Vulnerability CVE-2015-6836 - CERT Civis.Net

Vulnerability Name:

CVE-2015-6836 (CCN-106365)

Assigned:

2015-09-03

Published:

2015-09-03

Updated:

2017-11-04

Summary:

The SoapClient __call method in ext/soap/soap.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 does not properly manage headers, which allows remote attackers to execute arbitrary code via crafted serialized data that triggers a "type confusion" in the serialize_function_call function.

CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')

CVSS v3 Severity:

7.3 High (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
6.4 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
6.4 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2015-6836

Source: CCN
Type: RHSA-2016-0457
Moderate: rh-php56-php security update

Source: DEBIAN
Type: UNKNOWN
DSA-3358

Source: CCN
Type: IBM Security Bulletin T1023641 (Flex System Manager Node)
Multiple vulnerabilities in php5 affect IBM Flex System Manager (FSM) (CVE-2015-6836, CVE-2015-6837, CVE-2015-6838)

Source: CCN
Type: IBM Security Bulletin 1968353
Lotus Protector for Mail Security affected by Opensource PHP Vulnerabilities (CVE-2015-6836 CVE-2015-6837 CVE-2015-6838)

Source: CONFIRM
Type: Vendor Advisory
http://www.php.net/ChangeLog-5.php

Source: BID
Type: UNKNOWN
76644

Source: CCN
Type: BID-76644
PHP 'serialize_function_call()' Function Type Confusion Remote Code Execution Vulnerability

Source: SECTRACK
Type: UNKNOWN
1033548

Source: CONFIRM
Type: Exploit
https://bugs.php.net/bug.php?id=70388

Source: XF
Type: UNKNOWN
php-cve20156836-code-exec(106365)

Source: CCN
Type: PHP Web site
Version 5.4.45

Source: GENTOO
Type: UNKNOWN
GLSA-201606-10

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2015-6836

Vulnerable Configuration:

Configuration 1:

cpe:/a:php:php:*:*:*:*:*:*:*:* (Version <= 5.4.44)

OR cpe:/a:php:php:5.5.0:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.0:alpha1:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.0:alpha2:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.0:alpha3:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.0:alpha4:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.0:alpha5:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.0:alpha6:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.0:beta1:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.0:beta2:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.0:beta3:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.0:beta4:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.0:rc1:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.0:rc2:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.1:*:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.2:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.3:*:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.4:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.5:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.6:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.7:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.8:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.9:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.10:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.11:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.12:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.13:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.14:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.18:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.19:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.20:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.21:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.22:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.23:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.24:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.25:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.26:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.27:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.28:*:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.0:alpha1:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.0:alpha2:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.0:alpha3:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.0:alpha4:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.0:alpha5:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.0:beta1:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.0:beta2:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.0:beta3:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.0:beta4:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.1:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.2:*:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.3:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.4:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.5:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.6:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.7:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.8:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.9:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.10:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.11:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.12:-:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:php:php:5.4.0:-:*:*:*:*:*:*

AND

cpe:/a:ibm:lotus_protector:2.8:*:*:*:mail_security:*:*:*

OR cpe:/a:ibm:lotus_protector:2.8.1:*:*:*:mail_security:*:*:*

OR cpe:/h:ibm:flex_system_manager_node:*:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20156836	V	CVE-2015-6836	2023-06-22
oval:org.opensuse.security:def:34675	P	Security update for virglrenderer (Important) (in QA)	2022-01-17
oval:org.opensuse.security:def:31372	P	Security update for MozillaFirefox (Important) (in QA)	2022-01-14
oval:org.opensuse.security:def:9680	P	Security update for libsndfile (Important)	2022-01-11
oval:org.opensuse.security:def:30288	P	Security update for java-1_8_0-ibm (Important) (in QA)	2022-01-04
oval:org.opensuse.security:def:10438	P	Security update for java-1_8_0-ibm (Important) (in QA)	2022-01-04
oval:org.opensuse.security:def:9884	P	Security update for go1.17 (Moderate)	2021-12-23
oval:org.opensuse.security:def:33758	P	Security update for xorg-x11-server (Important)	2021-12-20
oval:org.opensuse.security:def:9634	P	Security update for log4j (Important)	2021-12-17
oval:org.opensuse.security:def:33756	P	Security update for xorg-x11-server (Important)	2021-12-14
oval:org.opensuse.security:def:30159	P	Security update for mozilla-nss (Important)	2021-12-06
oval:org.opensuse.security:def:38242	P	Security update for mozilla-nss (Important)	2021-12-06
oval:org.opensuse.security:def:34609	P	Security update for mozilla-nss (Important)	2021-12-06
oval:org.opensuse.security:def:34607	P	Security update for the Linux Kernel (Important)	2021-12-02
oval:org.opensuse.security:def:10371	P	Security update for the Linux Kernel (Important)	2021-12-02
oval:org.opensuse.security:def:9619	P	Security update for python-Pygments (Important)	2021-12-01
oval:org.opensuse.security:def:10368	P	Security update for ruby2.5 (Important)	2021-12-01
oval:org.opensuse.security:def:10175	P	Security update for webkit2gtk3 (Important)	2021-11-23
oval:org.opensuse.security:def:32216	P	Security update for MozillaFirefox (Important)	2021-11-17
oval:org.opensuse.security:def:9612	P	Security update for MozillaFirefox (Important)	2021-11-10
oval:org.opensuse.security:def:9417	P	Security update for MozillaFirefox (Important)	2021-11-10
oval:org.opensuse.security:def:30142	P	Security update for transfig (Important)	2021-10-29
oval:org.opensuse.security:def:29440	P	Security update for transfig (Important)	2021-10-29
oval:org.opensuse.security:def:10169	P	Security update for Salt (Moderate)	2021-10-27
oval:org.opensuse.security:def:9604	P	Security update for dnsmasq (Moderate)	2021-10-27
oval:org.opensuse.security:def:34568	P	Security update for python3 (Moderate)	2021-10-20
oval:org.opensuse.security:def:10162	P	Security update for glibc (Moderate)	2021-10-12
oval:org.opensuse.security:def:33021	P	Security update for libqt5-qtsvg (Moderate)	2021-10-11
oval:org.opensuse.security:def:10346	P	Security update for curl (Moderate)	2021-10-06
oval:org.opensuse.security:def:29423	P	Security update for openssl (Low)	2021-09-20
oval:org.opensuse.security:def:29421	P	Security update for transfig (Moderate)	2021-09-16
oval:org.opensuse.security:def:10153	P	Security update for openssl-1_0_0 (Low)	2021-09-09
oval:org.opensuse.security:def:33971	P	Security update for openssl-1_0_0 (Low)	2021-09-09
oval:org.opensuse.security:def:9395	P	Security update for libesmtp (Important)	2021-09-03
oval:org.opensuse.security:def:33969	P	Security update for xen (Important)	2021-09-03
oval:org.opensuse.security:def:10147	P	Security update for xerces-c (Important)	2021-09-02
oval:org.opensuse.security:def:30122	P	Security update for libesmtp (Important)	2021-09-02
oval:org.opensuse.security:def:11120	P	Security update for libspf2 (Critical)	2021-08-25
oval:org.opensuse.security:def:10139	P	Security update for djvulibre (Important)	2021-08-20
oval:org.opensuse.security:def:9387	P	Security update for spice-vdagent (Moderate)	2021-08-20
oval:org.opensuse.security:def:13998	P	pam_krb5-2.4.4-4.4 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14083	P	apache2-2.4.23-28.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14245	P	libjson-c2-0.11-2.15 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14907	P	gpg2-2.0.24-9.8.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:13900	P	libgc1-7.2d-3.75 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:13908	P	libhogweed2-2.7.1-9.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14046	P	tcpdump-4.5.1-10.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14176	P	java-1_8_0-ibm-1.8.0_sr4.5-29.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14201	P	libXrender1-0.9.8-7.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14256	P	libmodplug1-0.8.8.4-13.63 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14929	P	jakarta-taglibs-standard-1.1.1-255.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:13930	P	libmspack0-0.4-14.4 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:30231	P	Security update for libcares2 (Important)	2021-08-16
oval:org.opensuse.security:def:14064	P	xinetd-2.3.15-7.3 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14269	P	libpango-1_0-0-1.40.1-9.5 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:38769	P	Security update for cpio (Important)	2021-08-12
oval:org.opensuse.security:def:9761	P	Security update for nodejs8 (Important)	2021-08-05
oval:org.opensuse.security:def:33946	P	Security update for systemd (Important)	2021-07-21
oval:org.opensuse.security:def:11098	P	Security update for claws-mail (Moderate)	2021-07-16
oval:org.opensuse.security:def:10296	P	Security update for go1.15 (Important)	2021-06-30
oval:org.opensuse.security:def:9544	P	Security update for ovmf (Important)	2021-06-25
oval:org.opensuse.security:def:9742	P	Security update for openexr (Important)	2021-06-24
oval:org.opensuse.security:def:10111	P	Security update for openexr (Important)	2021-06-24
oval:org.opensuse.security:def:33935	P	Security update for libnettle (Important)	2021-06-23
oval:org.opensuse.security:def:31213	P	Security update for libnettle (Important)	2021-06-23
oval:org.opensuse.security:def:33934	P	Security update for xterm (Important)	2021-06-18
oval:org.opensuse.security:def:10277	P	Security update for spice-gtk (Moderate)	2021-06-10
oval:org.opensuse.security:def:9727	P	Security update for ucode-intel (Important)	2021-06-10
oval:org.opensuse.security:def:33927	P	Security update for caribou (Important)	2021-06-10
oval:org.opensuse.security:def:9525	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:16098	P	php5-devel-5.5.14-73.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36307	P	taglib-1.5-19.23.4 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:16611	P	libzypp-devel-16.19.0-2.36.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:33925	P	Security update for spice (Important)	2021-06-08
oval:org.opensuse.security:def:16348	P	php5-devel-5.5.14-108.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:16484	P	libXv-devel-1.0.10-7.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:16492	P	libasm-devel-0.158-6.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:16668	P	xen-devel-4.11.0_08-1.11 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:16634	P	php5-devel-5.5.14-109.41.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:15880	P	php5-devel-5.5.14-39.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36265	P	perl-32bit-5.10.0-64.72.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:124640	P	php5-devel-5.5.14-109.41.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:16526	P	libjavascriptcoregtk-1_0-0-2.4.11-23.20 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:10086	P	Security update for dhcp (Important)	2021-06-02
oval:org.opensuse.security:def:10262	P	Security update for curl (Moderate)	2021-05-31
oval:org.opensuse.security:def:32926	P	Security update for libX11 (Moderate)	2021-05-26
oval:org.opensuse.security:def:9510	P	Security update for djvulibre (Important)	2021-05-19
oval:org.opensuse.security:def:9708	P	Security update for lz4 (Important)	2021-05-19
oval:org.opensuse.security:def:33903	P	Security update for samba (Important)	2021-05-04
oval:org.opensuse.security:def:33901	P	Security update for cups (Important)	2021-04-30
oval:org.opensuse.security:def:9695	P	Security update for xen (Important)	2021-04-30
oval:org.opensuse.security:def:38658	P	Security update for MozillaFirefox (Important)	2021-04-28
oval:org.opensuse.security:def:34410	P	Security update for the Linux Kernel (Important)	2021-04-16
oval:org.opensuse.security:def:9686	P	Security update for spamassassin (Important)	2021-04-13
oval:org.opensuse.security:def:31369	P	Security update for MozillaFirefox (Important)	2021-03-31
oval:org.opensuse.security:def:29484	P	Security update for python (Moderate)	2021-03-16
oval:org.opensuse.security:def:9861	P	Security update for the Linux Kernel (Important)	2021-03-09
oval:org.opensuse.security:def:34649	P	Security update for the Linux Kernel (Important)	2021-03-09
oval:org.opensuse.security:def:9862	P	Security update for openssl-1_1 (Moderate)	2021-03-09
oval:org.opensuse.security:def:34647	P	Security update for wpa_supplicant (Important)	2021-03-08
oval:org.opensuse.security:def:9463	P	Security update for openldap2 (Important)	2021-03-08
oval:org.opensuse.security:def:10215	P	Security update for python-cryptography (Important)	2021-03-03
oval:org.opensuse.security:def:29480	P	Security update for openldap2 (Important)	2021-03-03
oval:org.opensuse.security:def:29478	P	Security update for python-cryptography (Important)	2021-03-02
oval:org.opensuse.security:def:9854	P	Security update for grub2 (Important)	2021-03-02
oval:org.opensuse.security:def:34030	P	Security update for open-iscsi (Important)	2021-03-01
oval:org.opensuse.security:def:10396	P	Security update for php7 (Important)	2021-02-24
oval:org.opensuse.security:def:38609	P	Security update for ImageMagick (Moderate)	2021-02-23
oval:org.opensuse.security:def:33078	P	Security update for krb5-appl (Important)	2021-02-19
oval:org.opensuse.security:def:9644	P	Security update for the Linux Kernel (Important)	2021-02-19
oval:org.opensuse.security:def:34626	P	Security update for wpa_supplicant (Important)	2021-02-15
oval:org.opensuse.security:def:32255	P	Security update for the Linux Kernel (Important)	2021-02-12
oval:org.opensuse.security:def:9836	P	Security update for subversion (Important)	2021-02-10
oval:org.opensuse.security:def:30010	P	Security update for sudo (Important)	2021-01-27
oval:org.opensuse.security:def:29384	P	Security update for ImageMagick (Important)	2021-01-22
oval:org.opensuse.security:def:35249	P	Security update for gimp (Moderate)	2021-01-04
oval:org.opensuse.security:def:10585	P	Security update for the Linux Kernel (Important)	2020-12-09
oval:org.opensuse.security:def:16968	P	sane-backends-devel-1.0.24-3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35583	P	libarchive2-2.5.5-5.19 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16735	P	gegl-devel-0.2.0-14.3 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16934	P	ncurses-devel-5.9-64.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35627	P	perl-32bit-5.10.0-64.47.8 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16845	P	libmodplug-devel-0.8.9.0+git20170610.f6dd59a-15.4.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16877	P	libqt4-devel-4.8.7-8.8.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35517	P	NetworkManager-gnome-0.7.0.r1053-11.16.61 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16946	P	pango-devel-1.40.1-9.5 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35556	P	gmime-2.2.23-1.41.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16699	P	bsh2-2.0.0.b5-3.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:34769	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:34781	P	Security update for MozillaFirefox, mozilla-nspr, mozilla-nss (Important)	2020-12-01
oval:org.opensuse.security:def:38390	P	libvdpau1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33378	P	Security update for compat-openssl097g (Moderate)	2020-12-01
oval:org.opensuse.security:def:9925	P	libtasn1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29337	P	Security update for spacewalk	2020-12-01
oval:org.opensuse.security:def:35102	P	Security update for the Linux Kernel	2020-12-01
oval:org.opensuse.security:def:31425	P	Security update for php53 (Important)	2020-12-01
oval:org.opensuse.security:def:27658	P	Security update for quagga	2020-12-01
oval:org.opensuse.security:def:29123	P	Security update for java-1_7_0-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:29135	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:29565	P	Security update for OpenEXR (Moderate)	2020-12-01
oval:org.opensuse.security:def:35409	P	Security update for openssl (Important)	2020-12-01
oval:org.opensuse.security:def:33489	P	Security update for libsndfile	2020-12-01
oval:org.opensuse.security:def:33136	P	libQtWebKit4-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:34321	P	Security update for samba (Important)	2020-12-01
oval:org.opensuse.security:def:30632	P	Security update for Xen	2020-12-01
oval:org.opensuse.security:def:31534	P	Security update for samba (Important)	2020-12-01
oval:org.opensuse.security:def:27819	P	Security update for libtasn1	2020-12-01
oval:org.opensuse.security:def:34211	P	Security update for php5 (Important)	2020-12-01
oval:org.opensuse.security:def:28691	P	Security update for freetype2	2020-12-01
oval:org.opensuse.security:def:28771	P	Security update for libtasn1	2020-12-01
oval:org.opensuse.security:def:33361	P	Security update for openssl1 (Moderate)	2020-12-01
oval:org.opensuse.security:def:9992	P	squid on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29716	P	Security update for MozillaFirefox	2020-12-01
oval:org.opensuse.security:def:35468	P	Security update for php53 (Important)	2020-12-01
oval:org.opensuse.security:def:38697	P	libmms0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33133	P	ldapsmb on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33145	P	libecpg6 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29045	P	Security update for adns (Important)	2020-12-01
oval:org.opensuse.security:def:33601	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:30734	P	Security update for OpenEXR (Moderate)	2020-12-01
oval:org.opensuse.security:def:39407	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:27086	P	ark on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33454	P	Security update for gstreamer	2020-12-01
oval:org.opensuse.security:def:29770	P	Security update for glibc (Moderate)	2020-12-01
oval:org.opensuse.security:def:29860	P	Security update for the Linux Kernel	2020-12-01
oval:org.opensuse.security:def:26405	P	Security update for sox (Moderate)	2020-12-01
oval:org.opensuse.security:def:26417	P	Security update for Mozilla Thunderbird (Moderate)	2020-12-01
oval:org.opensuse.security:def:32791	P	syslog-ng on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27308	P	tftp on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33864	P	Security update for jasper	2020-12-01
oval:org.opensuse.security:def:10447	P	gnome-settings-daemon-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:30560	P	Security update for OpenSSL	2020-12-01
oval:org.opensuse.security:def:30760	P	Security update for apache2-mod_perl (Moderate)	2020-12-01
oval:org.opensuse.security:def:30845	P	Security update for dbus-1	2020-12-01
oval:org.opensuse.security:def:26690	P	emacs on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29876	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:34783	P	Recommended update for NetworkManager-kde4 (Moderate)	2020-12-01
oval:org.opensuse.security:def:37907	P	libkpathsea6 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37919	P	libmpfr4 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31126	P	Security update for kvm (Moderate)	2020-12-01
oval:org.opensuse.security:def:26982	P	libxslt on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33813	P	Security update for giflib (Moderate)	2020-12-01
oval:org.opensuse.security:def:30595	P	Security update for php5 (Important)	2020-12-01
oval:org.opensuse.security:def:9903	P	libpng15-15 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29125	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:29137	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:34865	P	Recommended udpate for SUSE Manager Client Tools (Low)	2020-12-01
oval:org.opensuse.security:def:30374	P	Security update for wireshark (Moderate)	2020-12-01
oval:org.opensuse.security:def:38550	P	autofs on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27123	P	file-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10563	P	libxcb-composite0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:35159	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:31474	P	Security update for procmail (Moderate)	2020-12-01
oval:org.opensuse.security:def:28296	P	Security update for ncurses (Important)	2020-12-01
oval:org.opensuse.security:def:29124	P	Security update for java-1_7_0-ibm (Moderate)	2020-12-01
oval:org.opensuse.security:def:29204	P	Security update for openssl (Moderate)	2020-12-01
oval:org.opensuse.security:def:34166	P	Security update for openssl (Moderate)	2020-12-01
oval:org.opensuse.security:def:29718	P	Security update for MozillaFirefox	2020-12-01
oval:org.opensuse.security:def:27137	P	gnutls on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33533	P	Security update for YaST2 LDAP module	2020-12-01
oval:org.opensuse.security:def:33135	P	libMagickCore1-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33147	P	libexif on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:9930	P	libupsclient1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31578	P	Security update for supportutils (Moderate)	2020-12-01
oval:org.opensuse.security:def:27854	P	Security update for php53 (Important)	2020-12-01
oval:org.opensuse.security:def:28902	P	Security update for flash-player (Important)	2020-12-01
oval:org.opensuse.security:def:33456	P	Security update for icu	2020-12-01
oval:org.opensuse.security:def:10011	P	vsftpd on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29772	P	Security update for glibc (Important)	2020-12-01
oval:org.opensuse.security:def:30671	P	Security update for ImageMagick (Important)	2020-12-01
oval:org.opensuse.security:def:38725	P	libsnmp30 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:17606	P	security update for xen (Moderate)	2020-12-01
oval:org.opensuse.security:def:26882	P	dbus-1-glib on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26894	P	file-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33224	P	pam_mount on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29129	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:39449	P	Security update for php5 (Important)	2020-12-01
oval:org.opensuse.security:def:32701	P	libQtWebKit4-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27167	P	lcms on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33511	P	Security update for pcsc-lite	2020-12-01
oval:org.opensuse.security:def:29819	P	Security update for IBM Java 1.6.0	2020-12-01
oval:org.opensuse.security:def:29878	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:26406	P	Security update for mbedtls (Moderate)	2020-12-01
oval:org.opensuse.security:def:26481	P	Security update for chromium (Moderate)	2020-12-01
oval:org.opensuse.security:def:27459	P	libmikmod on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33815	P	Security update for glib2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:34714	P	Security update for ImageMagick (Important)	2020-12-01
oval:org.opensuse.security:def:10460	P	lhasa-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:30597	P	Security update for php53 (Important)	2020-12-01
oval:org.opensuse.security:def:30977	P	Security update for guile (Low)	2020-12-01
oval:org.opensuse.security:def:26747	P	libgdiplus0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33165	P	libneon27 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29920	P	Security update for libevent (Moderate)	2020-12-01
oval:org.opensuse.security:def:35421	P	Security update for openssl (Important)	2020-12-01
oval:org.opensuse.security:def:29924	P	Security update for Mozilla	2020-12-01
oval:org.opensuse.security:def:29936	P	Security update for libidn (Moderate)	2020-12-01
oval:org.opensuse.security:def:38003	P	memcached on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27035	P	sudo on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27600	P	Security update for apache2-mod_security2	2020-12-01
oval:org.opensuse.security:def:10813	P	libxml2-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:34770	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:38300	P	libical1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33427	P	Security update for Samba	2020-12-01
oval:org.opensuse.security:def:9912	P	libqt4 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29126	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:29206	P	Security update for openssl (Moderate)	2020-12-01
oval:org.opensuse.security:def:35001	P	Security update for glibc (Moderate)	2020-12-01
oval:org.opensuse.security:def:30528	P	Security update for IBM Java 6	2020-12-01
oval:org.opensuse.security:def:27084	P	apache2-mod_php53 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27614	P	Security update for Mozilla Firefox	2020-12-01
oval:org.opensuse.security:def:33466	P	Security update for kdelibs	2020-12-01
oval:org.opensuse.security:def:28331	P	Security update for php53 (Important)	2020-12-01
oval:org.opensuse.security:def:29335	P	Security update for SUSE Manager client tools	2020-12-01
oval:org.opensuse.security:def:34264	P	Security update for postgresql94 (Important)	2020-12-01
oval:org.opensuse.security:def:30583	P	Security update for ntp (Important)	2020-12-01
oval:org.opensuse.security:def:31513	P	Security update for quagga	2020-12-01
oval:org.opensuse.security:def:27181	P	libevent-1_4-2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:34171	P	Security update for openssl (Important)	2020-12-01
oval:org.opensuse.security:def:28690	P	Security update for foomatic-filters (Moderate)	2020-12-01
oval:org.opensuse.security:def:28702	P	Security update for GPG2	2020-12-01
oval:org.opensuse.security:def:33226	P	pcsc-ccid on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:9977	P	python-pywbem on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29563	P	Security update for OpenEXR (Moderate)	2020-12-01
oval:org.opensuse.security:def:33134	P	libFLAC++6 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:28988	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:33513	P	Security update for perl-HTML-Parser	2020-12-01
oval:org.opensuse.security:def:29821	P	Security update for java-1_6_0-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:30690	P	Security update for Mesa (Moderate)	2020-12-01
oval:org.opensuse.security:def:17632	P	Security update for php5 (Important)	2020-12-01
oval:org.opensuse.security:def:26883	P	dhcp on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26958	P	libnetpbm10 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33359	P	Security update for openssl1 (Moderate)	2020-12-01
oval:org.opensuse.security:def:29281	P	Security update for xorg-x11-libX11 (Important)	2020-12-01
oval:org.opensuse.security:def:31410	P	Security update for php53 (Important)	2020-12-01
oval:org.opensuse.security:def:32700	P	libMagickCore1-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:32712	P	libgdiplus0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27224	P	libupsclient1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33599	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:29922	P	Security update for libexif (Moderate)	2020-12-01
oval:org.opensuse.security:def:30759	P	Security update for apache2-mod_nss (Moderate)	2020-12-01
oval:org.opensuse.security:def:30771	P	Security update for augeas (Moderate)	2020-12-01
oval:org.opensuse.security:def:26609	P	libxslt on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27512	P	lynx on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29858	P	Security update for Linux Kernel	2020-12-01
oval:org.opensuse.security:def:34739	P	Security update for LibVNCServer (Important)	2020-12-01
oval:org.opensuse.security:def:37908	P	libksba8 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31069	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:26831	P	tar on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33321	P	Security update for python-azure-agent (Moderate)	2020-12-01
oval:org.opensuse.security:def:33862	P	Security update for jakarta	2020-12-01
oval:org.opensuse.security:def:30558	P	Security update for liblzo2-2	2020-12-01
oval:org.opensuse.security:def:35462	P	Security update for php53 (Important)	2020-12-01
oval:org.opensuse.security:def:29925	P	Security update for libgcrypt	2020-12-01
oval:org.opensuse.security:def:38140	P	binutils on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27561	P	rubygem-rack-1_4 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10835	P	php5-devel on GA media (Moderate)	2020-12-01
oval:org.cisecurity:def:67	P	DSA-3358-1 -- php5 -- security update	2016-02-08
oval:com.ubuntu.precise:def:20156836000	V	CVE-2015-6836 on Ubuntu 12.04 LTS (precise) - medium.	2016-01-19
oval:com.ubuntu.trusty:def:20156836000	V	CVE-2015-6836 on Ubuntu 14.04 LTS (trusty) - medium.	2016-01-19