Vulnerability CVE-2017-16852

Vulnerability Name:

CVE-2017-16852 (CCN-135125)

Assigned:

2017-11-15

Published:

2017-11-15

Updated:

2018-02-04

Summary:

shibsp/metadata/DynamicMetadataProvider.cpp in the Dynamic MetadataProvider plugin in Shibboleth Service Provider before 2.6.1 fails to properly configure itself with the MetadataFilter plugins and does not perform critical security checks such as signature verification, enforcement of validity periods, and other checks specific to deployments, aka SSPCPP-763.

CVSS v3 Severity:

8.1 High (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
7.1 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): High Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
6.4 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

CWE-347

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2017-16852

Source: CCN
Type: Shibboleth Service Provider Security Advisory [15 November 2017]
Dynamic MetadataProvider fails to install security filters

Source: CONFIRM
Type: Issue Tracking, Third Party Advisory
https://bugs.debian.org/881857

Source: XF
Type: UNKNOWN
shibboleth-cve201716852-weak-security(135125)

Source: CONFIRM
Type: Issue Tracking, Patch, Vendor Advisory
https://git.shibboleth.net/view/?p=cpp-sp.git;a=commit;h=b66cceb0e992c351ad5e2c665229ede82f261b16

Source: MLIST
Type: UNKNOWN
[debian-lts-announce] 20171118 [SECURITY] [DLA 1179-1] shibboleth-sp2 security update

Source: CONFIRM
Type: Issue Tracking, Vendor Advisory
https://shibboleth.net/community/advisories/secadv_20171115.txt

Source: CCN
Type: Shibboleth Web site
Shibboleth Installation

Source: DEBIAN
Type: Issue Tracking, Third Party Advisory
DSA-4038

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2017-16852

Vulnerable Configuration:

Configuration 1:

cpe:/a:shibboleth:service_provider:*:*:*:*:*:*:*:* (Version < 2.6.1)

Configuration 2:

cpe:/o:debian:debian_linux:8.0:*:*:*:*:*:*:*

OR cpe:/o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:8168	P	Security update for Salt (Moderate)	2023-06-21
oval:org.opensuse.security:def:8176	P	Security update for php7 (Moderate) (in QA)	2023-06-15
oval:org.opensuse.security:def:7556	P	libXdmcp-devel-1.1.2-1.23 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:7534	P	jackson-databind-2.13.4.2-150200.3.12.1 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:8198	P	Security update for libvirt (Moderate) (in QA)	2023-06-08
oval:org.opensuse.security:def:201716852	V	CVE-2017-16852	2022-09-02
oval:org.opensuse.security:def:124232	P	libshibsp-lite6-2.5.5-6.3.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3251	P	libshibsp-lite6-2.5.5-6.3.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3497	P	gdm-3.10.0.1-54.6.3 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:95127	P	libshibsp-lite8-3.1.0-3.3.1 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:1519	P	Security update for postgresql13 (Important)	2022-05-31
oval:org.opensuse.security:def:42393	P	Security update for tiff (Important)	2022-05-30
oval:org.opensuse.security:def:42291	P	Security update for expat (Important)	2022-01-25
oval:org.opensuse.security:def:112829	P	libshibsp-lite10-3.2.3-1.2 on GA media (Moderate)	2022-01-17
oval:org.opensuse.security:def:61117	P	Security update for the Linux Kernel (Important)	2022-01-13
oval:org.opensuse.security:def:9127	P	Security update for SDL2 (Important) (in QA)	2022-01-12
oval:org.opensuse.security:def:997	P	Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-operator-container (Important)	2022-01-10
oval:org.opensuse.security:def:38207	P	Security update for libsndfile (Important)	2022-01-05
oval:org.opensuse.security:def:57194	P	Security update for java-1_8_0-ibm (Important) (in QA)	2022-01-04
oval:org.opensuse.security:def:8885	P	Security update for p11-kit (Important)	2021-12-22
oval:org.opensuse.security:def:10706	P	Security update for xorg-x11-server (Important)	2021-12-21
oval:org.opensuse.security:def:20567	P	Security update for the Linux Kernel (Live Patch 20 for SLE 12 SP5) (Important)	2021-12-14
oval:org.opensuse.security:def:64639	P	Security update for xorg-x11-server (Important)	2021-12-14
oval:org.opensuse.security:def:10188	P	Security update for glib-networking (Important)	2021-12-10
oval:org.opensuse.security:def:1051	P	Security update for ImageMagick (Moderate)	2021-12-10
oval:org.opensuse.security:def:8876	P	Security update for xen (Moderate)	2021-12-09
oval:org.opensuse.security:def:60431	P	Security update for gmp (Moderate)	2021-12-02
oval:org.opensuse.security:def:8867	P	Security update for ruby2.5 (Important)	2021-12-01
oval:org.opensuse.security:def:6713	P	Security update for the Linux Kernel (Live Patch 21 for SLE 15) (Important)	2021-11-17
oval:org.opensuse.security:def:68073	P	Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP1) (Important)	2021-11-17
oval:org.opensuse.security:def:20534	P	Security update for the Linux Kernel (Live Patch 12 for SLE 12 SP5) (Important)	2021-11-17
oval:org.opensuse.security:def:8400	P	Security update for the Linux Kernel (Important)	2021-11-16
oval:org.opensuse.security:def:11139	P	Security update for mbedtls (Moderate)	2021-10-15
oval:org.opensuse.security:def:42222	P	Security update for the Linux Kernel (Important)	2021-10-13
oval:org.opensuse.security:def:1636	P	Security update for rabbitmq-server (Moderate)	2021-10-09
oval:org.opensuse.security:def:10158	P	Security update for grilo (Important)	2021-10-06
oval:org.opensuse.security:def:1573	P	Security update for samba (Important)	2021-09-22
oval:org.opensuse.security:def:63218	P	libshibsp-lite7-2.6.1-1.48 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:71313	P	libsndfile-devel-1.0.28-5.5.1 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:103708	P	libshibsp-lite7-2.6.1-1.48 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:61433	P	ecryptfs-utils-111-2.31 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:97018	P	libshibsp-lite7-2.6.1-1.48 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:2129	P	libshibsp-lite7-2.6.1-1.48 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:61432	P	e2fsprogs-1.43.8-4.3.1 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:61625	P	perl-Mail-SpamAssassin-3.4.2-10.19 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:71426	P	yast2-users-4.1.12-1.4 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:63216	P	librelp-devel-1.2.15-1.15 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:61456	P	gpg2-2.2.5-4.6.2 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:90053	P	libshibsp-lite7-2.6.1-1.48 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:8653	P	Security update for ghostscript (Critical)	2021-09-15
oval:org.opensuse.security:def:8834	P	Security update for xerces-c (Important)	2021-09-02
oval:org.opensuse.security:def:11117	P	Security update for tor (Important)	2021-08-23
oval:org.opensuse.security:def:43493	P	Security update for kvm (Moderate)	2021-08-23
oval:org.opensuse.security:def:42113	P	Security update for libmspack (Moderate)	2021-08-20
oval:org.opensuse.security:def:8325	P	Security update for haproxy (Important)	2021-08-17
oval:org.opensuse.security:def:20292	P	Security update for the Linux Kernel (Live Patch 16 for SLE 12 SP4) (Important)	2021-08-17
oval:org.opensuse.security:def:66892	P	Security update for MozillaFirefox (Important)	2021-08-17
oval:org.opensuse.security:def:6698	P	Security update for the Linux Kernel (Live Patch 23 for SLE 15) (Important)	2021-08-17
oval:org.opensuse.security:def:10315	P	Security update for c-ares (Important)	2021-08-17
oval:org.opensuse.security:def:48033	P	gstreamer-plugins-base-1.8.3-13.3.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14539	P	krb5-appl-clients-1.0.3-1.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14547	P	libQt5Concurrent5-5.6.2-6.12.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14661	P	libshibsp-lite6-2.5.5-6.3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47847	P	perl-32bit-5.18.2-12.17.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:87822	P	libshibsp-lite6-2.5.5-6.3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47587	P	curl-7.60.0-2.11 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14738	P	powerpc-utils-1.3.5-3.8 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47519	P	unrar-5.0.14-3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48273	P	policycoreutils-2.5-10.3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14643	P	libplist3-1.12-20.3.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47781	P	libshibsp-lite6-2.5.5-6.3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14917	P	guile-2.0.9-9.3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:15070	P	libshibsp-lite6-2.5.5-6.3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48071	P	libX11-6-1.6.2-12.5.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47901	P	tar-1.27.1-15.3.7 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47518	P	unixODBC-2.3.4-6.5 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14859	P	crash-7.2.1-6.42 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47654	P	kbd-2.0.4-8.10.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47573	P	cifs-utils-6.5-9.3.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14714	P	openslp-2.0.0-18.17.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48190	P	libshibsp-lite6-2.5.5-6.3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48125	P	libicu-doc-52.1-8.7.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14573	P	libarchive13-3.1.2-25.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47572	P	chrony-2.3-3.110 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14906	P	gnutls-3.3.27-3.3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47979	P	crash-7.2.1-6.42 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47708	P	libgc1-7.2d-5.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14832	P	apache2-mod_nss-1.0.14-19.9.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47533	P	xinetd-2.3.15-7.3 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14694	P	libxml2-2-2.9.4-46.15.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14933	P	java-1_8_0-ibm-1.8.0_sr5.40-30.54.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48219	P	libvorbis-doc-1.3.3-10.14.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:2259	P	libshibsp-lite8-3.1.0-1.30 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:63348	P	libshibsp-lite8-3.1.0-1.30 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:62222	P	libssh-devel-0.8.7-10.12.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:100936	P	libmpfr6-4.0.2-3.3.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62751	P	gnome-desktop-lang-3.34.7-3.3.2 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62092	P	groff-1.22.3-5.3.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:59518	P	Security update for djvulibre (Important)	2021-08-05
oval:org.opensuse.security:def:9558	P	Security update for linuxptp (Important)	2021-07-27
oval:org.opensuse.security:def:57050	P	Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP3) (Important)	2021-07-21
oval:org.opensuse.security:def:10296	P	Security update for go1.15 (Important)	2021-06-30
oval:org.opensuse.security:def:64726	P	Security update for lua53 (Moderate)	2021-06-29
oval:org.opensuse.security:def:38679	P	Security update for OpenEXR (Important)	2021-06-22
oval:org.opensuse.security:def:70248	P	Security update for wireshark (Important)	2021-06-22
oval:org.opensuse.security:def:9536	P	Security update for xterm (Important)	2021-06-18
oval:org.opensuse.security:def:57028	P	Security update for the Linux Kernel (Live Patch 39 for SLE 12 SP3) (Important)	2021-06-18
oval:org.opensuse.security:def:8607	P	Security update for xterm (Important)	2021-06-18
oval:org.opensuse.security:def:57027	P	Security update for xterm (Important)	2021-06-18
oval:org.opensuse.security:def:59495	P	Security update for java-1_8_0-openjdk (Moderate)	2021-06-15
oval:org.opensuse.security:def:10281	P	Security update for squid (Important)	2021-06-11
oval:org.opensuse.security:def:36418	P	gtk2-devel-2.18.9-0.23.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:42569	P	kdenetwork4-filesharing-4.3.5-0.4.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48800	P	libraw9-0.15.4-3.88 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36514	P	lynx-2.8.6-143.19 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48675	P	gnome-online-accounts-3.10.5-1.11 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:15571	P	freetype2-devel-2.5.3-2.18 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48633	P	sysvinit-tools-2.88+-96.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17231	P	finch-2.12.0-3.3.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48517	P	libldb1-1.1.26-10.4 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11455	P	rsyslog-8.4.0-2.2 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17047	P	empathy-3.10.3-1.131 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17055	P	gnome-shell-calendar-3.10.4-40.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:42685	P	python-2.6.9-0.35.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:62881	P	zlib-devel-32bit-1.2.11-1.422 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:124659	P	shibboleth-sp-devel-2.5.5-6.3.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48729	P	lcms-1.19-17.31 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36430	P	krb5-devel-1.6.3-133.49.66.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17298	P	telepathy-gabble-0.18.3-5.7 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48571	P	libxml2-2-2.9.4-27.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48644	P	w3m-0.5.3-157.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17174	P	imobiledevice-tools-1.2.0-7.31 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:15594	P	libXfixes-devel-5.0.1-3.53 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48433	P	gnutls-3.2.15-11.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61167	P	gdk-pixbuf-loader-rsvg-2.42.3-1.49 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:16653	P	shibboleth-sp-devel-2.5.5-6.3.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:42633	P	libupsclient1-2.6.2-0.2.4.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48746	P	libssh4-0.6.3-8.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48698	P	libvirt-client-32bit-1.2.5-13.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61197	P	lftp-4.8.3-2.13 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36419	P	ibutils-1.5.7-0.15.22 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17262	P	libmwaw-0_3-3-0.3.13-7.9.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11433	P	patch-2.7.1-5.191 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48487	P	libdcerpc-binding0-4.4.2-29.4 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48579	P	mutt-1.6.0-54.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17089	P	telepathy-gabble-0.18.1-3.268 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:42730	P	wpa_supplicant-0.7.1-6.15.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:66800	P	Security update for python-py (Moderate)	2021-06-01
oval:org.opensuse.security:def:8585	P	Security update for curl (Moderate)	2021-05-31
oval:org.opensuse.security:def:6896	P	Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP1) (Important)	2021-05-25
oval:org.opensuse.security:def:63077	P	pam-modules-12.1-3.17 on GA media (Moderate)	2021-04-29
oval:org.opensuse.security:def:20422	P	Security update for the Linux Kernel (Live Patch 6 for SLE 12 SP5) (Important)	2021-04-28
oval:org.opensuse.security:def:67973	P	Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP1) (Important)	2021-04-28
oval:org.opensuse.security:def:44528	P	Security update for curl (Moderate)	2021-04-28
oval:org.opensuse.security:def:6883	P	Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP1) (Important)	2021-04-28
oval:org.opensuse.security:def:57433	P	Security update for MozillaFirefox (Important)	2021-04-27
oval:org.opensuse.security:def:60238	P	Security update for apache-commons-io (Moderate)	2021-04-26
oval:org.opensuse.security:def:38366	P	Security update for xorg-x11-server (Important)	2021-04-13
oval:org.opensuse.security:def:8734	P	Security update for fwupdate (Important)	2021-04-08
oval:org.opensuse.security:def:6874	P	Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP1) (Important)	2021-04-07
oval:org.opensuse.security:def:57887	P	Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP3) (Important)	2021-04-07
oval:org.opensuse.security:def:6865	P	Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP1) (Important)	2021-04-07
oval:org.opensuse.security:def:73583	P	Security update for flatpak, libostree, xdg-desktop-portal, xdg-desktop-portal-gtk (Important)	2021-04-07
oval:org.opensuse.security:def:10234	P	Security update for OpenIPMI (Moderate)	2021-04-01
oval:org.opensuse.security:def:94223	P	(Low)	2021-03-29
oval:org.opensuse.security:def:6732	P	Security update for the Linux Kernel (Live Patch 19 for SLE 15) (Important)	2021-03-17
oval:org.opensuse.security:def:10415	P	Security update for python (Moderate)	2021-03-11
oval:org.opensuse.security:def:8715	P	Security update for the Linux Kernel (Important)	2021-03-09
oval:org.opensuse.security:def:8898	P	Security update for python-Jinja2 (Important)	2021-02-26
oval:org.opensuse.security:def:44471	P	Security update for bind (Important)	2021-02-18
oval:org.opensuse.security:def:8700	P	Security update for jasper (Important)	2021-02-16
oval:org.opensuse.security:def:10390	P	Security update for wpa_supplicant (Important)	2021-02-11
oval:org.opensuse.security:def:10166	P	Security update for java-11-openjdk (Important)	2021-02-09
oval:org.opensuse.security:def:8809	P	Security update for MozillaFirefox (Important)	2021-01-29
oval:org.opensuse.security:def:59496	P	Security update for ImageMagick (Important)	2021-01-22
oval:org.opensuse.security:def:8577	P	Security update for ImageMagick (Moderate)	2021-01-18
oval:org.opensuse.security:def:10597	P	Security update for MozillaThunderbird (Important)	2021-01-14
oval:org.opensuse.security:def:61074	P	Security update for flac (Moderate)	2021-01-04
oval:org.opensuse.security:def:10631	P	Security update for the Linux Kernel (Important)	2020-12-10
oval:org.opensuse.security:def:62983	P	rpm-build-4.14.1-20.3 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:63249	P	apache2-devel-2.4.43-1.15 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62432	P	libass-devel-0.14.0-1.25 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:2075	P	libshibsp-lite7-2.6.1-1.48 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:17371	P	libvdpau1-32bit-1.1.1-6.73 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:61898	P	libunbound2-1.6.8-8.3 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:63115	P	kernel-azure-base-4.12.14-8.30.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:63281	P	libshibsp-lite7-2.6.1-3.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:107602	P	libshibsp-lite7-2.6.1-3.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:42759	P	openssh-openssl1-6.6p1-10.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:17329	P	imobiledevice-tools-1.2.0-7.31 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:17337	P	libatalk12-3.1.0-3.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:2192	P	libshibsp-lite7-2.6.1-3.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:63166	P	libupsclient1-2.7.4-4.72 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:13064	P	libshibsp-lite6-2.5.5-6.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:117160	P	libshibsp-lite7-2.6.1-3.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:63164	P	libshibsp-lite7-2.6.1-1.48 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16969	P	shibboleth-sp-devel-2.5.5-6.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:41961	P	ghostscript-fonts-other-8.62-32.27.31 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:10550	P	libtag-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:6832	P	rpcbind on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37642	P	perl-HTML-Parser on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:22013	P	Security update for xorg-x11-server (Important)	2020-12-01
oval:org.opensuse.security:def:38947	P	freerdp on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10782	P	libquicktime-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:43960	P	Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP2) (Important)	2020-12-01
oval:org.opensuse.security:def:17408	P	Security update for spamassassin (Important)	2020-12-01
oval:org.opensuse.security:def:60852	P	Security update for python-cryptography (Moderate)	2020-12-01
oval:org.opensuse.security:def:58452	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:22379	P	Security update for webkit2gtk3 (Important)	2020-12-01
oval:org.opensuse.security:def:49960	P	libshibsp-lite7 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:36828	P	emacs on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:17544	P	Security update for libjpeg-turbo, libjpeg62-turbo (Moderate)	2020-12-01
oval:org.opensuse.security:def:37526	P	libgraphite2-3 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37205	P	libicu-doc on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:45214	P	Security update for shibboleth-sp (Important)	2020-12-01
oval:org.opensuse.security:def:43489	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:10731	P	libexpat-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10457	P	java-1_8_0-ibm-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:18477	P	Security update for shibboleth-sp (Important)	2020-12-01
oval:org.opensuse.security:def:21795	P	Security update for the Linux Kernel (Live Patch 30 for SLE 12 SP2) (Important)	2020-12-01
oval:org.opensuse.security:def:21803	P	Security update for mariadb (Important)	2020-12-01
oval:org.opensuse.security:def:8244	P	xorg-x11 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:58173	P	Security update for openssl (Moderate)	2020-12-01
oval:org.opensuse.security:def:20637	P	Security update for dracut (Moderate)	2020-12-01
oval:org.opensuse.security:def:43605	P	Security update for libgcrypt (Moderate)	2020-12-01
oval:org.opensuse.security:def:37058	P	DirectFB on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:8476	P	ntp on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:42810	P	Security update for sane-backends (Moderate)	2020-12-01
oval:org.opensuse.security:def:58523	P	Security update for openssh (Moderate)	2020-12-01
oval:org.opensuse.security:def:37217	P	liblcms1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:44442	P	Security update for sudo (Important)	2020-12-01
oval:org.opensuse.security:def:17531	P	Security update for icu (Moderate)	2020-12-01
oval:org.opensuse.security:def:43448	P	Security update for krb5 (Moderate)	2020-12-01
oval:org.opensuse.security:def:6605	P	fuse on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38428	P	ovmf on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10612	P	xorg-x11-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:17779	P	Security update for php5 (Moderate)	2020-12-01
oval:org.opensuse.security:def:23017	P	Security update for git (Important)	2020-12-01
oval:org.opensuse.security:def:36827	P	elfutils on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:41869	P	Security update for Linux Kernel Live Patch 13 for SLE 12 (Important)	2020-12-01
oval:org.opensuse.security:def:57608	P	Security update for libssh (Moderate)	2020-12-01
oval:org.opensuse.security:def:22106	P	Security update for the Linux Kernel (Live Patch 32 for SLE 12 SP2) (Important)	2020-12-01
oval:org.opensuse.security:def:8425	P	libotr5 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:39014	P	gnome-shell-calendar on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:59678	P	Security update for java-1_8_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:36751	P	socat on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:44266	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:58573	P	Security update for krb5 (Important)	2020-12-01
oval:org.opensuse.security:def:70143	P	wavpack on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:36923	P	libmms0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:17690	P	Security update for curl (Moderate)	2020-12-01
oval:org.opensuse.security:def:61036	P	Security update for samba (Important)	2020-12-01
oval:org.opensuse.security:def:37277	P	logrotate on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50023	P	openslp-server on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38196	P	glib2-lang on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10504	P	libicu-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:20384	P	Security update for java-1_7_1-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:6807	P	patch on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38898	P	gimp on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37614	P	libz1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10479	P	libXvMC-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37915	P	liblzo2-2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50014	P	libshibsp-lite7 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:21949	P	Security update for the Linux Kernel (Live Patch 30 for SLE 12 SP2) (Important)	2020-12-01
oval:org.opensuse.security:def:8306	P	fetchmail on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10773	P	libpcscspy0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:18169	P	Security update for gnutls (Important)	2020-12-01
oval:org.opensuse.security:def:21325	P	Security update for shibboleth-sp (Important)	2020-12-01
oval:org.opensuse.security:def:43885	P	Security update for the Linux Kernel (Live Patch 13 for SLE 12 SP2) (Important)	2020-12-01
oval:org.opensuse.security:def:60732	P	Security update for mailman (Important)	2020-12-01
oval:org.opensuse.security:def:58376	P	Security update for ucode-intel (Moderate)	2020-12-01
oval:org.opensuse.security:def:22349	P	Security update for python (Moderate)	2020-12-01
oval:org.opensuse.security:def:73465	P	perl-File-Path on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:9149	P	libshibsp-lite6 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:17513	P	Security update for flac (Moderate)	2020-12-01
oval:org.opensuse.security:def:37467	P	iputils on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37166	P	libXcursor1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:20206	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:38589	P	evince on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:17813	P	Security update for bind (Critical)	2020-12-01
oval:org.opensuse.security:def:45166	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:58598	P	Security update for shibboleth-sp (Important)	2020-12-01
oval:org.opensuse.security:def:22270	P	Security update for curl (Important)	2020-12-01
oval:org.opensuse.security:def:20625	P	Security update for ppp (Moderate)	2020-12-01
oval:org.opensuse.security:def:39739	P	Security update for shibboleth-sp (Important)	2020-12-01
oval:org.opensuse.security:def:38195	P	git-core on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:43501	P	Security update for ImageMagick (Important)	2020-12-01
oval:org.opensuse.security:def:60117	P	Security update for grub2 (Important)	2020-12-01
oval:org.opensuse.security:def:36898	P	libecpg6 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:8467	P	libyaml-0-2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37160	P	libIlmImf-Imf_2_1-21 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:44391	P	Security update for vim (Important)	2020-12-01
oval:org.opensuse.security:def:17509	P	Security update for compat-openssl098 (Moderate)	2020-12-01
oval:org.opensuse.security:def:6575	P	ctags on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:6583	P	dbus-1-glib on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38291	P	libgcrypt20 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37686	P	syslog-service on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:41858	P	Security update for ghostscript-library (Important)	2020-12-01
oval:org.opensuse.security:def:22053	P	Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP2) (Important)	2020-12-01
oval:org.opensuse.security:def:38986	P	libwmf-0_2-7 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10795	P	libssh2-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38324	P	libmms0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50077	P	libshibsp-lite7 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:36650	P	libcgroup-tools on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:44077	P	Security update for the Linux Kernel (Live Patch 22 for SLE 12 SP2) (Important)	2020-12-01
oval:org.opensuse.security:def:17440	P	Security update for ghostscript (Important)	2020-12-01
oval:org.opensuse.security:def:58490	P	Recommended update for ncurses (Important)	2020-12-01
oval:org.opensuse.security:def:18451	P	Security update for krb5 (Moderate)	2020-12-01
oval:org.opensuse.security:def:23046	P	Security update for shibboleth-sp (Important)	2020-12-01
oval:org.opensuse.security:def:36839	P	gdm on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:17580	P	Security update for openldap2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:60950	P	Security update for webkit2gtk3 (Important)	2020-12-01
oval:org.opensuse.security:def:37233	P	libotr5 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10474	P	libXrender-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10482	P	libapr-util1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:20350	P	Security update for libxml2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:38839	P	bash-lang on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37575	P	libpulse-mainloop-glib0-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10466	P	libXcursor-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:21850	P	Security update for the Linux Kernel (Live Patch 32 for SLE 12 SP2) (Important)	2020-12-01
oval:org.opensuse.security:def:8291	P	dbus-1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:58283	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:20661	P	Security update for gstreamer-plugins-base (Low)	2020-12-01
oval:org.opensuse.security:def:49906	P	kernel-azure on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:43770	P	Security update for the Linux Kernel (Live Patch 23 for SLE 12 SP2) (Important)	2020-12-01
oval:org.opensuse.security:def:37117	P	freeradius-server on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:22337	P	Security update for LibVNCServer (Important)	2020-12-01
oval:org.opensuse.security:def:8489	P	pcsc-ccid on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:41857	P	Security update for systemd (Important)	2020-12-01
oval:org.opensuse.security:def:17456	P	Security update for squid (Critical)	2020-12-01
oval:org.opensuse.security:def:37307	P	ppc64-diag on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:18195	P	Security update for shibboleth-sp (Important)	2020-12-01
oval:org.opensuse.security:def:20163	P	Security update for curl (Moderate)	2020-12-01
oval:org.opensuse.security:def:20171	P	Security update for freeradius-server (Important)	2020-12-01
oval:org.opensuse.security:def:6651	P	lftp on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38531	P	yubikey-manager on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:17791	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:57717	P	ft2demos on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:22231	P	Security update for libssh2_org (Moderate)	2020-12-01
oval:org.opensuse.security:def:8458	P	libusbmuxd4 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:39059	P	raptor on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:43490	P	Security update for zlib (Moderate)	2020-12-01
oval:org.opensuse.security:def:59932	P	Security update for python (Important)	2020-12-01
oval:org.opensuse.security:def:36808	P	coreutils on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:44336	P	Security update for smt (Moderate)	2020-12-01
oval:org.opensuse.security:def:39697	P	Security update for samba (Moderate)	2020-12-01
oval:org.opensuse.security:def:37059	P	MozillaFirefox on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:17722	P	Security update for cairo (Moderate)	2020-12-01
oval:org.opensuse.security:def:17497	P	Security update for mariadb (Moderate)	2020-12-01
oval:org.opensuse.security:def:21299	P	Security update for sssd (Moderate)	2020-12-01
oval:org.opensuse.security:def:37957	P	libshibsp-lite6 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:81308	P	Security update for shibboleth-sp (Important)	2017-12-05
oval:org.opensuse.security:def:84842	P	Security update for shibboleth-sp (Important)	2017-12-05
oval:com.ubuntu.bionic:def:2017168520000000	V	CVE-2017-16852 on Ubuntu 18.04 LTS (bionic) - medium.	2017-11-16
oval:com.ubuntu.artful:def:201716852000	V	CVE-2017-16852 on Ubuntu 17.10 (artful) - medium.	2017-11-16
oval:com.ubuntu.xenial:def:201716852000	V	CVE-2017-16852 on Ubuntu 16.04 LTS (xenial) - medium.	2017-11-16
oval:com.ubuntu.xenial:def:2017168520000000	V	CVE-2017-16852 on Ubuntu 16.04 LTS (xenial) - medium.	2017-11-16
oval:com.ubuntu.bionic:def:201716852000	V	CVE-2017-16852 on Ubuntu 18.04 LTS (bionic) - medium.	2017-11-16
oval:com.ubuntu.cosmic:def:201716852000	V	CVE-2017-16852 on Ubuntu 18.10 (cosmic) - medium.	2017-11-16
oval:com.ubuntu.cosmic:def:2017168520000000	V	CVE-2017-16852 on Ubuntu 18.10 (cosmic) - medium.	2017-11-16
oval:com.ubuntu.trusty:def:201716852000	V	CVE-2017-16852 on Ubuntu 14.04 LTS (trusty) - medium.	2017-11-16

BACK