Vulnerability CVE-2011-3377

Vulnerability Name:

CVE-2011-3377 (CCN-71315)

Assigned:

2011-11-08

Published:

2011-11-08

Updated:

2018-10-30

Summary:

The web browser plug-in in IcedTea-Web 1.0.x before 1.0.6 and 1.1.x before 1.1.4 allows remote attackers to bypass the Same Origin Policy (SOP) and execute arbitrary script or establish network connections to unintended hosts via an applet whose origin has the same second-level domain, but a different sub-domain than the targeted domain.

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N)
3.2 Low (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

4.3 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N)
3.2 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

4.3 Medium (REDHAT CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N)
3.2 Low (REDHAT Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

Vulnerability Type:

CWE-264

Vulnerability Consequences:

Bypass Security

References:

Source: MITRE
Type: CNA
CVE-2011-3377

Source: CONFIRM
Type: Patch, Vendor Advisory
http://dbhole.wordpress.com/2011/11/08/icedtea-web-1-0-6-and-1-1-4-security-releases-released/

Source: SUSE
Type: UNKNOWN
openSUSE-SU-2012:0371

Source: CCN
Type: OpenJDK Web Site
OpenJDK

Source: CCN
Type: RHSA-2011-1441
Moderate: icedtea-web security update

Source: REDHAT
Type: UNKNOWN
RHSA-2011:1441

Source: DEBIAN
Type: UNKNOWN
DSA-2420

Source: DEBIAN
Type: DSA-2420
openjdk-6 -- several vulnerabilities

Source: OSVDB
Type: UNKNOWN
76940

Source: CCN
Type: OSVDB ID: 76940
icedtea-web Web Browser Plugin Applet Handling Same Origin Policy Bypass

Source: BID
Type: UNKNOWN
50610

Source: CCN
Type: BID-50610
IcedTea-Web Plugin CVE-2011-3377 Same Origin Policy Bypass Vulnerability

Source: UBUNTU
Type: UNKNOWN
USN-1263-1

Source: CCN
Type: Red Hat Bugzilla Bug 742515
CVE-2011-3377 IcedTea-Web: second-level domain subdomains and suffix domain SOP bypass

Source: MISC
Type: UNKNOWN
https://bugzilla.redhat.com/show_bug.cgi?id=742515

Source: XF
Type: UNKNOWN
icedtea-sop-security-bypass(71315)

Vulnerable Configuration:

Configuration 1:

cpe:/a:redhat:icedtea-web:1.0:*:*:*:*:*:*:*

OR cpe:/a:redhat:icedtea-web:1.0.1:*:*:*:*:*:*:*

OR cpe:/a:redhat:icedtea-web:1.0.2:*:*:*:*:*:*:*

OR cpe:/a:redhat:icedtea-web:1.0.3:*:*:*:*:*:*:*

OR cpe:/a:redhat:icedtea-web:1.0.4:*:*:*:*:*:*:*

OR cpe:/a:redhat:icedtea-web:1.0.5:*:*:*:*:*:*:*

OR cpe:/a:redhat:icedtea-web:1.1:*:*:*:*:*:*:*

OR cpe:/a:redhat:icedtea-web:1.1.1:*:*:*:*:*:*:*

OR cpe:/a:redhat:icedtea-web:1.1.2:*:*:*:*:*:*:*

OR cpe:/a:redhat:icedtea-web:1.1.3:*:*:*:*:*:*:*

Configuration 2:

cpe:/o:canonical:ubuntu_linux:10.04:-:lts:*:*:*:*:*

OR cpe:/o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*

OR cpe:/o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*

OR cpe:/o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*

OR cpe:/o:opensuse:opensuse:12.1:*:*:*:*:*:*:*

Configuration RedHat 1:

cpe:/o:redhat:enterprise_linux:6:*:*:*:*:*:*:*

Configuration RedHat 2:

cpe:/o:redhat:enterprise_linux:6::server:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:51962	P	Security update for net-snmp (Moderate)	2022-12-13
oval:org.opensuse.security:def:51960	P	Security update for krb5 (Important)	2022-11-21
oval:org.opensuse.security:def:51940	P	Security update for libtasn1 (Critical)	2022-10-26
oval:org.opensuse.security:def:51939	P	Security update for xen (Moderate)	2022-10-25
oval:org.opensuse.security:def:20113377	V	CVE-2011-3377	2022-09-02
oval:org.opensuse.security:def:5306	P	Security update for MozillaFirefox (Important) (in QA)	2022-08-26
oval:org.opensuse.security:def:5331	P	Security update for java-1_8_0-ibm (Important)	2022-08-25
oval:org.opensuse.security:def:6139	P	Security update for ucode-intel (Moderate)	2022-08-18
oval:org.opensuse.security:def:6124	P	Security update for java-11-openjdk (Important)	2022-08-01
oval:org.opensuse.security:def:123705	P	java-1_7_0-openjdk-plugin-1.6.2-2.8.3 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:6077	P	Security update for SUSE Manager Client Tools (Important)	2022-06-20
oval:org.opensuse.security:def:6055	P	Security update for fribidi (Moderate)	2022-05-25
oval:org.opensuse.security:def:6331	P	Security update for the Linux Kernel (Important)	2022-05-16
oval:org.opensuse.security:def:6033	P	Security update for gzip (Important)	2022-05-12
oval:org.opensuse.security:def:5231	P	Security update for libcaca (Moderate)	2022-05-03
oval:org.opensuse.security:def:6009	P	Security update for the Linux Kernel (Important)	2022-04-14
oval:org.opensuse.security:def:6001	P	Security update for MozillaFirefox (Important)	2022-04-06
oval:org.opensuse.security:def:5212	P	Security update for mozilla-nss (Important)	2022-04-05
oval:org.opensuse.security:def:5373	P	Security update for python3 (Moderate)	2022-03-16
oval:org.opensuse.security:def:5358	P	Security update for webkit2gtk3 (Important)	2022-03-03
oval:org.opensuse.security:def:5350	P	Security update for xerces-j2 (Important)	2022-02-21
oval:org.opensuse.security:def:6158	P	Security update for the Linux Kernel (Critical)	2022-02-10
oval:org.opensuse.security:def:6031	P	Security update for zsh (Important)	2022-01-24
oval:org.opensuse.security:def:112425	P	icedtea-web-javadoc-1.6.2-3.3 on GA media (Moderate)	2022-01-17
oval:org.opensuse.security:def:6291	P	Security update for MozillaFirefox (Important) (in QA)	2022-01-14
oval:org.opensuse.security:def:5364	P	Security update for ghostscript (Moderate)	2022-01-14
oval:org.opensuse.security:def:6300	P	Security update for MozillaThunderbird (Important)	2022-01-12
oval:org.opensuse.security:def:10710	P	Security update for the Linux Kernel (Important) (in QA)	2022-01-07
oval:org.opensuse.security:def:38173	P	Security update for java-1_7_1-ibm (Moderate) (in QA)	2022-01-04
oval:org.opensuse.security:def:10670	P	Security update for MozillaThunderbird (Important)	2021-12-22
oval:org.opensuse.security:def:11156	P	Security update for nim (Moderate)	2021-12-18
oval:org.opensuse.security:def:38223	P	Security update for log4j (Important)	2021-12-17
oval:org.opensuse.security:def:5919	P	Security update for python3 (Moderate)	2021-12-13
oval:org.opensuse.security:def:6258	P	Security update for python-Babel (Important)	2021-12-06
oval:org.opensuse.security:def:6309	P	Security update for the Linux Kernel (Important)	2021-12-02
oval:org.opensuse.security:def:37482	P	Security update for clamav (Moderate)	2021-12-01
oval:org.opensuse.security:def:5158	P	Security update for postgresql10 (Important)	2021-11-22
oval:org.opensuse.security:def:5894	P	Security update for postgresql14 (Important)	2021-11-22
oval:org.opensuse.security:def:6233	P	Security update for MozillaFirefox (Important)	2021-11-19
oval:org.opensuse.security:def:1710	P	Security update for tomcat (Moderate)	2021-11-16
oval:org.opensuse.security:def:5150	P	Security update for bind (Important)	2021-11-11
oval:org.opensuse.security:def:51688	P	Security update for pcre (Moderate)	2021-11-10
oval:org.opensuse.security:def:5145	P	Security update for binutils (Moderate)	2021-11-02
oval:org.opensuse.security:def:10701	P	Security update for transfig (Important)	2021-10-29
oval:org.opensuse.security:def:5136	P	Security update for iproute2 (Moderate)	2021-10-18
oval:org.opensuse.security:def:5127	P	Security update for glibc (Moderate)	2021-10-06
oval:org.opensuse.security:def:105931	P	icedtea-web-javadoc-1.6.2-3.3 on GA media (Moderate)	2021-10-01
oval:org.opensuse.security:def:11134	P	Security update for chromium (Important)	2021-09-21
oval:org.opensuse.security:def:6960	P	Security update for the Linux Kernel (Live Patch 16 for SLE 15 SP1) (Important)	2021-09-16
oval:org.opensuse.security:def:5104	P	Security update for xen (Important)	2021-09-02
oval:org.opensuse.security:def:10692	P	Security update for ffmpeg (Important)	2021-09-02
oval:org.opensuse.security:def:51650	P	Security update for bind (Moderate)	2021-08-30
oval:org.opensuse.security:def:5819	P	Security update for mariadb (Moderate)	2021-08-25
oval:org.opensuse.security:def:5094	P	Security update for openssl-1_0_0 (Important)	2021-08-24
oval:org.opensuse.security:def:5818	P	Security update for openssl-1_1 (Important)	2021-08-24
oval:org.opensuse.security:def:47772	P	libpython2_7-1_0-2.7.13-28.11.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47637	P	guestfs-data-1.32.4-21.3.10 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48189	P	libsaml8-2.5.5-3.3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47965	P	bluez-5.13-5.12.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47651	P	java-1_7_1-ibm-1.7.1_sr4.30-38.26.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48337	P	w3m-0.5.3.git20161120-161.3.4 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48097	P	libaudit1-2.8.1-10.3.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47636	P	gtk2-data-2.24.31-7.11 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:5800	P	Security update for grafana (Important)	2021-08-12
oval:org.opensuse.security:def:1115	P	libproxy-devel-0.4.15-12.41 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:5796	P	Security update for mysql-connector-java (Moderate)	2021-08-05
oval:org.opensuse.security:def:51628	P	Security update for webkit2gtk3 (Important)	2021-08-03
oval:org.opensuse.security:def:51627	P	Security update for dbus-1 (Important)	2021-08-02
oval:org.opensuse.security:def:5785	P	Security update for MozillaFirefox (Important)	2021-07-27
oval:org.opensuse.security:def:5082	P	Security update for glibc (Moderate)	2021-07-27
oval:org.opensuse.security:def:10651	P	Security update for MozillaThunderbird (Important)	2021-07-22
oval:org.opensuse.security:def:10688	P	Security update for MozillaThunderbird (Important)	2021-07-22
oval:org.opensuse.security:def:10686	P	Security update for the Linux Kernel (Important)	2021-07-20
oval:org.opensuse.security:def:51925	P	Security update for MozillaFirefox (Important)	2021-07-16
oval:org.opensuse.security:def:38116	P	Security update for curl (Moderate)	2021-06-30
oval:org.opensuse.security:def:5069	P	Security update for openexr (Important)	2021-06-24
oval:org.opensuse.security:def:10646	P	Security update for gupnp (Important)	2021-06-24
oval:org.opensuse.security:def:10680	P	Security update for MozillaThunderbird (Important)	2021-06-17
oval:org.opensuse.security:def:5738	P	Security update for djvulibre (Important)	2021-06-10
oval:org.opensuse.security:def:48727	P	java-1_7_0-openjdk-plugin-1.6.1-2.3.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:2452	P	icedtea-web-1.7.1-1.48 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48762	P	NetworkManager-1.0.12-8.6 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12490	P	java-1_7_0-openjdk-plugin-1.6.2-2.8.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48635	P	tcpdump-4.5.1-10.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11575	P	libXRes1-1.0.7-3.54 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48864	P	libpcsclite1-32bit-1.8.10-6.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11661	P	libvirt-1.2.18.1-4.22 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:77447	P	java-1_7_0-openjdk-plugin-1.6.2-2.8.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48551	P	libspice-client-glib-2_0-8-0.31-7.2 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17175	P	java-1_7_0-openjdk-plugin-1.6.2-2.8.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11563	P	java-1_7_0-openjdk-plugin-1.6.1-2.3.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48793	P	libmysqlclient_r18-10.0.27-12.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48780	P	java-1_7_0-openjdk-plugin-1.6.1-2.3.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11494	P	argyllcms-1.6.3-1.179 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:76622	P	java-1_7_0-openjdk-plugin-1.5.1-1.13 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17008	P	java-1_7_0-openjdk-plugin-1.5.1-1.13 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11639	P	libpython2_7-1_0-2.7.9-20.6 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:63541	P	icedtea-web-1.7.1-1.48 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11731	P	tigervnc-1.4.3-7.2 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:77786	P	java-1_7_0-openjdk-plugin-1.6.2-2.8.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17245	P	java-1_7_0-openjdk-plugin-1.6.2-2.8.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11839	P	java-1_7_0-openjdk-plugin-1.6.1-2.3.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11472	P	vorbis-tools-1.4.0-16.9 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48844	P	java-1_7_0-openjdk-plugin-1.6.2-2.8.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48697	P	libuuid-devel-2.25-6.69 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11544	P	glibc-2.19-31.9 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:76859	P	java-1_7_0-openjdk-plugin-1.6.1-2.3.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17058	P	java-1_7_0-openjdk-plugin-1.6.1-2.3.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11709	P	radvd-1.9.7-2.17 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11816	P	glib2-lang-2.48.2-10.2 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48677	P	java-1_7_0-openjdk-plugin-1.5.1-1.13 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12151	P	java-1_7_0-openjdk-plugin-1.6.2-2.8.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11522	P	dracut-037-66.2 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48914	P	java-1_7_0-openjdk-plugin-1.6.2-2.8.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11597	P	libecpg6-9.4.5-4.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:77135	P	java-1_7_0-openjdk-plugin-1.6.1-2.3.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17111	P	java-1_7_0-openjdk-plugin-1.6.1-2.3.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11326	P	java-1_7_0-openjdk-plugin-1.5.1-1.13 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11794	P	e2fsprogs-1.42.11-7.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:124706	P	java-1_7_0-openjdk-plugin-1.6.2-2.8.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:38121	P	Security update for dhcp (Important)	2021-06-01
oval:org.opensuse.security:def:5692	P	Security update for graphviz (Critical)	2021-05-19
oval:org.opensuse.security:def:5671	P	Security update for cups (Important)	2021-04-30
oval:org.opensuse.security:def:10639	P	Security update for MozillaThunderbird (Important)	2021-04-29
oval:org.opensuse.security:def:5670	P	Security update for samba (Important)	2021-04-29
oval:org.opensuse.security:def:5662	P	Security update for librsvg (Moderate)	2021-04-23
oval:org.opensuse.security:def:5658	P	Security update for apache-commons-io (Moderate)	2021-04-20
oval:org.opensuse.security:def:38335	P	Security update for util-linux (Important)	2021-04-14
oval:org.opensuse.security:def:10636	P	Security update for xorg-x11-server (Important)	2021-04-13
oval:org.opensuse.security:def:5649	P	Security update for the Linux Kernel (Important)	2021-04-13
oval:org.opensuse.security:def:38366	P	Security update for xorg-x11-server (Important)	2021-04-13
oval:org.opensuse.security:def:5640	P	Security update for openexr (Moderate)	2021-04-07
oval:org.opensuse.security:def:52031	P	Security update for openssl-1_1 (Important)	2021-03-25
oval:org.opensuse.security:def:5983	P	Security update for nghttp2 (Important)	2021-03-24
oval:org.opensuse.security:def:38338	P	Security update for wavpack (Important)	2021-03-19
oval:org.opensuse.security:def:6322	P	Security update for evolution-data-server (Moderate)	2021-03-19
oval:org.opensuse.security:def:51752	P	Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP3) (Important)	2021-03-17
oval:org.opensuse.security:def:52028	P	Security update for glib2 (Important)	2021-03-16
oval:org.opensuse.security:def:5970	P	Security update for git (Important)	2021-03-09
oval:org.opensuse.security:def:5961	P	Security update for freeradius-server (Low)	2021-03-04
oval:org.opensuse.security:def:5952	P	Security update for ImageMagick (Moderate)	2021-02-25
oval:org.opensuse.security:def:38151	P	Security update for jasper (Important)	2021-02-16
oval:org.opensuse.security:def:6982	P	Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP1) (Important)	2021-02-10
oval:org.opensuse.security:def:5074	P	Security update for sudo (Important)	2021-01-26
oval:org.opensuse.security:def:11143	P	Security update for viewvc (Moderate)	2021-01-23
oval:org.opensuse.security:def:5197	P	Security update for MozillaFirefox (Important)	2021-01-12
oval:org.opensuse.security:def:54739	P	Security update for flac (Moderate)	2021-01-04
oval:org.opensuse.security:def:10589	P	Security update for gimp (Important)	2020-12-28
oval:org.opensuse.security:def:5607	P	Security update for openssh (Moderate)	2020-12-09
oval:org.opensuse.security:def:4960	P	Security update for the Linux Kernel (Important)	2020-12-09
oval:org.opensuse.security:def:6643	P	Security update for the Linux Kernel (Live Patch 17 for SLE 15) (Important)	2020-12-07
oval:org.opensuse.security:def:48999	P	java-1_7_0-openjdk-plugin-1.6.2-2.8.3 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:17330	P	java-1_7_0-openjdk-plugin-1.6.2-2.8.3 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:4975	P	Security update for nodejs10 (Important)	2020-12-02
oval:org.opensuse.security:def:5507	P	Security update for shim (Moderate)	2020-12-02
oval:org.opensuse.security:def:4837	P	Security update for postgresql10 (Moderate)	2020-12-02
oval:org.opensuse.security:def:4913	P	Security update for ipmitool (Important)	2020-12-02
oval:org.opensuse.security:def:5473	P	Security update for mozilla-nss (Moderate)	2020-12-02
oval:org.opensuse.security:def:4845	P	Security update for nginx (Important)	2020-12-02
oval:org.opensuse.security:def:5380	P	Security update for freetype2 (Important)	2020-12-02
oval:org.opensuse.security:def:4994	P	Security update for nodejs8 (Important)	2020-12-02
oval:org.opensuse.security:def:5582	P	Security update for enigmail (Moderate)	2020-12-02
oval:org.opensuse.security:def:5488	P	Security update for java-11-openjdk (Important)	2020-12-02
oval:org.opensuse.security:def:5382	P	Security update for xen (Important)	2020-12-02
oval:org.opensuse.security:def:5395	P	Security update for ucode-intel (Moderate)	2020-12-02
oval:org.opensuse.security:def:4867	P	Security update for squid (Important)	2020-12-02
oval:org.opensuse.security:def:5426	P	Security update for gmp, gnutls, libnettle (Moderate)	2020-12-02
oval:org.opensuse.security:def:51351	P	Security update for ImageMagick (Moderate)	2020-12-01
oval:org.opensuse.security:def:10758	P	libmms-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37513	P	libcgroup-tools on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52619	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:11092	P	libxmltooling-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53382	P	Security update for krb5 (Moderate)	2020-12-01
oval:org.opensuse.security:def:6621	P	gpgme on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53988	P	java-1_7_0-openjdk-plugin on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10563	P	libxcb-composite0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:51277	P	Security update for webkit2gtk3 (Important)	2020-12-01
oval:org.opensuse.security:def:37783	P	fetchmail on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10754	P	liblcms-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37794	P	ghostscript on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38299	P	libhogweed2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10871	P	ImageMagick on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37418	P	dosfstools on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10907	P	eog-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38057	P	rtkit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52682	P	Security update for the Linux Kernel (Live Patch 10 for SLE 15) (Important)	2020-12-01
oval:org.opensuse.security:def:39048	P	libssh4 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:51115	P	Security update for samba (Important)	2020-12-01
oval:org.opensuse.security:def:37563	P	libopus0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52852	P	Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP1) (Important)	2020-12-01
oval:org.opensuse.security:def:52245	P	Security update for tomcat (Moderate)	2020-12-01
oval:org.opensuse.security:def:53683	P	Security update for wicked (Important)	2020-12-01
oval:org.opensuse.security:def:54427	P	bash on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50151	P	icedtea-web on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37314	P	python-pyOpenSSL on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10803	P	libtool on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37807	P	grub2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53178	P	Security update for util-linux (Moderate)	2020-12-01
oval:org.opensuse.security:def:10979	P	libasm-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38232	P	kdump on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:55152	P	java-1_7_0-openjdk-plugin on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10835	P	php5-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10571	P	mozilla-nspr-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52441	P	Security update for golang-github-prometheus-prometheus (Moderate)	2020-12-01
oval:org.opensuse.security:def:51794	P	Security update for libraw (Moderate)	2020-12-01
oval:org.opensuse.security:def:38031	P	perl-YAML-LibYAML on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10820	P	mercurial on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37596	P	libtiff5-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52473	P	Security update for libvirt (Important)	2020-12-01
oval:org.opensuse.security:def:38112	P	zypper on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53463	P	Security update for salt (Critical)	2020-12-01
oval:org.opensuse.security:def:52279	P	Security update for fontforge (Moderate)	2020-12-01
oval:org.opensuse.security:def:10911	P	flac-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37884	P	libgc1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10720	P	libass-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53409	P	Security update for php7 (Important)	2020-12-01
oval:org.opensuse.security:def:38268	P	libapr-util1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10884	P	automake on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38861	P	libjavascriptcoregtk-1_0-0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37551	P	libmms0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37376	P	apache-commons-beanutils on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10912	P	flex on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38180	P	expat on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52756	P	Security update for the Linux Kernel (Live Patch 15 for SLE 15) (Important)	2020-12-01
oval:org.opensuse.security:def:39020	P	java-1_7_0-openjdk-plugin on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10843	P	rhythmbox on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37577	P	libpython3_4m1_0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52958	P	Security update for taglib (Low)	2020-12-01
oval:org.opensuse.security:def:52353	P	Security update for perl (Important)	2020-12-01
oval:org.opensuse.security:def:10812	P	libxerces-c-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53721	P	Security update for java-1_8_0-openjdk (Moderate)	2020-12-01
oval:org.opensuse.security:def:54225	P	java-1_7_0-openjdk-plugin on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10616	P	FastCGI on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:51514	P	Security update for openldap2 (Important)	2020-12-01
oval:org.opensuse.security:def:37868	P	libapr1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10818	P	libzzip-0-13 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37844	P	libQt5WebKit5 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38384	P	libtirpc-netconfig on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10924	P	ghostscript-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38340	P	libopus0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10543	P	libsmi-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52340	P	Security update for jasper (Low)	2020-12-01
oval:org.opensuse.security:def:10992	P	libexempi-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53270	P	Security update for subversion (Important)	2020-12-01
oval:org.opensuse.security:def:52638	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:39133	P	libzmq3 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:51352	P	Security update for wireshark (Moderate)	2020-12-01
oval:org.opensuse.security:def:37648	P	policycoreutils on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37697	P	update-alternatives on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52482	P	Security update for sane-backends (Important)	2020-12-01
oval:org.opensuse.security:def:38101	P	xlockmore on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37364	P	xorg-x11-server on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10873	P	MozillaFirefox-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37871	P	libass5 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10745	P	libidn-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53517	P	Security update for java-11-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:11049	P	libpoppler-cpp0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38296	P	libgssglue1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38853	P	java-1_7_0-openjdk-plugin on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10624	P	ant on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37410	P	curl on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10937	P	gstreamer-plugins-bad-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52557	P	Security update for java-1_8_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:10780	P	libpulse-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37649	P	powerpc-utils on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52785	P	Security update for the Linux Kernel (Live Patch 18 for SLE 15) (Important)	2020-12-01
oval:org.opensuse.security:def:38165	P	dbus-1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53802	P	Security update for opencv (Moderate)	2020-12-01
oval:org.opensuse.security:def:37315	P	python-pywbem on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:51515	P	Security update for go1.15 (Moderate)	2020-12-01
oval:org.opensuse.security:def:37969	P	libtag1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10773	P	libpcscspy0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37954	P	librelp0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:11001	P	libgnutls-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38914	P	libmysqlclient_r18 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37636	P	pam_ssh on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37429	P	fetchmail on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52201	P	Security update for openldap2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:10982	P	libbotan-1_10-0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38250	P	libXdmcp6 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53032	P	Security update for gd (Moderate)	2020-12-01
oval:org.opensuse.security:def:53914	P	Security update for bluez (Important)	2020-12-01
oval:org.opensuse.security:def:39090	P	java-1_7_0-openjdk-plugin on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:51137	P	Recommended update for evince (Moderate)	2020-12-01
oval:org.opensuse.security:def:37647	P	pigz on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37704	P	xalan-j2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52590	P	Security update for java-1_8_0-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:10862	P	xfig on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38129	P	apache2-mod_perl on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54501	P	java-1_7_0-openjdk-plugin on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:51790	P	Security update for libqt5-qtbase (Moderate)	2020-12-01
oval:org.opensuse.security:def:10888	P	binutils-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37897	P	libimobiledevice6 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10988	P	libcorosync-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38410	P	libzypp on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37552	P	libmodplug1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10593	P	rhythmbox on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52679	P	Security update for the Linux Kernel (Live Patch 1 for SLE 15) (Important)	2020-12-01
oval:org.opensuse.security:def:38191	P	gdk-pixbuf-loader-rsvg on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53609	P	Security update for squid (Important)	2020-12-01
oval:org.opensuse.security:def:52875	P	Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP1) (Important)	2020-12-01
oval:org.opensuse.security:def:50097	P	salt-api on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10756	P	libmicrohttpd-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37750	P	clamav on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52758	P	Security update for the Linux Kernel (Live Patch 13 for SLE 15) (Important)	2020-12-01
oval:org.opensuse.security:def:55078	P	cpio on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37417	P	dnsmasq on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52301	P	Security update for LibreOffice (Moderate)	2020-12-01
oval:org.opensuse.security:def:10958	P	libXdmcp-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37941	P	libpng15-15 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10795	P	libssh2-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38013	P	opie on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38903	P	java-1_7_0-openjdk-plugin on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:51114	P	Security update for wireshark (Moderate)	2020-12-01
oval:org.opensuse.security:def:37460	P	gvim on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52307	P	Security update for openssl-1_0_0 (Moderate)	2020-12-01
oval:org.opensuse.security:def:11007	P	libicu-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52794	P	Security update for the Linux Kernel (Live Patch 19 for SLE 15) (Important)	2020-12-01
oval:org.opensuse.security:def:10513	P	libjson-c-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10865	P	xorg-x11-server-sdk on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37713	P	xorg-x11-server on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53124	P	Security update for python (Moderate)	2020-12-01
oval:org.opensuse.security:def:38229	P	java-1_8_0-ibm on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10821	P	mozilla-nspr-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37365	P	xscreensaver on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10837	P	polkit-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38004	P	minicom on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52445	P	Security update for clamav-database (Important)	2020-12-01
oval:org.opensuse.security:def:38423	P	opensc on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:11071	P	libsvn_auth_gnome_keyring-1-0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38978	P	libsilc-1_1-2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37493	P	libXinerama1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52513	P	Security update for postgresql12 (Important)	2020-12-01
oval:org.opensuse.security:def:11067	P	libspice-server-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53344	P	Security update for ipmitool (Important)	2020-12-01
oval:org.opensuse.security:def:54151	P	ImageMagick on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:39175	P	java-1_7_0-openjdk-plugin on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52278	P	Security update for LibVNCServer (Important)	2020-12-01
oval:org.opensuse.security:def:51374	P	Security update for ImageMagick (Important)	2020-12-01
oval:org.opensuse.security:def:37732	P	apache2-mod_nss on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10739	P	libgpgme-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37754	P	cpio on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52866	P	Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP1) (Important)	2020-12-01
oval:org.opensuse.security:def:10915	P	freerdp-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38179	P	evince on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54813	P	java-1_7_0-openjdk-plugin on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10750	P	libjbig-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10521	P	libmusicbrainz-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52102	P	Security update for freetype2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:10973	P	libXxf86dga-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37961	P	libsoup-2_4-1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10770	P	libpacemaker-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:11058	P	librelp-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38495	P	systemtap on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37637	P	patch on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37546	P	libldb1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52197	P	Security update for go1.14 (Important)	2020-12-01
oval:org.opensuse.security:def:38276	P	libcares2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38062	P	shadow on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53151	P	Security update for python-rtslib-fb (Moderate)	2020-12-01
oval:org.opensuse.security:def:10826	P	nut-cgi on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37814	P	guile on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53070	P	Security update for python-ecdsa (Moderate)	2020-12-01
oval:org.opensuse.security:def:38204	P	gpgme on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10834	P	perl-Tk-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38811	P	tcpdump on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37481	P	libHX28 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37326	P	ruby on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38026	P	perl-DBD-mysql on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10848	P	ruby2.1-rubygem-bundler on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38063	P	shim on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52519	P	Security update for slurm (Important)	2020-12-01
oval:org.opensuse.security:def:38451	P	ppc64-diag on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38956	P	java-1_7_0-openjdk-plugin on GA media (Moderate)	2020-12-01
oval:org.mitre.oval:def:15328	P	USN-1263-2 -- OpenJDK 6 regression	2014-06-30
oval:org.mitre.oval:def:15316	P	USN-1263-1 -- IcedTea-Web, OpenJDK 6 vulnerabilities	2014-06-30
oval:org.mitre.oval:def:15259	P	DSA-2420-1 openjdk-6 -- several	2014-06-23
oval:org.mitre.oval:def:23791	P	ELSA-2011:1441: icedtea-web security update (Moderate)	2014-05-26
oval:org.mitre.oval:def:22117	P	RHSA-2011:1441: icedtea-web security update (Moderate)	2014-02-24
oval:com.ubuntu.precise:def:20113377000	V	CVE-2011-3377 on Ubuntu 12.04 LTS (precise) - medium.	2014-02-05
oval:com.redhat.rhsa:def:20111441	P	RHSA-2011:1441: icedtea-web security update (Moderate)	2011-11-08

BACK