Vulnerability CVE-2020-10648

Vulnerability Name:

CVE-2020-10648 (CCN-178090)

Assigned:

2020-03-18

Published:

2020-03-18

Updated:

2021-03-26

Summary:

Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration.

CVSS v3 Severity:

7.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
6.9 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:U/RC:R)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

7.8 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
6.9 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:U/RC:R)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

6.8 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

Vulnerability Type:

CWE-20

Vulnerability Consequences:

Bypass Security

References:

Source: MITRE
Type: CNA
CVE-2020-10648

Source: SUSE
Type: Third Party Advisory
openSUSE-SU-2020:1869

Source: MISC
Type: Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/03/18/5

Source: XF
Type: UNKNOWN
dasuboot-cve202010648-sec-bypass(178090)

Source: CCN
Type: U-Boot GIT Repository
Das U-Boot

Source: MISC
Type: Patch, Third Party Advisory
https://github.com/u-boot/u-boot/commits/master

Source: MISC
Type: Exploit, Third Party Advisory
https://labs.f-secure.com/advisories/das-u-boot-verified-boot-bypass/

Source: CCN
Type: Ubuntu CVE Tracker
CVE-2020-10648

Source: CCN
Type: oss-sec Mailing List, Wed, 18 Mar 2020 18:19:25 +0000
U-Boot verified boot improper signature verification

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2020-10648

Vulnerable Configuration:

Configuration 1:

cpe:/a:denx:u-boot:*:*:*:*:*:*:*:* (Version < 2018.03)

OR cpe:/a:denx:u-boot:2020.01:-:*:*:*:*:*:*

Configuration 2:

cpe:/o:opensuse:leap:15.2:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/o:canonical:ubuntu:16.04::~~lts~~~:*:*:*:*:*

OR cpe:/o:canonical:ubuntu:18.04::~~lts~~~:*:*:*:*:*

OR cpe:/o:canonical:ubuntu:12.04::~~esm~~~:*:*:*:*:*

OR cpe:/o:canonical:ubuntu:14.04::~~esm~~~:*:*:*:*:*

OR cpe:/o:canonical:ubuntu:20.04::~~lts~~~:*:*:*:*:*

OR cpe:/o:canonical:ubuntu:20.10:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:202010648	V	CVE-2020-10648	2023-06-22
oval:org.opensuse.security:def:7820	P	u-boot-rpiarm64-2021.10-150400.4.11.1 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:51983	P	Security update for the Linux Kernel (Important)	2023-01-26
oval:org.opensuse.security:def:51573	P	Security update for python3 (Important)	2022-11-29
oval:org.opensuse.security:def:51952	P	Security update for libX11 (Moderate)	2022-11-15
oval:org.opensuse.security:def:3170	P	libexif12-0.6.21-8.3.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3381	P	tboot-20190704_1.9.10-1.7 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3117	P	kdump-0.8.16-9.2 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3172	P	libfreebl3-3.45-58.31.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3162	P	libcdio14-0.90-6.3.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3313	P	ovmf-2017+git1510945757.b2662641d5-3.16.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3402	P	xf86-video-intel-2.99.917+git781.c8990575-1.27 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3123	P	lftp-4.7.4-3.6.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3332	P	perl-YAML-LibYAML-0.38-10.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3408	P	xorg-x11-server-1.19.6-8.18 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3810	P	ucode-intel-20191112-1.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3213	P	libmusicbrainz4-2.1.5-27.79 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3390	P	unrar-5.0.14-3.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3132	P	libX11-6-1.6.2-12.5.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3404	P	xinetd-2.3.15-8.8.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3405	P	xlockmore-5.43-5.30 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3340	P	python-cupshelpers-1.5.7-7.5 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3822	P	xdg-utils-20140630-6.3.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3156	P	libasan2-32bit-5.3.1+r233831-12.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3351	P	radvd-1.9.7-2.12 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:95110	P	grub2-x86_64-xen-2.06-150400.9.9 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:94843	P	u-boot-rpiarm64-2021.10-150400.2.6 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:5247	P	Security update for libyajl (Moderate)	2022-06-14
oval:org.opensuse.security:def:322	P	u-boot-rpiarm64-2021.01-5.1 on GA media (Moderate)	2022-06-13
oval:org.opensuse.security:def:374	P	u-boot-rpiarm64-2021.10-150400.2.6 on GA media (Moderate)	2022-06-10
oval:org.opensuse.security:def:4594	P	Security update for the Linux Kernel (Live Patch 24 for SLE 12 SP5) (Important)	2022-05-09
oval:org.opensuse.security:def:5225	P	Security update for ant (Moderate)	2022-04-27
oval:org.opensuse.security:def:4587	P	Security update for the Linux Kernel (Live Patch 24 for SLE 12 SP5) (Important)	2022-04-25
oval:org.opensuse.security:def:4582	P	Security update for the Linux Kernel (Live Patch 23 for SLE 12 SP5) (Important)	2022-04-23
oval:org.opensuse.security:def:4577	P	Security update for the Linux Kernel (Live Patch 26 for SLE 12 SP5) (Important)	2022-04-15
oval:org.opensuse.security:def:4578	P	Security update for the Linux Kernel (Live Patch 20 for SLE 12 SP5) (Important)	2022-04-15
oval:org.opensuse.security:def:4571	P	Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP5) (Important)	2022-04-13
oval:org.opensuse.security:def:94435	P	(Moderate)	2022-03-30
oval:org.opensuse.security:def:4564	P	Security update for the Linux Kernel (Live Patch 19 for SLE 12 SP5) (Important)	2022-03-29
oval:org.opensuse.security:def:4707	P	Security update for the Linux Kernel (Live Patch 22 for SLE 12 SP5) (Important)	2022-03-29
oval:org.opensuse.security:def:4708	P	Security update for the Linux Kernel (Live Patch 23 for SLE 12 SP5) (Important)	2022-03-29
oval:org.opensuse.security:def:5366	P	Security update for flac (Moderate)	2022-03-14
oval:org.opensuse.security:def:4693	P	Security update for the Linux Kernel (Live Patch 23 for SLE 12 SP5) (Important)	2022-03-01
oval:org.opensuse.security:def:4680	P	Security update for the Linux Kernel (Live Patch 18 for SLE 12 SP5) (Critical)	2022-02-16
oval:org.opensuse.security:def:4659	P	Security update for the Linux Kernel (Live Patch 15 for SLE 12 SP5) (Important)	2022-02-01
oval:org.opensuse.security:def:70568	P	Security update for MozillaFirefox (Important) (in QA)	2022-01-14
oval:org.opensuse.security:def:52039	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:101823	P	Security update for python3 (Moderate)	2021-12-16
oval:org.opensuse.security:def:68315	P	Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP2) (Important)	2021-12-14
oval:org.opensuse.security:def:4545	P	Security update for the Linux Kernel (Live Patch 17 for SLE 12 SP5) (Important)	2021-12-14
oval:org.opensuse.security:def:4525	P	Security update for gmp (Moderate)	2021-12-06
oval:org.opensuse.security:def:74682	P	Security update for gmp (Moderate)	2021-12-06
oval:org.opensuse.security:def:73753	P	Security update for glib-networking (Important)	2021-12-06
oval:org.opensuse.security:def:51704	P	Security update for xen (Moderate)	2021-12-01
oval:org.opensuse.security:def:64616	P	Security update for postgresql12 (Important)	2021-11-22
oval:org.opensuse.security:def:23710	P	Security update for postgresql96 (Important)	2021-11-22
oval:org.opensuse.security:def:67320	P	Security update for samba (Important)	2021-11-16
oval:org.opensuse.security:def:64800	P	Security update for java-11-openjdk (Important)	2021-11-16
oval:org.opensuse.security:def:70313	P	Security update for java-11-openjdk (Important)	2021-11-16
oval:org.opensuse.security:def:66970	P	Security update for java-1_8_0-openj9 (Important)	2021-11-04
oval:org.opensuse.security:def:49454	P	Security update for python3 (Moderate)	2021-10-20
oval:org.opensuse.security:def:4728	P	Security update for the Linux Kernel (Important)	2021-10-12
oval:org.opensuse.security:def:106340	P	libtspi1-0.3.15-1.7 on GA media (Moderate)	2021-10-01
oval:org.opensuse.security:def:1780	P	Security update for grilo (Important)	2021-09-23
oval:org.opensuse.security:def:73890	P	Security update for samba (Important)	2021-09-22
oval:org.opensuse.security:def:96625	P	libarchive-devel-3.3.2-3.8.4 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:61643	P	python3-urllib3-1.24-7.24 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:96588	P	hyper-v-7-4.3 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:61545	P	libnghttp2-14-1.31.1-1.15 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:96624	P	libXxf86vm-devel-1.1.4-1.23 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:67225	P	Security update for go1.15 (Moderate)	2021-08-20
oval:org.opensuse.security:def:64556	P	Security update for libsndfile (Critical)	2021-08-17
oval:org.opensuse.security:def:47579	P	cpp48-4.8.5-31.17.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47782	P	libsmi-0.4.8-18.55 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47835	P	openssh-7.2p2-74.25.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:46888	P	apache-commons-daemon-1.0.15-4.181 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47451	P	openslp-2.0.0-17.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:46981	P	krb5-appl-clients-1.0.3-1.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47503	P	squid-3.5.21-25.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47144	P	res-signingkeys-3.0.18-26.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47526	P	wget-1.14-20.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:46920	P	cvs-1.12.12-181.54 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47044	P	libltdl7-2.4.2-14.30 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47075	P	libsnmp30-32bit-5.7.3-4.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:2418	P	php7-embed-7.4.6-3.17.1 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:4464	P	Security update for the Linux Kernel (Important)	2021-08-10
oval:org.opensuse.security:def:63101	P	postgresql12-12.6-8.16.1 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:63323	P	dhcp-relay-4.3.5-6.6.1 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:1907	P	build-20210120-3.6.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:1924	P	groovy-lib-2.4.21-3.3.2 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:71768	P	augeas-1.10.1-1.11 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:101098	P	u-boot-rpiarm64-2021.01-5.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:1920	P	go1.14-1.14.15-1.35.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:1902	P	binutils-devel-32bit-2.35.1-7.18.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62352	P	xalan-j2-2.7.2-9.64 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62027	P	augeas-1.10.1-1.11 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:1908	P	cargo-1.43.1-12.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62255	P	libzstd-devel-1.4.4-1.6.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62765	P	libQt5OpenGLExtensions-devel-static-5.12.7-4.12.2 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:1911	P	cross-nvptx-gcc7-7.5.0+r278197-4.25.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:63039	P	perl-solv-0.7.19-3.20.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:101148	P	flatpak-1.10.2-4.6.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62302	P	python3-cryptography-2.8-3.6.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:1251	P	u-boot-rpiarm64-2021.01-5.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:1918	P	git-2.26.2-3.31.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62340	P	u-boot-rpiarm64-2021.01-5.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62385	P	docker-libnetwork-0.7.0.1+gitr2908_55e924b8a842-4.31.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:1923	P	graphviz-perl-2.40.1-6.6.8 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:72081	P	u-boot-rpiarm64-2021.01-5.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62127	P	libXinerama-devel-1.1.3-1.22 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62217	P	libsnmp30-5.7.3-8.24 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:69069	P	Security update for mariadb (Important)	2021-08-05
oval:org.opensuse.security:def:4448	P	Security update for the Linux Kernel (Live Patch 12 for SLE 12 SP5) (Important)	2021-07-22
oval:org.opensuse.security:def:4725	P	Security update for the Linux Kernel (Important)	2021-07-14
oval:org.opensuse.security:def:4436	P	Security update for the Linux Kernel (Important)	2021-07-14
oval:org.opensuse.security:def:49296	P	Security update for python-rsa (Important)	2021-07-02
oval:org.opensuse.security:def:45511	P	Security update for xterm (Important)	2021-06-14
oval:org.opensuse.security:def:70418	P	Security update for ucode-intel (Important)	2021-06-10
oval:org.opensuse.security:def:46660	P	gdk-pixbuf-lang-2.30.6-1.23 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46397	P	cron-4.2-55.2 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46521	P	libtasn1-3.7-2.13 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46813	P	perl-Config-IniFiles-2.82-3.14 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46601	P	xorg-x11-server-7.6_1.15.2-12.12 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46730	P	libgssglue1-0.4-3.83 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46380	P	apache2-2.4.10-6.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46719	P	libdcerpc-binding0-32bit-4.2.4-4.19 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46748	P	libmpfr4-3.1.2-7.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46485	P	libgssglue1-0.4-3.76 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48748	P	libuuid-devel-2.25-30.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46402	P	cvs-1.12.12-181.54 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48758	P	telepathy-gabble-0.18.1-3.268 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46589	P	vino-3.10.1-1.81 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46670	P	gpg2-2.0.24-1.5 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46627	P	cifs-utils-6.4-6.4 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46791	P	logwatch-7.4.0-13.131 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46821	P	powerpc-utils-1.2.26-6.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48850	P	libcares2-32bit-1.9.1-5.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48885	P	sane-backends-32bit-1.0.24-3.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46838	P	rsyslog-8.4.0-8.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:64693	P	Security update for hivex (Moderate)	2021-05-26
oval:org.opensuse.security:def:64692	P	Security update for libu2f-host (Moderate)	2021-05-25
oval:org.opensuse.security:def:64504	P	Security update for fribidi (Important)	2021-05-19
oval:org.opensuse.security:def:51539	P	Security update for xen (Important)	2021-04-19
oval:org.opensuse.security:def:64463	P	Security update for zstd (Moderate)	2021-04-08
oval:org.opensuse.security:def:65632	P	Security update for go1.16 (Moderate)	2021-03-24
oval:org.opensuse.security:def:67062	P	Security update for stunnel (Important)	2021-03-12
oval:org.opensuse.security:def:23740	P	Security update for openvswitch (Important)	2021-02-12
oval:org.opensuse.security:def:51153	P	Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP2) (Important)	2021-02-10
oval:org.opensuse.security:def:73635	P	Security update for perl-Convert-ASN1 (Moderate)	2021-01-21
oval:org.opensuse.security:def:23564	P	Security update for openldap2 (Moderate)	2021-01-15
oval:org.opensuse.security:def:46314	P	Security update for xen (Moderate)	2020-12-16
oval:org.opensuse.security:def:48978	P	colord-1.3.3-12.13 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62707	P	libwebp-devel-1.0.3-1.62 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:4059	P	libsvn_auth_gnome_keyring-1-0-1.10.6-1.12 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:61810	P	libcontainers-common-20200306-3.9.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62905	P	libgit2-26-0.26.8-3.8.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:46351	P	facter-2.0.2-1.6 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:72422	P	libthai0-32bit-0.1.27-1.16 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:61891	P	libtasn1-4.13-4.5.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:71655	P	libyaml-0-2-0.1.7-1.17 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62965	P	log4j12-javadoc-1.2.17-2.26 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:63257	P	davfs2-1.5.4-1.4 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:61729	P	dnsmasq-2.78-7.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:72306	P	libvdpau-devel-1.1.1-1.28 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:63568	P	bluez-cups-5.48-5.13.10 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:63580	P	icedtea-web-1.7.1-5.13 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:61860	P	libpcap-devel-1.8.1-4.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:4046	P	libreoffice-sdk-6.2.7.1-43.56.3 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:48998	P	imobiledevice-tools-1.2.0-7.31 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:61767	P	hplip-devel-3.19.12-1.72 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:51079	P	Security update for python-setuptools (Important)	2020-12-02
oval:org.opensuse.security:def:4847	P	Security update for dovecot23 (Important)	2020-12-02
oval:org.opensuse.security:def:4715	P	Security update for libxml2 (Moderate)	2020-12-02
oval:org.opensuse.security:def:4720	P	Security update for python-rtslib-fb (Moderate)	2020-12-02
oval:org.opensuse.security:def:2562	P	Security update for python (Moderate)	2020-12-02
oval:org.opensuse.security:def:4871	P	Security update for dovecot23 (Important)	2020-12-02
oval:org.opensuse.security:def:4817	P	Security update for ovmf (Moderate)	2020-12-02
oval:org.opensuse.security:def:4854	P	Security update for qemu (Important)	2020-12-02
oval:org.opensuse.security:def:4860	P	Security update for shibboleth-sp (Moderate)	2020-12-02
oval:org.opensuse.security:def:2566	P	Security update for u-boot (Important)	2020-12-02
oval:org.opensuse.security:def:5391	P	Security update for u-boot (Important)	2020-12-02
oval:org.opensuse.security:def:5509	P	Security update for perl-DBI (Important)	2020-12-02
oval:org.opensuse.security:def:5537	P	Security update for u-boot (Important)	2020-12-02
oval:org.opensuse.security:def:4794	P	Security update for nginx (Moderate)	2020-12-02
oval:org.opensuse.security:def:24554	P	Security update for libunwind (Moderate)	2020-12-01
oval:org.opensuse.security:def:64960	P	Security update for freetype2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:64095	P	Security update for u-boot (Important)	2020-12-01
oval:org.opensuse.security:def:52111	P	Security update for qemu (Moderate)	2020-12-01
oval:org.opensuse.security:def:64084	P	Security update for bcm43xx-firmware (Moderate)	2020-12-01
oval:org.opensuse.security:def:53712	P	Security update for u-boot (Important)	2020-12-01
oval:org.opensuse.security:def:63998	P	Security update for ppp (Important)	2020-12-01
oval:org.opensuse.security:def:64255	P	g3utils on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:45623	P	Security update for evince (Important)	2020-12-01
oval:org.opensuse.security:def:64981	P	Security update for ceph (Important)	2020-12-01
oval:org.opensuse.security:def:50095	P	rmt-server on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:24656	P	Security update for ant (Moderate)	2020-12-01
oval:org.opensuse.security:def:49212	P	libpcap-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:24686	P	Security update for tomcat (Important)	2020-12-01
oval:org.opensuse.security:def:45652	P	Security update for the Linux Kernel (Live Patch 28 for SLE 12 SP3) (Important)	2020-12-01
oval:org.opensuse.security:def:49525	P	gvim on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:63816	P	Security update for samba (Important)	2020-12-01
oval:org.opensuse.security:def:24699	P	Security update for squid (Important)	2020-12-01
oval:org.opensuse.security:def:24284	P	Security update for clamav (Moderate)	2020-12-01
oval:org.opensuse.security:def:46242	P	Security update for the Linux Kernel (Live Patch 24 for SLE 12 SP3) (Important)	2020-12-01
oval:org.opensuse.security:def:64121	P	Security update for tomcat (Important)	2020-12-01
oval:org.opensuse.security:def:49501	P	audiofile-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:63914	P	Security update for webkit2gtk3 (Important)	2020-12-01
oval:org.opensuse.security:def:24664	P	Security update for vim (Moderate)	2020-12-01
oval:org.opensuse.security:def:25302	P	Security update for xorg-x11-server (Important)	2020-12-01
oval:org.opensuse.security:def:46269	P	Security update for the Linux Kernel (Live Patch 26 for SLE 12 SP3) (Important)	2020-12-01
oval:org.opensuse.security:def:49129	P	krb5 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:24535	P	Security update for curl (Important)	2020-12-01
oval:org.opensuse.security:def:49423	P	libXinerama1-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:75014	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:52255	P	Security update for u-boot (Important)	2020-12-01
oval:org.opensuse.security:def:24151	P	Security update for webkit2gtk3 (Important)	2020-12-01
oval:org.opensuse.security:def:51848	P	Security update for virglrenderer (Important)	2020-12-01
oval:org.opensuse.security:def:64361	P	libopenssl-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52221	P	Security update for dpdk (Critical)	2020-12-01
oval:org.opensuse.security:def:52429	P	Security update for MozillaThunderbird (Important)	2020-12-01
oval:org.opensuse.security:def:45908	P	Security update for u-boot (Important)	2020-12-01
oval:org.opensuse.security:def:64227	P	clamav on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:23030	P	Security update for krb5 (Important)	2020-12-01
oval:org.opensuse.security:def:25667	P	Security update for u-boot (Important)	2020-12-01
oval:org.opensuse.security:def:50193	P	libavcodec-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:24803	P	Security update for ucode-intel (Moderate)	2020-12-01
oval:org.opensuse.security:def:52178	P	Security update for postgresql12 (Important)	2020-12-01
oval:org.opensuse.security:def:23042	P	Security update for openssl (Moderate)	2020-12-01
oval:org.opensuse.security:def:64171	P	Security update for u-boot (Important)	2020-12-01
oval:org.opensuse.security:def:52250	P	Security update for bluez (Moderate)	2020-12-01
oval:org.opensuse.security:def:65072	P	Security update for tcpdump (Moderate)	2020-12-01
oval:org.opensuse.security:def:65068	P	Security update for u-boot (Important)	2020-12-01
oval:org.opensuse.security:def:24273	P	Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP3) (Important)	2020-12-01
oval:org.opensuse.security:def:52145	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:64059	P	Security update for webkit2gtk3 (Important)	2020-12-01
oval:org.opensuse.security:def:50310	P	Security update for gnutls (Moderate)	2020-12-01
oval:org.opensuse.security:def:49350	P	update-alternatives on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:63712	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:24939	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:49669	P	libid3tag0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50801	P	Security update for python3 (Moderate)	2020-12-01
oval:org.opensuse.security:def:49436	P	libgme-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:63886	P	Security update for ovmf (Moderate)	2020-12-01
oval:org.opensuse.security:def:24953	P	Security update for libvirt (Important)	2020-12-01
oval:org.opensuse.security:def:24234	P	Security update for u-boot (Important)	2020-12-01
oval:org.opensuse.security:def:70676	P	Security update for u-boot (Important)	2020-12-01
oval:org.opensuse.security:def:24525	P	Security update for nmap (Important)	2020-12-01
oval:org.opensuse.security:def:50748	P	Security update for zstd (Moderate)	2020-12-01
oval:org.opensuse.security:def:63986	P	Security update for e2fsprogs (Moderate)	2020-12-01
oval:org.opensuse.security:def:24739	P	Security update for java-1_8_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:25377	P	Security update for grub2 (Important)	2020-12-01
oval:org.opensuse.security:def:50350	P	Security update for tiff (Moderate)	2020-12-01
oval:org.opensuse.security:def:24604	P	Security update for java-1_8_0-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:45084	P	Security update for the Linux Kernel (Live Patch 34 for SLE 12 SP2) (Important)	2020-12-01
oval:org.opensuse.security:def:49566	P	libnm-gtk-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:63954	P	Security update for adns (Important)	2020-12-01
oval:org.opensuse.security:def:52491	P	Security update for u-boot (Important)	2020-12-01
oval:org.opensuse.security:def:24209	P	Security update for the Linux Kernel (Live Patch 33 for SLE 12 SP3) (Important)	2020-12-01
oval:org.opensuse.security:def:49597	P	python3-cupshelpers on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52364	P	Security update for rust, rust-cbindgen (Moderate)	2020-12-01
oval:org.opensuse.security:def:53497	P	Security update for curl (Important)	2020-12-01
oval:org.opensuse.security:def:24343	P	Security update for ImageMagick (Moderate)	2020-12-01
oval:org.opensuse.security:def:52089	P	Security update for ghostscript (Important)	2020-12-01
oval:org.opensuse.security:def:23518	P	Security update for java-1_7_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:50410	P	Security update for dbus-1 (Important)	2020-12-01
oval:org.opensuse.security:def:23530	P	Security update for git (Important)	2020-12-01
oval:org.opensuse.security:def:68415	P	Security update for u-boot (Important)	2020-12-01
oval:org.opensuse.security:def:63851	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:23072	P	Security update for samba (Moderate)	2020-12-01
oval:org.opensuse.security:def:68966	P	Security update for cairo (Moderate)	2020-12-01
oval:org.opensuse.security:def:65722	P	Security update for u-boot (Important)	2020-12-01
oval:org.opensuse.security:def:45972	P	Security update for libsolv, libzypp, zypper (Moderate)	2020-12-01
oval:org.opensuse.security:def:24335	P	Security update for mgetty (Important)	2020-12-01
oval:org.opensuse.security:def:22963	P	Security update for libical (Moderate)	2020-12-01
oval:org.opensuse.security:def:52285	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:64134	P	Security update for xerces-c (Moderate)	2020-12-01
oval:org.opensuse.security:def:50855	P	Security update for u-boot (Important)	2020-12-01
oval:org.opensuse.security:def:63648	P	Security update for tcpdump (Moderate)	2020-12-01
oval:org.opensuse.security:def:51305	P	Security update for libqt5-qtbase (Important)	2020-12-01
oval:org.opensuse.security:def:50588	P	Security update for webkit2gtk3 (Important)	2020-12-01
oval:org.opensuse.security:def:63781	P	Security update for openldap2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:50917	P	Security update for jasper (Low)	2020-12-01
oval:org.opensuse.security:def:50945	P	Security update for wireshark (Moderate)	2020-12-01
oval:org.opensuse.security:def:46096	P	Security update for perl-DBI (Important)	2020-12-01
oval:org.opensuse.security:def:50678	P	Security update for tcpdump (Important)	2020-12-01
oval:org.opensuse.security:def:45221	P	Security update for ImageMagick (Important)	2020-12-01
oval:org.opensuse.security:def:25335	P	Security update for u-boot (Important)	2020-12-01
oval:org.opensuse.security:def:24486	P	Security update for libsolv, libzypp, zypper (Moderate)	2020-12-01
oval:org.opensuse.security:def:45029	P	Security update for xorg-x11-server (Important)	2020-12-01
oval:org.opensuse.security:def:50980	P	Security update for perl-DBI (Important)	2020-12-01
oval:org.opensuse.security:def:24995	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:25633	P	Security update for perl-DBI (Important)	2020-12-01
oval:org.opensuse.security:def:75147	P	Security update for u-boot (Important)	2020-12-01
oval:org.opensuse.security:def:50159	P	libproxy1-config-gnome3 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50569	P	Security update for xerces-c (Low)	2020-12-01
oval:org.opensuse.security:def:24854	P	Security update for vino (Moderate)	2020-12-01
oval:org.opensuse.security:def:45568	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:51047	P	Security update for docker-runc (Moderate)	2020-12-01
oval:org.opensuse.security:def:64027	P	Security update for exiv2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:64009	P	Security update for librsvg (Moderate)	2020-12-01
oval:org.opensuse.security:def:53567	P	Security update for u-boot (Important)	2020-12-01
oval:org.opensuse.security:def:24448	P	Security update for python (Important)	2020-12-01
oval:org.opensuse.security:def:45135	P	Security update for wireshark (Moderate)	2020-12-01
oval:org.opensuse.security:def:50844	P	Security update for MozillaThunderbird and mozilla-nspr (Important)	2020-12-01
oval:org.opensuse.security:def:53640	P	Security update for squid (Important)	2020-12-01
oval:org.opensuse.security:def:24409	P	Security update for libvirt (Moderate)	2020-12-01
oval:org.opensuse.security:def:24614	P	Security update for ntp (Moderate)	2020-12-01
oval:org.opensuse.security:def:45164	P	Security update for qemu (Important)	2020-12-01
oval:org.opensuse.security:def:51409	P	Security update for zypper, libzypp and libsolv (Moderate)	2020-12-01
oval:org.opensuse.security:def:24626	P	Security update for sqlite3 (Moderate)	2020-12-01
oval:org.opensuse.security:def:74011	P	Security update for u-boot (Important)	2020-12-01
oval:org.opensuse.security:def:24224	P	Security update for kernel-firmware (Important)	2020-12-01
oval:org.opensuse.security:def:46180	P	Security update for postgresql96 (Important)	2020-12-01
oval:org.opensuse.security:def:49358	P	xen-libs on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:24202	P	Security update for spice (Moderate)	2020-12-01
oval:org.opensuse.security:def:46030	P	Security update for python (Moderate)	2020-12-01
oval:org.opensuse.security:def:24578	P	Security update for LibVNCServer (Critical)	2020-12-01
oval:org.opensuse.security:def:23445	P	Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP3) (Important)	2020-12-01
oval:org.opensuse.security:def:74556	P	Security update for webkit2gtk3 (Important)	2020-12-01
oval:org.opensuse.security:def:51002	P	Security update for u-boot (Important)	2020-12-01
oval:org.opensuse.security:def:51434	P	Security update for ImageMagick (Moderate)	2020-12-01
oval:org.opensuse.security:def:50813	P	Security update for libxml2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:52193	P	Security update for libX11 (Moderate)	2020-12-01
oval:org.opensuse.security:def:46156	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:63794	P	Security update for libgcrypt (Moderate)	2020-12-01
oval:org.opensuse.security:def:50906	P	Security update for bluez (Moderate)	2020-12-01
oval:org.opensuse.security:def:64902	P	Security update for python3 (Moderate)	2020-12-01
oval:org.opensuse.security:def:45713	P	Security update for ovmf (Important)	2020-12-01
oval:org.opensuse.security:def:45859	P	Security update for tomcat (Moderate)	2020-12-01
oval:org.opensuse.security:def:25411	P	Security update for u-boot (Important)	2020-12-01
oval:org.opensuse.security:def:85536	P	Security update for u-boot (Important)	2020-11-20
oval:org.opensuse.security:def:86456	P	Security update for u-boot (Important)	2020-11-20
oval:org.opensuse.security:def:110306	P	Security update for u-boot (Important)	2020-11-15
oval:org.opensuse.security:def:75449	P	Security update for u-boot (Important)	2020-11-11
oval:org.opensuse.security:def:98053	P	Security update for u-boot (Important)	2020-11-11
oval:org.opensuse.security:def:91088	P	Security update for u-boot (Important)	2020-11-11
oval:org.opensuse.security:def:104048	P	Security update for u-boot (Important)	2020-11-11
oval:org.opensuse.security:def:104743	P	Security update for u-boot (Important)	2020-11-11
oval:org.opensuse.security:def:90393	P	Security update for u-boot (Important)	2020-11-11
oval:org.opensuse.security:def:126649	P	Security update for u-boot (Important)	2020-11-09
oval:org.opensuse.security:def:89073	P	Security update for u-boot (Important)	2020-11-09
oval:org.opensuse.security:def:127046	P	Security update for u-boot (Important)	2020-11-09
oval:org.opensuse.security:def:89331	P	Security update for u-boot (Important)	2020-11-09
oval:org.opensuse.security:def:110842	P	Security update for u-boot (Important)	2020-11-07
oval:org.opensuse.security:def:117329	P	Security update for u-boot (Important)	2020-11-05
oval:org.opensuse.security:def:108489	P	Security update for u-boot (Important)	2020-11-05
oval:org.opensuse.security:def:75719	P	Security update for u-boot (Important)	2020-11-05
oval:org.opensuse.security:def:107814	P	Security update for u-boot (Important)	2020-11-05
oval:com.ubuntu.bionic:def:2020106480000000	V	CVE-2020-10648 on Ubuntu 18.04 LTS (bionic) - medium.	2020-03-19
oval:com.ubuntu.xenial:def:2020106480000000	V	CVE-2020-10648 on Ubuntu 16.04 LTS (xenial) - medium.	2020-03-19

BACK