Vulnerability Name:

CVE-2015-8866 (CCN-113954)

Assigned:2016-05-21
Published:2016-05-21
Updated:2022-07-20
Summary:ext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when PHP-FPM is used, does not isolate each thread from libxml_disable_entity_loader changes in other threads, which allows remote attackers to conduct XML External Entity (XXE) and XML Entity Expansion (XEE) attacks via a crafted XML document, a related issue to CVE-2015-5161.
CVSS v3 Severity:9.6 Critical (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
8.3 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): Required
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
9.6 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
8.3 High (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): Required
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
9.0 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-611
Vulnerability Consequences:Obtain Information
References:Source: MITRE
Type: CNA
CVE-2015-8866

Source: CONFIRM
Type: Broken Link, Vendor Advisory
http://git.php.net/?p=php-src.git;a=commit;h=de31324c221c1791b26350ba106cc26bad23ace9

Source: SUSE
Type: Mailing List, Third Party Advisory
openSUSE-SU-2016:1274

Source: SUSE
Type: Mailing List, Third Party Advisory
SUSE-SU-2016:1277

Source: SUSE
Type: Mailing List, Third Party Advisory
openSUSE-SU-2016:1373

Source: CCN
Type: RHSA-2016-2750
Moderate: rh-php56 security, bug fix, and enhancement update

Source: REDHAT
Type: Third Party Advisory
RHSA-2016:2750

Source: CCN
Type: IBM Security Bulletin T1024229 (Flex System Manager Node)
IBM Flex System Manager (FSM) is affected by multiple php vulnerabilities

Source: MLIST
Type: Mailing List, Patch, Third Party Advisory
[oss-security] 20160423 Re: CVE request: PHP issues fixed in 7.0.5, 5.6.20 and 5.5.34 releases

Source: CCN
Type: PHP Web site
PHP: Hypertext Preprocessor

Source: CONFIRM
Type: Release Notes, Vendor Advisory
http://www.php.net/ChangeLog-5.php

Source: BID
Type: Third Party Advisory, VDB Entry
87470

Source: CCN
Type: BID-87470
PHP 'libxml_disable_entity_loader()' CVE-2015-8866 XML External Entity Injection Vulnerability

Source: UBUNTU
Type: Third Party Advisory
USN-2952-1

Source: UBUNTU
Type: Third Party Advisory
USN-2952-2

Source: CONFIRM
Type: Issue Tracking, Patch, Third Party Advisory
https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1509817

Source: CONFIRM
Type: Exploit, Issue Tracking, Patch, Vendor Advisory
https://bugs.php.net/bug.php?id=64938

Source: XF
Type: UNKNOWN
php-cve20158866-info-disc(113954)

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2015-8866

Vulnerable Configuration:Configuration 1:
  • cpe:/a:php:php:*:*:*:*:*:*:*:* (Version >= 7.2.0 and < 7.2.1)
  • OR cpe:/a:php:php:*:*:*:*:*:*:*:* (Version >= 7.1.0 and < 7.1.13)
  • OR cpe:/a:php:php:*:*:*:*:*:*:*:* (Version >= 7.0.0 and < 7.0.27)
  • OR cpe:/a:php:php:*:*:*:*:*:*:*:* (Version >= 5.5.0 and < 5.5.22)
  • OR cpe:/a:php:php:*:*:*:*:*:*:*:* (Version >= 5.6.0 and < 5.6.6)

    • Configuration 2:
  • cpe:/o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
  • OR cpe:/o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
  • OR cpe:/o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*

    • Configuration 3:
  • cpe:/o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*
  • OR cpe:/o:suse:linux_enterprise_module_for_web_scripting:12:*:*:*:*:*:*:*
  • OR cpe:/o:opensuse:leap:42.1:*:*:*:*:*:*:*
  • OR cpe:/o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
  • OR cpe:/o:suse:linux_enterprise_software_development_kit:12:-:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/h:ibm:flex_system_manager_node:*:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:20158866
    V
    		CVE-2015-8866
    2023-06-22
    oval:org.opensuse.security:def:31372
    P
    		Security update for MozillaFirefox (Important) (in QA)
    2022-01-14
    oval:org.opensuse.security:def:9680
    P
    		Security update for libsndfile (Important)
    2022-01-11
    oval:org.opensuse.security:def:31375
    P
    		Security update for libvirt (Important)
    2022-01-10
    oval:org.opensuse.security:def:34678
    P
    		Security update for libsndfile (Important)
    2022-01-05
    oval:org.opensuse.security:def:30290
    P
    		Security update for net-snmp (Important)
    2022-01-05
    oval:org.opensuse.security:def:30291
    P
    		Security update for libsndfile (Important)
    2022-01-05
    oval:org.opensuse.security:def:34677
    P
    		Security update for libvirt (Important)
    2022-01-05
    oval:org.opensuse.security:def:31374
    P
    		Security update for libsndfile (Important)
    2022-01-05
    oval:org.opensuse.security:def:31371
    P
    		Security update for java-1_8_0-ibm (Important) (in QA)
    2022-01-04
    oval:org.opensuse.security:def:10438
    P
    		Security update for java-1_8_0-ibm (Important) (in QA)
    2022-01-04
    oval:org.opensuse.security:def:9884
    P
    		Security update for go1.17 (Moderate)
    2021-12-23
    oval:org.opensuse.security:def:33758
    P
    		Security update for xorg-x11-server (Important)
    2021-12-20
    oval:org.opensuse.security:def:9634
    P
    		Security update for log4j (Important)
    2021-12-17
    oval:org.opensuse.security:def:34609
    P
    		Security update for mozilla-nss (Important)
    2021-12-06
    oval:org.opensuse.security:def:30160
    P
    		Security update for openssh (Important)
    2021-12-06
    oval:org.opensuse.security:def:10371
    P
    		Security update for the Linux Kernel (Important)
    2021-12-02
    oval:org.opensuse.security:def:10175
    P
    		Security update for webkit2gtk3 (Important)
    2021-11-23
    oval:org.opensuse.security:def:32218
    P
    		Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP3) (Important)
    2021-11-19
    oval:org.opensuse.security:def:32219
    P
    		Security update for the Linux Kernel (Live Patch 37 for SLE 12 SP3) (Important)
    2021-11-19
    oval:org.opensuse.security:def:30145
    P
    		Security update for pcre (Moderate)
    2021-11-10
    oval:org.opensuse.security:def:9612
    P
    		Security update for MozillaFirefox (Important)
    2021-11-10
    oval:org.opensuse.security:def:30144
    P
    		Security update for binutils (Moderate)
    2021-11-09
    oval:org.opensuse.security:def:29441
    P
    		Security update for binutils (Moderate)
    2021-11-02
    oval:org.opensuse.security:def:9604
    P
    		Security update for dnsmasq (Moderate)
    2021-10-27
    oval:org.opensuse.security:def:10169
    P
    		Security update for Salt (Moderate)
    2021-10-27
    oval:org.opensuse.security:def:34570
    P
    		Security update for postgresql10 (Important)
    2021-10-20
    oval:org.opensuse.security:def:34571
    P
    		Security update for git (Low)
    2021-10-20
    oval:org.opensuse.security:def:10162
    P
    		Security update for glibc (Moderate)
    2021-10-12
    oval:org.opensuse.security:def:29424
    P
    		Security update for ghostscript (Critical)
    2021-09-21
    oval:org.opensuse.security:def:29423
    P
    		Security update for openssl (Low)
    2021-09-20
    oval:org.opensuse.security:def:33971
    P
    		Security update for openssl-1_0_0 (Low)
    2021-09-09
    oval:org.opensuse.security:def:10153
    P
    		Security update for openssl-1_0_0 (Low)
    2021-09-09
    oval:org.opensuse.security:def:30123
    P
    		Security update for file (Important)
    2021-09-02
    oval:org.opensuse.security:def:10147
    P
    		Security update for xerces-c (Important)
    2021-09-02
    oval:org.opensuse.security:def:11120
    P
    		Security update for libspf2 (Critical)
    2021-08-25
    oval:org.opensuse.security:def:10139
    P
    		Security update for djvulibre (Important)
    2021-08-20
    oval:org.opensuse.security:def:30234
    P
    		Security update for java-1_8_0-openjdk (Important)
    2021-08-20
    oval:org.opensuse.security:def:30233
    P
    		Security update for fetchmail (Moderate)
    2021-08-18
    oval:org.opensuse.security:def:13915
    P
    		libjavascriptcoregtk-3_0-0-2.4.11-23.20 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:14284
    P
    		libraptor2-0-2.0.10-3.63 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:14216
    P
    		libcares2-1.9.1-5.1 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:14271
    P
    		libpcsclite1-1.8.10-6.1 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:14191
    P
    		libXRes1-1.0.7-3.53 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:14260
    P
    		libmysqlclient18-10.0.30-28.1 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:14098
    P
    		bzip2-1.0.6-29.2 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:14079
    P
    		ant-1.9.4-1.31 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:14061
    P
    		xen-4.7.0_12-23.4 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:14013
    P
    		procmail-3.22-267.12 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:13945
    P
    		libpoppler44-0.24.4-12.1 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:13923
    P
    		libldb1-1.1.26-10.4 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:14944
    P
    		libHX28-3.18-1.18 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:14922
    P
    		hplip-3.16.11-1.33 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:9761
    P
    		Security update for nodejs8 (Important)
    2021-08-05
    oval:org.opensuse.security:def:33949
    P
    		Security update for qemu (Important)
    2021-07-28
    oval:org.opensuse.security:def:33948
    P
    		Security update for linuxptp (Important)
    2021-07-21
    oval:org.opensuse.security:def:11098
    P
    		Security update for claws-mail (Moderate)
    2021-07-16
    oval:org.opensuse.security:def:10296
    P
    		Security update for go1.15 (Important)
    2021-06-30
    oval:org.opensuse.security:def:38712
    P
    		Security update for arpwatch (Important)
    2021-06-28
    oval:org.opensuse.security:def:33936
    P
    		Security update for ovmf (Important)
    2021-06-24
    oval:org.opensuse.security:def:9742
    P
    		Security update for openexr (Important)
    2021-06-24
    oval:org.opensuse.security:def:10111
    P
    		Security update for openexr (Important)
    2021-06-24
    oval:org.opensuse.security:def:33937
    P
    		Security update for libgcrypt (Important)
    2021-06-24
    oval:org.opensuse.security:def:33938
    P
    		Security update for openexr (Important)
    2021-06-24
    oval:org.opensuse.security:def:31215
    P
    		Security update for openexr (Important)
    2021-06-24
    oval:org.opensuse.security:def:29385
    P
    		Security update for webkit2gtk3 (Important)
    2021-06-17
    oval:org.opensuse.security:def:10277
    P
    		Security update for spice-gtk (Moderate)
    2021-06-10
    oval:org.opensuse.security:def:33927
    P
    		Security update for caribou (Important)
    2021-06-10
    oval:org.opensuse.security:def:9727
    P
    		Security update for ucode-intel (Important)
    2021-06-10
    oval:org.opensuse.security:def:16591
    P
    		libtiff-devel-4.0.9-44.24.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:36310
    P
    		tftp-0.48-101.31.27 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:36268
    P
    		perl-libwww-perl-5.816-2.23.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:16634
    P
    		php5-devel-5.5.14-109.41.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:16583
    P
    		libssh-devel-0.6.3-12.6.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:17067
    P
    		libjavascriptcoregtk-1_0-0-2.4.8-16.2 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:17045
    P
    		cyrus-sasl-digestmd5-32bit-2.1.26-7.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:17033
    P
    		pulseaudio-module-bluetooth-5.0-2.7 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:124640
    P
    		php5-devel-5.5.14-109.41.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:17268
    P
    		libosip2-3.5.0-20.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:17177
    P
    		lcms-1.19-17.31 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:16098
    P
    		php5-devel-5.5.14-73.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:17246
    P
    		kernel-default-extra-4.12.14-94.41.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:17145
    P
    		python-devel-2.7.9-24.2 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:17234
    P
    		gd-32bit-2.1.0-24.9.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:36309
    P
    		tcpdump-3.9.8-1.27.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:17035
    P
    		raptor-2.0.10-3.67 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:36267
    P
    		perl-Tk-804.028-50.24 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:16625
    P
    		obs-service-source_validator-0.7-9.3.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:16999
    P
    		empathy-3.10.3-1.131 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:16348
    P
    		php5-devel-5.5.14-108.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:35252
    P
    		Security update for polkit (Important)
    2021-06-03
    oval:org.opensuse.security:def:10086
    P
    		Security update for dhcp (Important)
    2021-06-02
    oval:org.opensuse.security:def:10262
    P
    		Security update for curl (Moderate)
    2021-05-31
    oval:org.opensuse.security:def:32927
    P
    		Security update for postgresql96 (Moderate)
    2021-05-26
    oval:org.opensuse.security:def:33903
    P
    		Security update for samba (Important)
    2021-05-04
    oval:org.opensuse.security:def:34412
    P
    		Security update for ImageMagick (Moderate)
    2021-04-20
    oval:org.opensuse.security:def:38257
    P
    		Security update for openldap2 (Important)
    2021-04-16
    oval:org.opensuse.security:def:9862
    P
    		Security update for openssl-1_1 (Moderate)
    2021-03-09
    oval:org.opensuse.security:def:9861
    P
    		Security update for the Linux Kernel (Important)
    2021-03-09
    oval:org.opensuse.security:def:34649
    P
    		Security update for the Linux Kernel (Important)
    2021-03-09
    oval:org.opensuse.security:def:29480
    P
    		Security update for openldap2 (Important)
    2021-03-03
    oval:org.opensuse.security:def:10215
    P
    		Security update for python-cryptography (Important)
    2021-03-03
    oval:org.opensuse.security:def:34033
    P
    		Security update for python-cryptography (Important)
    2021-03-02
    oval:org.opensuse.security:def:9854
    P
    		Security update for grub2 (Important)
    2021-03-02
    oval:org.opensuse.security:def:34032
    P
    		Security update for MozillaFirefox (Important)
    2021-03-01
    oval:org.opensuse.security:def:10396
    P
    		Security update for php7 (Important)
    2021-02-24
    oval:org.opensuse.security:def:33079
    P
    		Security update for ImageMagick (Moderate)
    2021-02-19
    oval:org.opensuse.security:def:34629
    P
    		Security update for bind (Important)
    2021-02-18
    oval:org.opensuse.security:def:34628
    P
    		Security update for screen (Important)
    2021-02-17
    oval:org.opensuse.security:def:32258
    P
    		Security update for screen (Important)
    2021-02-17
    oval:org.opensuse.security:def:32257
    P
    		Security update for jasper (Important)
    2021-02-16
    oval:org.opensuse.security:def:9836
    P
    		Security update for subversion (Important)
    2021-02-10
    oval:org.opensuse.security:def:33022
    P
    		Security update for python3 (Important)
    2021-02-08
    oval:org.opensuse.security:def:30012
    P
    		Security update for openvswitch (Important)
    2021-02-03
    oval:org.opensuse.security:def:31216
    P
    		Security update for postgresql, postgresql12, postgresql13 (Important)
    2021-01-26
    oval:org.opensuse.security:def:34413
    P
    		Security update for openldap2 (Moderate)
    2021-01-14
    oval:org.opensuse.security:def:29485
    P
    		Security update for MozillaFirefox (Important)
    2021-01-12
    oval:org.opensuse.security:def:30013
    P
    		Security update for java-1_8_0-ibm (Moderate)
    2021-01-05
    oval:org.opensuse.security:def:35251
    P
    		Security update for flac (Moderate)
    2021-01-04
    oval:org.opensuse.security:def:10585
    P
    		Security update for the Linux Kernel (Important)
    2020-12-09
    oval:org.opensuse.security:def:34324
    P
    		Security update for python-cryptography (Moderate)
    2020-12-04
    oval:org.opensuse.security:def:35629
    P
    		perl-Tk-804.028-50.24 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:16968
    P
    		sane-backends-devel-1.0.24-3.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35585
    P
    		libexif-0.6.17-2.12 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:16911
    P
    		libvpx-devel-1.3.0-3.3.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35558
    P
    		gnutls-2.4.1-24.19.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:16826
    P
    		libid3tag-devel-0.15.1b-184.3.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35519
    P
    		PackageKit-0.3.14-2.12.105 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35630
    P
    		perl-spamassassin-3.2.5-26.22.18 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:16792
    P
    		libarchive-devel-3.1.2-26.3.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:16976
    P
    		typelib-1_0-WebKit2WebExtension-4_0-2.24.4-2.47.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35586
    P
    		libexiv2-4-0.17.1-31.20 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:16944
    P
    		osc-0.162.1-15.6.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35559
    P
    		gpg2-2.0.9-25.25.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:16834
    P
    		libjpeg62-devel-62.2.0-31.14.2 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35520
    P
    		PolicyKit-0.9-14.34.9 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:16784
    P
    		libXtst-devel-1.2.2-7.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:16798
    P
    		libbz2-devel-1.0.6-30.8.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:16767
    P
    		libQt5Bootstrap-devel-static-5.6.2-6.15.2 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:34323
    P
    		Security update for gdm (Important)
    2020-12-03
    oval:org.opensuse.security:def:16710
    P
    		dbus-1-glib-devel-0.100.2-3.58 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:34771
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:34784
    P
    		Security update for OpenEXR (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:9930
    P
    		libupsclient1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27514
    P
    		memcached on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31537
    P
    		Security update for samba (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:28903
    P
    		Security update for flash-player (Critical)
    2020-12-01
    oval:org.opensuse.security:def:29565
    P
    		Security update for OpenEXR (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33322
    P
    		Security update for curl (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:30634
    P
    		Security update for Xen
    2020-12-01
    oval:org.opensuse.security:def:27616
    P
    		Security update for freeradius
    2020-12-01
    oval:org.opensuse.security:def:28334
    P
    		Security update for php53 (Important)
    2020-12-01
    oval:org.opensuse.security:def:29926
    P
    		Security update for libgcrypt (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29939
    P
    		Security update for libksba (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31071
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:35470
    P
    		Security update for php53 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33467
    P
    		Security update for kdelibs4
    2020-12-01
    oval:org.opensuse.security:def:30736
    P
    		Security update for SDL (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:34773
    P
    		Security update for MozillaFirefox (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:38155
    P
    		crash on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27461
    P
    		libmspack-devel on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31516
    P
    		Security update for quagga (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:10563
    P
    		libxcb-composite0 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:28692
    P
    		Security update for FUSE
    2020-12-01
    oval:org.opensuse.security:def:28772
    P
    		Security update for libtiff
    2020-12-01
    oval:org.opensuse.security:def:33166
    P
    		libnetpbm10 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:30585
    P
    		Security update for OpenSSH
    2020-12-01
    oval:org.opensuse.security:def:27602
    P
    		Security update for bind
    2020-12-01
    oval:org.opensuse.security:def:28299
    P
    		Security update for netatalk (Important)
    2020-12-01
    oval:org.opensuse.security:def:17731
    P
    		Security update for php5 (Important)
    2020-12-01
    oval:org.opensuse.security:def:33135
    P
    		libMagickCore1-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:30979
    P
    		Security update for hunspell (Low)
    2020-12-01
    oval:org.opensuse.security:def:34267
    P
    		Security update for procmail
    2020-12-01
    oval:org.opensuse.security:def:35411
    P
    		Security update for openssl (Important)
    2020-12-01
    oval:org.opensuse.security:def:33428
    P
    		Security update for clamav, clamav-db, clamav-debuginfo, clamav-debugsource
    2020-12-01
    oval:org.opensuse.security:def:30692
    P
    		Security update for MozillaFirefox (Critical)
    2020-12-01
    oval:org.opensuse.security:def:31413
    P
    		Security update for php53 (Important)
    2020-12-01
    oval:org.opensuse.security:def:38018
    P
    		pam_krb5 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27310
    P
    		tomcat6 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27564
    P
    		rubygem-sprockets-2_2 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:9925
    P
    		libtasn1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26885
    P
    		e2fsprogs on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:28703
    P
    		Security update for gpg2 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:30530
    P
    		Security update for java-1_6_0-ibm (Important)
    2020-12-01
    oval:org.opensuse.security:def:33815
    P
    		Security update for glib2 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27661
    P
    		Security update for ruby
    2020-12-01
    oval:org.opensuse.security:def:17705
    P
    		Security update for libotr (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32702
    P
    		libadns1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:30847
    P
    		Security update for dhcp (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:34169
    P
    		Security update for openssl (Important)
    2020-12-01
    oval:org.opensuse.security:def:31129
    P
    		Security update for kvm (Important)
    2020-12-01
    oval:org.opensuse.security:def:30673
    P
    		Security update for ImageMagick (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:35464
    P
    		Security update for php53 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:34772
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:37934
    P
    		libospf0 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27226
    P
    		libvorbis on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27515
    P
    		mercurial on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:9912
    P
    		libqt4 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:10835
    P
    		php5-devel on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29337
    P
    		Security update for spacewalk
    2020-12-01
    oval:org.opensuse.security:def:30376
    P
    		Security update for wpa_supplicant
    2020-12-01
    oval:org.opensuse.security:def:30635
    P
    		Security update for xen (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27617
    P
    		Security update for freetype2
    2020-12-01
    oval:org.opensuse.security:def:29927
    P
    		Security update for libgcrypt (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:30773
    P
    		Security update for automake
    2020-12-01
    oval:org.opensuse.security:def:31072
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:35161
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:35471
    P
    		Security update for php53 (Important)
    2020-12-01
    oval:org.opensuse.security:def:30737
    P
    		Security update for SDL (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:35423
    P
    		Security update for openssl1 (Important)
    2020-12-01
    oval:org.opensuse.security:def:37923
    P
    		libncurses5-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27169
    P
    		libFLAC++6 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27462
    P
    		libmusicbrainz-devel on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:9903
    P
    		libpng15-15 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:10813
    P
    		libxml2-devel on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:39464
    P
    		Security update for php5 (Important)
    2020-12-01
    oval:org.opensuse.security:def:29126
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:29206
    P
    		Security update for openssl (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33601
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:30586
    P
    		Security update for openssh (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27603
    P
    		Security update for Mono
    2020-12-01
    oval:org.opensuse.security:def:17932
    P
    		Security update for php5 (Important)
    2020-12-01
    oval:org.opensuse.security:def:30980
    P
    		Security update for icu
    2020-12-01
    oval:org.opensuse.security:def:35104
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:35412
    P
    		Security update for openssl (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33864
    P
    		Security update for jasper
    2020-12-01
    oval:org.opensuse.security:def:30693
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:34785
    P
    		Security update for OpenEXR (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27088
    P
    		automake on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27311
    P
    		unixODBC_23 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:39422
    P
    		Security update for python-Jinja2 (Important)
    2020-12-01
    oval:org.opensuse.security:def:28691
    P
    		Security update for freetype2
    2020-12-01
    oval:org.opensuse.security:def:29137
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:32792
    P
    		sysstat on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33513
    P
    		Security update for perl-HTML-Parser
    2020-12-01
    oval:org.opensuse.security:def:30531
    P
    		Security update for java-1_6_0-ibm (Important)
    2020-12-01
    oval:org.opensuse.security:def:17906
    P
    		Security update for git (Important)
    2020-12-01
    oval:org.opensuse.security:def:33136
    P
    		libQtWebKit4-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:30848
    P
    		Security update for dhcp (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:35003
    P
    		Security update for gnome-session (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:30674
    P
    		Security update for ImageMagick (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:34741
    P
    		Security update for LibVNCServer (Important)
    2020-12-01
    oval:org.opensuse.security:def:35465
    P
    		Security update for php53 (Important)
    2020-12-01
    oval:org.opensuse.security:def:37922
    P
    		libmysqlclient18 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26960
    P
    		libopensc2 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27227
    P
    		libwsman1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29336
    P
    		Security update for cobbler
    2020-12-01
    oval:org.opensuse.security:def:38784
    P
    		python-pyOpenSSL on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32713
    P
    		libgnomesu on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33456
    P
    		Security update for icu
    2020-12-01
    oval:org.opensuse.security:def:30377
    P
    		Security update for xalan-j2
    2020-12-01
    oval:org.opensuse.security:def:31476
    P
    		Security update for puppet
    2020-12-01
    oval:org.opensuse.security:def:30597
    P
    		Security update for php53 (Important)
    2020-12-01
    oval:org.opensuse.security:def:30761
    P
    		Security update for php53
    2020-12-01
    oval:org.opensuse.security:def:30774
    P
    		Security update for avahi (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:34867
    P
    		Security update for coreutils (Important)
    2020-12-01
    oval:org.opensuse.security:def:35162
    P
    		Security update for krb5
    2020-12-01
    oval:org.opensuse.security:def:38624
    P
    		jakarta-commons-fileupload on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:34716
    P
    		Security update for ImageMagick (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31580
    P
    		Security update for syslog-ng (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:35424
    P
    		Security update for openssl1 (Important)
    2020-12-01
    oval:org.opensuse.security:def:26896
    P
    		foomatic-filters on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27170
    P
    		libMagickCore1-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29282
    P
    		Security update for xorg-x11-libX11 (Important)
    2020-12-01
    oval:org.opensuse.security:def:38740
    P
    		libvdpau1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29928
    P
    		Security update for libgcrypt (Low)
    2020-12-01
    oval:org.opensuse.security:def:33361
    P
    		Security update for openssl1 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31427
    P
    		Security update for php53 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:30560
    P
    		Security update for OpenSSL
    2020-12-01
    oval:org.opensuse.security:def:34212
    P
    		Security update for php5 (Important)
    2020-12-01
    oval:org.opensuse.security:def:34783
    P
    		Recommended update for NetworkManager-kde4 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:35105
    P
    		Security update for the Linux Kernel (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:10011
    P
    		vsftpd on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:38565
    P
    		cpp48 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31536
    P
    		Security update for samba (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:34786
    P
    		Security update for OpenEXR (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27089
    P
    		avahi on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29130
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:29821
    P
    		Security update for java-1_6_0-ibm (Important)
    2020-12-01
    oval:org.opensuse.security:def:10460
    P
    		lhasa-devel on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:28333
    P
    		Security update for php53 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29125
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:29938
    P
    		Security update for libksba
    2020-12-01
    oval:org.opensuse.security:def:33226
    P
    		pcsc-ccid on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29922
    P
    		Security update for libexif (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:34172
    P
    		Security update for openssl1 (Important)
    2020-12-01
    oval:org.opensuse.security:def:35004
    P
    		Security update for gnuplot (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:9992
    P
    		squid on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:38405
    P
    		libxslt-tools on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31515
    P
    		Security update for quagga (Low)
    2020-12-01
    oval:org.opensuse.security:def:34742
    P
    		Security update for Mesa (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26886
    P
    		ecryptfs-utils-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26961
    P
    		libopenssl0_9_8 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29046
    P
    		Security update for apache2 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29772
    P
    		Security update for glibc (Important)
    2020-12-01
    oval:org.opensuse.security:def:38673
    P
    		libgoa-1_0-0 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:10447
    P
    		gnome-settings-daemon-devel on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:28298
    P
    		Security update for net-snmp (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32701
    P
    		libQtWebKit4-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33147
    P
    		libexif on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:34266
    P
    		Security update for ppp (Important)
    2020-12-01
    oval:org.opensuse.security:def:31477
    P
    		Security update for puppet (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29878
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:33534
    P
    		Security update for ConsoleKit
    2020-12-01
    oval:org.opensuse.security:def:31412
    P
    		Security update for php53 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:30762
    P
    		Security update for apache2-mod_security2
    2020-12-01
    oval:org.opensuse.security:def:34868
    P
    		Security update for coreutils (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:9977
    P
    		python-pywbem on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:38315
    P
    		libksba8 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27563
    P
    		rubygem-rdoc on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:34717
    P
    		Security update for ImageMagick (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31581
    P
    		Security update for tar (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26884
    P
    		dhcpcd on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26897
    P
    		freeradius-server on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:28989
    P
    		Security update for xen (Important)
    2020-12-01
    oval:org.opensuse.security:def:29718
    P
    		Security update for MozillaFirefox
    2020-12-01
    oval:org.opensuse.security:def:33379
    P
    		Security update for compat-openssl097g (Important)
    2020-12-01
    oval:org.opensuse.security:def:27660
    P
    		Security update for rubygem-rack
    2020-12-01
    oval:org.opensuse.security:def:30763
    P
    		Security update for apport (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:34168
    P
    		Security update for openssl (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31128
    P
    		Security update for kvm (Important)
    2020-12-01
    oval:org.opensuse.security:def:31428
    P
    		Security update for php53 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29860
    P
    		Security update for the Linux Kernel
    2020-12-01
    oval:org.opensuse.security:def:33490
    P
    		Security update for libtheora
    2020-12-01
    oval:com.ubuntu.precise:def:20158866000
    V
    		CVE-2015-8866 on Ubuntu 12.04 LTS (precise) - medium.
    2016-05-21
    oval:com.ubuntu.trusty:def:20158866000
    V
    		CVE-2015-8866 on Ubuntu 14.04 LTS (trusty) - medium.
    2016-05-21
    BACK
    php php *
    php php *
    php php *
    php php *
    php php *
    canonical ubuntu linux 15.10
    canonical ubuntu linux 14.04
    canonical ubuntu linux 12.04
    suse linux enterprise software development kit 12 sp1
    suse linux enterprise module for web scripting 12
    opensuse leap 42.1
    opensuse opensuse 13.2
    suse linux enterprise software development kit 12 -
    ibm flex system manager node *