Every applicability statement published about this vulnerability, kept as each source wrote it rather than merged into one verdict. Where sources disagree, both positions are shown.
A statement that names no version covers the whole product, which is not the same as your version falling inside a range. Orderings marked best effort come from schemes with no published comparison algorithm; exact ones follow a published specification.
Precedence decides which claim wins when two sources describe the same product over the same version range. It is a property of the source, not of the claim, and changing it re-ranks the data without re-reading a single document.
| Product | Status | Versions | Remediation | Source | |
|---|---|---|---|---|---|
| red_hat_enterprise_linux_7:AAVMF AAVMF as a component of Red Hat Enterprise Linux 7 | affected | no version stated vendor label: AAVMF | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_8:compat-openssl10 compat-openssl10 as a component of Red Hat Enterprise Linux 8 | affected | no version stated vendor label: compat-openssl10 | no fix planned fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_8:compat-openssl10.src compat-openssl10.src as a component of Red Hat Enterprise Linux 8 | affected | no version stated vendor label: compat-openssl10.src | no fix planned fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_9:compat-openssl11 compat-openssl11 as a component of Red Hat Enterprise Linux 9 | affected | no version stated vendor label: compat-openssl11 | no fix planned fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_9:compat-openssl11.src compat-openssl11.src as a component of Red Hat Enterprise Linux 9 | affected | no version stated vendor label: compat-openssl11.src | no fix planned fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_8:mingw-openssl.src mingw-openssl.src as a component of Red Hat Enterprise Linux 8 | affected | no version stated vendor label: mingw-openssl.src | no fix planned fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_8:mingw32-openssl mingw32-openssl as a component of Red Hat Enterprise Linux 8 | affected | no version stated vendor label: mingw32-openssl | no fix planned fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_8:mingw64-openssl mingw64-openssl as a component of Red Hat Enterprise Linux 8 | affected | no version stated vendor label: mingw64-openssl | no fix planned fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:openssl openssl as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: openssl | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_7:openssl openssl as a component of Red Hat Enterprise Linux 7 | affected | no version stated vendor label: openssl | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:openssl-devel openssl-devel as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: openssl-devel | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_7:openssl-devel openssl-devel as a component of Red Hat Enterprise Linux 7 | affected | no version stated vendor label: openssl-devel | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_7:openssl-libs openssl-libs as a component of Red Hat Enterprise Linux 7 | affected | no version stated vendor label: openssl-libs | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:openssl-perl openssl-perl as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: openssl-perl | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_7:openssl-perl openssl-perl as a component of Red Hat Enterprise Linux 7 | affected | no version stated vendor label: openssl-perl | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:openssl-static openssl-static as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: openssl-static | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_7:openssl-static openssl-static as a component of Red Hat Enterprise Linux 7 | affected | no version stated vendor label: openssl-static | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:openssl.src openssl.src as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: openssl.src | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_7:openssl.src openssl.src as a component of Red Hat Enterprise Linux 7 | affected | no version stated vendor label: openssl.src | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_7:OVMF OVMF as a component of Red Hat Enterprise Linux 7 | affected | no version stated vendor label: OVMF | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_7:ovmf.src ovmf.src as a component of Red Hat Enterprise Linux 7 | affected | no version stated vendor label: ovmf.src | out of support fix in another branch | csaf_redhat | |
| AppStream-8.6.0.Z.EUS:edk2-0:20220126gitbb1bba3d77-2.el8_6.2.src edk2-0:20220126gitbb1bba3d77-2.el8_6.2.src as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6) | fixed | edk2-0:20220126gitbb1bba3d77-2.el8_6.2.src | vendor fix → edk2-0:20220126gitbb1bba3d77-2.el8_6.2.src (RHSA-2024:0408) | csaf_redhat | |
| AppStream-8.8.0.Z.EUS:edk2-0:20220126gitbb1bba3d77-4.el8_8.3.src edk2-0:20220126gitbb1bba3d77-4.el8_8.3.src as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8) | fixed | edk2-0:20220126gitbb1bba3d77-4.el8_8.3.src | vendor fix → edk2-0:20220126gitbb1bba3d77-4.el8_8.3.src (RHSA-2024:1415) | csaf_redhat | |
| AppStream-8.9.0.Z.MAIN:edk2-0:20220126gitbb1bba3d77-6.el8_9.3.src edk2-0:20220126gitbb1bba3d77-6.el8_9.3.src as a component of Red Hat Enterprise Linux AppStream (v. 8) | fixed | edk2-0:20220126gitbb1bba3d77-6.el8_9.3.src | vendor fix → edk2-0:20220126gitbb1bba3d77-6.el8_9.3.src (RHSA-2024:0888) | csaf_redhat | |
| AppStream-9.4.0.GA:edk2-0:20231122-6.el9.src edk2-0:20231122-6.el9.src as a component of Red Hat Enterprise Linux AppStream (v. 9) | fixed | edk2-0:20231122-6.el9.src | vendor fix → edk2-0:20231122-6.el9.src (RHSA-2024:2264) | csaf_redhat | |
| AppStream-8.6.0.Z.EUS:edk2-aarch64-0:20220126gitbb1bba3d77-2.el8_6.2.noarch edk2-aarch64-0:20220126gitbb1bba3d77-2.el8_6.2.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6) | fixed | edk2-aarch64-0:20220126gitbb1bba3d77-2.el8_6.2.noarch | vendor fix → edk2-aarch64-0:20220126gitbb1bba3d77-2.el8_6.2.noarch (RHSA-2024:0408) | csaf_redhat | |
| AppStream-8.8.0.Z.EUS:edk2-aarch64-0:20220126gitbb1bba3d77-4.el8_8.3.noarch edk2-aarch64-0:20220126gitbb1bba3d77-4.el8_8.3.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8) | fixed | edk2-aarch64-0:20220126gitbb1bba3d77-4.el8_8.3.noarch | vendor fix → edk2-aarch64-0:20220126gitbb1bba3d77-4.el8_8.3.noarch (RHSA-2024:1415) | csaf_redhat | |
| AppStream-8.9.0.Z.MAIN:edk2-aarch64-0:20220126gitbb1bba3d77-6.el8_9.3.noarch edk2-aarch64-0:20220126gitbb1bba3d77-6.el8_9.3.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8) | fixed | edk2-aarch64-0:20220126gitbb1bba3d77-6.el8_9.3.noarch | vendor fix → edk2-aarch64-0:20220126gitbb1bba3d77-6.el8_9.3.noarch (RHSA-2024:0888) | csaf_redhat | |
| AppStream-9.4.0.GA:edk2-aarch64-0:20231122-6.el9.noarch edk2-aarch64-0:20231122-6.el9.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9) | fixed | edk2-aarch64-0:20231122-6.el9.noarch | vendor fix → edk2-aarch64-0:20231122-6.el9.noarch (RHSA-2024:2264) | csaf_redhat | |
| CRB-9.4.0.GA:edk2-aarch64-0:20231122-6.el9.noarch edk2-aarch64-0:20231122-6.el9.noarch as a component of Red Hat Enterprise Linux CRB (v. 9) | fixed | edk2-aarch64-0:20231122-6.el9.noarch | vendor fix → edk2-aarch64-0:20231122-6.el9.noarch (RHSA-2024:2264) | csaf_redhat | |
| CRB-9.4.0.GA:edk2-debugsource-0:20231122-6.el9.aarch64 edk2-debugsource-0:20231122-6.el9.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9) | fixed | edk2-debugsource-0:20231122-6.el9.aarch64 | vendor fix → edk2-debugsource-0:20231122-6.el9.aarch64 (RHSA-2024:2264) | csaf_redhat | |
| CRB-9.4.0.GA:edk2-debugsource-0:20231122-6.el9.x86_64 edk2-debugsource-0:20231122-6.el9.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9) | fixed | edk2-debugsource-0:20231122-6.el9.x86_64 | vendor fix → edk2-debugsource-0:20231122-6.el9.x86_64 (RHSA-2024:2264) | csaf_redhat | |
| AppStream-8.6.0.Z.EUS:edk2-ovmf-0:20220126gitbb1bba3d77-2.el8_6.2.noarch edk2-ovmf-0:20220126gitbb1bba3d77-2.el8_6.2.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6) | fixed | edk2-ovmf-0:20220126gitbb1bba3d77-2.el8_6.2.noarch | vendor fix → edk2-ovmf-0:20220126gitbb1bba3d77-2.el8_6.2.noarch (RHSA-2024:0408) | csaf_redhat | |
| AppStream-8.8.0.Z.EUS:edk2-ovmf-0:20220126gitbb1bba3d77-4.el8_8.3.noarch edk2-ovmf-0:20220126gitbb1bba3d77-4.el8_8.3.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8) | fixed | edk2-ovmf-0:20220126gitbb1bba3d77-4.el8_8.3.noarch | vendor fix → edk2-ovmf-0:20220126gitbb1bba3d77-4.el8_8.3.noarch (RHSA-2024:1415) | csaf_redhat | |
| AppStream-8.9.0.Z.MAIN:edk2-ovmf-0:20220126gitbb1bba3d77-6.el8_9.3.noarch edk2-ovmf-0:20220126gitbb1bba3d77-6.el8_9.3.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8) | fixed | edk2-ovmf-0:20220126gitbb1bba3d77-6.el8_9.3.noarch | vendor fix → edk2-ovmf-0:20220126gitbb1bba3d77-6.el8_9.3.noarch (RHSA-2024:0888) | csaf_redhat | |
| AppStream-9.4.0.GA:edk2-ovmf-0:20231122-6.el9.noarch edk2-ovmf-0:20231122-6.el9.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9) | fixed | edk2-ovmf-0:20231122-6.el9.noarch | vendor fix → edk2-ovmf-0:20231122-6.el9.noarch (RHSA-2024:2264) | csaf_redhat | |
| CRB-9.4.0.GA:edk2-ovmf-0:20231122-6.el9.noarch edk2-ovmf-0:20231122-6.el9.noarch as a component of Red Hat Enterprise Linux CRB (v. 9) | fixed | edk2-ovmf-0:20231122-6.el9.noarch | vendor fix → edk2-ovmf-0:20231122-6.el9.noarch (RHSA-2024:2264) | csaf_redhat | |
| CRB-9.4.0.GA:edk2-tools-0:20231122-6.el9.aarch64 edk2-tools-0:20231122-6.el9.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9) | fixed | edk2-tools-0:20231122-6.el9.aarch64 | vendor fix → edk2-tools-0:20231122-6.el9.aarch64 (RHSA-2024:2264) | csaf_redhat | |
| CRB-9.4.0.GA:edk2-tools-0:20231122-6.el9.x86_64 edk2-tools-0:20231122-6.el9.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9) | fixed | edk2-tools-0:20231122-6.el9.x86_64 | vendor fix → edk2-tools-0:20231122-6.el9.x86_64 (RHSA-2024:2264) | csaf_redhat | |
| CRB-9.4.0.GA:edk2-tools-debuginfo-0:20231122-6.el9.aarch64 edk2-tools-debuginfo-0:20231122-6.el9.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9) | fixed | edk2-tools-debuginfo-0:20231122-6.el9.aarch64 | vendor fix → edk2-tools-debuginfo-0:20231122-6.el9.aarch64 (RHSA-2024:2264) | csaf_redhat | |
| CRB-9.4.0.GA:edk2-tools-debuginfo-0:20231122-6.el9.x86_64 edk2-tools-debuginfo-0:20231122-6.el9.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9) | fixed | edk2-tools-debuginfo-0:20231122-6.el9.x86_64 | vendor fix → edk2-tools-debuginfo-0:20231122-6.el9.x86_64 (RHSA-2024:2264) | csaf_redhat | |
| CRB-9.4.0.GA:edk2-tools-doc-0:20231122-6.el9.noarch edk2-tools-doc-0:20231122-6.el9.noarch as a component of Red Hat Enterprise Linux CRB (v. 9) | fixed | edk2-tools-doc-0:20231122-6.el9.noarch | vendor fix → edk2-tools-doc-0:20231122-6.el9.noarch (RHSA-2024:2264) | csaf_redhat | |
| 7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1k-16.el7jbcs.src jbcs-httpd24-openssl-1:1.1.1k-16.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server | fixed | jbcs-httpd24-openssl-1:1.1.1k-16.el7jbcs.src | vendor fix → jbcs-httpd24-openssl-1:1.1.1k-16.el7jbcs.src (RHSA-2023:7625) | csaf_redhat | |
| 7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1k-16.el7jbcs.x86_64 jbcs-httpd24-openssl-1:1.1.1k-16.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server | fixed | jbcs-httpd24-openssl-1:1.1.1k-16.el7jbcs.x86_64 | vendor fix → jbcs-httpd24-openssl-1:1.1.1k-16.el7jbcs.x86_64 (RHSA-2023:7625) | csaf_redhat | |
| 8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1k-16.el8jbcs.src jbcs-httpd24-openssl-1:1.1.1k-16.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8 | fixed | jbcs-httpd24-openssl-1:1.1.1k-16.el8jbcs.src | vendor fix → jbcs-httpd24-openssl-1:1.1.1k-16.el8jbcs.src (RHSA-2023:7625) | csaf_redhat | |
| 8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1k-16.el8jbcs.x86_64 jbcs-httpd24-openssl-1:1.1.1k-16.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8 | fixed | jbcs-httpd24-openssl-1:1.1.1k-16.el8jbcs.x86_64 | vendor fix → jbcs-httpd24-openssl-1:1.1.1k-16.el8jbcs.x86_64 (RHSA-2023:7625) | csaf_redhat | |
| 7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1k-16.el7jbcs.x86_64 jbcs-httpd24-openssl-debuginfo-1:1.1.1k-16.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server | fixed | jbcs-httpd24-openssl-debuginfo-1:1.1.1k-16.el7jbcs.x86_64 | vendor fix → jbcs-httpd24-openssl-debuginfo-1:1.1.1k-16.el7jbcs.x86_64 (RHSA-2023:7625) | csaf_redhat | |
| 8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1k-16.el8jbcs.x86_64 jbcs-httpd24-openssl-debuginfo-1:1.1.1k-16.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8 | fixed | jbcs-httpd24-openssl-debuginfo-1:1.1.1k-16.el8jbcs.x86_64 | vendor fix → jbcs-httpd24-openssl-debuginfo-1:1.1.1k-16.el8jbcs.x86_64 (RHSA-2023:7625) | csaf_redhat | |
| 7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1k-16.el7jbcs.x86_64 jbcs-httpd24-openssl-devel-1:1.1.1k-16.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server | fixed | jbcs-httpd24-openssl-devel-1:1.1.1k-16.el7jbcs.x86_64 | vendor fix → jbcs-httpd24-openssl-devel-1:1.1.1k-16.el7jbcs.x86_64 (RHSA-2023:7625) | csaf_redhat | |
| 8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1k-16.el8jbcs.x86_64 jbcs-httpd24-openssl-devel-1:1.1.1k-16.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8 | fixed | jbcs-httpd24-openssl-devel-1:1.1.1k-16.el8jbcs.x86_64 | vendor fix → jbcs-httpd24-openssl-devel-1:1.1.1k-16.el8jbcs.x86_64 (RHSA-2023:7625) | csaf_redhat | |
| 7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1k-16.el7jbcs.x86_64 jbcs-httpd24-openssl-libs-1:1.1.1k-16.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server | fixed | jbcs-httpd24-openssl-libs-1:1.1.1k-16.el7jbcs.x86_64 | vendor fix → jbcs-httpd24-openssl-libs-1:1.1.1k-16.el7jbcs.x86_64 (RHSA-2023:7625) | csaf_redhat | |
| 8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1k-16.el8jbcs.x86_64 jbcs-httpd24-openssl-libs-1:1.1.1k-16.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8 | fixed | jbcs-httpd24-openssl-libs-1:1.1.1k-16.el8jbcs.x86_64 | vendor fix → jbcs-httpd24-openssl-libs-1:1.1.1k-16.el8jbcs.x86_64 (RHSA-2023:7625) | csaf_redhat | |
| 8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1k-16.el8jbcs.x86_64 jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1k-16.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8 | fixed | jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1k-16.el8jbcs.x86_64 | vendor fix → jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1k-16.el8jbcs.x86_64 (RHSA-2023:7625) | csaf_redhat | |
| 7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1k-16.el7jbcs.x86_64 jbcs-httpd24-openssl-perl-1:1.1.1k-16.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server | fixed | jbcs-httpd24-openssl-perl-1:1.1.1k-16.el7jbcs.x86_64 | vendor fix → jbcs-httpd24-openssl-perl-1:1.1.1k-16.el7jbcs.x86_64 (RHSA-2023:7625) | csaf_redhat | |
| 8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1k-16.el8jbcs.x86_64 jbcs-httpd24-openssl-perl-1:1.1.1k-16.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8 | fixed | jbcs-httpd24-openssl-perl-1:1.1.1k-16.el8jbcs.x86_64 | vendor fix → jbcs-httpd24-openssl-perl-1:1.1.1k-16.el8jbcs.x86_64 (RHSA-2023:7625) | csaf_redhat | |
| 7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1k-16.el7jbcs.x86_64 jbcs-httpd24-openssl-static-1:1.1.1k-16.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server | fixed | jbcs-httpd24-openssl-static-1:1.1.1k-16.el7jbcs.x86_64 | vendor fix → jbcs-httpd24-openssl-static-1:1.1.1k-16.el7jbcs.x86_64 (RHSA-2023:7625) | csaf_redhat | |
| 8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1k-16.el8jbcs.x86_64 jbcs-httpd24-openssl-static-1:1.1.1k-16.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8 | fixed | jbcs-httpd24-openssl-static-1:1.1.1k-16.el8jbcs.x86_64 | vendor fix → jbcs-httpd24-openssl-static-1:1.1.1k-16.el8jbcs.x86_64 (RHSA-2023:7625) | csaf_redhat | |
| 7Server-JWS-5.7:jws5-tomcat-native-0:1.2.31-16.redhat_16.el7jws.src jws5-tomcat-native-0:1.2.31-16.redhat_16.el7jws.src as a component of Red Hat JBoss Web Server 5.7 for RHEL 7 Server | fixed | jws5-tomcat-native-0:1.2.31-16.redhat_16.el7jws.src | vendor fix → jws5-tomcat-native-0:1.2.31-16.redhat_16.el7jws.src (RHSA-2023:7622) | csaf_redhat | |
| 7Server-JWS-5.7:jws5-tomcat-native-0:1.2.31-16.redhat_16.el7jws.x86_64 jws5-tomcat-native-0:1.2.31-16.redhat_16.el7jws.x86_64 as a component of Red Hat JBoss Web Server 5.7 for RHEL 7 Server | fixed | jws5-tomcat-native-0:1.2.31-16.redhat_16.el7jws.x86_64 | vendor fix → jws5-tomcat-native-0:1.2.31-16.redhat_16.el7jws.x86_64 (RHSA-2023:7622) | csaf_redhat | |
| 8Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-16.redhat_16.el8jws.src jws5-tomcat-native-0:1.2.31-16.redhat_16.el8jws.src as a component of Red Hat JBoss Web Server 5.7 for RHEL 8 | fixed | jws5-tomcat-native-0:1.2.31-16.redhat_16.el8jws.src | vendor fix → jws5-tomcat-native-0:1.2.31-16.redhat_16.el8jws.src (RHSA-2023:7622) | csaf_redhat |
A claim with no version range is shown as written rather than expanded: a government catalog naming only a vendor and product is a real statement at zero granularity, and inventing bounds for it would put precision in the record that the source never offered.