Vulnerability CVE-2018-14348

Vulnerability Name:

CVE-2018-14348 (CCN-148451)

Assigned:

2018-07-25

Published:

2018-07-25

Updated:

2019-08-06

Summary:

libcgroup up to and including 0.41 creates /var/log/cgred with mode 0666 regardless of the configured umask, leading to disclosure of information.

CVSS v3 Severity:

8.1 High (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
7.1 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): None

4.4 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
3.9 Low (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): None

4.4 Medium (REDHAT CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
3.9 Low (REDHAT Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

5.5 Medium (CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): None

3.2 Low (CCN CVSS v2 Vector: AV:L/AC:L/Au:S/C:P/I:P/A:N)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): None

Vulnerability Type:

CWE-200
CWE-284

Vulnerability Consequences:

Obtain Information

References:

Source: MITRE
Type: CNA
CVE-2018-14348

Source: SUSE
Type: Broken Link
openSUSE-SU-2018:2241

Source: REDHAT
Type: UNKNOWN
RHSA-2019:2047

Source: CCN
Type: Bugzilla Bug 1100365
(CVE-2018-14348) VUL-0: CVE-2018-14348: libcgroup: daemon creates /var/log/cgred with mode 0666

Source: CONFIRM
Type: Issue Tracking, Third Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=1100365

Source: XF
Type: UNKNOWN
libcgroup-cve201814348-info-disc(148451)

Source: CCN
Type: libcgroup GIT Repository
libcgroup

Source: MLIST
Type: Mailing List, Third Party Advisory
[debian-lts-announce] 20180820 [SECURITY] [DLA 1472-1] libcgroup security update

Source: FEDORA
Type: Mailing List, Third Party Advisory
FEDORA-2018-f6adf1cb62

Source: CONFIRM
Type: Patch, Third Party Advisory
https://sourceforge.net/p/libcg/libcg/ci/0d88b73d189ea3440ccaab00418d6469f76fa590/

Source: CCN
Type: IBM Security Bulletin 1126839 (MQ Appliance)
IBM MQ Appliance is affected by a libcgroup vulnerability (CVE-2018-14348)

Source: CCN
Type: IBM Security Bulletin 1167196 (DataPower Gateway)
Potential disclosure of information in IBM DataPower Gateway (CVE-2018-14348)

Vulnerable Configuration:

Configuration 1:

cpe:/a:libcgroup_project:libcgroup:*:*:*:*:*:*:*:* (Version <= 0.41)

Configuration 2:

cpe:/o:debian:debian_linux:8.0:*:*:*:*:*:*:*

OR cpe:/o:fedoraproject:fedora:28:*:*:*:*:*:*:*

Configuration RedHat 1:

cpe:/o:redhat:enterprise_linux:7:*:*:*:*:*:*:*

Configuration RedHat 2:

cpe:/o:redhat:enterprise_linux:7::client:*:*:*:*:*

Configuration RedHat 3:

cpe:/o:redhat:enterprise_linux:7::computenode:*:*:*:*:*

Configuration RedHat 4:

cpe:/o:redhat:enterprise_linux:7::server:*:*:*:*:*

Configuration RedHat 5:

cpe:/o:redhat:enterprise_linux:7::workstation:*:*:*:*:*

Configuration CCN 1:

cpe:/a:libcgroup_project:libcgroup:0.41:*:*:*:*:*:*:*

AND

cpe:/a:ibm:datapower_gateway:7.6.0.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:datapower_gateway:2018.4.1.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_mq_appliance:9.1.0.1:*:*:*:lts:*:*:*

OR cpe:/a:ibm:websphere_mq_appliance:9.1.1:*:*:*:-:*:*:*

OR cpe:/a:ibm:websphere_mq_appliance:9.1.0.2:*:*:*:lts:*:*:*

OR cpe:/a:ibm:websphere_mq_appliance:9.1.2:*:*:*:-:*:*:*

OR cpe:/a:ibm:websphere_mq_appliance:9.1.0.3:*:*:*:-:*:*:*

OR cpe:/a:ibm:websphere_mq_appliance:9.1.3:*:*:*:-:*:*:*

OR cpe:/a:ibm:websphere_mq_appliance:9.1:*:*:*:-:*:*:*

OR cpe:/a:ibm:datapower_gateway:7.6.0.17:*:*:*:*:*:*:*

OR cpe:/a:ibm:datapower_gateway:2018.4.1.8:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:201814348	V	CVE-2018-14348	2023-06-22
oval:org.opensuse.security:def:8081	P	libcgroup-devel-0.41.rc1-1.10.1 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:3439	P	autofs-5.1.3-1.17 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:95069	P	libcgroup-devel-0.41.rc1-1.10.1 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:60498	P	Security update for virglrenderer (Important) (in QA)	2022-01-17
oval:org.opensuse.security:def:34682	P	Security update for the Linux Kernel (Important)	2022-01-14
oval:org.opensuse.security:def:35282	P	Security update for gegl (Important)	2021-12-28
oval:org.opensuse.security:def:61103	P	Security update for libqt4 (Important)	2021-12-22
oval:org.opensuse.security:def:31327	P	Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP3) (Important)	2021-12-14
oval:org.opensuse.security:def:34598	P	Security update for java-1_7_0-openjdk (Important)	2021-11-24
oval:org.opensuse.security:def:34003	P	Security update for java-1_7_0-openjdk (Important)	2021-11-24
oval:org.opensuse.security:def:59563	P	Security update for samba (Important)	2021-11-19
oval:org.opensuse.security:def:59562	P	Security update for MozillaFirefox (Important)	2021-11-17
oval:org.opensuse.security:def:30266	P	Security update for samba (Important)	2021-11-16
oval:org.opensuse.security:def:34587	P	Security update for samba (Important)	2021-11-10
oval:org.opensuse.security:def:34586	P	Security update for binutils (Moderate)	2021-11-09
oval:org.opensuse.security:def:31288	P	Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP3) (Important)	2021-10-18
oval:org.opensuse.security:def:43672	P	Security update for ncurses (Moderate)	2021-10-18
oval:org.opensuse.security:def:61445	P	gc-devel-7.6.4-1.16 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:61650	P	rzsz-0.12.21~rc-1.8 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:33967	P	Security update for libesmtp (Important)	2021-09-02
oval:org.opensuse.security:def:34521	P	Security update for spectre-meltdown-checker (Moderate)	2021-08-27
oval:org.opensuse.security:def:30113	P	Security update for fetchmail (Moderate)	2021-08-18
oval:org.opensuse.security:def:60329	P	Security update for MozillaFirefox (Important)	2021-08-17
oval:org.opensuse.security:def:55229	P	Security update for cpio (Important)	2021-08-14
oval:org.opensuse.security:def:2004	P	libcgroup-devel-0.41.rc1-1.10.1 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:63093	P	libcgroup-devel-0.41.rc1-1.10.1 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:62289	P	permissions-20181224-23.3.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62197	P	libpcsclite1-1.8.24-1.14 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62327	P	socat-1.7.3.2-4.10 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:100885	P	libXinerama-devel-1.1.3-1.22 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62096	P	gstreamer-plugins-base-1.16.2-2.12 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:31239	P	Security update for dbus-1 (Important)	2021-08-02
oval:org.opensuse.security:def:23638	P	Security update for qemu (Important)	2021-07-29
oval:org.opensuse.security:def:59769	P	Security update for systemd (Important)	2021-07-21
oval:org.opensuse.security:def:33688	P	Security update for systemd (Important)	2021-07-21
oval:org.opensuse.security:def:60305	P	Security update for permissions (Moderate)	2021-07-09
oval:org.opensuse.security:def:33677	P	Security update for libnettle (Important)	2021-06-23
oval:org.opensuse.security:def:33676	P	Security update for xterm (Important)	2021-06-18
oval:org.opensuse.security:def:23602	P	Security update for apache2 (Important)	2021-06-17
oval:org.opensuse.security:def:94172	P	(Important)	2021-06-11
oval:org.opensuse.security:def:33928	P	Security update for qemu (Important)	2021-06-10
oval:org.opensuse.security:def:12474	P	gstreamer-plugins-bad-1.8.3-17.2 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61165	P	gc-devel-7.6.4-1.16 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61288	P	libssh-devel-0.7.5-4.16 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12242	P	libotr5-4.0.0-9.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61127	P	automake-1.15.1-2.145 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12421	P	cups-1.7.5-20.17.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61208	P	libXfont-devel-1.5.4-1.17 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12499	P	lcms2-2.7-9.7.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61318	P	opensc-0.17.0-1.30 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12318	P	perl-Config-IniFiles-2.82-3.14 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:59745	P	Security update for libX11 (Important)	2021-06-08
oval:org.opensuse.security:def:12496	P	krb5-1.12.5-40.28.2 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12264	P	libsndfile1-1.0.25-35.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12294	P	libz1-1.2.8-11.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12250	P	libpolkit0-0.113-5.6.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12365	P	unzip-6.00-32.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46476	P	libecpg6-9.3.5-2.2 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12521	P	libXrandr2-1.5.0-6.2 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12550	P	libgme0-0.6.0-5.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12340	P	rpcbind-0.2.3-23.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46425	P	git-core-1.8.5.2-2.32 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12541	P	libexempi3-2.2.1-5.7.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36120	P	evince-2.28.2-0.7.2 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12380	P	xorg-x11-7.6_1-14.17 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61234	P	libgtk-vnc-2_0-0-0.7.2-1.33 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12585	P	libneon27-0.30.0-3.65 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36079	P	acpid-1.0.6-91.25.20 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12272	P	libssh4-0.6.3-11.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12387	P	zoo-2.10-1020.62 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61141	P	cpio-2.12-1.439 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61264	P	libpango-1_0-0-1.40.14-1.41 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12572	P	libltdl7-2.4.2-17.4.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12399	P	audiofile-0.3.6-10.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61184	P	hardlink-1.0+git.e66999f-1.25 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12563	P	libjbig2-2.0-12.13 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12402	P	avahi-0.6.32-30.36 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61258	P	liboath0-2.6.2-1.15 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:23590	P	Security update for gstreamer-plugins-bad (Important)	2021-06-07
oval:org.opensuse.security:def:34452	P	Security update for gstreamer-plugins-bad (Important)	2021-06-07
oval:org.opensuse.security:def:31183	P	Security update for polkit (Important)	2021-06-03
oval:org.opensuse.security:def:32922	P	Security update for curl (Moderate)	2021-05-26
oval:org.opensuse.security:def:33907	P	Security update for djvulibre (Important)	2021-05-19
oval:org.opensuse.security:def:32068	P	Security update for spamassassin (Important)	2021-04-12
oval:org.opensuse.security:def:31147	P	Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP3) (Important)	2021-04-07
oval:org.opensuse.security:def:59609	P	Security update for wavpack (Important)	2021-03-24
oval:org.opensuse.security:def:31348	P	Security update for perl-XML-Twig (Moderate)	2021-03-01
oval:org.opensuse.security:def:33771	P	Security update for java-1_8_0-ibm (Important)	2021-02-26
oval:org.opensuse.security:def:33078	P	Security update for krb5-appl (Important)	2021-02-19
oval:org.opensuse.security:def:30027	P	Security update for java-1_7_1-ibm (Important)	2021-02-18
oval:org.opensuse.security:def:59586	P	Security update for wpa_supplicant (Important)	2021-02-15
oval:org.opensuse.security:def:59587	P	Security update for openvswitch (Important)	2021-02-15
oval:org.opensuse.security:def:59585	P	Security update for the Linux Kernel (Important)	2021-02-11
oval:org.opensuse.security:def:44509	P	Security update for cups (Moderate)	2021-02-02
oval:org.opensuse.security:def:34477	P	Security update for postgresql, postgresql12, postgresql13 (Important)	2021-01-26
oval:org.opensuse.security:def:55207	P	Security update for ImageMagick (Important)	2021-01-22
oval:org.opensuse.security:def:34413	P	Security update for openldap2 (Moderate)	2021-01-14
oval:org.opensuse.security:def:23108	P	Security update for MozillaFirefox (Critical)	2020-12-21
oval:org.opensuse.security:def:32835	P	Security update for MozillaFirefox (Critical)	2020-12-21
oval:org.opensuse.security:def:44538	P	Security update for cyrus-sasl (Important)	2020-12-17
oval:org.opensuse.security:def:55126	P	Security update for xen (Important)	2020-12-10
oval:org.opensuse.security:def:62426	P	libXi6-32bit-1.7.9-1.23 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62459	P	libnm-gtk-devel-1.8.10-3.39 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62376	P	docker-19.03.5_ce-6.31.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:117109	P	libcgroup-devel-0.41.rc1-1.10.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:107551	P	libcgroup-devel-0.41.rc1-1.10.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:17390	P	typelib-1_0-EvinceDocument-3_0-3.20.2-6.27.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:13201	P	ucode-intel-20191112-1.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:61968	P	python3-urllib3-1.24-9.7.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:13245	P	apache2-mod_php7-7.0.7-15.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:1993	P	libcgroup-devel-0.41.rc1-1.10.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:13223	P	xscreensaver-5.22-7.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:63082	P	libcgroup-devel-0.41.rc1-1.10.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:53683	P	Security update for wicked (Important)	2020-12-01
oval:org.opensuse.security:def:17398	P	Security update for postgresql96 (Low)	2020-12-01
oval:org.opensuse.security:def:44783	P	Security update for python (Important)	2020-12-01
oval:org.opensuse.security:def:17574	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:44027	P	Security update for ghostscript (Important)	2020-12-01
oval:org.opensuse.security:def:34364	P	Security update for tcpdump (Moderate)	2020-12-01
oval:org.opensuse.security:def:22428	P	Security update for gcc10 (Moderate)	2020-12-01
oval:org.opensuse.security:def:60668	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:53846	P	Security update for dia (Moderate)	2020-12-01
oval:org.opensuse.security:def:22144	P	Security update for libvirt (Moderate)	2020-12-01
oval:org.opensuse.security:def:17804	P	Security update for samba (Moderate)	2020-12-01
oval:org.opensuse.security:def:30409	P	Security update for xorg-x11-libX11 (Moderate)	2020-12-01
oval:org.opensuse.security:def:33246	P	pyxml on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31110	P	Security update for krb5	2020-12-01
oval:org.opensuse.security:def:30662	P	Security update for ImageMagick (Important)	2020-12-01
oval:org.opensuse.security:def:54551	P	libgraphite2-3 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27375	P	binutils-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:44482	P	Security update for LibVNCServer (Important)	2020-12-01
oval:org.opensuse.security:def:17852	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:44619	P	Security update for libexif (Moderate)	2020-12-01
oval:org.opensuse.security:def:18538	P	Security update for libcgroup (Moderate)	2020-12-01
oval:org.opensuse.security:def:26746	P	libfreebl3 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:44673	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:17538	P	Security update for gnome-settings-daemon (Moderate)	2020-12-01
oval:org.opensuse.security:def:43976	P	Security update for libvirt (Important)	2020-12-01
oval:org.opensuse.security:def:35223	P	Security update for liblouis (Moderate)	2020-12-01
oval:org.opensuse.security:def:22975	P	Security update for curl (Moderate)	2020-12-01
oval:org.opensuse.security:def:26949	P	libfreebl3 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:23214	P	Security update for audiofile (Moderate)	2020-12-01
oval:org.opensuse.security:def:22298	P	Security update for git (Important)	2020-12-01
oval:org.opensuse.security:def:45580	P	Security update for postgresql10 (Moderate)	2020-12-01
oval:org.opensuse.security:def:33223	P	pam_ldap on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:30472	P	Security update for bind	2020-12-01
oval:org.opensuse.security:def:21862	P	Security update for sqlite3 (Important)	2020-12-01
oval:org.opensuse.security:def:30588	P	Security update for openssl (Important)	2020-12-01
oval:org.opensuse.security:def:30884	P	Security update for MozillaFirefox	2020-12-01
oval:org.opensuse.security:def:29038	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:54922	P	libreoffice on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:17840	P	Security update for curl (Important)	2020-12-01
oval:org.opensuse.security:def:44562	P	Security update for xorg-x11-server (Moderate)	2020-12-01
oval:org.opensuse.security:def:18512	P	Security update for mariadb (Important)	2020-12-01
oval:org.opensuse.security:def:45305	P	Security update for libcgroup (Moderate)	2020-12-01
oval:org.opensuse.security:def:28449	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:44662	P	Security update for openssl (Moderate)	2020-12-01
oval:org.opensuse.security:def:21917	P	Security update for openssl (Moderate)	2020-12-01
oval:org.opensuse.security:def:44965	P	Security update for the Linux Kernel (Live Patch 30 for SLE 12 SP2) (Important)	2020-12-01
oval:org.opensuse.security:def:17605	P	Security update for MozillaFirefox (Critical)	2020-12-01
oval:org.opensuse.security:def:44144	P	Security update for tomcat (Important)	2020-12-01
oval:org.opensuse.security:def:24308	P	Security update for libcgroup (Moderate)	2020-12-01
oval:org.opensuse.security:def:53684	P	Security update for perl-DBI (Important)	2020-12-01
oval:org.opensuse.security:def:26821	P	squid3 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54084	P	mipv6d on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:22197	P	Security update for wpa_supplicant (Moderate)	2020-12-01
oval:org.opensuse.security:def:60799	P	Security update for postgresql10 (Important)	2020-12-01
oval:org.opensuse.security:def:54836	P	libXp6 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27424	P	kdelibs3-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:44533	P	Security update for java-1_8_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:17895	P	Security update for subversion (Moderate)	2020-12-01
oval:org.opensuse.security:def:45257	P	Security update for procps (Moderate)	2020-12-01
oval:org.opensuse.security:def:53705	P	Security update for samba (Important)	2020-12-01
oval:org.opensuse.security:def:17419	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:17595	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:44051	P	Security update for the Linux Kernel (Live Patch 21 for SLE 12 SP2) (Important)	2020-12-01
oval:org.opensuse.security:def:24276	P	Security update for libxslt (Moderate)	2020-12-01
oval:org.opensuse.security:def:26757	P	libopensc2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53868	P	Security update for xorg-x11-server (Important)	2020-12-01
oval:org.opensuse.security:def:27030	P	squid on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:23260	P	Security update for mailman (Important)	2020-12-01
oval:org.opensuse.security:def:60522	P	python-libxml2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:22337	P	Security update for LibVNCServer (Important)	2020-12-01
oval:org.opensuse.security:def:32030	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:35199	P	Security update for libcgroup1 (Moderate)	2020-12-01
oval:org.opensuse.security:def:34818	P	Security update for aspell (Moderate)	2020-12-01
oval:org.opensuse.security:def:30941	P	Security update for glibc (Moderate)	2020-12-01
oval:org.opensuse.security:def:29092	P	Security update for ghostscript-library (Important)	2020-12-01
oval:org.opensuse.security:def:45638	P	Security update for openssl (Moderate)	2020-12-01
oval:org.opensuse.security:def:17873	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:45787	P	Security update for adns (Important)	2020-12-01
oval:org.opensuse.security:def:18559	P	Security update for libcgroup (Moderate)	2020-12-01
oval:org.opensuse.security:def:28450	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:22016	P	Security update for squid (Critical)	2020-12-01
oval:org.opensuse.security:def:45086	P	Security update for postgresql10 (Important)	2020-12-01
oval:org.opensuse.security:def:17641	P	Security update for postgresql93 (Moderate)	2020-12-01
oval:org.opensuse.security:def:44333	P	Security update for ntp (Moderate)	2020-12-01
oval:org.opensuse.security:def:55014	P	strongswan on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27477	P	libreoffice on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:43556	P	Security update for curl (Moderate)	2020-12-01
oval:org.opensuse.security:def:53728	P	Security update for python-pip (Important)	2020-12-01
oval:org.opensuse.security:def:28660	P	Security update for evolution-data-server	2020-12-01
oval:org.opensuse.security:def:54257	P	libdcerpc-binding0-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:22322	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:60919	P	Security update for ucode-intel (Important)	2020-12-01
oval:org.opensuse.security:def:31392	P	Security update for pam-modules (Moderate)	2020-12-01
oval:org.opensuse.security:def:35159	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:21886	P	Security update for the Linux Kernel (Live Patch 19 for SLE 12 SP2) (Important)	2020-12-01
oval:org.opensuse.security:def:34060	P	Security update for libxcrypt	2020-12-01
oval:org.opensuse.security:def:54944	P	libvirglrenderer0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:17861	P	Security update for libX11 (Moderate)	2020-12-01
oval:org.opensuse.security:def:45724	P	Security update for ucode-intel (Moderate)	2020-12-01
oval:org.opensuse.security:def:18533	P	Security update for libsndfile (Moderate)	2020-12-01
oval:org.opensuse.security:def:29666	P	Security update for cyrus-imapd (Low)	2020-12-01
oval:org.opensuse.security:def:21941	P	Security update for squid (Important)	2020-12-01
oval:org.opensuse.security:def:59999	P	Security update for the Linux Kernel (Live Patch 32 for SLE 12 SP2) (Important)	2020-12-01
oval:org.opensuse.security:def:17626	P	Security update for openssl (Moderate)	2020-12-01
oval:org.opensuse.security:def:44168	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:27463	P	libmysql55client_r18-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:28159	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:56557	P	Security update for libcgroup (Moderate)	2020-12-01
oval:org.opensuse.security:def:53706	P	Security update for rmt-server (Important)	2020-12-01
oval:org.opensuse.security:def:28529	P	Security update for Mesa	2020-12-01
oval:org.opensuse.security:def:54106	P	puppet on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27087	P	augeas on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:23325	P	Recommended update for LibreOffice (Low)	2020-12-01
oval:org.opensuse.security:def:60823	P	Security update for libpng16 (Moderate)	2020-12-01
oval:org.opensuse.security:def:35331	P	Security update for minicom (Moderate)	2020-12-01
oval:org.opensuse.security:def:35441	P	Security update for orca (Moderate)	2020-12-01
oval:org.opensuse.security:def:43568	P	Security update for squid (Moderate)	2020-12-01
oval:org.opensuse.security:def:34917	P	Security update for emacs	2020-12-01
oval:org.opensuse.security:def:31028	P	Security update for java-1_7_0-ibm (Moderate)	2020-12-01
oval:org.opensuse.security:def:29141	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:45695	P	Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP3) (Important)	2020-12-01
oval:org.opensuse.security:def:22446	P	Security update for LibVNCServer (Important)	2020-12-01
oval:org.opensuse.security:def:32459	P	Security update for xorg-x11-libX11 (Important)	2020-12-01
oval:org.opensuse.security:def:21870	P	Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP2) (Important)	2020-12-01
oval:org.opensuse.security:def:22080	P	Security update for sudo (Important)	2020-12-01
oval:org.opensuse.security:def:45167	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:17751	P	Security update for php5 (Moderate)	2020-12-01
oval:org.opensuse.security:def:44403	P	Security update for postgresql10 (Important)	2020-12-01
oval:org.opensuse.security:def:55088	P	cyrus-sasl on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27521	P	novell-ipsec-tools on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:56483	P	Security update for sssd (Moderate)	2020-12-01
oval:org.opensuse.security:def:28461	P	Security update for xorg-x11-libX11 (Moderate)	2020-12-01
oval:org.opensuse.security:def:32549	P	libdrm on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:28745	P	Security update for libgcrypt	2020-12-01
oval:org.opensuse.security:def:54363	P	python on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:22361	P	Security update for adns (Important)	2020-12-01
oval:org.opensuse.security:def:35397	P	Security update for openssh (Important)	2020-12-01
oval:org.opensuse.security:def:43557	P	Security update for tiff (Important)	2020-12-01
oval:org.opensuse.security:def:17432	P	Security update for tomcat (Important)	2020-12-01
oval:org.opensuse.security:def:43837	P	Security update for wireshark (Moderate)	2020-12-01
oval:org.opensuse.security:def:34149	P	Security update for openssh	2020-12-01
oval:org.opensuse.security:def:30321	P	Security update for tiff (Moderate)	2020-12-01
oval:org.opensuse.security:def:61017	P	Security update for java-1_8_0-ibm (Moderate)	2020-12-01
oval:org.opensuse.security:def:22416	P	Security update for tigervnc (Critical)	2020-12-01
oval:org.opensuse.security:def:23113	P	Security update for libcgroup (Moderate)	2020-12-01
oval:org.opensuse.security:def:29667	P	Security update for dbus-1 (Important)	2020-12-01
oval:org.opensuse.security:def:22040	P	Security update for glibc (Moderate)	2020-12-01
oval:org.opensuse.security:def:60184	P	Security update for libzypp, zypper (Moderate)	2020-12-01
oval:org.opensuse.security:def:17662	P	Security update for samba (Important)	2020-12-01
oval:org.opensuse.security:def:44357	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:55036	P	xdg-utils on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29197	P	Security update for openssh (Moderate)	2020-12-01
oval:org.opensuse.security:def:28194	P	Security update for libcgroup1 (Moderate)	2020-12-01
oval:org.opensuse.security:def:43580	P	Security update for git (Moderate)	2020-12-01
oval:org.opensuse.security:def:32471	P	Security update for xorg-x11-server (Moderate)	2020-12-01
oval:org.opensuse.security:def:29883	P	Security update for the Linux kernel	2020-12-01
oval:org.opensuse.security:def:54279	P	libltdl7 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27171	P	libQtWebKit4-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:23467	P	Security update for java-1_8_0-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:60943	P	Security update for pam_radius (Important)	2020-12-01
oval:org.opensuse.security:def:35370	P	Security update for net-snmp (Moderate)	2020-12-01
oval:org.opensuse.security:def:22967	P	Security update for wireshark (Moderate)	2020-12-01
oval:org.opensuse.security:def:43696	P	Security update for java-1_7_1-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:34974	P	Security update for gd (Moderate)	2020-12-01
oval:org.opensuse.security:def:33135	P	libMagickCore1-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:22404	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:23084	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:30576	P	Security update for Mozilla NSS	2020-12-01
oval:org.opensuse.security:def:23028	P	Security update for SuSEfirewall2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:60023	P	Security update for webkit2gtk3 (Important)	2020-12-01
oval:org.opensuse.security:def:22120	P	Security update for ucode-intel (Moderate)	2020-12-01
oval:org.opensuse.security:def:45296	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:17783	P	Security update for gimp (Moderate)	2020-12-01
oval:org.opensuse.security:def:29180	P	Security update for microcode_ctl (Moderate)	2020-12-01
oval:org.opensuse.security:def:55148	P	icu on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29879	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:56579	P	Security update for libcgroup (Moderate)	2020-12-01
oval:org.opensuse.security:def:32460	P	Security update for xorg-x11-libX11 (Important)	2020-12-01
oval:org.opensuse.security:def:29751	P	Security update for gd (Moderate)	2020-12-01
oval:org.opensuse.security:def:32684	P	ipsec-tools on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:28802	P	Security update for openssl (Moderate)	2020-12-01
oval:org.opensuse.security:def:54529	P	libXvMC1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:44458	P	Security update for cups (Important)	2020-12-01
oval:org.opensuse.security:def:44595	P	Security update for java-1_8_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:60667	P	Security update for haproxy (Important)	2020-12-01
oval:org.opensuse.security:def:43592	P	Security update for java-1_8_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:17517	P	Security update for php5 (Moderate)	2020-12-01
oval:org.opensuse.security:def:43952	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:34306	P	Security update for quagga (Important)	2020-12-01
oval:org.opensuse.security:def:30370	P	Security update for wireshark (Moderate)	2020-12-01
oval:org.opensuse.security:def:22470	P	Security update for tomcat (Important)	2020-12-01
oval:org.opensuse.security:def:21894	P	Security update for kernel-firmware (Important)	2020-12-01
oval:org.opensuse.security:def:60856	P	Security update for mariadb (Low)	2020-12-01
oval:org.opensuse.security:def:22104	P	Security update for python3 (Moderate)	2020-12-01
oval:org.opensuse.security:def:17772	P	Security update for LibreOffice (Moderate)	2020-12-01
oval:org.opensuse.security:def:44427	P	Security update for spice (Important)	2020-12-01
oval:org.opensuse.security:def:55110	P	ft2demos on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29241	P	Security update for samba (Moderate)	2020-12-01
oval:org.opensuse.security:def:56505	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:17411	P	Security update for mozilla-nspr, mozilla-nss (Moderate)	2020-12-01
oval:org.opensuse.security:def:29678	P	Security update for e2fsprogs	2020-12-01
oval:org.opensuse.security:def:29970	P	Security update for libraptor	2020-12-01
oval:org.opensuse.security:def:54385	P	sysconfig on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27322	P	x3270 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:23514	P	Security update for sqlite3 (Important)	2020-12-01
oval:org.opensuse.security:def:45281	P	Security update for libcgroup (Moderate)	2020-12-01
oval:org.opensuse.security:def:26745	P	libexiv2-4 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:43581	P	Security update for libsndfile (Moderate)	2020-12-01
oval:org.opensuse.security:def:17453	P	Security update for xorg-x11-server (Important)	2020-12-01
oval:org.opensuse.security:def:43861	P	Security update for the Linux Kernel (Live Patch 10 for SLE 12 SP2) (Important)	2020-12-01
oval:org.opensuse.security:def:35064	P	Security update for java-1_7_0-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:61041	P	Security update for perl-DBI (Important)	2020-12-01
oval:org.opensuse.security:def:22440	P	Security update for postgresql10 (Important)	2020-12-01
oval:org.opensuse.security:def:23137	P	Security update for libcgroup (Moderate)	2020-12-01
oval:org.opensuse.security:def:30577	P	Security update for nagios	2020-12-01
oval:org.opensuse.security:def:60690	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:23144	P	Security update for dovecot22 (Important)	2020-12-01
oval:org.opensuse.security:def:60208	P	Security update for java-1_8_0-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:22173	P	Security update for openssl (Moderate)	2020-12-01
oval:org.opensuse.security:def:45502	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:33184	P	libsss_idmap0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:30428	P	Security update for xorg-x11-libs (Moderate)	2020-12-01
oval:org.opensuse.security:def:33290	P	xen on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29915	P	Security update for libcgroup1 (Moderate)	2020-12-01
oval:org.opensuse.security:def:44661	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:30794	P	Security update for bind (Important)	2020-12-01
oval:org.opensuse.security:def:32778	P	pyxml on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:28886	P	Security update for cabextract (Moderate)	2020-12-01
oval:org.opensuse.security:def:54814	P	java-1_8_0-openjdk on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:17874	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:45233	P	Security update for xmltooling (Important)	2020-12-01
oval:com.redhat.rhsa:def:20192047	P	RHSA-2019:2047: libcgroup security update (Moderate)	2019-08-06
oval:org.opensuse.security:def:84933	P	Security update for libcgroup (Moderate)	2018-08-21
oval:org.opensuse.security:def:86783	P	Security update for libcgroup (Moderate)	2018-08-21
oval:org.opensuse.security:def:79213	P	Security update for libcgroup (Moderate)	2018-08-21
oval:com.ubuntu.xenial:def:2018143480000000	V	CVE-2018-14348 on Ubuntu 16.04 LTS (xenial) - medium.	2018-08-14
oval:com.ubuntu.bionic:def:201814348000	V	CVE-2018-14348 on Ubuntu 18.04 LTS (bionic) - medium.	2018-08-14
oval:com.ubuntu.disco:def:2018143480000000	V	CVE-2018-14348 on Ubuntu 19.04 (disco) - medium.	2018-08-14
oval:com.ubuntu.cosmic:def:201814348000	V	CVE-2018-14348 on Ubuntu 18.10 (cosmic) - medium.	2018-08-14
oval:com.ubuntu.cosmic:def:2018143480000000	V	CVE-2018-14348 on Ubuntu 18.10 (cosmic) - medium.	2018-08-14
oval:com.ubuntu.trusty:def:201814348000	V	CVE-2018-14348 on Ubuntu 14.04 LTS (trusty) - medium.	2018-08-14
oval:com.ubuntu.bionic:def:2018143480000000	V	CVE-2018-14348 on Ubuntu 18.04 LTS (bionic) - medium.	2018-08-14
oval:com.ubuntu.xenial:def:201814348000	V	CVE-2018-14348 on Ubuntu 16.04 LTS (xenial) - medium.	2018-08-14
oval:org.opensuse.security:def:79191	P	Security update for libcgroup (Moderate)	2018-07-30
oval:org.opensuse.security:def:84909	P	Security update for libcgroup (Moderate)	2018-07-30

BACK