhel-9.0:ant-junit5", "rhel-9.0:ant-lib", "rhel-9.0:ant-openjdk11", "rhel-9.0:ant-openjdk17", "rhel-9.0:ant-openjdk21", "rhel-9.0:ant-openjdk8", "rhel-9.0:ant-swing", "rhel-9.0:ant-testutil", "rhel-9.0:ant-unbound", "rhel-9.0:ant-xz", "rhel-9.0:ant.src", "rhscl-3:rh-maven36-ant", "rhscl-3:rh-maven36-ant-antlr", "rhscl-3:rh-maven36-ant-apache-bcel", "rhscl-3:rh-maven36-ant-apache-bsf", "rhscl-3:rh-maven36-ant-apache-log4j", "rhscl-3:rh-maven36-ant-apache-oro", "rhscl-3:rh-maven36-ant-apache-regexp", "rhscl-3:rh-maven36-ant-apache-resolver", "rhscl-3:rh-maven36-ant-apache-xalan2", "rhscl-3:rh-maven36-ant-commons-logging", "rhscl-3:rh-maven36-ant-commons-net", "rhscl-3:rh-maven36-ant-imageio", "rhscl-3:rh-maven36-ant-javamail", "rhscl-3:rh-maven36-ant-jdepend", "rhscl-3:rh-maven36-ant-jmf", "rhscl-3:rh-maven36-ant-jsch", "rhscl-3:rh-maven36-ant-junit", "rhscl-3:rh-maven36-ant-junit5", "rhscl-3:rh-maven36-ant-lib", "rhscl-3:rh-maven36-ant-swing", "rhscl-3:rh-maven36-ant-testutil", "rhscl-3:rh-maven36-ant-xz", "rhscl-3:rh-maven36-ant.src" ], "known_not_affected": [ "rhel-6-els.els:ant-debuginfo", "rhel-6-els.els:ant-javadoc", "rhel-6-els.els:ant-manual", "rhel-7-els.els:ant-javadoc", "rhel-7-els.els:ant-manual", "rhel-8:ant-javadoc", "rhel-8:ant-manual", "rhel-9.0:ant-manual", "rhscl-3:rh-maven36-ant-javadoc", "rhscl-3:rh-maven36-ant-manual" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-36374" }, { "category": "external", "summary": "nvd.nist.gov", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-36374" }, { "category": "external", "summary": "www.cve.org", "url": "https://www.cve.org/CVERecord?id=CVE-2021-36374" } ], "remediations": [ { "category": "no_fix_planned", "details": "Will not fix", "product_ids": [ "openshift-4.12.z:openshift4/ose-metering-hive", "openshift-4.13.z:openshift4/ose-metering-hive", "openshift-4.14.z:openshift4/ose-metering-hive", "openshift-4.15.z:openshift4/ose-metering-hive", "openshift-4.16.z:openshift4/ose-metering-hive", "openshift-4.17:openshift4/ose-metering-hive", "openshift-4.18:openshift4/ose-metering-hive", "openshift-4.19:openshift4/ose-metering-hive", "openshift-4.20:openshift4/ose-metering-hive", "openshift-enterprise-3.11-default:jenkins", "openshift-enterprise-3.11-default:jenkins.src", "rhel-8:ant", "rhel-8:ant-antlr", "rhel-8:ant-apache-bcel", "rhel-8:ant-apache-bsf", "rhel-8:ant-apache-log4j", "rhel-8:ant-apache-oro", "rhel-8:ant-apache-regexp", "rhel-8:ant-apache-resolver", "rhel-8:ant-apache-xalan2", "rhel-8:ant-commons-logging", "rhel-8:ant-commons-net", "rhel-8:ant-javamail", "rhel-8:ant-jdepend", "rhel-8:ant-jmf", "rhel-8:ant-jsch", "rhel-8:ant-junit", "rhel-8:ant-lib", "rhel-8:ant-swing", "rhel-8:ant-testutil", "rhel-8:ant-xz", "rhel-8:ant:1.10/ant.src", "rhel-9.0:ant", "rhel-9.0:ant-antlr", "rhel-9.0:ant-apache-bcel", "rhel-9.0:ant-apache-bsf", "rhel-9.0:ant-apache-oro", "rhel-9.0:ant-apache-regexp", "rhel-9.0:ant-apache-resolver", "rhel-9.0:ant-apache-xalan2", "rhel-9.0:ant-commons-logging", "rhel-9.0:ant-commons-net", "rhel-9.0:ant-javamail", "rhel-9.0:ant-jdepend", "rhel-9.0:ant-jmf", "rhel-9.0:ant-jsch", "rhel-9.0:ant-junit", "rhel-9.0:ant-junit5", "rhel-9.0:ant-lib", "rhel-9.0:ant-openjdk11", "rhel-9.0:ant-openjdk17", "rhel-9.0:ant-openjdk21", "rhel-9.0:ant-openjdk8", "rhel-9.0:ant-swing", "rhel-9.0:ant-testutil", "rhel-9.0:ant-unbound", "rhel-9.0:ant-xz", "rhel-9.0:ant.src", "rhscl-3:rh-maven36-ant", "rhscl-3:rh-maven36-ant-antlr", "rhscl-3:rh-maven36-ant-apache-bcel", "rhscl-3:rh-maven36-ant-apache-bsf", "rhscl-3:rh-maven36-ant-apache-log4j", "rhscl-3:rh-maven36-ant-apache-oro", "rhscl-3:rh-maven36-ant-apache-regexp", "rhscl-3:rh-maven36-ant-apache-resolver", "rhscl-3:rh-maven36-ant-apache-xalan2", "rhscl-3:rh-maven36-ant-commons-logging", "rhscl-3:rh-maven36-ant-commons-net", "rhscl-3:rh-maven36-ant-imageio", "rhscl-3:rh-maven36-ant-javamail", "rhscl-3:rh-maven36-ant-jdepend", "rhscl-3:rh-maven36-ant-jmf", "rhscl-3:rh-maven36-ant-jsch", "rhscl-3:rh-maven36-ant-junit", "rhscl-3:rh-maven36-ant-junit5", "rhscl-3:rh-maven36-ant-lib", "rhscl-3:rh-maven36-ant-swing", "rhscl-3:rh-maven36-ant-testutil", "rhscl-3:rh-maven36-ant-xz", "rhscl-3:rh-maven36-ant.src" ] }, { "category": "no_fix_planned", "details": "Out of support scope", "product_ids": [ "rhel-6-els.els:ant", "rhel-6-els.els:ant-antlr", "rhel-6-els.els:ant-apache-bcel", "rhel-6-els.els:ant-apache-bsf", "rhel-6-els.els:ant-apache-log4j", "rhel-6-els.els:ant-apache-oro", "rhel-6-els.els:ant-apache-regexp", "rhel-6-els.els:ant-apache-resolver", "rhel-6-els.els:ant-commons-logging", "rhel-6-els.els:ant-commons-net", "rhel-6-els.els:ant-javamail", "rhel-6-els.els:ant-jdepend", "rhel-6-els.els:ant-jmf", "rhel-6-els.els:ant-jsch", "rhel-6-els.els:ant-junit", "rhel-6-els.els:ant-nodeps", "rhel-6-els.els:ant-scripts", "rhel-6-els.els:ant-swing", "rhel-6-els.els:ant-trax", "rhel-6-els.els:ant.src", "rhel-7-els.els:ant", "rhel-7-els.els:ant-antlr", "rhel-7-els.els:ant-apache-bcel", "rhel-7-els.els:ant-apache-bsf", "rhel-7-els.els:ant-apache-log4j", "rhel-7-els.els:ant-apache-oro", "rhel-7-els.els:ant-apache-regexp", "rhel-7-els.els:ant-apache-resolver", "rhel-7-els.els:ant-apache-xalan2", "rhel-7-els.els:ant-commons-logging", "rhel-7-els.els:ant-commons-net", "rhel-7-els.els:ant-javamail", "rhel-7-els.els:ant-jdepend", "rhel-7-els.els:ant-jmf", "rhel-7-els.els:ant-jsch", "rhel-7-els.els:ant-junit", "rhel-7-els.els:ant-swing", "rhel-7-els.els:ant-testutil", "rhel-7-els.els:ant.src" ] }, { "category": "none_available", "details": "Affected", "product_ids": [ "openshift-4:jenkins", "openshift-4:jenkins.src" ] } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM" }, "products": [ "openshift-4.12.z:openshift4/ose-metering-hive", "openshift-4.13.z:openshift4/ose-metering-hive", "openshift-4.14.z:openshift4/ose-metering-hive", "openshift-4.15.z:openshift4/ose-metering-hive", "openshift-4.16.z:openshift4/ose-metering-hive", "openshift-4.17:openshift4/ose-metering-hive", "openshift-4.18:openshift4/ose-metering-hive", "openshift-4.19:openshift4/ose-metering-hive", "openshift-4.20:openshift4/ose-metering-hive", "openshift-4:jenkins", "openshift-4:jenkins.src", "openshift-enterprise-3.11-default:jenkins", "openshift-enterprise-3.11-default:jenkins.src", "rhel-6-els.els:ant", "rhel-6-els.els:ant-antlr", "rhel-6-els.els:ant-apache-bcel", "rhel-6-els.els:ant-apache-bsf", "rhel-6-els.els:ant-apache-log4j", "rhel-6-els.els:ant-apache-oro", "rhel-6-els.els:ant-apache-regexp", "rhel-6-els.els:ant-apache-resolver", "rhel-6-els.els:ant-commons-logging", "rhel-6-els.els:ant-commons-net", "rhel-6-els.els:ant-debuginfo", "rhel-6-els.els:ant-javadoc", "rhel-6-els.els:ant-javamail", "rhel-6-els.els:ant-jdepend", "rhel-6-els.els:ant-jmf", "rhel-6-els.els:ant-jsch", "rhel-6-els.els:ant-junit", "rhel-6-els.els:ant-manual", "rhel-6-els.els:ant-nodeps", "rhel-6-els.els:ant-scripts", "rhel-6-els.els:ant-swing", "rhel-6-els.els:ant-trax", "rhel-6-els.els:ant.src", "rhel-7-els.els:ant", "rhel-7-els.els:ant-antlr", "rhel-7-els.els:ant-apache-bcel", "rhel-7-els.els:ant-apache-bsf", "rhel-7-els.els:ant-apache-log4j", "rhel-7-els.els:ant-apache-oro", "rhel-7-els.els:ant-apache-regexp", "rhel-7-els.els:ant-apache-resolver", "rhel-7-els.els:ant-apache-xalan2", "rhel-7-els.els:ant-commons-logging", "rhel-7-els.els:ant-commons-net", "rhel-7-els.els:ant-javadoc", "rhel-7-els.els:ant-javamail", "rhel-7-els.els:ant-jdepend", "rhel-7-els.els:ant-jmf", "rhel-7-els.els:ant-jsch", "rhel-7-els.els:ant-junit", "rhel-7-els.els:ant-manual", "rhel-7-els.els:ant-swing", "rhel-7-els.els:ant-testutil", "rhel-7-els.els:ant.src", "rhel-8:ant", "rhel-8:ant-antlr", "rhel-8:ant-apache-bcel", "rhel-8:ant-apache-bsf", "rhel-8:ant-apache-log4j", "rhel-8:ant-apache-oro", "rhel-8:ant-apache-regexp", "rhel-8:ant-apache-resolver", "rhel-8:ant-apache-xalan2", "rhel-8:ant-commons-logging", "rhel-8:ant-commons-net", "rhel-8:ant-javadoc", "rhel-8:ant-javamail", "rhel-8:ant-jdepend", "rhel-8:ant-jmf", "rhel-8:ant-jsch", "rhel-8:ant-junit", "rhel-8:ant-lib", "rhel-8:ant-manual", "rhel-8:ant-swing", "rhel-8:ant-testutil", "rhel-8:ant-xz", "rhel-8:ant:1.10/ant.src", "rhel-9.0:ant", "rhel-9.0:ant-antlr", "rhel-9.0:ant-apache-bcel", "rhel-9.0:ant-apache-bsf", "rhel-9.0:ant-apache-oro", "rhel-9.0:ant-apache-regexp", "rhel-9.0:ant-apache-resolver", "rhel-9.0:ant-apache-xalan2", "rhel-9.0:ant-commons-logging", "rhel-9.0:ant-commons-net", "rhel-9.0:ant-javamail", "rhel-9.0:ant-jdepend", "rhel-9.0:ant-jmf", "rhel-9.0:ant-jsch", "rhel-9.0:ant-junit", "rhel-9.0:ant-junit5", "rhel-9.0:ant-lib", "rhel-9.0:ant-manual", "rhel-9.0:ant-openjdk11", "rhel-9.0:ant-openjdk17", "rhel-9.0:ant-openjdk21", "rhel-9.0:ant-openjdk8", "rhel-9.0:ant-swing", "rhel-9.0:ant-testutil", "rhel-9.0:ant-unbound", "rhel-9.0:ant-xz", "rhel-9.0:ant.src", "rhscl-3:rh-maven36-ant", "rhscl-3:rh-maven36-ant-antlr", "rhscl-3:rh-maven36-ant-apache-bcel", "rhscl-3:rh-maven36-ant-apache-bsf", "rhscl-3:rh-maven36-ant-apache-log4j", "rhscl-3:rh-maven36-ant-apache-oro", "rhscl-3:rh-maven36-ant-apache-regexp", "rhscl-3:rh-maven36-ant-apache-resolver", "rhscl-3:rh-maven36-ant-apache-xalan2", "rhscl-3:rh-maven36-ant-commons-logging", "rhscl-3:rh-maven36-ant-commons-net", "rhscl-3:rh-maven36-ant-imageio", "rhscl-3:rh-maven36-ant-javadoc", "rhscl-3:rh-maven36-ant-javamail", "rhscl-3:rh-maven36-ant-jdepend", "rhscl-3:rh-maven36-ant-jmf", "rhscl-3:rh-maven36-ant-jsch", "rhscl-3:rh-maven36-ant-junit", "rhscl-3:rh-maven36-ant-junit5", "rhscl-3:rh-maven36-ant-lib", "rhscl-3:rh-maven36-ant-manual", "rhscl-3:rh-maven36-ant-swing", "rhscl-3:rh-maven36-ant-testutil", "rhscl-3:rh-maven36-ant-xz", "rhscl-3:rh-maven36-ant.src" ] } ], "threats": [ { "category": "impact", "details": "Low", "product_ids": [ "openshift-4.12.z:openshift4/ose-metering-hive", "openshift-4.13.z:openshift4/ose-metering-hive", "openshift-4.14.z:openshift4/ose-metering-hive", "openshift-4.15.z:openshift4/ose-metering-hive", "openshift-4.16.z:openshift4/ose-metering-hive", "openshift-4.17:openshift4/ose-metering-hive", "openshift-4.18:openshift4/ose-metering-hive", "openshift-4.19:openshift4/ose-metering-hive", "openshift-4.20:openshift4/ose-metering-hive", "openshift-4:jenkins", "openshift-4:jenkins.src", "openshift-enterprise-3.11-default:jenkins", "openshift-enterprise-3.11-default:jenkins.src", "rhel-6-els.els:ant", "rhel-6-els.els:ant-antlr", "rhel-6-els.els:ant-apache-bcel", "rhel-6-els.els:ant-apache-bsf", "rhel-6-els.els:ant-apache-log4j", "rhel-6-els.els:ant-apache-oro", "rhel-6-els.els:ant-apache-regexp", "rhel-6-els.els:ant-apache-resolver", "rhel-6-els.els:ant-commons-logging", "rhel-6-els.els:ant-commons-net", "rhel-6-els.els:ant-debuginfo", "rhel-6-els.els:ant-javadoc", "rhel-6-els.els:ant-javamail", "rhel-6-els.els:ant-jdepend", "rhel-6-els.els:ant-jmf", "rhel-6-els.els:ant-jsch", "rhel-6-els.els:ant-junit", "rhel-6-els.els:ant-manual", "rhel-6-els.els:ant-nodeps", "rhel-6-els.els:ant-scripts", "rhel-6-els.els:ant-swing", "rhel-6-els.els:ant-trax", "rhel-6-els.els:ant.src", "rhel-7-els.els:ant", "rhel-7-els.els:ant-antlr", "rhel-7-els.els:ant-apache-bcel", "rhel-7-els.els:ant-apache-bsf", "rhel-7-els.els:ant-apache-log4j", "rhel-7-els.els:ant-apache-oro", "rhel-7-els.els:ant-apache-regexp", "rhel-7-els.els:ant-apache-resolver", "rhel-7-els.els:ant-apache-xalan2", "rhel-7-els.els:ant-commons-logging", "rhel-7-els.els:ant-commons-net", "rhel-7-els.els:ant-javadoc", "rhel-7-els.els:ant-javamail", "rhel-7-els.els:ant-jdepend", "rhel-7-els.els:ant-jmf", "rhel-7-els.els:ant-jsch", "rhel-7-els.els:ant-junit", "rhel-7-els.els:ant-manual", "rhel-7-els.els:ant-swing", "rhel-7-els.els:ant-testutil", "rhel-7-els.els:ant.src", "rhel-8:ant", "rhel-8:ant-antlr", "rhel-8:ant-apache-bcel", "rhel-8:ant-apache-bsf", "rhel-8:ant-apache-log4j", "rhel-8:ant-apache-oro", "rhel-8:ant-apache-regexp", "rhel-8:ant-apache-resolver", "rhel-8:ant-apache-xalan2", "rhel-8:ant-commons-logging", "rhel-8:ant-commons-net", "rhel-8:ant-javadoc", "rhel-8:ant-javamail", "rhel-8:ant-jdepend", "rhel-8:ant-jmf", "rhel-8:ant-jsch", "rhel-8:ant-junit", "rhel-8:ant-lib", "rhel-8:ant-manual", "rhel-8:ant-swing", "rhel-8:ant-testutil", "rhel-8:ant-xz", "rhel-8:ant:1.10/ant.src", "rhel-9.0:ant", "rhel-9.0:ant-antlr", "rhel-9.0:ant-apache-bcel", "rhel-9.0:ant-apache-bsf", "rhel-9.0:ant-apache-oro", "rhel-9.0:ant-apache-regexp", "rhel-9.0:ant-apache-resolver", "rhel-9.0:ant-apache-xalan2", "rhel-9.0:ant-commons-logging", "rhel-9.0:ant-commons-net", "rhel-9.0:ant-javamail", "rhel-9.0:ant-jdepend", "rhel-9.0:ant-jmf", "rhel-9.0:ant-jsch", "rhel-9.0:ant-junit", "rhel-9.0:ant-junit5", "rhel-9.0:ant-lib", "rhel-9.0:ant-manual", "rhel-9.0:ant-openjdk11", "rhel-9.0:ant-openjdk17", "rhel-9.0:ant-openjdk21", "rhel-9.0:ant-openjdk8", "rhel-9.0:ant-swing", "rhel-9.0:ant-testutil", "rhel-9.0:ant-unbound", "rhel-9.0:ant-xz", "rhel-9.0:ant.src", "rhscl-3:rh-maven36-ant", "rhscl-3:rh-maven36-ant-antlr", "rhscl-3:rh-maven36-ant-apache-bcel", "rhscl-3:rh-maven36-ant-apache-bsf", "rhscl-3:rh-maven36-ant-apache-log4j", "rhscl-3:rh-maven36-ant-apache-oro", "rhscl-3:rh-maven36-ant-apache-regexp", "rhscl-3:rh-maven36-ant-apache-resolver", "rhscl-3:rh-maven36-ant-apache-xalan2", "rhscl-3:rh-maven36-ant-commons-logging", "rhscl-3:rh-maven36-ant-commons-net", "rhscl-3:rh-maven36-ant-imageio", "rhscl-3:rh-maven36-ant-javadoc", "rhscl-3:rh-maven36-ant-javamail", "rhscl-3:rh-maven36-ant-jdepend", "rhscl-3:rh-maven36-ant-jmf", "rhscl-3:rh-maven36-ant-jsch", "rhscl-3:rh-maven36-ant-junit", "rhscl-3:rh-maven36-ant-junit5", "rhscl-3:rh-maven36-ant-lib", "rhscl-3:rh-maven36-ant-manual", "rhscl-3:rh-maven36-ant-swing", "rhscl-3:rh-maven36-ant-testutil", "rhscl-3:rh-maven36-ant-xz", "rhscl-3:rh-maven36-ant.src" ] } ], "title": "excessive memory allocation when reading a specially crafted ZIP archive or a derived formats" } ] }