Vulnerability CVE-2020-17490

Vulnerability Name:

CVE-2020-17490 (CCN-191326)

Assigned:

2020-11-03

Published:

2020-11-03

Updated:

2021-03-30

Summary:

The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions.

CVSS v3 Severity:

5.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
4.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): None Availibility (A): None

7.5 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
6.5 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): High Availibility (A): None

CVSS v2 Severity:

2.1 Low (CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

7.8 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:C/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Complete Availibility (A): None

Vulnerability Type:

CWE-732

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2020-17490

Source: SUSE
Type: Third Party Advisory
openSUSE-SU-2020:1868

Source: MISC
Type: Release Notes, Vendor Advisory
https://docs.saltstack.com/en/latest/topics/releases/index.html#latest-branch-release

Source: XF
Type: UNKNOWN
saltstack-cve202017490-weak-security(191326)

Source: MLIST
Type: Mailing List, Third Party Advisory
[debian-lts-announce] 20201204 [SECURITY] [DLA 2480-1] salt security update

Source: FEDORA
Type: Third Party Advisory
FEDORA-2020-9e040bd6dd

Source: GENTOO
Type: Third Party Advisory
GLSA-202011-13

Source: DEBIAN
Type: Third Party Advisory
DSA-4837

Source: CCN
Type: SaltStack Web site
Active SaltStack CVEs Announced

Source: CONFIRM
Type: Vendor Advisory
https://www.saltstack.com/blog/on-november-3-2020-saltstack-publicly-disclosed-three-new-cves/

Vulnerable Configuration:

Configuration 1:

cpe:/a:saltstack:salt:*:*:*:*:*:*:*:* (Version < 2015.8.10)

OR cpe:/a:saltstack:salt:*:*:*:*:*:*:*:* (Version >= 2015.8.11 and < 2015.8.13)

OR cpe:/a:saltstack:salt:*:*:*:*:*:*:*:* (Version >= 2016.3.0 and < 2016.3.4)

OR cpe:/a:saltstack:salt:*:*:*:*:*:*:*:* (Version >= 2016.3.5 and < 2016.3.6)

OR cpe:/a:saltstack:salt:*:*:*:*:*:*:*:* (Version >= 2016.3.7 and < 2016.3.8)

OR cpe:/a:saltstack:salt:*:*:*:*:*:*:*:* (Version >= 2016.11.0 and < 2016.11.3)

OR cpe:/a:saltstack:salt:*:*:*:*:*:*:*:* (Version >= 2016.11.4 and < 2016.11.6)

OR cpe:/a:saltstack:salt:*:*:*:*:*:*:*:* (Version >= 2016.11.7 and < 2016.11.10)

OR cpe:/a:saltstack:salt:*:*:*:*:*:*:*:* (Version >= 2017.5.0 and < 2017.7.4)

OR cpe:/a:saltstack:salt:*:*:*:*:*:*:*:* (Version >= 2017.7.5 and < 2017.7.8)

OR cpe:/a:saltstack:salt:*:*:*:*:*:*:*:* (Version >= 2018.2.0 and < 2018.3.5)

OR cpe:/a:saltstack:salt:*:*:*:*:*:*:*:* (Version >= 2019.2.0 and < 2019.2.5)

OR cpe:/a:saltstack:salt:3001:*:*:*:*:*:*:*

OR cpe:/a:saltstack:salt:*:*:*:*:*:*:*:* (Version >= 3000.0 and < 3000.3)

Configuration 2:

cpe:/o:debian:debian_linux:9.0:*:*:*:*:*:*:*

OR cpe:/o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:saltstack:salt_2019:2.0:*:*:*:*:*:*:*

OR cpe:/a:saltstack:salt:3000:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:202017490	V	CVE-2020-17490	2023-06-22
oval:org.opensuse.security:def:8092	P	salt-transactional-update-3005.1-150500.2.13 on GA media (Moderate)	2023-06-20
oval:org.opensuse.security:def:7784	P	python3-salt-3005.1-150500.2.13 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:51992	P	Security update for vim (Moderate)	2023-01-30
oval:org.opensuse.security:def:51979	P	Security update for conmon (Moderate)	2022-12-29
oval:org.opensuse.security:def:51569	P	Security update for libarchive (Low)	2022-11-23
oval:org.opensuse.security:def:51961	P	Security update for containerized-data-importer (Important)	2022-11-23
oval:org.opensuse.security:def:51948	P	Security update for python-rsa (Moderate)	2022-11-10
oval:org.opensuse.security:def:622	P	Security update for bind (Important) (in QA)	2022-09-23
oval:org.opensuse.security:def:4676	P	Security update for the Linux Kernel (Live Patch 22 for SLE 12 SP5) (Important)	2022-08-11
oval:org.opensuse.security:def:4655	P	Security update for the Linux Kernel (Live Patch 26 for SLE 12 SP5) (Important)	2022-07-21
oval:org.opensuse.security:def:4648	P	Security update for the Linux Kernel (Live Patch 32 for SLE 12 SP5) (Important)	2022-07-19
oval:org.opensuse.security:def:3181	P	libgssglue1-0.4-3.76 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3522	P	hardlink-1.0-6.38 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3537	P	kdump-0.8.16-9.2 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:94811	P	python3-salt-3004-150400.6.16 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:95152	P	salt-api-3004-150400.6.16 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:95167	P	salt-transactional-update-3004-150400.6.16 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:291	P	python3-salt-3002.2-6.1 on GA media (Moderate)	2022-06-13
oval:org.opensuse.security:def:5243	P	Security update for e2fsprogs (Important)	2022-05-17
oval:org.opensuse.security:def:4590	P	Security update for the Linux Kernel (Live Patch 26 for SLE 12 SP5) (Important)	2022-04-25
oval:org.opensuse.security:def:4583	P	Security update for the Linux Kernel (Live Patch 21 for SLE 12 SP5) (Important)	2022-04-25
oval:org.opensuse.security:def:5221	P	Security update for tomcat (Important)	2022-04-21
oval:org.opensuse.security:def:4578	P	Security update for the Linux Kernel (Live Patch 20 for SLE 12 SP5) (Important)	2022-04-15
oval:org.opensuse.security:def:4573	P	Security update for the Linux Kernel (Important)	2022-04-14
oval:org.opensuse.security:def:4574	P	Security update for the Linux Kernel (Live Patch 28 for SLE 12 SP5) (Important)	2022-04-14
oval:org.opensuse.security:def:4567	P	Security update for the Linux Kernel (Live Patch 21 for SLE 12 SP5) (Important)	2022-04-13
oval:org.opensuse.security:def:4703	P	Security update for the Linux Kernel (Live Patch 21 for SLE 12 SP5) (Important)	2022-03-29
oval:org.opensuse.security:def:4711	P	Security update for the Linux Kernel (Live Patch 26 for SLE 12 SP5) (Important)	2022-03-29
oval:org.opensuse.security:def:4704	P	Security update for the Linux Kernel (Live Patch 18 for SLE 12 SP5) (Important)	2022-03-29
oval:org.opensuse.security:def:4709	P	Security update for the Linux Kernel (Live Patch 24 for SLE 12 SP5) (Important)	2022-03-29
oval:org.opensuse.security:def:5362	P	Security update for MozillaFirefox (Important)	2022-03-09
oval:org.opensuse.security:def:4693	P	Security update for the Linux Kernel (Live Patch 23 for SLE 12 SP5) (Important)	2022-03-01
oval:org.opensuse.security:def:4689	P	Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP5) (Critical)	2022-02-16
oval:org.opensuse.security:def:4243	P	Security update for MozillaFirefox (Important) (in QA)	2022-01-14
oval:org.opensuse.security:def:52036	P	Security update for MozillaFirefox (Important) (in QA)	2022-01-14
oval:org.opensuse.security:def:52035	P	Security update for java-1_8_0-ibm (Important) (in QA)	2022-01-04
oval:org.opensuse.security:def:67375	P	Security update for libvirt (Important)	2022-01-04
oval:org.opensuse.security:def:51726	P	Security update for chrony (Moderate)	2021-12-22
oval:org.opensuse.security:def:4240	P	Security update for openssh (Important)	2021-12-22
oval:org.opensuse.security:def:51725	P	Security update for xorg-x11-server (Important)	2021-12-20
oval:org.opensuse.security:def:4541	P	Security update for the Linux Kernel (Live Patch 21 for SLE 12 SP5) (Important)	2021-12-14
oval:org.opensuse.security:def:4235	P	Security update for wireshark (Moderate)	2021-12-06
oval:org.opensuse.security:def:67348	P	Security update for openssh (Important)	2021-12-06
oval:org.opensuse.security:def:51707	P	Security update for the Linux Kernel (Important)	2021-12-06
oval:org.opensuse.security:def:68310	P	Security update for the Linux Kernel (Important)	2021-12-06
oval:org.opensuse.security:def:73752	P	Security update for brotli (Moderate)	2021-12-06
oval:org.opensuse.security:def:4523	P	Security update for aaa_base (Moderate)	2021-12-03
oval:org.opensuse.security:def:67340	P	Security update for aaa_base (Moderate)	2021-12-03
oval:org.opensuse.security:def:4287	P	Security update for the Linux Kernel (Important)	2021-12-02
oval:org.opensuse.security:def:4521	P	Security update for go1.17 (Moderate)	2021-12-01
oval:org.opensuse.security:def:4233	P	Security update for openexr (Moderate)	2021-12-01
oval:org.opensuse.security:def:51700	P	Security update for webkit2gtk3 (Important)	2021-11-23
oval:org.opensuse.security:def:51691	P	Security update for samba (Important)	2021-11-19
oval:org.opensuse.security:def:32220	P	Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP3) (Important)	2021-11-19
oval:org.opensuse.security:def:70312	P	Security update for tomcat (Important)	2021-11-16
oval:org.opensuse.security:def:4284	P	Security update for samba (Important)	2021-11-10
oval:org.opensuse.security:def:64797	P	Security update for samba and ldb (Important)	2021-11-10
oval:org.opensuse.security:def:66969	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:64601	P	Security update for wireguard-tools (Moderate)	2021-10-26
oval:org.opensuse.security:def:32209	P	Security update for postgresql10 (Important)	2021-10-20
oval:org.opensuse.security:def:74667	P	Security update for rpm (Important)	2021-10-15
oval:org.opensuse.security:def:4160	P	Security update for libqt5-qtsvg (Moderate)	2021-10-12
oval:org.opensuse.security:def:1220	P	Security update for the Linux Kernel (Important)	2021-10-12
oval:org.opensuse.security:def:4727	P	Security update for the Linux Kernel (Important)	2021-09-23
oval:org.opensuse.security:def:51667	P	Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP3) (Important)	2021-09-23
oval:org.opensuse.security:def:63212	P	libecpg6-10.6-6.25 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:96613	P	libXi-devel-1.7.9-1.23 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:96586	P	hardlink-1.0+git.e66999f-1.25 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:96612	P	libXfont2-2-2.0.3-1.17 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:49449	P	Security update for nodejs12 (Important)	2021-08-24
oval:org.opensuse.security:def:51637	P	Security update for python-PyYAML (Important)	2021-08-24
oval:org.opensuse.security:def:4148	P	Security update for libass (Important)	2021-08-20
oval:org.opensuse.security:def:70793	P	Security update for the Linux Kernel (Important)	2021-08-17
oval:org.opensuse.security:def:14050	P	unzip-6.00-32.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14391	P	systemtap-3.0-10.15 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:13805	P	dhcp-4.3.3-9.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14734	P	perl-XML-LibXML-2.0019-6.3.5 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:13981	P	logrotate-3.8.7-3.14 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14006	P	perl-Tk-804.031-3.76 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14712	P	ntp-4.2.8p12-64.8.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14380	P	shim-0.9-23.14 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14132	P	expat-2.1.0-20.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:64553	P	Security update for cpio (Important)	2021-08-16
oval:org.opensuse.security:def:13852	P	jakarta-commons-fileupload-1.1.1-120.113 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:13869	P	libXRes1-1.0.7-3.53 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:13888	P	libarchive13-3.1.2-22.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:15065	P	libquicktime0-1.2.4-14.3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14311	P	libvte9-0.28.2-19.7 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14336	P	p7zip-9.20.1-6.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14074	P	DirectFB-1.7.1-6.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:15043	P	libopenvswitch-2_11-0-2.11.1-1.75 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14181	P	krb5-1.12.5-39.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14199	P	libXpm4-3.5.11-5.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14218	P	libdcerpc-binding0-32bit-4.6.5+git.27.6afd48b1083-2.11 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14061	P	xen-4.7.0_12-23.4 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14405	P	w3m-0.5.3.git20161120-160.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:1775	P	Security update for the Linux Kernel (Important)	2021-08-14
oval:org.opensuse.security:def:63372	P	salt-api-3002.2-6.1 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:63414	P	apache2-mod_php7-7.4.6-3.17.1 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:101398	P	salt-api-3002.2-6.1 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:2413	P	nping-7.70-3.12.1 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:2283	P	salt-api-3002.2-6.1 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:1901	P	apache-pdfbox-1.8.16-1.68 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:71763	P	apache-commons-io-2.6-3.3.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:1906	P	bsh2-2.0.0.b6-10.65 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62309	P	python3-salt-3002.2-6.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:1898	P	FastCGI-2.4.0-2.23 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:1907	P	build-20210120-3.6.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:1910	P	crash-7.2.9-21.4 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:1923	P	graphviz-perl-2.40.1-6.6.8 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:72050	P	python3-salt-3002.2-6.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:101067	P	python3-salt-3002.2-6.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:72767	P	zlib-devel-32bit-1.2.11-3.21.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:101147	P	firewall-applet-0.9.3-1.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:1922	P	gradle-4.4.1-1.87 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:72741	P	libtdsodbc0-1.1.36-3.3.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:1917	P	gdb-10.1-8.24.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:1919	P	glibc-devel-32bit-2.31-7.20 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:4210	P	Security update for djvulibre (Important)	2021-08-05
oval:org.opensuse.security:def:51625	P	Security update for the Linux Kernel (Live Patch 34 for SLE 12 SP3) (Important)	2021-07-27
oval:org.opensuse.security:def:4460	P	Security update for the Linux Kernel (Live Patch 10 for SLE 12 SP5) (Important)	2021-07-27
oval:org.opensuse.security:def:51621	P	Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP3) (Important)	2021-07-27
oval:org.opensuse.security:def:69506	P	Security update for curl (Moderate)	2021-07-21
oval:org.opensuse.security:def:51927	P	Security update for the Linux Kernel (Important)	2021-07-21
oval:org.opensuse.security:def:4444	P	Security update for the Linux Kernel (Live Patch 15 for SLE 12 SP5) (Important)	2021-07-15
oval:org.opensuse.security:def:70824	P	Security update for ffmpeg (Important)	2021-07-14
oval:org.opensuse.security:def:4277	P	Security update for the Linux Kernel (Important)	2021-07-14
oval:org.opensuse.security:def:4560	P	Security update for go1.16 (Important)	2021-06-28
oval:org.opensuse.security:def:4137	P	Security update for gupnp (Important)	2021-06-24
oval:org.opensuse.security:def:51917	P	Security update for cryptctl (Important)	2021-06-23
oval:org.opensuse.security:def:4432	P	Security update for the Linux Kernel (Live Patch 12 for SLE 12 SP5) (Important)	2021-06-18
oval:org.opensuse.security:def:32127	P	Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP3) (Important)	2021-06-18
oval:org.opensuse.security:def:32116	P	Security update for ucode-intel (Important)	2021-06-10
oval:org.opensuse.security:def:70417	P	Security update for spice-gtk (Moderate)	2021-06-10
oval:org.opensuse.security:def:48621	P	sblim-sfcb-1.4.8-8.2 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48753	P	pidgin-otr-4.0.0-6.18 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48845	P	kernel-default-extra-4.4.73-5.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48551	P	libspice-client-glib-2_0-8-0.31-7.2 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48747	P	libtag1-32bit-1.9.1-1.265 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:63552	P	libraw-devel-0.18.9-1.9 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48884	P	rhythmbox-3.4-6.14 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:4724	P	Security update for the Linux Kernel (Important)	2021-06-08
oval:org.opensuse.security:def:73634	P	Security update for gstreamer, gstreamer-plugins-bad, gstreamer-plugins-base, gstreamer-plugins-good, gstreamer-plugins-ugly (Important)	2021-06-01
oval:org.opensuse.security:def:4193	P	Security update for libass (Moderate)	2021-05-20
oval:org.opensuse.security:def:64690	P	Security update for libxml2 (Important)	2021-05-19
oval:org.opensuse.security:def:64689	P	Security update for graphviz (Critical)	2021-05-19
oval:org.opensuse.security:def:51883	P	Security update for bind (Important)	2021-05-04
oval:org.opensuse.security:def:64489	P	Security update for p7zip (Moderate)	2021-05-04
oval:org.opensuse.security:def:29352	P	Security update for libnettle (Important)	2021-04-28
oval:org.opensuse.security:def:4399	P	Security update for the Linux Kernel (Live Patch 9 for SLE 12 SP5) (Important)	2021-04-28
oval:org.opensuse.security:def:4121	P	Security update for librsvg (Important)	2021-04-28
oval:org.opensuse.security:def:51536	P	Security update for xorg-x11-server (Important)	2021-04-14
oval:org.opensuse.security:def:4721	P	Security update for the Linux Kernel (Important)	2021-04-13
oval:org.opensuse.security:def:51535	P	Security update for spamassassin (Important)	2021-04-12
oval:org.opensuse.security:def:51138	P	Security update for fwupdate (Important)	2021-04-09
oval:org.opensuse.security:def:4117	P	Security update for openexr (Moderate)	2021-04-07
oval:org.opensuse.security:def:94434	P	(Low)	2021-03-29
oval:org.opensuse.security:def:51191	P	Security update for openssl (Moderate)	2021-03-24
oval:org.opensuse.security:def:32277	P	Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP3) (Important)	2021-03-17
oval:org.opensuse.security:def:51181	P	Security update for glib2 (Important)	2021-03-16
oval:org.opensuse.security:def:67061	P	Security update for openssl-1_0_0 (Moderate)	2021-03-11
oval:org.opensuse.security:def:51741	P	Security update for grub2 (Important)	2021-03-02
oval:org.opensuse.security:def:32266	P	Security update for python-cryptography (Important)	2021-03-02
oval:org.opensuse.security:def:51165	P	Security update for java-1_7_1-ibm (Important)	2021-02-18
oval:org.opensuse.security:def:4176	P	Security update for MozillaFirefox (Low)	2021-02-10
oval:org.opensuse.security:def:51552	P	Security update for openldap2 (Moderate)	2021-01-15
oval:org.opensuse.security:def:4291	P	Security update for crmsh (Important)	2021-01-12
oval:org.opensuse.security:def:4051	P	Security update for openssh (Moderate)	2020-12-17
oval:org.opensuse.security:def:29305	P	Security update for python (Important)	2020-12-11
oval:org.opensuse.security:def:64447	P	Security update for the Linux Kernel (Important)	2020-12-10
oval:org.opensuse.security:def:51087	P	Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP2) (Important)	2020-12-07
oval:org.opensuse.security:def:51855	P	Security update for postgresql12 (Important)	2020-12-04
oval:org.opensuse.security:def:64224	P	Security update for gcc10, nvptx-tools (Moderate)	2020-12-04
oval:org.opensuse.security:def:71650	P	libxcb-composite0-1.13-3.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:4003	P	liblcms2-devel-2.7-9.7.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:4020	P	libopenssl-1_0_0-devel-1.0.2p-3.11.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:4059	P	libsvn_auth_gnome_keyring-1-0-1.10.6-1.12 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3888	P	fontconfig-devel-2.11.1-7.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:63645	P	xorg-x11-server-wayland-1.20.3-20.11 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3919	P	hplip-devel-3.16.11-1.33 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3865	P	cairo-devel-1.15.2-25.3.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3931	P	libQt5Bootstrap-devel-static-5.6.2-6.15.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:72651	P	apache-commons-compress-1.19-1.63 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3963	P	libcares-devel-1.9.1-9.4.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:4019	P	libofx-0.9.9-3.7.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:48977	P	bogofilter-1.2.4-5.3 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:4036	P	libpoppler44-0.24.4-14.13.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:4055	P	libspice-server-devel-0.12.8-12.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3904	P	glib2-devel-2.48.2-12.15.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3935	P	libXcursor-devel-1.1.14-4.6.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:4075	P	libvpx-devel-1.3.0-3.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3947	P	libXt-devel-1.1.4-3.57 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:4048	P	libsaml-devel-2.5.5-3.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:4067	P	libtool-2.4.2-17.4.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:4071	P	libusbmuxd-devel-1.0.10-2.3 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:4078	P	libwsman-devel-2.4.11-21.8.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:4109	P	pam-devel-1.1.8-24.27.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:48993	P	gstreamer-0_10-plugins-base-0.10.36-18.3.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:4043	P	libraptor-devel-2.0.10-3.63 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:4064	P	libtidy-0_99-0-1.0.20100204cvs-26.2.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:49291	P	Security update for python-pip (Moderate)	2020-12-02
oval:org.opensuse.security:def:4253	P	Security update for the Linux Kernel (Live Patch 9 for SLE 15) (Important)	2020-12-02
oval:org.opensuse.security:def:4247	P	Security update for the Linux Kernel (Important)	2020-12-02
oval:org.opensuse.security:def:4885	P	Security update for grub2 (Important)	2020-12-02
oval:org.opensuse.security:def:4856	P	Security update for squid (Important)	2020-12-02
oval:org.opensuse.security:def:4867	P	Security update for squid (Important)	2020-12-02
oval:org.opensuse.security:def:5505	P	Security update for rmt-server (Important)	2020-12-02
oval:org.opensuse.security:def:2561	P	Security update for MozillaThunderbird and mozilla-nspr (Important)	2020-12-02
oval:org.opensuse.security:def:5387	P	Security update for Salt (Critical)	2020-12-02
oval:org.opensuse.security:def:4929	P	Security update for xen (Important)	2020-12-02
oval:org.opensuse.security:def:4850	P	Security update for postgresql10 (Important)	2020-12-02
oval:org.opensuse.security:def:4906	P	Security update for salt (Critical)	2020-12-02
oval:org.opensuse.security:def:5533	P	Security update for Salt (Critical)	2020-12-02
oval:org.opensuse.security:def:4843	P	Security update for apache2 (Important)	2020-12-02
oval:org.opensuse.security:def:4950	P	Security update for salt (Critical)	2020-12-02
oval:org.opensuse.security:def:4790	P	Security update for util-linux and shadow (Moderate)	2020-12-02
oval:org.opensuse.security:def:4716	P	Security update for mercurial (Low)	2020-12-02
oval:org.opensuse.security:def:2565	P	Security update for salt (Critical)	2020-12-02
oval:org.opensuse.security:def:4813	P	Security update for ovmf (Important)	2020-12-02
oval:org.opensuse.security:def:50913	P	Security update for git (Important)	2020-12-01
oval:org.opensuse.security:def:28314	P	Security update for openssl (Moderate)	2020-12-01
oval:org.opensuse.security:def:38574	P	cyrus-sasl on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:39212	P	libsilc-1_1-2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:51017	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:28477	P	Security update for yast2-storage (Moderate)	2020-12-01
oval:org.opensuse.security:def:49500	P	accountsservice on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:64957	P	Security update for libxml2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:67437	P	Security update for salt (Critical)	2020-12-01
oval:org.opensuse.security:def:51355	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:28530	P	Security update for Mozilla Firefox	2020-12-01
oval:org.opensuse.security:def:28667	P	Security update for Mozilla Firefox	2020-12-01
oval:org.opensuse.security:def:29316	P	Security update for compat-openssl097g	2020-12-01
oval:org.opensuse.security:def:69311	P	Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP1) (Important)	2020-12-01
oval:org.opensuse.security:def:53563	P	Security update for Salt (Critical)	2020-12-01
oval:org.opensuse.security:def:51263	P	Security update for gstreamer-plugins-base (Important)	2020-12-01
oval:org.opensuse.security:def:32353	P	Security update for squid3 (Moderate)	2020-12-01
oval:org.opensuse.security:def:28568	P	Security update for KVM	2020-12-01
oval:org.opensuse.security:def:65998	P	Security update for php7 (Moderate)	2020-12-01
oval:org.opensuse.security:def:33407	P	Security update for SUSE Manager Client Tools (Critical)	2020-12-01
oval:org.opensuse.security:def:51430	P	Security update for libarchive (Moderate)	2020-12-01
oval:org.opensuse.security:def:32509	P	fetchmail on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:51816	P	Security update for ImageMagick (Moderate)	2020-12-01
oval:org.opensuse.security:def:53092	P	Security update for rmt-server (Important)	2020-12-01
oval:org.opensuse.security:def:32565	P	librpcsecgss on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:74128	P	Security update for salt (Critical)	2020-12-01
oval:org.opensuse.security:def:69414	P	Security update for salt (Critical)	2020-12-01
oval:org.opensuse.security:def:64105	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:32625	P	NetworkManager-gnome on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52107	P	Security update for jasper (Low)	2020-12-01
oval:org.opensuse.security:def:70712	P	Security update for icu (Important)	2020-12-01
oval:org.opensuse.security:def:66090	P	Security update for SUSE Manager 4.0 (Critical)	2020-12-01
oval:org.opensuse.security:def:28184	P	Security update for krb5 (Important)	2020-12-01
oval:org.opensuse.security:def:49128	P	kernel-firmware on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:64239	P	dhcp on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38502	P	tpm2.0-tools on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52281	P	Security update for libssh2_org (Moderate)	2020-12-01
oval:org.opensuse.security:def:74005	P	Security update for samba (Important)	2020-12-01
oval:org.opensuse.security:def:53158	P	Security update for salt (Critical)	2020-12-01
oval:org.opensuse.security:def:50924	P	Security update for mutt (Important)	2020-12-01
oval:org.opensuse.security:def:28241	P	Security update for libvorbis (Moderate)	2020-12-01
oval:org.opensuse.security:def:49349	P	unzip on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52360	P	Security update for ceph (Important)	2020-12-01
oval:org.opensuse.security:def:53636	P	Security update for mozilla-nspr, mozilla-nss (Important)	2020-12-01
oval:org.opensuse.security:def:28325	P	Security update for perl (Moderate)	2020-12-01
oval:org.opensuse.security:def:49435	P	libexiv2-26 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:64899	P	Security update for lz4 (Moderate)	2020-12-01
oval:org.opensuse.security:def:49520	P	gnome-shell on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50796	P	Security update for samba (Moderate)	2020-12-01
oval:org.opensuse.security:def:28623	P	Security update for zypper	2020-12-01
oval:org.opensuse.security:def:67447	P	Security update for SUSE Manager Server 4.1 (Important)	2020-12-01
oval:org.opensuse.security:def:51394	P	Security update for cups (Important)	2020-12-01
oval:org.opensuse.security:def:28678	P	Security update for MozillaFirefox, mozilla-nss (Important)	2020-12-01
oval:org.opensuse.security:def:69401	P	Security update for samba (Important)	2020-12-01
oval:org.opensuse.security:def:53708	P	Security update for Salt (Critical)	2020-12-01
oval:org.opensuse.security:def:32364	P	Security update for sudo (Important)	2020-12-01
oval:org.opensuse.security:def:28579	P	Security update for poppler	2020-12-01
oval:org.opensuse.security:def:66078	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:39254	P	Security update for Salt (Critical)	2020-12-01
oval:org.opensuse.security:def:32520	P	glib2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:51769	P	Security update for gcc9 (Moderate)	2020-12-01
oval:org.opensuse.security:def:32675	P	gnome-screensaver on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53268	P	Security update for postgresql10 (Moderate)	2020-12-01
oval:org.opensuse.security:def:63778	P	Security update for java-1_8_0-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:32576	P	mailman on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:32719	P	libneon27 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33357	P	Security update for openssl1 (Important)	2020-12-01
oval:org.opensuse.security:def:74159	P	Security update for salt (Critical)	2020-12-01
oval:org.opensuse.security:def:38463	P	python-pywbem on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52246	P	Security update for samba (Important)	2020-12-01
oval:org.opensuse.security:def:66170	P	Security update for salt (Critical)	2020-12-01
oval:org.opensuse.security:def:50518	P	Security update for libssh (Important)	2020-12-01
oval:org.opensuse.security:def:49418	P	libIlmImf-2_2-23 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:74034	P	Security update for ceph (Moderate)	2020-12-01
oval:org.opensuse.security:def:53337	P	Security update for salt (Critical)	2020-12-01
oval:org.opensuse.security:def:50963	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:51435	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:64345	P	libldb-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:49596	P	python3-bottle on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:74541	P	Security update for wireshark (Moderate)	2020-12-01
oval:org.opensuse.security:def:64976	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:51126	P	Security update for taglib (Low)	2020-12-01
oval:org.opensuse.security:def:28607	P	Security update for Xen and libvirt	2020-12-01
oval:org.opensuse.security:def:49668	P	libical-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50944	P	Security update for java-11-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:51230	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:28634	P	Security update for augeas	2020-12-01
oval:org.opensuse.security:def:72859	P	Security update for salt (Critical)	2020-12-01
oval:org.opensuse.security:def:67474	P	Security update for salt (Critical)	2020-12-01
oval:org.opensuse.security:def:28089	P	Security update for ghostscript-library (Important)	2020-12-01
oval:org.opensuse.security:def:65063	P	Security update for salt (Critical)	2020-12-01
oval:org.opensuse.security:def:63848	P	Security update for libssh (Important)	2020-12-01
oval:org.opensuse.security:def:38195	P	git-core on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:51844	P	Security update for python3 (Important)	2020-12-01
oval:org.opensuse.security:def:32653	P	ecryptfs-utils-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50850	P	Security update for salt (Critical)	2020-12-01
oval:org.opensuse.security:def:50734	P	Security update for salt (Critical)	2020-12-01
oval:org.opensuse.security:def:63995	P	Security update for java-1_7_1-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:38355	P	libpulse-mainloop-glib0-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:32686	P	java-1_6_0-ibm on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53312	P	Security update for squid (Important)	2020-12-01
oval:org.opensuse.security:def:50897	P	Recommended update for ruby2.5 (Important)	2020-12-01
oval:org.opensuse.security:def:38414	P	mailx on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52174	P	Security update for samba (Moderate)	2020-12-01
oval:org.opensuse.security:def:32730	P	librsvg on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33368	P	Security update for wget (Moderate)	2020-12-01
oval:org.opensuse.security:def:29341	P	Security update for SUSE Manager Client Tools (Critical)	2020-12-01
oval:org.opensuse.security:def:51001	P	Security update for salt (Critical)	2020-12-01
oval:org.opensuse.security:def:28466	P	Security update for xorg-x11-libXfixes (Moderate)	2020-12-01
oval:org.opensuse.security:def:49353	P	wget on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:75144	P	Security update for salt (Critical)	2020-12-01
oval:org.opensuse.security:def:50728	P	Security update for git (Moderate)	2020-12-01
oval:org.opensuse.security:def:28519	P	Security update for openssl1 (Moderate)	2020-12-01
oval:org.opensuse.security:def:49565	P	libnetpbm-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:65069	P	Security update for openldap2 (Important)	2020-12-01
oval:org.opensuse.security:def:53381	P	Security update for salt (Critical)	2020-12-01
oval:org.opensuse.security:def:51451	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:75011	P	Security update for targetcli-fb (Moderate)	2020-12-01
oval:org.opensuse.security:def:65977	P	Security update for LibVNCServer (Important)	2020-12-01
oval:org.opensuse.security:def:33396	P	Security update for SUSE Manager Client Tools (Critical)	2020-12-01
oval:org.opensuse.security:def:37947	P	libpulse-mainloop-glib0-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:51301	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:28618	P	Security update for xorg-x11-libXp	2020-12-01
oval:org.opensuse.security:def:51800	P	Security update for mariadb (Important)	2020-12-01
oval:org.opensuse.security:def:53076	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:38048	P	python3-requests on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:51405	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:51811	P	Security update for libqt5-qtsvg (Moderate)	2020-12-01
oval:org.opensuse.security:def:68410	P	Security update for salt (Critical)	2020-12-01
oval:org.opensuse.security:def:28100	P	Security update for git (Moderate)	2020-12-01
oval:org.opensuse.security:def:38105	P	xscreensaver on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:32614	P	wireshark on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:70683	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:66067	P	Security update for salt (Critical)	2020-12-01
oval:org.opensuse.security:def:28173	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:32664	P	freeradius-server on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52141	P	Security update for mozilla-nss (Moderate)	2020-12-01
oval:org.opensuse.security:def:53140	P	Security update for salt (Critical)	2020-12-01
oval:org.opensuse.security:def:50750	P	Security update for sysstat (Low)	2020-12-01
oval:org.opensuse.security:def:28230	P	Security update for libtirpc (Moderate)	2020-12-01
oval:org.opensuse.security:def:49207	P	libopenssl-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52085	P	Security update for libvirt (Important)	2020-12-01
oval:org.opensuse.security:def:38530	P	yast2-users on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52217	P	Security update for tiff (Moderate)	2020-12-01
oval:org.opensuse.security:def:53493	P	Security update for java-1_8_0-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:110291	P	Security update for salt (Critical)	2020-11-07
oval:org.opensuse.security:def:98719	P	Security update for salt (Critical)	2020-11-06
oval:org.opensuse.security:def:91685	P	Security update for SUSE Manager 4.0 (Critical)	2020-11-06
oval:org.opensuse.security:def:105311	P	Security update for salt (Critical)	2020-11-06
oval:org.opensuse.security:def:95974	P	Security update for SUSE Manager Server 4.1 (Important)	2020-11-06
oval:org.opensuse.security:def:91769	P	Security update for salt (Critical)	2020-11-06
oval:org.opensuse.security:def:76494	P	Security update for salt (Critical)	2020-11-06
oval:org.opensuse.security:def:105409	P	Security update for salt (Critical)	2020-11-06
oval:org.opensuse.security:def:90388	P	Security update for salt (Critical)	2020-11-06
oval:org.opensuse.security:def:98621	P	Security update for salt (Critical)	2020-11-06
oval:org.opensuse.security:def:91656	P	Security update for salt (Critical)	2020-11-06
oval:org.opensuse.security:def:104043	P	Security update for salt (Critical)	2020-11-06
oval:org.opensuse.security:def:110839	P	Security update for salt (Critical)	2020-11-05
oval:org.opensuse.security:def:102706	P	Security update for salt (Critical)	2020-11-04
oval:org.opensuse.security:def:95925	P	Security update for salt (Critical)	2020-11-04
oval:org.opensuse.security:def:109304	P	Security update for salt (Critical)	2020-11-04
oval:org.opensuse.security:def:117328	P	Security update for salt (Critical)	2020-11-04
oval:org.opensuse.security:def:109372	P	Security update for salt (Critical)	2020-11-04
oval:org.opensuse.security:def:118395	P	Security update for salt (Critical)	2020-11-04
oval:org.opensuse.security:def:96016	P	Security update for salt (Critical)	2020-11-04
oval:org.opensuse.security:def:118468	P	Security update for salt (Critical)	2020-11-04
oval:org.opensuse.security:def:102638	P	Security update for salt (Critical)	2020-11-04
oval:org.opensuse.security:def:76515	P	Security update for salt (Critical)	2020-11-04
oval:org.opensuse.security:def:107813	P	Security update for salt (Critical)	2020-11-04

BACK