Vulnerability CVE-2016-9137

Vulnerability Name:

CVE-2016-9137 (CCN-120378)

Assigned:

2016-12-12

Published:

2016-12-12

Updated:

2017-11-04

Summary:

Use-after-free vulnerability in the CURLFile implementation in ext/curl/curl_file.c in PHP before 5.6.27 and 7.x before 7.0.12 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data that is mishandled during __wakeup processing.

CVSS v3 Severity:

9.8 Critical (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
8.5 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

7.5 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
6.5 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): High

CVSS v2 Severity:

7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

7.8 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Complete

Vulnerability Type:

CWE-416

Vulnerability Consequences:

Denial of Service

References:

Source: MITRE
Type: CNA
CVE-2016-9137

Source: CONFIRM
Type: Patch
http://git.php.net/?p=php-src.git;a=commit;h=0e6fe3a4c96be2d3e88389a5776f878021b4c59f

Source: DEBIAN
Type: UNKNOWN
DSA-3698

Source: MLIST
Type: Third Party Advisory
[oss-security] 20161101 Re: CVE assignment for PHP 5.6.27 and 7.0.12

Source: CCN
Type: oss-sec Mailing List, Mon, 12 Dec 2016 12:13:45 +0200
CVE assignment for PHP 5.6.28, 5.6.29, 7.0.13, 7.0.14 and 7.1.0

Source: CCN
Type: PHP Web site
PHP: Hypertext Preprocessor

Source: CONFIRM
Type: Release Notes, Vendor Advisory
http://www.php.net/ChangeLog-5.php

Source: CONFIRM
Type: Release Notes, Vendor Advisory
http://www.php.net/ChangeLog-7.php

Source: BID
Type: Third Party Advisory, VDB Entry
93577

Source: CCN
Type: BID-93577
PHP 'unserialize()' Function Use After Free Remote Code Execution Vulnerability

Source: CONFIRM
Type: Exploit, Vendor Advisory
https://bugs.php.net/bug.php?id=73147

Source: XF
Type: UNKNOWN
php-cve20169137-dos(120378)

Source: CONFIRM
Type: UNKNOWN
https://www.tenable.com/security/tns-2016-19

Vulnerable Configuration:

Configuration 1:

cpe:/a:php:php:*:*:*:*:*:*:*:* (Version <= 5.6.26)

OR cpe:/a:php:php:7.0.0:-:*:*:*:*:*:*

OR cpe:/a:php:php:7.0.1:-:*:*:*:*:*:*

OR cpe:/a:php:php:7.0.2:-:*:*:*:*:*:*

OR cpe:/a:php:php:7.0.3:-:*:*:*:*:*:*

OR cpe:/a:php:php:7.0.4:-:*:*:*:*:*:*

OR cpe:/a:php:php:7.0.5:-:*:*:*:*:*:*

OR cpe:/a:php:php:7.0.6:-:*:*:*:*:*:*

OR cpe:/a:php:php:7.0.7:-:*:*:*:*:*:*

OR cpe:/a:php:php:7.0.8:-:*:*:*:*:*:*

OR cpe:/a:php:php:7.0.9:-:*:*:*:*:*:*

OR cpe:/a:php:php:7.0.10:-:*:*:*:*:*:*

OR cpe:/a:php:php:7.0.11:-:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:php:php:5.6.26:-:*:*:*:*:*:*

OR cpe:/a:php:php:7.0.11:-:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20169137	V	CVE-2016-9137	2022-09-02
oval:org.opensuse.security:def:9885	P	Security update for SDL2 (Important) (in QA)	2022-01-12
oval:org.opensuse.security:def:10439	P	Security update for SDL2 (Important) (in QA)	2022-01-12
oval:org.opensuse.security:def:10710	P	Security update for the Linux Kernel (Important) (in QA)	2022-01-07
oval:org.opensuse.security:def:10438	P	Security update for java-1_8_0-ibm (Important) (in QA)	2022-01-04
oval:org.opensuse.security:def:9884	P	Security update for go1.17 (Moderate)	2021-12-23
oval:org.opensuse.security:def:10372	P	Security update for aaa_base (Moderate)	2021-12-03
oval:org.opensuse.security:def:10371	P	Security update for the Linux Kernel (Important)	2021-12-02
oval:org.opensuse.security:def:10176	P	Security update for java-1_8_0-openjdk (Important)	2021-11-23
oval:org.opensuse.security:def:10175	P	Security update for webkit2gtk3 (Important)	2021-11-23
oval:org.opensuse.security:def:10170	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:10169	P	Security update for Salt (Moderate)	2021-10-27
oval:org.opensuse.security:def:38669	P	Security update for MozillaFirefox, rust-cbindgen (Important)	2021-10-18
oval:org.opensuse.security:def:10162	P	Security update for glibc (Moderate)	2021-10-12
oval:org.opensuse.security:def:56070	P	Security update for openssl (Low)	2021-09-20
oval:org.opensuse.security:def:10154	P	Security update for ghostscript (Critical)	2021-09-15
oval:org.opensuse.security:def:10153	P	Security update for openssl-1_0_0 (Low)	2021-09-09
oval:org.opensuse.security:def:39420	P	Security update for python (Moderate)	2021-09-02
oval:org.opensuse.security:def:10147	P	Security update for xerces-c (Important)	2021-09-02
oval:org.opensuse.security:def:10148	P	Security update for ffmpeg (Important)	2021-09-02
oval:org.opensuse.security:def:11120	P	Security update for libspf2 (Critical)	2021-08-25
oval:org.opensuse.security:def:10139	P	Security update for djvulibre (Important)	2021-08-20
oval:org.opensuse.security:def:10140	P	Security update for java-1_8_0-openjdk (Important)	2021-08-20
oval:org.opensuse.security:def:14256	P	libmodplug1-0.8.8.4-13.63 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48092	P	libapr-util1-1.5.3-2.8.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:13919	P	libjson-c2-0.11-2.15 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14059	P	xalan-j2-2.7.0-264.133 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47172	P	vino-3.20.2-5.8 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48038	P	gv-3.7.4-1.36 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14011	P	ppc64-diag-2.7.1-5.6 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47088	P	libudisks2-0-2.1.3-1.13 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14269	P	libpango-1_0-0-1.40.1-9.5 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47400	P	libpython2_7-1_0-2.7.13-27.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:13943	P	libpolkit0-0.113-5.6.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14258	P	libmspack0-0.4-14.4 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47269	P	gnome-settings-daemon-3.20.1-49.3 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:13921	P	liblcms1-1.19-17.28 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14940	P	krb5-appl-clients-1.0.3-1.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47238	P	dbus-1-1.8.22-28.19 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14212	P	libasan2-32bit-5.3.1+r233831-12.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14918	P	gv-3.7.4-1.36 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:13911	P	libimobiledevice6-1.2.0-7.31 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47174	P	vsftpd-3.0.2-31.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14187	P	libMagickCore-6_Q16-1-6.8.8.1-70.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14280	P	libpython2_7-1_0-2.7.13-27.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47329	P	libapr-util1-1.5.3-1.46 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14094	P	bash-4.3-82.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14942	P	lftp-4.7.4-3.6.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47298	P	kbd-1.15.5-8.7.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14075	P	MozillaFirefox-52.2.0esr-108.3 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14214	P	libblkid1-2.29.2-2.3 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14920	P	gzip-1.10-2.12 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48032	P	gstreamer-plugins-bad-1.8.3-17.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:13913	P	libjansson4-2.7-1.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47234	P	curl-7.37.0-36.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14057	P	wireshark-1.12.13-31.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14189	P	libQt5WebKit5-5.6.2-1.31 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47112	P	openvpn-2.3.8-16.6.4 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14282	P	libqt4-32bit-4.8.6-7.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47978	P	cracklib-2.9.0-7.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14009	P	pigz-2.3-5.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14096	P	binutils-2.26.1-9.12.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47028	P	libhogweed2-2.7.1-9.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14267	P	libopus0-1.1-3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47340	P	libecpg6-9.6.3-2.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:13941	P	libpng15-15-1.5.22-4.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14077	P	accountsservice-0.6.42-14.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:11099	P	Security update for fossil (Moderate)	2021-07-17
oval:org.opensuse.security:def:11098	P	Security update for claws-mail (Moderate)	2021-07-16
oval:org.opensuse.security:def:10685	P	Security update for the Linux Kernel (Important)	2021-07-15
oval:org.opensuse.security:def:10296	P	Security update for go1.15 (Important)	2021-06-30
oval:org.opensuse.security:def:10112	P	Security update for ovmf (Important)	2021-06-25
oval:org.opensuse.security:def:10111	P	Security update for openexr (Important)	2021-06-24
oval:org.opensuse.security:def:10277	P	Security update for spice-gtk (Moderate)	2021-06-10
oval:org.opensuse.security:def:10278	P	Security update for ucode-intel (Important)	2021-06-10
oval:org.opensuse.security:def:17025	P	libsilc-1_1-2-1.1.10-24.128 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17152	P	ImageMagick-6.8.8.1-70.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11699	P	procmail-3.22-267.12 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46667	P	gnome-settings-daemon-3.10.2-20.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17068	P	libmikmod3-3.2.0-4.59 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12736	P	telepathy-idle-0.2.0-1.62 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17116	P	libIlmImf-Imf_2_1-21-32bit-2.1.0-4.5 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17191	P	libndp0-1.6-2.2 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11680	P	openssh-6.6p1-29.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12012	P	rtkit-0.11_git201205151338-8.17 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:16635	P	php7-devel-7.0.7-50.52.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46576	P	squid-3.3.13-1.13 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12714	P	rsync-3.1.0-13.13.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11755	P	MozillaFirefox-45.4.0esr-81.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17085	P	pulseaudio-module-bluetooth-5.0-2.7 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11665	P	libxcb-dri2-0-1.10-1.21 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11987	P	perl-Config-IniFiles-2.82-3.14 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46444	P	java-1_7_0-openjdk-1.7.0.6-33.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46874	P	xlockmore-5.43-5.33 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17103	P	gcc48-gij-32bit-4.8.5-30.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12076	P	colord-1.3.3-12.13 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:124640	P	php5-devel-5.5.14-109.41.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17028	P	libuuid-devel-2.25-6.69 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:16348	P	php5-devel-5.5.14-108.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11618	P	liblua5_2-5.2.2-4.2 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11912	P	libmspack0-0.4-14.4 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46727	P	libgcrypt20-1.6.1-16.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17071	P	libpolkit0-32bit-0.113-4.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11850	P	libIlmImf-Imf_2_1-21-2.1.0-4.5 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17194	P	libpcrecpp0-32bit-8.39-7.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11572	P	libIlmImf-Imf_2_1-21-2.1.0-4.5 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11893	P	libid3tag0-0.15.1b-182.58 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46636	P	cups-filters-1.0.58-8.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11841	P	kbd-1.15.5-8.7.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17169	P	gnome-shell-calendar-3.20.4-76.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11550	P	gpg2-2.0.24-1.5 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11878	P	libecpg6-9.4.9-14.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11434	P	pcsc-ccid-1.4.14-1.45 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46504	P	libpng12-0-1.2.50-8.11 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17291	P	pidgin-plugin-otr-4.0.2-1.29 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:124641	P	php7-devel-7.0.7-50.52.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17157	P	colord-1.3.3-12.13 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:16349	P	php7-devel-7.0.7-49.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11831	P	hardlink-1.0-6.45 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11412	P	libvorbis0-1.3.3-8.23 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17259	P	libiso9660-8-0.90-6.3.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12063	P	at-3.1.14-7.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11785	P	cvs-1.12.12-181.63 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17149	P	telepathy-idle-0.2.0-1.62 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12054	P	DirectFB-1.7.1-6.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17172	P	gstreamer-0_10-plugins-good-0.10.31-16.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11763	P	autofs-5.0.9-21.6 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12523	P	libXt6-1.1.4-3.59 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17113	P	lcms-1.19-17.31 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17294	P	raptor-2.0.10-3.67 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11799	P	eog-3.20.4-7.7 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17160	P	drm-kmp-default-4.9.33_k4.4.73_5-2.4 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:16634	P	php5-devel-5.5.14-109.41.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12501	P	lhasa-0.2.0-5.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11542	P	gimp-2.8.10-1.164 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17082	P	libwmf-0_2-7-0.2.8.4-242.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17262	P	libmwaw-0_3-3-0.3.13-7.9.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11774	P	coolkey-1.1.0-147.71 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46814	P	perl-Cyrus-IMAP-2.3.18-35.71 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17100	P	empathy-3.12.12-5.12 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11863	P	libXrender1-0.9.8-3.56 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:10087	P	Security update for polkit (Important)	2021-06-03
oval:org.opensuse.security:def:10086	P	Security update for dhcp (Important)	2021-06-02
oval:org.opensuse.security:def:10263	P	Security update for ceph (Important)	2021-06-02
oval:org.opensuse.security:def:10262	P	Security update for curl (Moderate)	2021-05-31
oval:org.opensuse.security:def:38313	P	Security update for samba (Important)	2021-04-29
oval:org.opensuse.security:def:46252	P	Security update for tomcat6 (Important)	2021-04-21
oval:org.opensuse.security:def:55996	P	Security update for the Linux Kernel (Live Patch 37 for SLE 12 SP2) (Important)	2021-04-12
oval:org.opensuse.security:def:9862	P	Security update for openssl-1_1 (Moderate)	2021-03-09
oval:org.opensuse.security:def:9863	P	Security update for git (Important)	2021-03-09
oval:org.opensuse.security:def:10216	P	Security update for wpa_supplicant (Important)	2021-03-08
oval:org.opensuse.security:def:10215	P	Security update for python-cryptography (Important)	2021-03-03
oval:org.opensuse.security:def:9854	P	Security update for grub2 (Important)	2021-03-02
oval:org.opensuse.security:def:55857	P	Security update for grub2 (Important)	2021-03-02
oval:org.opensuse.security:def:9855	P	Security update for bind (Important)	2021-03-02
oval:org.opensuse.security:def:10397	P	Security update for salt (Critical)	2021-02-26
oval:org.opensuse.security:def:10396	P	Security update for php7 (Important)	2021-02-24
oval:org.opensuse.security:def:38151	P	Security update for jasper (Important)	2021-02-16
oval:org.opensuse.security:def:10163	P	Security update for python-urllib3 (Moderate)	2021-02-08
oval:org.opensuse.security:def:10297	P	Security update for go1.14 (Moderate)	2021-01-26
oval:org.opensuse.security:def:11121	P	Security update for viewvc (Moderate)	2021-01-19
oval:org.opensuse.security:def:55783	P	Security update for spice-gtk (Important)	2020-12-16
oval:org.opensuse.security:def:16707	P	cups-ddk-1.7.5-20.23.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:17360	P	libpodofo0_9_2-0.9.2-3.9.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16940	P	ocaml-4.03.0-8.6.8 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:17348	P	libmwaw-0_3-3-0.3.14-7.12.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16958	P	python3-urllib3-1.22-3.17.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16906	P	libunwind-devel-1.1-11.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16922	P	libzmq3-4.0.4-15.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16710	P	dbus-1-glib-devel-0.100.2-3.58 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:17363	P	libqt4-sql-mysql-32bit-4.8.7-8.8.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16891	P	libspice-server-devel-0.12.8-12.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16943	P	openslp-devel-2.0.0-18.20.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:17351	P	libndp0-1.6-2.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16948	P	php7-devel-7.0.7-50.85.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16834	P	libjpeg62-devel-62.2.0-31.14.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16961	P	rhythmbox-3.4-6.14 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16909	P	libvirt-devel-5.1.0-11.10 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16749	P	gstreamer-plugins-bad-devel-1.8.3-17.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16925	P	lua-devel-5.2.4-6.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16898	P	libtasn1-devel-4.9-3.10.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16715	P	dpdk-devel-18.11.2-1.59 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16894	P	libssh2-devel-1.4.3-20.9.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:17382	P	python3-requests-2.7.0-2.3 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16837	P	libksba-devel-1.3.0-23.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16752	P	guile-devel-2.0.9-9.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16901	P	libtiff-devel-4.0.9-44.30.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16718	P	evince-devel-3.20.2-6.27.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:17385	P	rhythmbox-3.4-6.14 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:53196	P	Security update for yast2-rmt (Important)	2020-12-01
oval:org.opensuse.security:def:9993	P	squidGuard on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38738	P	libupsclient1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:17829	P	Security update for sssd (Moderate)	2020-12-01
oval:org.opensuse.security:def:24494	P	Security update for mariadb (Important)	2020-12-01
oval:org.opensuse.security:def:10529	P	libpcscspy0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53557	P	Security update for php7 (Important)	2020-12-01
oval:org.opensuse.security:def:54327	P	libxcb-dri2-0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25864	P	Security update for php5 (Moderate)	2020-12-01
oval:org.opensuse.security:def:38016	P	pam on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10761	P	libmusicbrainz-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54720	P	aaa_base on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:9978	P	python-requests on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25046	P	Security update for python (Moderate)	2020-12-01
oval:org.opensuse.security:def:38710	P	libpng12-0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:46178	P	Security update for squid (Moderate)	2020-12-01
oval:org.opensuse.security:def:10483	P	libapr1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53384	P	Security update for postgresql12 (Important)	2020-12-01
oval:org.opensuse.security:def:54042	P	libmusicbrainz4 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25829	P	Security update for php5 (Moderate)	2020-12-01
oval:org.opensuse.security:def:24424	P	Security update for libxslt (Moderate)	2020-12-01
oval:org.opensuse.security:def:37932	P	libopenvswitch-2_8-0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10752	P	libjson-c-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54426	P	avahi on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:39460	P	Security update for php7 (Moderate)	2020-12-01
oval:org.opensuse.security:def:9931	P	libusbmuxd4 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:24993	P	Security update for java-1_8_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:38671	P	libgcrypt20 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:17858	P	Security update for php5 (Moderate)	2020-12-01
oval:org.opensuse.security:def:10461	P	lib3ds-1-3 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53146	P	Security update for libxml2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:53876	P	Security update for transfig (Moderate)	2020-12-01
oval:org.opensuse.security:def:38620	P	hplip on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25191	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:37921	P	libmusicbrainz4 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54388	P	tar on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:39418	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:37918	P	libmodplug1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:24843	P	Security update for python-cffi, python-cryptography (Moderate)	2020-12-01
oval:org.opensuse.security:def:17832	P	Security update for libxml2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:53006	P	Security update for php7 (Moderate)	2020-12-01
oval:org.opensuse.security:def:53770	P	Security update for evolution (Moderate)	2020-12-01
oval:org.opensuse.security:def:38561	P	colord-gtk-lang on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25924	P	Security update for php5 (Moderate)	2020-12-01
oval:org.opensuse.security:def:54314	P	libspice-client-glib-2_0-8 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38780	P	python on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:24760	P	Security update for java-1_7_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:25106	P	Security update for webkit2gtk3 (Important)	2020-12-01
oval:org.opensuse.security:def:10835	P	php5-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52984	P	Security update for java-1_8_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:53597	P	Recommended update for ruby2.5 (Important)	2020-12-01
oval:org.opensuse.security:def:38401	P	libxcb-dri2-0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10460	P	lhasa-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25889	P	Security update for mariadb (Important)	2020-12-01
oval:org.opensuse.security:def:24484	P	Security update for spamassassin (Important)	2020-12-01
oval:org.opensuse.security:def:46132	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:54639	P	openssh on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:39462	P	Security update for php5 (Moderate)	2020-12-01
oval:org.opensuse.security:def:24704	P	Security update for samba (Moderate)	2020-12-01
oval:org.opensuse.security:def:25053	P	Security update for libunwind (Moderate)	2020-12-01
oval:org.opensuse.security:def:10813	P	libxml2-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:18046	P	Security update for php7 (Moderate)	2020-12-01
oval:org.opensuse.security:def:53359	P	Security update for graphviz (Moderate)	2020-12-01
oval:org.opensuse.security:def:38311	P	libjpeg62-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38622	P	ipsec-tools on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10447	P	gnome-settings-daemon-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25251	P	Security update for java-1_7_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:46119	P	Security update for systemd (Important)	2020-12-01
oval:org.opensuse.security:def:54601	P	libsmi on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37920	P	libmspack0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:24623	P	Security update for clamav (Important)	2020-12-01
oval:org.opensuse.security:def:24903	P	Security update for libssh2_org (Important)	2020-12-01
oval:org.opensuse.security:def:18020	P	Security update for mariadb (Important)	2020-12-01
oval:org.opensuse.security:def:53219	P	Security update for qemu (Important)	2020-12-01
oval:org.opensuse.security:def:38253	P	libXfont1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38563	P	coreutils on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25147	P	Security update for libqt4 (Moderate)	2020-12-01
oval:org.opensuse.security:def:10453	P	hplip-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:46312	P	Security update for squid (Important)	2020-12-01
oval:org.opensuse.security:def:10011	P	vsftpd on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54527	P	libXtst6 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38782	P	python-imaging on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:24497	P	Security update for evince (Important)	2020-12-01
oval:org.opensuse.security:def:24820	P	Security update for python3 (Moderate)	2020-12-01
oval:org.opensuse.security:def:54222	P	icu on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10836	P	php7-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53197	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:38403	P	libxml2-2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25133	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:10774	P	libplist++-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52983	P	Security update for samba (Important)	2020-12-01
oval:org.opensuse.security:def:46192	P	Security update for dovecot22 (Important)	2020-12-01
oval:org.opensuse.security:def:9992	P	squid on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38736	P	libtiff5 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:24434	P	Security update for sysstat (Low)	2020-12-01
oval:org.opensuse.security:def:24764	P	Security update for libqt5-qtimageformats (Moderate)	2020-12-01
oval:org.opensuse.security:def:10610	P	xfig on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54114	P	radvd on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10814	P	libxslt-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:18049	P	Security update for php5 (Moderate)	2020-12-01
oval:org.opensuse.security:def:38014	P	ovmf on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10448	P	gnome-shell-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54507	P	krb5-appl-clients on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:46179	P	Security update for python (Important)	2020-12-01
oval:org.opensuse.security:def:9977	P	python-pywbem on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38708	P	libpango-1_0-0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:46118	P	Security update for ucode-intel (Moderate)	2020-12-01
oval:org.opensuse.security:def:24683	P	Security update for libgxps (Moderate)	2020-12-01
oval:org.opensuse.security:def:10591	P	python3-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53829	P	Security update for MozillaThunderbird (Important)	2020-12-01
oval:org.opensuse.security:def:18023	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:37930	P	libopenssl-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38255	P	libXi6 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25207	P	Security update for tomcat (Important)	2020-12-01
oval:org.opensuse.security:def:9930	P	libupsclient1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10012	P	w3m on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:17855	P	Security update for php7 (Moderate)	2020-12-01
oval:org.opensuse.security:def:24557	P	Security update for bluez (Moderate)	2020-12-01
oval:org.opensuse.security:def:10576	P	nut-cgi on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53663	P	Security update for java-11-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:54435	P	colord on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37919	P	libmpfr4 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38153	P	cpp48 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25193	P	Security update for ed (Low)	2020-12-01
oval:com.ubuntu.precise:def:20169137000	V	CVE-2016-9137 on Ubuntu 12.04 LTS (precise) - low.	2017-01-04
oval:com.ubuntu.xenial:def:201691370000000	V	CVE-2016-9137 on Ubuntu 16.04 LTS (xenial) - low.	2017-01-04
oval:com.ubuntu.trusty:def:20169137000	V	CVE-2016-9137 on Ubuntu 14.04 LTS (trusty) - low.	2017-01-04
oval:com.ubuntu.xenial:def:20169137000	V	CVE-2016-9137 on Ubuntu 16.04 LTS (xenial) - low.	2017-01-04
oval:org.opensuse.security:def:78491	P	Security update for php5 (Moderate)	2016-12-02
oval:org.opensuse.security:def:78704	P	Security update for php5 (Moderate)	2016-12-02

BACK