Vulnerability CVE-2018-0489

Vulnerability Name:

CVE-2018-0489 (CCN-139574)

Assigned:

2017-11-27

Published:

2018-02-27

Updated:

2018-03-23

Summary:

Shibboleth XMLTooling-C before 1.6.4, as used in Shibboleth Service Provider before 2.6.1.4 on Windows and other products, mishandles digital signatures of user data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via crafted XML data.
Note: this issue exists because of an incomplete fix for CVE-2018-0486.

CVSS v3 Severity:

6.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
5.7 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): None

6.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
5.7 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

6.4 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): None

6.4 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): None

Vulnerability Type:

CWE-347

Vulnerability Consequences:

Bypass Security

References:

Source: MITRE
Type: CNA
CVE-2018-0489

Source: CCN
Type: Shibboleth Service Provider Security Advisory [27 February 2018]
Shibboleth SP software vulnerable to additional data forgery flaws

Source: CONFIRM
Type: Third Party Advisory
http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-003.txt

Source: CCN
Type: US-CERT VU#475445
Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal

Source: BID
Type: Third Party Advisory, VDB Entry
103172

Source: CCN
Type: BID-103172
Multiple SAML Libraries Multiple Authentication Bypass Vulnerabilities

Source: SECTRACK
Type: Third Party Advisory, VDB Entry
1040435

Source: CCN
Type: Duo Blog, Feb 27, 2018
Duo Finds SAML Vulnerabilities Affecting Multiple Implementations

Source: XF
Type: UNKNOWN
shibboleth-cve20180489-sec-bypass(139574)

Source: MLIST
Type: Issue Tracking
[debian-lts-announce] 20180228 [SECURITY] [DLA 1296-1] xmltooling security update

Source: CONFIRM
Type: Patch, Vendor Advisory
https://shibboleth.net/community/advisories/secadv_20180227.txt

Source: DEBIAN
Type: Third Party Advisory
DSA-4126

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2018-0489

Vulnerable Configuration:

Configuration 1:

cpe:/a:shibboleth:xmltooling-c:*:*:*:*:*:*:*:* (Version < 1.6.4)

Configuration 2:

cpe:/o:debian:debian_linux:7.0:*:*:*:*:*:*:*

OR cpe:/o:debian:debian_linux:8.0:*:*:*:*:*:*:*

OR cpe:/o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Configuration 3:

cpe:/a:arubanetworks:clearpass:*:*:*:*:*:*:*:* (Version >= 6.6.0 and <= 6.6.9)

OR cpe:/a:arubanetworks:clearpass:*:*:*:*:*:*:*:* (Version >= 6.7.0 and < 6.7.2)

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:8202	P	Security update for php8 (Moderate) (in QA)	2023-06-15
oval:org.opensuse.security:def:7572	P	libXxf86dga-devel-1.1.4-1.24 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:7594	P	libgtk-vnc-2_0-0-1.3.1-150400.3.3.1 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:20180489	V	CVE-2018-0489	2022-09-02
oval:org.opensuse.security:def:606	P	Security update for aws-iam-authenticator (Important)	2022-07-29
oval:org.opensuse.security:def:3506	P	gnome-shell-search-provider-nautilus-3.20.3-23.12.10 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:124266	P	libxmltooling6-1.5.6-3.6.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3289	P	libxmltooling6-1.5.6-3.9.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:95136	P	libxmltooling-devel-3.1.0-1.26 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:1525	P	Security update for python-Twisted (Important)	2022-06-14
oval:org.opensuse.security:def:42295	P	Security update for pcre2 (Important)	2022-05-30
oval:org.opensuse.security:def:94228	P	(Moderate)	2022-04-28
oval:org.opensuse.security:def:1057	P	Security update for python (Moderate)	2022-04-01
oval:org.opensuse.security:def:42203	P	Security update for expat (Important)	2022-03-04
oval:org.opensuse.security:def:42192	P	Security update for containerd, docker (Moderate)	2022-02-04
oval:org.opensuse.security:def:42191	P	Security update for the Linux Kernel (Important)	2022-02-02
oval:org.opensuse.security:def:112930	P	libxmltooling-devel-3.2.0-1.2 on GA media (Moderate)	2022-01-17
oval:org.opensuse.security:def:8923	P	Security update for MozillaFirefox (Important) (in QA)	2022-01-14
oval:org.opensuse.security:def:58932	P	Security update for java-1_8_0-ibm (Important) (in QA)	2022-01-04
oval:org.opensuse.security:def:10432	P	Security update for p11-kit (Important)	2021-12-22
oval:org.opensuse.security:def:10431	P	Security update for xorg-x11-server (Important)	2021-12-21
oval:org.opensuse.security:def:8691	P	Security update for xorg-x11-server (Important)	2021-12-14
oval:org.opensuse.security:def:1579	P	Security update for python-pip (Moderate)	2021-12-13
oval:org.opensuse.security:def:10187	P	Security update for MozillaFirefox (Important)	2021-12-10
oval:org.opensuse.security:def:8872	P	Security update for mozilla-nss (Important)	2021-12-06
oval:org.opensuse.security:def:10368	P	Security update for ruby2.5 (Important)	2021-12-01
oval:org.opensuse.security:def:58051	P	Security update for java-1_7_0-openjdk (Important)	2021-11-24
oval:org.opensuse.security:def:57528	P	Security update for postgresql, postgresql13, postgresql14 (Important)	2021-11-20
oval:org.opensuse.security:def:68079	P	Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP1) (Important)	2021-11-17
oval:org.opensuse.security:def:20540	P	Security update for the Linux Kernel (Live Patch 19 for SLE 12 SP5) (Important)	2021-11-17
oval:org.opensuse.security:def:43093	P	Security update for MozillaFirefox (Important)	2021-11-09
oval:org.opensuse.security:def:58857	P	Security update for opensc (Important)	2021-10-29
oval:org.opensuse.security:def:1641	P	Security update for salt (Moderate)	2021-10-27
oval:org.opensuse.security:def:8847	P	Security update for apache2 (Important)	2021-10-12
oval:org.opensuse.security:def:9596	P	Security update for curl (Moderate)	2021-10-06
oval:org.opensuse.security:def:106385	P	libxmltooling-devel-3.2.0-1.2 on GA media (Moderate)	2021-10-01
oval:org.opensuse.security:def:61093	P	Security update for gd (Moderate)	2021-09-23
oval:org.opensuse.security:def:10343	P	Security update for ffmpeg (Important)	2021-09-23
oval:org.opensuse.security:def:61659	P	sudo-1.8.22-4.3.3 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:61408	P	bind-devel-9.11.2-12.8.1 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:97024	P	libxmltooling-devel-1.6.4-3.3.2 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:2135	P	libxmltooling-devel-1.6.4-3.3.2 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:63200	P	davfs2-1.5.4-1.4 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:61438	P	fetchmail-6.3.26-3.27 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:61490	P	libXfixes-devel-5.0.3-1.24 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:71319	P	libssh2-1-1.8.0-4.6.1 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:90059	P	libxmltooling-devel-1.6.4-3.3.2 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:61467	P	hplip-devel-3.18.6-5.7.1 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:63224	P	libxmltooling-devel-1.6.4-3.3.2 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:103714	P	libxmltooling-devel-1.6.4-3.3.2 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:61466	P	hardlink-1.0+git.e66999f-1.25 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:20505	P	Security update for the Linux Kernel (Live Patch 10 for SLE 12 SP5) (Important)	2021-09-16
oval:org.opensuse.security:def:60358	P	Security update for java-1_7_0-openjdk (Moderate)	2021-09-09
oval:org.opensuse.security:def:58824	P	Security update for qemu (Moderate)	2021-09-09
oval:org.opensuse.security:def:10655	P	Security update for ffmpeg (Important)	2021-09-02
oval:org.opensuse.security:def:8645	P	Security update for dovecot23 (Moderate)	2021-08-31
oval:org.opensuse.security:def:43742	P	Security update for openssl1 (Important)	2021-08-24
oval:org.opensuse.security:def:10141	P	Security update for spice-vdagent (Moderate)	2021-08-20
oval:org.opensuse.security:def:66897	P	Security update for libass (Important)	2021-08-20
oval:org.opensuse.security:def:9574	P	Security update for djvulibre (Important)	2021-08-20
oval:org.opensuse.security:def:8325	P	Security update for haproxy (Important)	2021-08-17
oval:org.opensuse.security:def:20497	P	Security update for the Linux Kernel (Live Patch 14 for SLE 12 SP5) (Important)	2021-08-17
oval:org.opensuse.security:def:47815	P	libxmltooling6-1.5.6-3.6.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:15108	P	libxmltooling6-1.5.6-3.9.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48131	P	libjavascriptcoregtk-3_0-0-2.4.11-23.20 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14737	P	policycoreutils-2.5-10.3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47578	P	cpio-2.11-36.3.4 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:15070	P	libshibsp-lite6-2.5.5-6.3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47985	P	curl-7.60.0-9.8 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47714	P	libgssglue1-0.4-3.76 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14996	P	libgme0-0.6.0-5.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47539	P	yast2-3.2.36-1.11 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48228	P	libxmltooling6-1.5.6-3.9.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14858	P	cracklib-2.9.0-7.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:15097	P	libvmtools0-10.3.10-4.12.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48225	P	libxcb-dri2-0-1.10-4.3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48039	P	gvim-7.4.326-17.3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14703	P	logwatch-7.4.3-15.65 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14711	P	mutt-1.10.1-55.6.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47853	P	perl-Tk-804.031-3.76 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47593	P	dhcp-4.3.3-10.14.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14902	P	gnome-keyring-3.20.0-28.3.18 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47525	P	w3m-0.5.3.git20161120-160.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48279	P	python-PyYAML-3.12-26.6.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14807	P	xorg-x11-libs-7.6-45.14 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:15081	P	libssh4-0.8.7-1.31 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14695	P	libxmltooling6-1.5.6-3.6.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48077	P	libXfont1-1.5.1-11.3.12 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47907	P	transfig-3.2.5e-2.3.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:87856	P	libxmltooling6-1.5.6-3.6.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47524	P	vsftpd-3.0.2-39.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:15023	P	liblouis-data-2.6.4-6.6.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47660	P	lcms2-2.7-9.7.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47579	P	cpp48-4.8.5-31.17.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14878	P	e2fsprogs-1.43.8-3.8.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:63356	P	libxmltooling-devel-3.1.0-1.26 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:101382	P	libxmltooling-devel-3.1.0-1.26 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:2267	P	libxmltooling-devel-3.1.0-1.26 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:62785	P	libgme-devel-0.6.2-1.17 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62126	P	libXi-devel-1.7.9-3.2.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:100941	P	libnewt0_52-0.52.20-5.35 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:63017	P	jetty-http-9.4.38-3.6.2 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:1003	P	groff-1.22.3-5.3.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62256	P	libzypp-17.25.8-3.33.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:39062	P	Security update for kvm (Important)	2021-07-29
oval:org.opensuse.security:def:6934	P	Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP1) (Important)	2021-07-27
oval:org.opensuse.security:def:8623	P	Security update for qemu (Important)	2021-07-23
oval:org.opensuse.security:def:6689	P	Security update for the Linux Kernel (Important)	2021-07-21
oval:org.opensuse.security:def:10119	P	Security update for the Linux Kernel (Important)	2021-07-21
oval:org.opensuse.security:def:64732	P	Security update for systemd (Important)	2021-07-20
oval:org.opensuse.security:def:58786	P	Security update for MozillaFirefox (Important)	2021-07-16
oval:org.opensuse.security:def:6921	P	Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP1) (Important)	2021-07-14
oval:org.opensuse.security:def:20971	P	Security update for nodejs14 (Important)	2021-07-14
oval:org.opensuse.security:def:70253	P	Security update for arpwatch (Important)	2021-06-28
oval:org.opensuse.security:def:8615	P	Security update for arpwatch (Important)	2021-06-28
oval:org.opensuse.security:def:59759	P	Security update for ovmf (Important)	2021-06-24
oval:org.opensuse.security:def:10111	P	Security update for openexr (Important)	2021-06-24
oval:org.opensuse.security:def:6912	P	Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP1) (Important)	2021-06-18
oval:org.opensuse.security:def:10680	P	Security update for MozillaThunderbird (Important)	2021-06-17
oval:org.opensuse.security:def:57942	P	Security update for java-1_8_0-openjdk (Moderate)	2021-06-15
oval:org.opensuse.security:def:38360	P	Security update for xorg-x11-libX11 (Important)	2021-06-15
oval:org.opensuse.security:def:15758	P	gnome-shell-devel-3.10.4-40.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48439	P	guestfs-data-1.32.4-14.18 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61191	P	kdump-0.8.16-12.13 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48752	P	libzmq3-4.0.4-13.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:42625	P	libsnmp15-32bit-5.4.2.1-8.12.22.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48704	P	raptor-2.0.10-3.67 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36453	P	libgtop-2_0-7-32bit-2.28.0-1.13.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11382	P	libneon27-0.30.0-3.65 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48493	P	libfreetype6-2.6.3-7.8.2 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48585	P	openvswitch-2.5.1-24.15 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:16606	P	libxmltooling-devel-1.5.6-3.6.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17259	P	libiso9660-8-0.90-6.3.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61315	P	minicom-2.7.1-1.19 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36452	P	libgpgme-devel-1.1.6-25.32.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48806	P	libvdpau1-32bit-1.1.1-6.73 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36548	P	python-logilab-common-0.56.2-1.9.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48681	P	libfbembed2_5-2.5.2.26539-13.42 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:15735	P	dia-0.97.2-13.253 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:42556	P	hyper-v-6-3.5 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48639	P	unzip-6.00-32.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48523	P	libmpfr4-3.1.2-7.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11404	P	libsoup-2_4-1-2.44.2-1.46 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17217	P	telepathy-gabble-0.18.3-5.7 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17225	P	bluez-cups-5.13-5.4.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61277	P	libqpdf21-8.0.2-1.5 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:42727	P	w3m-0.5.2-132.2.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48735	P	libid3tag0-0.15.1b-182.58 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36464	P	libmusicbrainz-devel-2.1.5-5.18 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61358	P	shadow-4.5-5.39 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:124612	P	libxmltooling-devel-1.5.6-3.6.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48577	P	mipv6d-2.0.2.umip.0.4-19.63 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48650	P	xfsprogs-4.3.0-8.8 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:8772	P	Security update for libwebp (Critical)	2021-06-04
oval:org.opensuse.security:def:66805	P	Security update for dhcp (Important)	2021-06-02
oval:org.opensuse.security:def:59736	P	Security update for curl (Moderate)	2021-05-27
oval:org.opensuse.security:def:8359	P	Security update for rubygem-actionpack-5_1 (Important)	2021-05-26
oval:org.opensuse.security:def:6903	P	Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP1) (Important)	2021-05-25
oval:org.opensuse.security:def:8753	P	Security update for java-11-openjdk (Important)	2021-05-11
oval:org.opensuse.security:def:10249	P	Security update for ceph (Important)	2021-05-04
oval:org.opensuse.security:def:67979	P	Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP1) (Important)	2021-04-28
oval:org.opensuse.security:def:8936	P	Security update for sudo (Important)	2021-04-20
oval:org.opensuse.security:def:8738	P	Security update for xorg-x11-server (Important)	2021-04-14
oval:org.opensuse.security:def:73588	P	Security update for cifs-utils (Moderate)	2021-04-13
oval:org.opensuse.security:def:6870	P	Security update for the Linux Kernel (Live Patch 16 for SLE 15 SP1) (Important)	2021-04-07
oval:org.opensuse.security:def:10234	P	Security update for OpenIPMI (Moderate)	2021-04-01
oval:org.opensuse.security:def:10423	P	Security update for ldb (Important)	2021-03-24
oval:org.opensuse.security:def:10419	P	Security update for ruby2.5 (Important)	2021-03-24
oval:org.opensuse.security:def:8914	P	Security update for nghttp2 (Important)	2021-03-24
oval:org.opensuse.security:def:20995	P	Security update for python3 (Moderate)	2021-03-19
oval:org.opensuse.security:def:10410	P	Security update for wpa_supplicant (Important)	2021-03-08
oval:org.opensuse.security:def:8905	P	Security update for postgresql12 (Moderate)	2021-03-03
oval:org.opensuse.security:def:20718	P	Security update for openldap2 (Important)	2021-03-03
oval:org.opensuse.security:def:58907	P	Security update for tomcat (Moderate)	2021-02-25
oval:org.opensuse.security:def:64645	P	Security update for wpa_supplicant (Important)	2021-02-11
oval:org.opensuse.security:def:10268	P	Security update for wavpack (Moderate)	2021-01-21
oval:org.opensuse.security:def:60479	P	Security update for MozillaFirefox (Important)	2021-01-12
oval:org.opensuse.security:def:59737	P	Security update for dovecot22 (Important)	2021-01-04
oval:org.opensuse.security:def:6643	P	Security update for the Linux Kernel (Live Patch 17 for SLE 15) (Important)	2020-12-07
oval:org.opensuse.security:def:6845	P	Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP1) (Important)	2020-12-07
oval:org.opensuse.security:def:57384	P	Security update for postgresql12 (Important)	2020-12-04
oval:org.opensuse.security:def:17344	P	libid3tag0-0.15.1b-184.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:71432	P	alsa-1.1.5-6.6.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:63111	P	apache2-mod_wsgi-4.5.18-2.27 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:4082	P	libxmltooling-devel-1.5.6-3.9.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:63286	P	libxmltooling-devel-1.6.4-3.3.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:107607	P	libxmltooling-devel-1.6.4-3.3.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:63250	P	apache2-mod_apparmor-2.13.4-1.4 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:117165	P	libxmltooling-devel-1.6.4-3.3.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:2197	P	libxmltooling-devel-1.6.4-3.3.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:13102	P	libxmltooling6-1.5.6-3.9.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:63283	P	libvirglrenderer0-0.6.0-4.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62466	P	libquicktime-1.2.4cvs20150223-4.42 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:63170	P	libxmltooling-devel-1.6.4-1.26 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16918	P	libxmltooling-devel-1.5.6-3.9.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:61932	P	openvpn-2.4.3-5.3.19 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:63149	P	dpdk-17.11.2-1.27 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62915	P	perl-Archive-Extract-0.80-1.24 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:2081	P	libxmltooling-devel-1.6.4-1.26 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:42447	P	sysstat-8.1.5-7.45.24 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:38359	P	libqpdf18 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:36932	P	libpcsclite1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:8501	P	procmail on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:11070	P	libssh2-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:17550	P	Security update for libksba (Moderate)	2020-12-01
oval:org.opensuse.security:def:17558	P	Security update for gdm (Low)	2020-12-01
oval:org.opensuse.security:def:37198	P	libgnomesu on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:44632	P	Security update for postgresql96 (Low)	2020-12-01
oval:org.opensuse.security:def:17679	P	Security update for libxml2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:6613	P	glib2-lang on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:6621	P	gpgme on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38455	P	python-PyYAML on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10546	P	libspice-server-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:20868	P	Security update for java-1_8_0-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:37724	P	alsa on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:57767	P	libXfixes3-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:22294	P	Security update for LibVNCServer (Critical)	2020-12-01
oval:org.opensuse.security:def:8434	P	libproxy1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:42967	P	Security update for the Linux Kernel (Live Patch 22 for SLE 12 SP1) (Important)	2020-12-01
oval:org.opensuse.security:def:39150	P	argyllcms on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10744	P	libid3tag-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38362	P	libraptor2-0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50082	P	libxmltooling-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:36684	P	libpoppler-glib8 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:44318	P	Security update for gnutls (Moderate)	2020-12-01
oval:org.opensuse.security:def:17610	P	Recommended update for openssl (Moderate)	2020-12-01
oval:org.opensuse.security:def:18672	P	Security update for netatalk (Important)	2020-12-01
oval:org.opensuse.security:def:23287	P	Security update for xmltooling (Moderate)	2020-12-01
oval:org.opensuse.security:def:36877	P	libXext6 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:17801	P	Security update for mysql-connector-java (Moderate)	2020-12-01
oval:org.opensuse.security:def:37267	P	libvdpau1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:20684	P	Security update for git (Moderate)	2020-12-01
oval:org.opensuse.security:def:6770	P	libtirpc-netconfig on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:39003	P	cyrus-sasl-digestmd5-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37613	P	libyaml-0-2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:57362	P	Security update for gnutls	2020-12-01
oval:org.opensuse.security:def:22091	P	Security update for log4j (Important)	2020-12-01
oval:org.opensuse.security:def:58617	P	Security update for tiff (Moderate)	2020-12-01
oval:org.opensuse.security:def:49912	P	terraform on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:44011	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:17432	P	Security update for tomcat (Important)	2020-12-01
oval:org.opensuse.security:def:60672	P	Security update for python-PyKMIP (Moderate)	2020-12-01
oval:org.opensuse.security:def:37151	P	java-1_8_0-ibm on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:22578	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:8523	P	squid on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:43827	P	Security update for xmltooling (Moderate)	2020-12-01
oval:org.opensuse.security:def:17677	P	Security update for tiff (Moderate)	2020-12-01
oval:org.opensuse.security:def:37345	P	unixODBC on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:44712	P	Security update for apache2 (Important)	2020-12-01
oval:org.opensuse.security:def:18365	P	Security update for xmltooling (Moderate)	2020-12-01
oval:org.opensuse.security:def:38695	P	liblua5_2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10580	P	openslp-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:18012	P	Security update for apparmor (Moderate)	2020-12-01
oval:org.opensuse.security:def:8210	P	sblim-sfcb on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:22472	P	Security update for spamassassin (Important)	2020-12-01
oval:org.opensuse.security:def:8492	P	perl-HTML-Parser on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:39223	P	openconnect on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:43731	P	Security update for the Linux Kernel (Live Patch 20 for SLE 12 SP2) (Important)	2020-12-01
oval:org.opensuse.security:def:60173	P	Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP2) (Important)	2020-12-01
oval:org.opensuse.security:def:36842	P	glibc on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:44577	P	Security update for python3 (Important)	2020-12-01
oval:org.opensuse.security:def:43064	P	Security update for the Linux Kernel (Live Patch 24 for SLE 12 SP1) (Important)	2020-12-01
oval:org.opensuse.security:def:39861	P	Security update for ncurses (Moderate)	2020-12-01
oval:org.opensuse.security:def:57361	P	Security update for glibc (Important)	2020-12-01
oval:org.opensuse.security:def:37097	P	cyrus-sasl on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:17943	P	Security update for libxml2 (Important)	2020-12-01
oval:org.opensuse.security:def:17667	P	Security update for libmspack (Moderate)	2020-12-01
oval:org.opensuse.security:def:21633	P	Security update for p7zip (Important)	2020-12-01
oval:org.opensuse.security:def:37991	P	libxmltooling6 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38371	P	libsoup-2_4-1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10499	P	libgnutls-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:20756	P	Security update for the Linux Kernel (Live Patch 24 for SLE 12 SP1) (Important)	2020-12-01
oval:org.opensuse.security:def:37680	P	squidGuard on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:9161	P	libtag1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:11092	P	libxmltooling-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:22254	P	Security update for postgresql94 (Important)	2020-12-01
oval:org.opensuse.security:def:42903	P	Security update for the Linux Kernel (Live Patch 28 for SLE 12 SP1) (Important)	2020-12-01
oval:org.opensuse.security:def:39111	P	libnewt0_52 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10731	P	libexpat-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:44201	P	Security update for libqt5-qtbase (Important)	2020-12-01
oval:org.opensuse.security:def:17578	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:22620	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:49966	P	libxmltooling-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:36866	P	kernel-default on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:17765	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:37564	P	libotr5 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37239	P	libpolkit0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:45455	P	Security update for xmltooling (Moderate)	2020-12-01
oval:org.opensuse.security:def:43730	P	Security update for the Linux Kernel (Live Patch 21 for SLE 12 SP2) (Important)	2020-12-01
oval:org.opensuse.security:def:20626	P	Security update for java-1_7_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:6751	P	libraw9 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38843	P	dia on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:18698	P	Security update for xmltooling (Moderate)	2020-12-01
oval:org.opensuse.security:def:22036	P	Security update for java-1_7_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:22044	P	Security update for ovmf (Moderate)	2020-12-01
oval:org.opensuse.security:def:8278	P	coreutils on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:58507	P	Security update for wireshark (Moderate)	2020-12-01
oval:org.opensuse.security:def:43846	P	Security update for ImageMagick (Moderate)	2020-12-01
oval:org.opensuse.security:def:17401	P	Security update for squid (Important)	2020-12-01
oval:org.opensuse.security:def:37092	P	cups on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:8510	P	quagga on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:43144	P	Security update for postgresql94 (Important)	2020-12-01
oval:org.opensuse.security:def:17592	P	Security update for krb5 (Moderate)	2020-12-01
oval:org.opensuse.security:def:37255	P	libsqlite3-0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:44683	P	Security update for wireshark (Moderate)	2020-12-01
oval:org.opensuse.security:def:17701	P	Security update for libssh (Moderate)	2020-12-01
oval:org.opensuse.security:def:43782	P	Security update for freetype2 (Important)	2020-12-01
oval:org.opensuse.security:def:38592	P	file on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10561	P	libwebkit2gtk-3_0-25 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:20901	P	Security update for the Linux Kernel (Live Patch 16 for SLE 12 SP1) (Important)	2020-12-01
oval:org.opensuse.security:def:18000	P	Security update for bind (Important)	2020-12-01
oval:org.opensuse.security:def:23258	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:38404	P	libxmltooling6 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:36865	P	kbd on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:22347	P	Security update for mailman (Important)	2020-12-01
oval:org.opensuse.security:def:8459	P	libvdpau1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:39178	P	lhasa on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:59919	P	Security update for the Linux Kernel (Live Patch 29 for SLE 12 SP2) (Important)	2020-12-01
oval:org.opensuse.security:def:36785	P	accountsservice on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:44507	P	Security update for openldap2 (Important)	2020-12-01
oval:org.opensuse.security:def:43019	P	Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP1) (Important)	2020-12-01
oval:org.opensuse.security:def:70148	P	apache-pdfbox on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:36961	P	libvte9 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:17911	P	Security update for libvirt (Moderate)	2020-12-01
oval:org.opensuse.security:def:37311	P	python-cupshelpers on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50028	P	qemu on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10453	P	hplip-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37652	P	procmail on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37949	P	libpython3_4m1_0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50020	P	libxmltooling-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:22190	P	Security update for qemu (Important)	2020-12-01
oval:org.opensuse.security:def:8340	P	jakarta-commons-fileupload on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10722	P	libbotan-1_10-0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:18339	P	Security update for libreoffice (Important)	2020-12-01
oval:org.opensuse.security:def:21659	P	Security update for xmltooling (Moderate)	2020-12-01
oval:org.opensuse.security:def:44126	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:17468	P	Security update for libqt5-qtbase (Important)	2020-12-01
oval:org.opensuse.security:def:60973	P	Security update for nodejs6 (Critical)	2020-12-01
oval:org.opensuse.security:def:58710	P	Security update for libgcrypt (Moderate)	2020-12-01
oval:org.opensuse.security:def:22590	P	Security update for atftp (Important)	2020-12-01
oval:org.opensuse.security:def:73470	P	python3-cupshelpers on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:9183	P	libxmltooling6 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:17734	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:37505	P	libapr-util1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37200	P	libgraphite2-3 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:44769	P	Security update for qemu (Important)	2020-12-01
oval:org.opensuse.security:def:6736	P	libpcre1-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38753	P	mipv6d on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:18034	P	Security update for gstreamer-plugins-base (Moderate)	2020-12-01
oval:org.opensuse.security:def:45407	P	Security update for java-1_7_1-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:8232	P	vorbis-tools on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:58221	P	Security update for procps (Important)	2020-12-01
oval:org.opensuse.security:def:22511	P	Security update for openslp (Important)	2020-12-01
oval:org.opensuse.security:def:20959	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:39903	P	Security update for xmltooling (Moderate)	2020-12-01
oval:org.opensuse.security:def:81642	P	Security update for xmltooling (Moderate)	2018-03-16
oval:org.opensuse.security:def:85083	P	Security update for xmltooling (Moderate)	2018-03-16
oval:com.ubuntu.artful:def:20180489000	V	CVE-2018-0489 on Ubuntu 17.10 (artful) - high.	2018-02-27
oval:com.ubuntu.bionic:def:20180489000	V	CVE-2018-0489 on Ubuntu 18.04 LTS (bionic) - high.	2018-02-27
oval:com.ubuntu.bionic:def:201804890000000	V	CVE-2018-0489 on Ubuntu 18.04 LTS (bionic) - high.	2018-02-27
oval:com.ubuntu.trusty:def:20180489000	V	CVE-2018-0489 on Ubuntu 14.04 LTS (trusty) - high.	2018-02-27
oval:com.ubuntu.xenial:def:201804890000000	V	CVE-2018-0489 on Ubuntu 16.04 LTS (xenial) - high.	2018-02-27
oval:com.ubuntu.xenial:def:20180489000	V	CVE-2018-0489 on Ubuntu 16.04 LTS (xenial) - high.	2018-02-27

BACK