Vulnerability CVE-2017-15705

Vulnerability Name:

CVE-2017-15705 (CCN-149951)

Assigned:

2017-10-21

Published:

2018-09-16

Updated:

2018-12-16

Summary:

A denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2. The vulnerability arises with certain unclosed tags in emails that cause markup to be handled incorrectly leading to scan timeouts. In Apache SpamAssassin, using HTML::Parser, we setup an object and hook into the begin and end tag event handlers In both cases, the "open" event is immediately followed by a "close" event - even if the tag *does not* close in the HTML being parsed. Because of this, we are missing the "text" event to deal with the object normally. This can cause carefully crafted emails that might take more scan time than expected leading to a Denial of Service. The issue is possibly a bug or design decision in HTML::Parser that specifically impacts the way Apache SpamAssassin uses the module with poorly formed html. The exploit has been seen in the wild but not believed to have been purposefully part of a Denial of Service attempt. We are concerned that there may be attempts to abuse the vulnerability in the future.

CVSS v3 Severity:

5.3 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
4.6 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Low

4.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)
3.8 Low (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Low

7.5 High (REDHAT CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
6.5 Medium (REDHAT Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): High

CVSS v2 Severity:

5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

4.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

Vulnerability Type:

CWE-20
CWE-400

Vulnerability Consequences:

Denial of Service

References:

Source: MITRE
Type: CNA
CVE-2017-15705

Source: SUSE
Type: UNKNOWN
openSUSE-SU-2019:1831

Source: BID
Type: Third Party Advisory, VDB Entry
105347

Source: CCN
Type: BID-105347
Apache SpamAssassin CVE-2017-15705 Denial of Service Vulnerability

Source: REDHAT
Type: Third Party Advisory
RHSA-2018:2916

Source: XF
Type: UNKNOWN
apache-spamassassin-cve201715705-dos(149951)

Source: MLIST
Type: Mailing List, Third Party Advisory
[announce] 20180916 [SECURITY] Apache SpamAssassin 3.4.2 resolves CVE-2017-15705, CVE-2016-1238, CVE-2018-11780 & CVE-2018-11781

Source: MLIST
Type: Third Party Advisory
[debian-lts-announce] 20181113 [SECURITY] [DLA 1578-1] spamassassin security update

Source: CCN
Type: oss-sec Mailing List, Sun, 16 Sep 2018 12:59:12 -0400
[SECURITY] Apache SpamAssassin 3.4.2 resolves CVE-2017-15705, CVE-2016-1238, CVE-2018-11780 & CVE-2018-11781

Source: GENTOO
Type: UNKNOWN
GLSA-201812-07

Source: CCN
Type: Apache Web site
SpamAssassin

Source: UBUNTU
Type: Third Party Advisory
USN-3811-1

Source: UBUNTU
Type: Third Party Advisory
USN-3811-2

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2017-15705

Vulnerable Configuration:

Configuration 1:

cpe:/a:apache:spamassassin:*:*:*:*:*:*:*:* (Version < 3.4.2)

Configuration 2:

cpe:/o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*

OR cpe:/o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

OR cpe:/o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

OR cpe:/o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

OR cpe:/o:debian:debian_linux:8.0:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Configuration RedHat 1:

cpe:/o:redhat:enterprise_linux:7:*:*:*:*:*:*:*

Configuration RedHat 2:

cpe:/o:redhat:enterprise_linux:7::client:*:*:*:*:*

Configuration RedHat 3:

cpe:/o:redhat:enterprise_linux:7::server:*:*:*:*:*

Configuration RedHat 4:

cpe:/o:redhat:enterprise_linux:7::workstation:*:*:*:*:*

Configuration CCN 1:

cpe:/a:apache:spamassassin:3.3.2:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:201715705	V	CVE-2017-15705	2023-06-22
oval:org.opensuse.security:def:8053	P	perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-12.13.1 on GA media (Moderate)	2023-06-20
oval:org.opensuse.security:def:7634	P	libosinfo-1.10.0-150500.1.3 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:7745	P	perl-Mail-SpamAssassin-3.4.5-12.13.1 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:7612	P	liblzo2-2-2.10-2.22 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:3329	P	perl-Mail-SpamAssassin-3.4.2-44.3.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3418	P	DirectFB-1.7.1-6.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3749	P	perl-Mail-SpamAssassin-3.4.2-44.3.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3150	P	libXvnc1-1.6.0-22.7.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:536	P	Security update for python39 (Important)	2022-06-24
oval:org.opensuse.security:def:2963	P	krb5-1.19.2-150400.1.9 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:94780	P	perl-Mail-SpamAssassin-3.4.5-12.13.1 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:2973	P	libX11-6-1.6.5-3.21.1 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:95048	P	perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-12.13.1 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:268	P	perl-Mail-SpamAssassin-3.4.5-12.10.1 on GA media (Moderate)	2022-06-13
oval:org.opensuse.security:def:908	P	Security update for postgresql14 (Important)	2022-06-01
oval:org.opensuse.security:def:1360	P	Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP3) (Important)	2022-05-25
oval:org.opensuse.security:def:857	P	Security update for libinput (Important)	2022-04-22
oval:org.opensuse.security:def:1197	P	Security update for openssl-1_1 (Important)	2022-03-16
oval:org.opensuse.security:def:1416	P	Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP3) (Important)	2022-02-02
oval:org.opensuse.security:def:113121	P	perl-Mail-SpamAssassin-3.4.6-71.3 on GA media (Moderate)	2022-01-17
oval:org.opensuse.security:def:23778	P	Security update for libsndfile (Important)	2022-01-05
oval:org.opensuse.security:def:9636	P	Security update for p11-kit (Important)	2021-12-22
oval:org.opensuse.security:def:8685	P	Security update for the Linux Kernel (Important)	2021-12-07
oval:org.opensuse.security:def:55272	P	Security update for webkit2gtk3 (Important)	2021-11-23
oval:org.opensuse.security:def:9614	P	Security update for java-11-openjdk (Important)	2021-11-16
oval:org.opensuse.security:def:23992	P	Security update for pcre (Moderate)	2021-11-10
oval:org.opensuse.security:def:69949	P	Security update for binutils (Moderate)	2021-11-04
oval:org.opensuse.security:def:8663	P	Security update for strongswan (Moderate)	2021-10-19
oval:org.opensuse.security:def:23690	P	Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP3) (Important)	2021-10-18
oval:org.opensuse.security:def:6974	P	Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP1) (Important)	2021-10-14
oval:org.opensuse.security:def:106555	P	perl-Mail-SpamAssassin-3.4.6-71.3 on GA media (Moderate)	2021-10-01
oval:org.opensuse.security:def:8655	P	Security update for libqt5-qtbase (Important)	2021-09-30
oval:org.opensuse.security:def:23682	P	Security update for python-urllib3 (Moderate)	2021-09-29
oval:org.opensuse.security:def:71239	P	libXt-devel-1.1.5-2.24 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:71136	P	alsa-1.1.5-6.6.1 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:103435	P	perl-Mail-SpamAssassin-3.4.2-10.19 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:61625	P	perl-Mail-SpamAssassin-3.4.2-10.19 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:71366	P	perl-Mail-SpamAssassin-3.4.2-10.19 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:61494	P	libXinerama-devel-1.1.3-1.22 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:71352	P	openssh-7.9p1-4.7 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:96745	P	perl-Mail-SpamAssassin-3.4.2-10.19 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:61621	P	perl-Archive-Zip-1.60-3.3.1 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:63229	P	ovmf-2017+git1510945757.b2662641d5-5.22.1 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:89780	P	perl-Mail-SpamAssassin-3.4.2-10.19 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:6961	P	Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP1) (Important)	2021-09-16
oval:org.opensuse.security:def:6952	P	Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP1) (Important)	2021-08-17
oval:org.opensuse.security:def:47058	P	libpango-1_0-0-1.40.1-9.5 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47193	P	zoo-2.10-1020.56 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47518	P	unixODBC-2.3.4-6.5 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48130	P	libjasper1-1.900.14-195.15.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48285	P	python-numpy-1.8.0-5.8.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47892	P	squidGuard-1.4-30.6.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48206	P	libthai-data-0.1.25-4.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47057	P	libotr5-4.0.0-9.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47972	P	clamav-0.101.3-1.19 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47100	P	libzip2-0.11.1-12.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47430	P	libvorbis-doc-1.3.3-8.23 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47565	P	bash-4.3-83.15.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47890	P	squashfs-4.3-6.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48118	P	libgoa-1_0-0-3.20.8-10.4.50 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:15148	P	perl-Mail-SpamAssassin-3.4.2-44.3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47429	P	libvncclient0-0.9.9-16.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47072	P	libruby2_1-2_1-2.1.2-12.3 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47386	P	libopenssl-devel-1.0.2j-59.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47610	P	freeradius-server-3.0.15-2.8.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48344	P	xfsprogs-4.15.0-1.12 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47878	P	rrdtool-1.4.7-20.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48013	P	gd-2.1.0-24.12.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48338	P	wget-1.14-21.10.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48183	P	libqpdf18-7.1.1-3.3.4 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47151	P	sblim-sfcb-1.4.8-8.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48056	P	kdump-0.8.16-9.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47877	P	rpm-32bit-4.11.2-16.16.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47444	P	memcached-1.4.33-3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47758	P	libospf0-1.1.1-17.7.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47982	P	cups-1.7.5-20.23.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48268	P	perl-Mail-SpamAssassin-3.4.2-44.3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48214	P	libvdpau1-1.1.1-6.73 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:23643	P	Security update for cpio (Important)	2021-08-14
oval:org.opensuse.security:def:2325	P	apache2-mod_php7-7.4.6-3.17.1 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:2323	P	apache-commons-beanutils-1.9.4-1.68 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:2252	P	libmariadb-devel-3.1.12-3.25.1 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:2267	P	libxmltooling-devel-3.1.0-1.26 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:2283	P	salt-api-3002.2-6.1 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:63361	P	openssh-fips-8.4p1-1.30 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:2257	P	librelp-devel-1.2.15-1.15 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:2279	P	qemu-5.2.0-9.18 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:2292	P	sysstat-isag-12.0.2-3.27.1 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:2248	P	libct4-1.1.36-3.3.1 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:63465	P	dia-0.97.3-4.3.3 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:62356	P	xorg-x11-devel-7.6.1-1.16 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:100867	P	krb5-1.16.3-3.15.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:101044	P	perl-Mail-SpamAssassin-3.4.5-12.10.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62144	P	libcontainers-common-20200727-3.12.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62081	P	gdk-pixbuf-loader-rsvg-2.46.5-3.3.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:63034	P	perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-12.10.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:72753	P	perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-12.10.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:1945	P	perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-12.10.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62286	P	perl-Mail-SpamAssassin-3.4.5-12.10.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:72027	P	perl-Mail-SpamAssassin-3.4.5-12.10.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62272	P	p7zip-16.02-14.2.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:8812	P	Security update for qemu (Important)	2021-08-02
oval:org.opensuse.security:def:6943	P	Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP1) (Important)	2021-07-29
oval:org.opensuse.security:def:67783	P	Security update for the Linux Kernel (Live Patch 20 for SLE 15) (Important)	2021-07-27
oval:org.opensuse.security:def:23626	P	Security update for the Linux Kernel (Live Patch 37 for SLE 12 SP3) (Important)	2021-07-21
oval:org.opensuse.security:def:6683	P	Security update for the Linux Kernel (Live Patch 22 for SLE 15) (Important)	2021-07-14
oval:org.opensuse.security:def:45621	P	Security update for arpwatch (Important)	2021-06-28
oval:org.opensuse.security:def:23617	P	Security update for arpwatch (Important)	2021-06-28
oval:org.opensuse.security:def:8793	P	Security update for libnettle (Important)	2021-06-23
oval:org.opensuse.security:def:6910	P	Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP1) (Important)	2021-06-18
oval:org.opensuse.security:def:67999	P	Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP1) (Important)	2021-06-18
oval:org.opensuse.security:def:66833	P	Security update for xstream (Important)	2021-06-17
oval:org.opensuse.security:def:100626	P	(Important)	2021-06-15
oval:org.opensuse.security:def:23922	P	Security update for freeradius-server (Moderate)	2021-06-11
oval:org.opensuse.security:def:8976	P	Security update for ucode-intel (Important)	2021-06-10
oval:org.opensuse.security:def:8778	P	Security update for qemu (Important)	2021-06-09
oval:org.opensuse.security:def:48938	P	libpcrecpp0-32bit-8.39-8.3.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46601	P	xorg-x11-server-7.6_1.15.2-12.12 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48428	P	glib2-lang-2.48.2-10.2 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48765	P	bogofilter-1.2.4-5.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48430	P	gnome-keyring-3.20.0-27.2 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12700	P	python-imaging-1.1.7-21.15 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48586	P	opie-2.4-724.56 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12708	P	qemu-ovmf-x86_64-2017+git1510945757.b2662641d5-2.18 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12776	P	python-requests-2.8.1-6.11.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48578	P	mozilla-nspr-4.12-15.2 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48876	P	libwebkit2gtk3-lang-2.12.5-1.12 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48657	P	yast2-3.1.206-36.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48784	P	libFLAC++6-32bit-1.3.0-11.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46652	P	evince-3.10.3-1.213 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:13659	P	libudisks2-0-2.1.3-1.14 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48923	P	libfbembed2_5-2.5.2.26539-15.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46397	P	cron-4.2-55.2 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61303	P	libwireshark9-2.4.6-1.31 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48490	P	libevent-2_0-5-2.0.21-4.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:13681	P	openssh-6.6p1-29.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:71023	P	libsmi-0.4.8-1.29 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12730	P	sysconfig-0.84.0-13.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46462	P	libXrandr2-1.4.2-3.55 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48792	P	libmikmod3-3.2.0-4.59 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:57015	P	Security update for MozillaFirefox (Important)	2021-06-08
oval:org.opensuse.security:def:48766	P	colord-1.3.3-10.14 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48910	P	gstreamer-0_10-plugins-good-0.10.31-16.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48555	P	libsystemd0-228-117.12 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:8963	P	Security update for polkit (Important)	2021-06-03
oval:org.opensuse.security:def:8954	P	Security update for djvulibre (Important)	2021-05-19
oval:org.opensuse.security:def:8945	P	Security update for sca-patterns-sle11 (Important)	2021-05-04
oval:org.opensuse.security:def:6885	P	Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP1) (Important)	2021-04-28
oval:org.opensuse.security:def:23151	P	Security update for xen (Important)	2021-04-20
oval:org.opensuse.security:def:6661	P	Security update for the Linux Kernel (Live Patch 22 for SLE 15) (Important)	2021-04-07
oval:org.opensuse.security:def:8731	P	Security update for MozillaFirefox (Important)	2021-04-01
oval:org.opensuse.security:def:23204	P	Security update for MozillaFirefox (Important)	2021-03-31
oval:org.opensuse.security:def:23766	P	Security update for the Linux Kernel (Live Patch 34 for SLE 12 SP3) (Important)	2021-03-17
oval:org.opensuse.security:def:6729	P	Security update for the Linux Kernel (Live Patch 22 for SLE 15) (Important)	2021-03-17
oval:org.opensuse.security:def:8912	P	Security update for python (Moderate)	2021-03-11
oval:org.opensuse.security:def:38444	P	Security update for python-Jinja2 (Important)	2021-02-25
oval:org.opensuse.security:def:64652	P	Security update for postgresql13 (Moderate)	2021-02-22
oval:org.opensuse.security:def:8887	P	Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork (Important)	2021-02-11
oval:org.opensuse.security:def:49298	P	Security update for python-urllib3 (Moderate)	2021-02-03
oval:org.opensuse.security:def:64565	P	Security update for cups (Moderate)	2021-02-02
oval:org.opensuse.security:def:69844	P	Security update for ImageMagick (Moderate)	2021-01-18
oval:org.opensuse.security:def:66741	P	Security update for php7 (Moderate)	2021-01-14
oval:org.opensuse.security:def:23873	P	Security update for openssh (Moderate)	2020-12-16
oval:org.opensuse.security:def:61908	P	libwscodecs1-2.4.16-3.31.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62688	P	libopenjpeg1-1.5.2-2.28 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62918	P	perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-10.19 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62503	P	PackageKit-1.1.10-10.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:48977	P	bogofilter-1.2.4-5.3 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:72637	P	perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-10.19 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:12932	P	kernel-firmware-20190618-5.11.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:1829	P	perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-10.19 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:63563	P	MozillaThunderbird-60.6.1-3.28.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:89997	P	perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-10.19 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:13021	P	libmicrohttpd10-0.9.30-5.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62906	P	libtidy-devel-5.4.0-1.34 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:13142	P	perl-Mail-SpamAssassin-3.4.2-44.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:49003	P	libFLAC++6-32bit-1.3.0-11.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62602	P	rtkit-0.11+git.20130926-1.34 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62975	P	perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-12.5.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:63603	P	Mesa-dri-nouveau-19.3.4-45.31 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:72694	P	perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-12.5.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:12838	P	binutils-2.32-9.36.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:1886	P	perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-12.5.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:103652	P	perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-10.19 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:2318	P	jakarta-taglibs-standard-1.1.1-2.42 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:46368	P	nodejs4-4.4.7-2.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62552	P	libgme-devel-0.6.2-1.17 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:93913	P	perl-Mail-SpamAssassin-3.4.2-12.5.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:61946	P	perl-Mail-SpamAssassin-3.4.2-12.5.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:49034	P	libreoffice-6.2.7.1-43.56.3 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:71687	P	perl-Mail-SpamAssassin-3.4.2-12.5.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:61885	P	libspice-client-glib-2_0-8-0.37-1.92 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62554	P	libgypsy-devel-0.9-2.30 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:12957	P	libXrandr2-1.5.0-6.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62373	P	podman-1.0.1-2.20 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:116850	P	perl-Mail-SpamAssassin-3.4.2-12.5.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:107292	P	perl-Mail-SpamAssassin-3.4.2-12.5.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:61884	P	libsoup-2_4-1-2.68.3-2.32 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:94154	P	perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-12.5.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:12999	P	libicu-doc-52.1-8.7.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62465	P	libpotrace0-1.15-3.19 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:12823	P	apache2-2.4.23-29.43.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:12857	P	cups-filters-1.0.58-19.5.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62635	P	gnome-settings-daemon-3.34.2+0-2.12 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:2312	P	nodejs8-8.15.1-3.14.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:1998	P	pam-modules-12.1-3.17 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:117091	P	perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-12.5.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:61826	P	libjasper4-2.0.14-3.11.8 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:13008	P	libjpeg-turbo-1.5.3-31.14.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:107533	P	perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-12.5.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:45311	P	Security update for spice (Important)	2020-12-01
oval:org.opensuse.security:def:51346	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:44849	P	Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP2) (Important)	2020-12-01
oval:org.opensuse.security:def:45141	P	Security update for openjpeg2 (Important)	2020-12-01
oval:org.opensuse.security:def:45343	P	Security update for libtasn1 (Moderate)	2020-12-01
oval:org.opensuse.security:def:46170	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:37720	P	MozillaFirefox on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:24951	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:24484	P	Security update for spamassassin (Important)	2020-12-01
oval:org.opensuse.security:def:23390	P	Security update for openssh (Important)	2020-12-01
oval:org.opensuse.security:def:23501	P	Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP3) (Important)	2020-12-01
oval:org.opensuse.security:def:24184	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:45871	P	Security update for libproxy (Important)	2020-12-01
oval:org.opensuse.security:def:63743	P	Security update for spamassassin (Important)	2020-12-01
oval:org.opensuse.security:def:54141	P	xf86-video-intel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:49744	P	libtidy-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:49747	P	nasm on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50435	P	Security update for spamassassin (Moderate)	2020-12-01
oval:org.opensuse.security:def:46309	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:60844	P	Security update for mariadb, mariadb-connector-c, xtrabackup (Important)	2020-12-01
oval:org.opensuse.security:def:61032	P	Security update for perl-DBI (Important)	2020-12-01
oval:org.opensuse.security:def:36906	P	libgoa-1_0-0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37001	P	procmail on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37238	P	libpng16-16 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37385	P	audiofile on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:45756	P	Security update for LibVNCServer (Important)	2020-12-01
oval:org.opensuse.security:def:67899	P	libavcodec57 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:70189	P	perl-Mail-SpamAssassin-Plugin-iXhash2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:6776	P	libvmtools0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:6810	P	perl-Config-IniFiles on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:24263	P	Security update for tomcat (Important)	2020-12-01
oval:org.opensuse.security:def:55665	P	Security update for libpng16 (Moderate)	2020-12-01
oval:org.opensuse.security:def:64349	P	libminizip1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:66593	P	perl-Mail-SpamAssassin on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:45324	P	Security update for java-1_8_0-ibm (Moderate)	2020-12-01
oval:org.opensuse.security:def:45829	P	Security update for libX11 (Important)	2020-12-01
oval:org.opensuse.security:def:49901	P	python3-keystoneclient on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:55472	P	Security update for unzip (Moderate)	2020-12-01
oval:org.opensuse.security:def:45900	P	Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP3) (Important)	2020-12-01
oval:org.opensuse.security:def:24983	P	Security update for spamassassin (Important)	2020-12-01
oval:org.opensuse.security:def:73166	P	libjbig-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:60843	P	Security update for slf4j (Important)	2020-12-01
oval:org.opensuse.security:def:36905	P	libgnomesu on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:49113	P	grub2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:49353	P	wget on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:23814	P	Security update for libgcrypt (Moderate)	2020-12-01
oval:org.opensuse.security:def:49803	P	perl-PerlMagick on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:51408	P	Security update for spamassassin (Moderate)	2020-12-01
oval:org.opensuse.security:def:23143	P	Security update for spice (Important)	2020-12-01
oval:org.opensuse.security:def:54164	P	bzip2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54542	P	libexif12 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54821	P	lftp on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37545	P	libldap-2_4-2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:56941	P	Security update for krb5 (Important)	2020-12-01
oval:org.opensuse.security:def:24275	P	Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP3) (Important)	2020-12-01
oval:org.opensuse.security:def:44838	P	Security update for curl (Important)	2020-12-01
oval:org.opensuse.security:def:44959	P	Security update for apache2 (Important)	2020-12-01
oval:org.opensuse.security:def:45262	P	Recommended update for ucode-intel (Important)	2020-12-01
oval:org.opensuse.security:def:45472	P	Security update for MozillaFirefox (Moderate)	2020-12-01
oval:org.opensuse.security:def:46250	P	Security update for webkit2gtk3 (Important)	2020-12-01
oval:org.opensuse.security:def:49966	P	libxmltooling-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:63708	P	Security update for sssd (Moderate)	2020-12-01
oval:org.opensuse.security:def:55546	P	Security update for libpng16 (Important)	2020-12-01
oval:org.opensuse.security:def:37764	P	cvs on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:49801	P	perl-Mail-SpamAssassin-Plugin-iXhash2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:6653	P	libFLAC++6 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:23320	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:23436	P	Security update for the Linux Kernel (Live Patch 16 for SLE 12 SP3) (Important)	2020-12-01
oval:org.opensuse.security:def:24135	P	Security update for ntp (Moderate)	2020-12-01
oval:org.opensuse.security:def:37653	P	python on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:49510	P	evince on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:49834	P	glibc-devel-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:73406	P	libSoundTouch0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:73284	P	perl-Mail-SpamAssassin on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:55380	P	rzsz on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:49105	P	glibc-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:63658	P	Security update for wireshark (Moderate)	2020-12-01
oval:org.opensuse.security:def:44837	P	Security update for java-1_7_1-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:60866	P	Security update for glibc (Moderate)	2020-12-01
oval:org.opensuse.security:def:24313	P	Security update for java-1_7_1-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:50381	P	Security update for libvirt (Moderate)	2020-12-01
oval:org.opensuse.security:def:64436	P	perl-Mail-SpamAssassin on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:36917	P	libjson-c2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37137	P	gtk2-data on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37295	P	pam_ssh on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:45678	P	Security update for ucode-intel (Important)	2020-12-01
oval:org.opensuse.security:def:49997	P	dhcp-relay on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38402	P	libxerces-c-3_1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:6791	P	m4 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:55584	P	Security update for gnutls (Moderate)	2020-12-01
oval:org.opensuse.security:def:24452	P	Security update for libcroco (Moderate)	2020-12-01
oval:org.opensuse.security:def:45312	P	Security update for dovecot22 (Important)	2020-12-01
oval:org.opensuse.security:def:45437	P	Security update for systemd (Moderate)	2020-12-01
oval:org.opensuse.security:def:45745	P	Security update for wget (Important)	2020-12-01
oval:org.opensuse.security:def:45963	P	Security update for java-1_8_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:70084	P	libexempi-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37692	P	tomcat on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:66501	P	libopenssl-1_1-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:49244	P	libthai-data on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:49857	P	perl-Mail-SpamAssassin-Plugin-iXhash2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:23800	P	Security update for postgresql96 (Important)	2020-12-01
oval:org.opensuse.security:def:45814	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:49257	P	libwavpack1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:73524	P	perl-Mail-SpamAssassin-Plugin-iXhash2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54142	P	xinetd on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54304	P	libraptor2-0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54715	P	zoo on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54987	P	pigz on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37604	P	libvmtools0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50070	P	libfreebl3-hmac on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:67683	P	libjasper4 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:124884	P	Security update for spamassassin (Important)	2019-07-24
oval:org.opensuse.security:def:88721	P	Security update for spamassassin (Important)	2019-07-24
oval:org.opensuse.security:def:126297	P	Security update for spamassassin (Important)	2019-07-24
oval:org.opensuse.security:def:79649	P	Security update for spamassassin (Important)	2019-07-24
oval:org.opensuse.security:def:86959	P	Security update for spamassassin (Important)	2019-07-24
oval:com.redhat.rhsa:def:20182916	P	RHSA-2018:2916: spamassassin security update (Important)	2018-10-11
oval:com.ubuntu.xenial:def:2017157050000000	V	CVE-2017-15705 on Ubuntu 16.04 LTS (xenial) - medium.	2018-09-17
oval:com.ubuntu.xenial:def:201715705000	V	CVE-2017-15705 on Ubuntu 16.04 LTS (xenial) - medium.	2018-09-17
oval:com.ubuntu.bionic:def:201715705000	V	CVE-2017-15705 on Ubuntu 18.04 LTS (bionic) - medium.	2018-09-17
oval:com.ubuntu.cosmic:def:2017157050000000	V	CVE-2017-15705 on Ubuntu 18.10 (cosmic) - medium.	2018-09-17
oval:com.ubuntu.cosmic:def:201715705000	V	CVE-2017-15705 on Ubuntu 18.10 (cosmic) - medium.	2018-09-17
oval:com.ubuntu.bionic:def:2017157050000000	V	CVE-2017-15705 on Ubuntu 18.04 LTS (bionic) - medium.	2018-09-17
oval:com.ubuntu.trusty:def:201715705000	V	CVE-2017-15705 on Ubuntu 14.04 LTS (trusty) - medium.	2018-09-17

BACK