Vulnerability Name:

CVE-2020-5247 (CCN-177048)

Assigned:2020-02-28
Published:2020-02-28
Updated:2022-10-12
Summary:In Puma (RubyGem) before 4.3.2 and before 3.12.3, if an application using Puma allows untrusted input in a response header, an attacker can use newline characters (i.e. `CR`, `LF` or`/r`, `/n`) to end the header and inject malicious content, such as additional headers or an entirely new response body. This vulnerability is known as HTTP Response Splitting. While not an attack in itself, response splitting is a vector for several other attacks, such as cross-site scripting (XSS). This is related to CVE-2019-16254, which fixed this vulnerability for the WEBrick Ruby web server. This has been fixed in versions 4.3.2 and 3.12.3 by checking all headers for line endings and rejecting headers with those characters.
CVSS v3 Severity:7.5 High (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
6.5 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): High
Availibility (A): None
6.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
5.7 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): None
CVSS v2 Severity:5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): Partial
Availibility (A): None
6.4 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): None
Vulnerability Type:CWE-113
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2020-5247

Source: XF
Type: UNKNOWN
puma-cve20205247-response-splitting(177048)

Source: CCN
Type: puma GIT Repository
HTTP Response Splitting

Source: CONFIRM
Type: Mitigation, Third Party Advisory
https://github.com/puma/puma/security/advisories/GHSA-84j7-475p-hp8v

Source: MLIST
Type: Mailing List, Third Party Advisory
[debian-lts-announce] 20220525 [SECURITY] [DLA 3023-1] puma security update

Source: FEDORA
Type: Mailing List, Patch, Third Party Advisory
FEDORA-2020-fd87f90634

Source: FEDORA
Type: Mailing List, Third Party Advisory
FEDORA-2020-08092b4c97

Source: FEDORA
Type: Mailing List, Third Party Advisory
FEDORA-2020-a3f26a9387

Source: MISC
Type: Third Party Advisory
https://owasp.org/www-community/attacks/HTTP_Response_Splitting

Source: MISC
Type: Vendor Advisory
https://www.ruby-lang.org/en/news/2019/10/01/http-response-splitting-in-webrick-cve-2019-16254

Source: CCN
Type: Ruby Web site
CVE-2019-16254: HTTP response splitting in WEBrick (Additional fix)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:ruby-lang:ruby:*:*:*:*:*:*:*:* (Version >= 2.6.0 and <= 2.6.4)
  • OR cpe:/a:ruby-lang:ruby:*:*:*:*:*:*:*:* (Version >= 2.5.0 and <= 2.5.6)
  • OR cpe:/a:ruby-lang:ruby:*:*:*:*:*:*:*:* (Version >= 2.4.0 and <= 2.4.7)
  • OR cpe:/a:ruby-lang:ruby:*:*:*:*:*:*:*:* (Version <= 2.3.0)
  • OR cpe:/a:puma:puma:*:*:*:*:*:ruby:*:* (Version >= 4.0.0 and <= 4.3.2)
  • OR cpe:/a:puma:puma:*:*:*:*:*:ruby:*:* (Version <= 3.12.3)
  • OR cpe:/a:ruby-lang:ruby:2.7.0:preview1:*:*:*:*:*:*

  • Configuration 2:
  • cpe:/o:debian:debian_linux:9.0:*:*:*:*:*:*:*

  • Configuration 3:
  • cpe:/o:fedoraproject:fedora:30:*:*:*:*:*:*:*
  • OR cpe:/o:fedoraproject:fedora:31:*:*:*:*:*:*:*
  • OR cpe:/o:fedoraproject:fedora:32:*:*:*:*:*:*:*

  • Configuration CCN 1:
  • cpe:/a:puma:puma:3.12.1:*:*:*:*:ruby:*:*
  • OR cpe:/a:puma:puma:4.3.1:*:*:*:*:ruby:*:*

  • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:51991
    P
    Security update for systemd (Moderate)
    2023-01-27
    oval:org.opensuse.security:def:51977
    P
    Security update for systemd (Important)
    2022-12-28
    oval:org.opensuse.security:def:51567
    P
    Security update for net-snmp (Moderate)
    2022-12-13
    oval:org.opensuse.security:def:51575
    P
    Security update for tiff (Important)
    2022-12-13
    oval:org.opensuse.security:def:51956
    P
    Security update for the Linux Kernel (Important)
    2022-11-18
    oval:org.opensuse.security:def:51946
    P
    Security update for expat (Important)
    2022-11-07
    oval:org.opensuse.security:def:20205247
    V
    CVE-2020-5247
    2022-09-02
    oval:org.opensuse.security:def:4674
    P
    Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP5) (Important)
    2022-08-11
    oval:org.opensuse.security:def:4676
    P
    Security update for the Linux Kernel (Live Patch 22 for SLE 12 SP5) (Important)
    2022-08-11
    oval:org.opensuse.security:def:620
    P
    Security update for booth (Important)
    2022-08-01
    oval:org.opensuse.security:def:4653
    P
    Security update for the Linux Kernel (Live Patch 22 for SLE 12 SP5) (Important)
    2022-07-21
    oval:org.opensuse.security:def:4647
    P
    Security update for the Linux Kernel (Live Patch 30 for SLE 12 SP5) (Important)
    2022-07-19
    oval:org.opensuse.security:def:3801
    P
    sysvinit-tools-2.88+-101.3.1 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3818
    P
    w3m-0.5.3.git20161120-161.3.4 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3458
    P
    cpp48-4.8.5-31.20.1 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3807
    P
    tpm2.0-tools-3.1.4-1.12 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3520
    P
    gvim-7.4.326-17.3.1 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:95088
    P
    rmt-server-pubcloud-2.7.1-150400.1.7 on GA media (Moderate)
    2022-06-22
    oval:org.opensuse.security:def:95150
    P
    rmt-server-2.7.1-150400.1.7 on GA media (Moderate)
    2022-06-22
    oval:org.opensuse.security:def:5241
    P
    Security update for the Linux Kernel (Important)
    2022-05-16
    oval:org.opensuse.security:def:4602
    P
    Security update for the Linux Kernel (Live Patch 30 for SLE 12 SP5) (Important)
    2022-05-10
    oval:org.opensuse.security:def:4588
    P
    Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP5) (Important)
    2022-04-25
    oval:org.opensuse.security:def:4581
    P
    Security update for the Linux Kernel (Live Patch 22 for SLE 12 SP5) (Important)
    2022-04-23
    oval:org.opensuse.security:def:4576
    P
    Security update for the Linux Kernel (Live Patch 19 for SLE 12 SP5) (Important)
    2022-04-15
    oval:org.opensuse.security:def:4572
    P
    Security update for the Linux Kernel (Live Patch 29 for SLE 12 SP5) (Important)
    2022-04-13
    oval:org.opensuse.security:def:5219
    P
    Security update for netatalk (Important)
    2022-04-13
    oval:org.opensuse.security:def:4571
    P
    Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP5) (Important)
    2022-04-13
    oval:org.opensuse.security:def:4709
    P
    Security update for the Linux Kernel (Live Patch 24 for SLE 12 SP5) (Important)
    2022-03-29
    oval:org.opensuse.security:def:4565
    P
    Security update for the Linux Kernel (Live Patch 28 for SLE 12 SP5) (Important)
    2022-03-29
    oval:org.opensuse.security:def:4702
    P
    Security update for the Linux Kernel (Important)
    2022-03-09
    oval:org.opensuse.security:def:5360
    P
    Security update for expat (Important)
    2022-03-03
    oval:org.opensuse.security:def:4687
    P
    Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP5) (Critical)
    2022-02-16
    oval:org.opensuse.security:def:4663
    P
    Security update for the Linux Kernel (Live Patch 21 for SLE 12 SP5) (Important)
    2022-02-01
    oval:org.opensuse.security:def:4660
    P
    Security update for the Linux Kernel (Live Patch 17 for SLE 12 SP5) (Important)
    2022-02-01
    oval:org.opensuse.security:def:4646
    P
    Security update for the Linux Kernel (Live Patch 20 for SLE 12 SP5) (Important)
    2022-01-31
    oval:org.opensuse.security:def:51764
    P
    Security update for MozillaFirefox (Important) (in QA)
    2022-01-14
    oval:org.opensuse.security:def:4701
    P
    Security update for the Linux Kernel (Important)
    2022-01-13
    oval:org.opensuse.security:def:4242
    P
    Security update for SDL2 (Important) (in QA)
    2022-01-12
    oval:org.opensuse.security:def:59878
    P
    Security update for apache2 (Important)
    2022-01-12
    oval:org.opensuse.security:def:51767
    P
    Security update for libvirt (Important)
    2022-01-10
    oval:org.opensuse.security:def:67370
    P
    Security update for log4j (Moderate)
    2021-12-30
    oval:org.opensuse.security:def:60440
    P
    Security update for chrony (Moderate)
    2021-12-22
    oval:org.opensuse.security:def:51725
    P
    Security update for xorg-x11-server (Important)
    2021-12-20
    oval:org.opensuse.security:def:64825
    P
    Security update for python3 (Moderate)
    2021-12-16
    oval:org.opensuse.security:def:4239
    P
    Security update for fetchmail (Moderate)
    2021-12-14
    oval:org.opensuse.security:def:4539
    P
    Security update for the Linux Kernel (Live Patch 23 for SLE 12 SP5) (Important)
    2021-12-14
    oval:org.opensuse.security:def:64627
    P
    Security update for the Linux Kernel (Important)
    2021-12-06
    oval:org.opensuse.security:def:4171
    P
    Security update for wireshark (Moderate)
    2021-12-06
    oval:org.opensuse.security:def:4521
    P
    Security update for go1.17 (Moderate)
    2021-12-01
    oval:org.opensuse.security:def:67326
    P
    Security update for java-1_8_0-openjdk (Important)
    2021-11-23
    oval:org.opensuse.security:def:51698
    P
    Security update for postgresql96 (Important)
    2021-11-22
    oval:org.opensuse.security:def:4519
    P
    Security update for the Linux Kernel (Important)
    2021-11-19
    oval:org.opensuse.security:def:51692
    P
    Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP3) (Important)
    2021-11-19
    oval:org.opensuse.security:def:4232
    P
    Security update for MozillaFirefox (Important)
    2021-11-19
    oval:org.opensuse.security:def:4286
    P
    Security update for the Linux Kernel (Important)
    2021-11-19
    oval:org.opensuse.security:def:4230
    P
    Security update for ffmpeg (Moderate)
    2021-10-26
    oval:org.opensuse.security:def:51679
    P
    Security update for the Linux Kernel (Live Patch 37 for SLE 12 SP3) (Important)
    2021-10-18
    oval:org.opensuse.security:def:4282
    P
    Security update for the Linux Kernel (Important)
    2021-10-12
    oval:org.opensuse.security:def:4155
    P
    Security update for grilo (Important)
    2021-09-23
    oval:org.opensuse.security:def:51662
    P
    Security update for the Linux Kernel (Live Patch 40 for SLE 12 SP3) (Important)
    2021-09-23
    oval:org.opensuse.security:def:96560
    P
    firewall-macros-0.5.5-4.24.9 on GA media (Moderate)
    2021-09-21
    oval:org.opensuse.security:def:61607
    P
    mozilla-nspr-32bit-4.20-3.3.2 on GA media (Moderate)
    2021-09-21
    oval:org.opensuse.security:def:61606
    P
    minicom-2.7.1-1.19 on GA media (Moderate)
    2021-09-21
    oval:org.opensuse.security:def:96583
    P
    gstreamer-plugins-good-1.12.5-1.39 on GA media (Moderate)
    2021-09-21
    oval:org.opensuse.security:def:96587
    P
    hplip-devel-3.18.6-5.7.1 on GA media (Moderate)
    2021-09-21
    oval:org.opensuse.security:def:61630
    P
    procmail-3.22-2.34 on GA media (Moderate)
    2021-09-21
    oval:org.opensuse.security:def:51658
    P
    Security update for openssl (Low)
    2021-09-20
    oval:org.opensuse.security:def:56065
    P
    Security update for libesmtp (Important)
    2021-09-02
    oval:org.opensuse.security:def:69273
    P
    Security update for nodejs12 (Important)
    2021-08-30
    oval:org.opensuse.security:def:60344
    P
    Security update for spectre-meltdown-checker (Moderate)
    2021-08-27
    oval:org.opensuse.security:def:51645
    P
    Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP3) (Important)
    2021-08-25
    oval:org.opensuse.security:def:4478
    P
    Security update for the Linux Kernel (Live Patch 8 for SLE 12 SP5) (Important)
    2021-08-17
    oval:org.opensuse.security:def:63353
    P
    libvirglrenderer0-0.6.0-4.3.1 on GA media (Moderate)
    2021-08-10
    oval:org.opensuse.security:def:101396
    P
    rmt-server-2.6.8-1.2 on GA media (Moderate)
    2021-08-10
    oval:org.opensuse.security:def:4279
    P
    Security update for the Linux Kernel (Important)
    2021-08-10
    oval:org.opensuse.security:def:63131
    P
    rmt-server-pubcloud-2.6.8-1.2 on GA media (Moderate)
    2021-08-10
    oval:org.opensuse.security:def:63495
    P
    libstaroffice-0_0-0-0.0.7-7.3.2 on GA media (Moderate)
    2021-08-10
    oval:org.opensuse.security:def:63423
    P
    graphviz-gnome-2.40.1-6.3.2 on GA media (Moderate)
    2021-08-10
    oval:org.opensuse.security:def:63370
    P
    rmt-server-2.6.8-1.2 on GA media (Moderate)
    2021-08-10
    oval:org.opensuse.security:def:2042
    P
    rmt-server-pubcloud-2.6.8-1.2 on GA media (Moderate)
    2021-08-10
    oval:org.opensuse.security:def:63340
    P
    libfreebl3-hmac-3.53.1-3.51.1 on GA media (Moderate)
    2021-08-10
    oval:org.opensuse.security:def:2281
    P
    rmt-server-2.6.8-1.2 on GA media (Moderate)
    2021-08-10
    oval:org.opensuse.security:def:63445
    P
    oath-toolkit-2.6.2-1.15 on GA media (Moderate)
    2021-08-10
    oval:org.opensuse.security:def:62160
    P
    libjansson-devel-2.9-1.24 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:62356
    P
    xorg-x11-devel-7.6.1-1.16 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:72740
    P
    libpcp-devel-4.3.1-3.11.1 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:63023
    P
    libtidy-devel-5.4.0-3.2.1 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:62072
    P
    file-5.32-7.11.2 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:62266
    P
    nmap-7.70-3.12.1 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:72729
    P
    go1.16-1.16.3-1.11.1 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:4209
    P
    Security update for spice-vdagent (Important)
    2021-08-05
    oval:org.opensuse.security:def:51624
    P
    Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP3) (Important)
    2021-07-27
    oval:org.opensuse.security:def:4458
    P
    Security update for the Linux Kernel (Live Patch 12 for SLE 12 SP5) (Important)
    2021-07-27
    oval:org.opensuse.security:def:69505
    P
    Security update for the Linux Kernel (Important)
    2021-07-21
    oval:org.opensuse.security:def:55220
    P
    Security update for MozillaFirefox (Important)
    2021-07-16
    oval:org.opensuse.security:def:4442
    P
    Security update for the Linux Kernel (Live Patch 8 for SLE 12 SP5) (Important)
    2021-07-14
    oval:org.opensuse.security:def:51922
    P
    Security update for arpwatch (Important)
    2021-06-28
    oval:org.opensuse.security:def:4558
    P
    Security update for bouncycastle (Moderate)
    2021-06-25
    oval:org.opensuse.security:def:51916
    P
    Security update for libnettle (Important)
    2021-06-23
    oval:org.opensuse.security:def:4136
    P
    Security update for wireshark (Important)
    2021-06-22
    oval:org.opensuse.security:def:64718
    P
    Security update for salt (Critical)
    2021-06-21
    oval:org.opensuse.security:def:4430
    P
    Security update for the Linux Kernel (Live Patch 14 for SLE 12 SP5) (Important)
    2021-06-18
    oval:org.opensuse.security:def:70819
    P
    Security update for the Linux Kernel (Important)
    2021-06-15
    oval:org.opensuse.security:def:59744
    P
    Security update for the Linux Kernel (Important)
    2021-06-08
    oval:org.opensuse.security:def:63529
    P
    bluez-cups-5.48-3.7 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:4192
    P
    Security update for fribidi (Important)
    2021-05-19
    oval:org.opensuse.security:def:55899
    P
    Security update for djvulibre (Important)
    2021-05-19
    oval:org.opensuse.security:def:4272
    P
    Security update for the Linux Kernel (Important)
    2021-05-13
    oval:org.opensuse.security:def:51882
    P
    Security update for cups (Important)
    2021-04-30
    oval:org.opensuse.security:def:70779
    P
    Security update for MozillaThunderbird (Important)
    2021-04-29
    oval:org.opensuse.security:def:4397
    P
    Security update for the Linux Kernel (Live Patch 6 for SLE 12 SP5) (Important)
    2021-04-28
    oval:org.opensuse.security:def:4120
    P
    Security update for MozillaFirefox (Important)
    2021-04-23
    oval:org.opensuse.security:def:4722
    P
    Security update for the Linux Kernel (Important)
    2021-04-20
    oval:org.opensuse.security:def:64474
    P
    Security update for qemu (Important)
    2021-04-16
    oval:org.opensuse.security:def:60228
    P
    Security update for clamav (Important)
    2021-04-13
    oval:org.opensuse.security:def:51533
    P
    Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP3) (Important)
    2021-04-07
    oval:org.opensuse.security:def:52033
    P
    Security update for MozillaFirefox (Important)
    2021-03-31
    oval:org.opensuse.security:def:52031
    P
    Security update for openssl-1_1 (Important)
    2021-03-25
    oval:org.opensuse.security:def:60485
    P
    Security update for openssl-1_1 (Important)
    2021-03-25
    oval:org.opensuse.security:def:51190
    P
    Security update for nghttp2 (Important)
    2021-03-24
    oval:org.opensuse.security:def:51754
    P
    Security update for the Linux Kernel (Live Patch 34 for SLE 12 SP3) (Important)
    2021-03-17
    oval:org.opensuse.security:def:74693
    P
    Security update for ImageMagick (Moderate)
    2021-02-25
    oval:org.opensuse.security:def:55242
    P
    Security update for openvswitch (Important)
    2021-02-03
    oval:org.opensuse.security:def:4143
    P
    Security update for MozillaFirefox (Important)
    2021-02-01
    oval:org.opensuse.security:def:55219
    P
    Security update for sudo (Important)
    2021-01-27
    oval:org.opensuse.security:def:51588
    P
    Security update for ImageMagick (Important)
    2021-01-22
    oval:org.opensuse.security:def:64515
    P
    Security update for gdk-pixbuf (Moderate)
    2021-01-21
    oval:org.opensuse.security:def:4070
    P
    Security update for MozillaFirefox (Important)
    2021-01-12
    oval:org.opensuse.security:def:74567
    P
    Security update for python3 (Important)
    2020-12-23
    oval:org.opensuse.security:def:59448
    P
    Security update for MozillaFirefox (Critical)
    2020-12-21
    oval:org.opensuse.security:def:4112
    P
    Security update for webkit2gtk3 (Important)
    2020-12-17
    oval:org.opensuse.security:def:4050
    P
    Security update for webkit2gtk3 (Important)
    2020-12-17
    oval:org.opensuse.security:def:59442
    P
    Security update for mutt (Important)
    2020-12-07
    oval:org.opensuse.security:def:51086
    P
    Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP2) (Important)
    2020-12-07
    oval:org.opensuse.security:def:69376
    P
    Security update for gcc10, nvptx-tools (Moderate)
    2020-12-04
    oval:org.opensuse.security:def:4010
    P
    libmspack-devel-0.4-14.4 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:3959
    P
    libatalk12-3.1.0-3.3.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:61886
    P
    libsqlite3-0-3.28.0-3.9.2 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:3988
    P
    libical-devel-1.0.1-16.3.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63390
    P
    jakarta-commons-fileupload-1.1.1-2.82 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:61715
    P
    clamav-0.100.3-3.20.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:4058
    P
    libssh2-devel-1.4.3-20.9.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63157
    P
    libcacard-devel-2.5.3-1.27 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:72613
    P
    crash-7.2.1-7.15 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:3903
    P
    git-2.12.3-27.17.2 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:62925
    P
    rpm-build-4.14.1-10.16.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:4018
    P
    libntfs-3g-devel-2013.1.13-5.6.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:3971
    P
    libdmx-devel-1.1.3-3.51 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63055
    P
    python2-numpy-gnu-hpc-1.16.5-1.164 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:3844
    P
    MozillaFirefox-devel-68.1.0-109.92.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:4002
    P
    liblcms-devel-1.19-17.28 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:3875
    P
    dhcp-devel-4.3.3-10.16.4 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:3899
    P
    gegl-devel-0.2.0-14.3 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:62606
    P
    typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63289
    P
    nut-2.7.4-4.72 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63257
    P
    davfs2-1.5.4-1.4 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:3915
    P
    gtk2-devel-2.24.31-9.6.28 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:61692
    P
    amavisd-new-2.11.1-6.3.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63154
    P
    guestfs-data-1.38.0-3.52 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:4009
    P
    libmodplug-devel-0.8.9.0+git20170610.f6dd59a-15.4.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:61691
    P
    alsa-1.1.5-6.6.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:3856
    P
    augeas-devel-1.10.1-2.6 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:4015
    P
    libneon-devel-0.30.0-3.64 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:3887
    P
    flex-2.5.37-8.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:62396
    P
    bluez-5.48-3.7 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:3997
    P
    libjbig-devel-2.0-12.13 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:62702
    P
    libtag-devel-1.11.1-4.6.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63392
    P
    nodejs8-8.11.1-1.19 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:61799
    P
    libXt-devel-1.1.5-2.24 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:3976
    P
    libexpat-devel-2.1.0-21.9.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63251
    P
    apache2-mod_auth_openidc-2.3.8-3.7.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:4022
    P
    libopenssl-devel-1.0.2p-1.13 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:4077
    P
    libwpd-0_10-10-0.10.2-2.7.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:4108
    P
    osc-0.162.1-15.6.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:62488
    P
    pulseaudio-11.1-4.31 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:4005
    P
    liblouis-devel-2.6.4-6.6.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:4848
    P
    Security update for bind (Important)
    2020-12-02
    oval:org.opensuse.security:def:5503
    P
    Security update for libX11 (Moderate)
    2020-12-02
    oval:org.opensuse.security:def:4246
    P
    Security update for the Linux Kernel (Live Patch 0 for SLE 15) (Important)
    2020-12-02
    oval:org.opensuse.security:def:4924
    P
    Security update for freetds (Moderate)
    2020-12-02
    oval:org.opensuse.security:def:4865
    P
    Security update for apache2 (Important)
    2020-12-02
    oval:org.opensuse.security:def:4714
    P
    Security update for python-PyYAML (Important)
    2020-12-02
    oval:org.opensuse.security:def:4841
    P
    Security update for 389-ds (Important)
    2020-12-02
    oval:org.opensuse.security:def:5385
    P
    Security update for rmt-server (Important)
    2020-12-02
    oval:org.opensuse.security:def:4811
    P
    Security update for apache2 (Moderate)
    2020-12-02
    oval:org.opensuse.security:def:59695
    P
    Security update for python-setuptools (Important)
    2020-12-02
    oval:org.opensuse.security:def:4905
    P
    Security update for rmt-server (Important)
    2020-12-02
    oval:org.opensuse.security:def:4248
    P
    Security update for the Linux Kernel (Live Patch 1 for SLE 15) (Important)
    2020-12-02
    oval:org.opensuse.security:def:4854
    P
    Security update for qemu (Important)
    2020-12-02
    oval:org.opensuse.security:def:4788
    P
    Security update for qemu (Important)
    2020-12-02
    oval:org.opensuse.security:def:5531
    P
    Security update for rmt-server (Important)
    2020-12-02
    oval:org.opensuse.security:def:4884
    P
    Security update for salt (Moderate)
    2020-12-02
    oval:org.opensuse.security:def:4945
    P
    Security update for rmt-server (Important)
    2020-12-02
    oval:org.opensuse.security:def:4719
    P
    Security update for targetcli-fb (Moderate)
    2020-12-02
    oval:org.opensuse.security:def:4355
    P
    Security update for the Linux Kernel (Live Patch 19 for SLE 15) (Important)
    2020-12-02
    oval:org.opensuse.security:def:55620
    P
    Security update for krb5 (Important)
    2020-12-01
    oval:org.opensuse.security:def:51225
    P
    Recommended update for evince (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:51391
    P
    Security update for pam (Important)
    2020-12-01
    oval:org.opensuse.security:def:56624
    P
    Security update for libXfont (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:65939
    P
    Security update for the Linux Kernel (Critical)
    2020-12-01
    oval:org.opensuse.security:def:66169
    P
    Security update for rmt-server (Important)
    2020-12-01
    oval:org.opensuse.security:def:59262
    P
    Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP2) (Important)
    2020-12-01
    oval:org.opensuse.security:def:60603
    P
    Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:53094
    P
    Security update for rmt-server (Important)
    2020-12-01
    oval:org.opensuse.security:def:59261
    P
    Security update for squid (Important)
    2020-12-01
    oval:org.opensuse.security:def:55793
    P
    Security update for mariadb (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:51504
    P
    Security update for ImageMagick (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:64927
    P
    Security update for permissions (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:52139
    P
    Security update for python3 (Important)
    2020-12-01
    oval:org.opensuse.security:def:74029
    P
    Security update for xen (Important)
    2020-12-01
    oval:org.opensuse.security:def:50723
    P
    Security update for libgcrypt (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:52172
    P
    Security update for webkit2gtk3 (Important)
    2020-12-01
    oval:org.opensuse.security:def:70707
    P
    Security update for MozillaThunderbird (Important)
    2020-12-01
    oval:org.opensuse.security:def:60599
    P
    Security update for dnsmasq (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:60942
    P
    Security update for ardana-ansible, ardana-barbican, ardana-db, ardana-monasca, ardana-mq, ardana-neutron, ardana-octavia, ardana-tempest, crowbar-core, crowbar-ha, crowbar-openstack, documentation-suse-openstack-cloud, memcached, openstack-manila, openstack-neutron, openstack-nova, pdns, python-amqp, rubygem-puma, zookeeper (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:50958
    P
    Security update for postgresql10 (Important)
    2020-12-01
    oval:org.opensuse.security:def:50957
    P
    Security update for apache2 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:64372
    P
    libpq5 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:53307
    P
    Security update for qemu (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:53561
    P
    Security update for rmt-server (Important)
    2020-12-01
    oval:org.opensuse.security:def:50568
    P
    Security update for python (Important)
    2020-12-01
    oval:org.opensuse.security:def:60185
    P
    Security update for krb5 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:52083
    P
    Security update for webkit2gtk3 (Important)
    2020-12-01
    oval:org.opensuse.security:def:60822
    P
    Security update for python-aws-sam-translator, python-boto3, python-botocore, python-cfn-lint, python-jsonschema, python-nose2, python-parameterized, python-pathlib2, python-pytest-cov, python-requests, python-s3transfer (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:50567
    P
    Security update for python3 (Important)
    2020-12-01
    oval:org.opensuse.security:def:59196
    P
    Security update for clamav (Important)
    2020-12-01
    oval:org.opensuse.security:def:51121
    P
    Security update for wireshark (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:51133
    P
    Security update for exempi (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:72858
    P
    Security update for rmt-server (Important)
    2020-12-01
    oval:org.opensuse.security:def:51810
    P
    Security update for openssl-1_1 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:56743
    P
    Security update for ntp (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:59040
    P
    Security update for dbus-1 (Important)
    2020-12-01
    oval:org.opensuse.security:def:51403
    P
    Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:60522
    P
    python-libxml2 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:66077
    P
    Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:67423
    P
    Security update for rmt-server (Important)
    2020-12-01
    oval:org.opensuse.security:def:50690
    P
    Security update for samba (Important)
    2020-12-01
    oval:org.opensuse.security:def:65096
    P
    Security update for python3 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:53030
    P
    Security update for LibVNCServer (Important)
    2020-12-01
    oval:org.opensuse.security:def:53107
    P
    Security update for rmt-server (Important)
    2020-12-01
    oval:org.opensuse.security:def:59629
    P
    Security update for java-1_7_0-openjdk (Important)
    2020-12-01
    oval:org.opensuse.security:def:52279
    P
    Security update for fontforge (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:50901
    P
    Security update for spamassassin (Important)
    2020-12-01
    oval:org.opensuse.security:def:50853
    P
    Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:56550
    P
    Security update for util-linux (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:59996
    P
    Security update for the Linux Kernel (Live Patch 29 for SLE 12 SP2) (Important)
    2020-12-01
    oval:org.opensuse.security:def:56350
    P
    Security update for ImageMagick (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:60863
    P
    Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:50339
    P
    Security update for xorg-x11-server (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:51136
    P
    Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:50969
    P
    Security update for perl-DBI (Important)
    2020-12-01
    oval:org.opensuse.security:def:52105
    P
    Security update for libxslt (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:53491
    P
    Security update for mozilla-nspr, mozilla-nss (Important)
    2020-12-01
    oval:org.opensuse.security:def:53706
    P
    Security update for rmt-server (Important)
    2020-12-01
    oval:org.opensuse.security:def:56458
    P
    Security update for spice (Important)
    2020-12-01
    oval:org.opensuse.security:def:51299
    P
    Security update for wireshark (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:51354
    P
    Security update for spice-vdagent (Important)
    2020-12-01
    oval:org.opensuse.security:def:74114
    P
    Security update for rmt-server (Important)
    2020-12-01
    oval:org.opensuse.security:def:51850
    P
    Security update for xorg-x11-server (Important)
    2020-12-01
    oval:org.opensuse.security:def:60649
    P
    Security update for samba (Important)
    2020-12-01
    oval:org.opensuse.security:def:69400
    P
    Security update for mercurial (Low)
    2020-12-01
    oval:org.opensuse.security:def:59284
    P
    Security update for freeradius-server (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:60784
    P
    Security update for sane-backends (Important)
    2020-12-01
    oval:org.opensuse.security:def:67469
    P
    Security update for rmt-server (Important)
    2020-12-01
    oval:org.opensuse.security:def:50702
    P
    Security update for cups (Important)
    2020-12-01
    oval:org.opensuse.security:def:53043
    P
    Security update for python-ecdsa (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:53336
    P
    Security update for rmt-server (Important)
    2020-12-01
    oval:org.opensuse.security:def:56662
    P
    Security update for postgresql10 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:51025
    P
    Security update for python-setuptools (Important)
    2020-12-01
    oval:org.opensuse.security:def:50865
    P
    Security update for perl-DBI (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:75171
    P
    Security update for rmt-server (Important)
    2020-12-01
    oval:org.opensuse.security:def:64984
    P
    Security update for curl (Important)
    2020-12-01
    oval:org.opensuse.security:def:52215
    P
    Security update for cifs-utils (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:50590
    P
    Security update for LibreOffice (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:51261
    P
    Security update for openexr (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:52244
    P
    Security update for apache2 (Important)
    2020-12-01
    oval:org.opensuse.security:def:53634
    P
    Security update for xen (Important)
    2020-12-01
    oval:org.opensuse.security:def:66029
    P
    Security update for rmt-server (Important)
    2020-12-01
    oval:org.opensuse.security:def:59018
    P
    Security update for ucode-intel (Important)
    2020-12-01
    oval:org.opensuse.security:def:59017
    P
    Security update for java-1_8_0-openjdk (Important)
    2020-12-01
    oval:org.opensuse.security:def:51428
    P
    Security update for cups (Important)
    2020-12-01
    oval:org.opensuse.security:def:51389
    P
    Security update for apache-pdfbox (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:51492
    P
    Security update for perl-YAML-LibYAML (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:73991
    P
    Security update for php7 (Important)
    2020-12-01
    oval:org.opensuse.security:def:74154
    P
    Security update for rmt-server (Important)
    2020-12-01
    oval:org.opensuse.security:def:50471
    P
    Security update for libseccomp (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:60913
    P
    Security update for libssh2_org (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:70669
    P
    Security update for spice-gtk (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:51842
    P
    Security update for php7 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:60677
    P
    Security update for ardana-ansible, ardana-barbican, ardana-db, ardana-monasca, ardana-mq, ardana-neutron, ardana-octavia, ardana-tempest, crowbar-core, crowbar-ha, crowbar-openstack, documentation-suse-openstack-cloud, memcached, openstack-manila, openstack-neutron, openstack-nova, pdns, python-amqp, rubygem-puma, zookeeper (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:50923
    P
    Security update for curl (Important)
    2020-12-01
    oval:org.opensuse.security:def:53267
    P
    Security update for rmt-server (Important)
    2020-12-01
    oval:org.opensuse.security:def:53376
    P
    Security update for rmt-server (Important)
    2020-12-01
    oval:org.opensuse.security:def:50319
    P
    Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:59929
    P
    Security update for python3 (Important)
    2020-12-01
    oval:org.opensuse.security:def:60560
    P
    unzip on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:50318
    P
    Security update for git (Important)
    2020-12-01
    oval:org.opensuse.security:def:55382
    P
    sblim-sfcb on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:60700
    P
    Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:75038
    P
    Security update for chromium (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:52358
    P
    Security update for curl (Important)
    2020-12-01
    oval:org.opensuse.security:def:110317
    P
    Security update for rmt-server (Important)
    2020-11-23
    oval:org.opensuse.security:def:110866
    P
    Security update for rmt-server (Important)
    2020-11-21
    oval:org.opensuse.security:def:98579
    P
    Security update for rmt-server (Important)
    2020-11-05
    oval:org.opensuse.security:def:91768
    P
    Security update for rmt-server (Important)
    2020-11-05
    oval:org.opensuse.security:def:98718
    P
    Security update for rmt-server (Important)
    2020-11-05
    oval:org.opensuse.security:def:105269
    P
    Security update for rmt-server (Important)
    2020-11-05
    oval:org.opensuse.security:def:91614
    P
    Security update for rmt-server (Important)
    2020-11-05
    oval:org.opensuse.security:def:105408
    P
    Security update for rmt-server (Important)
    2020-11-05
    oval:org.opensuse.security:def:109271
    P
    Security update for rmt-server (Important)
    2020-10-26
    oval:org.opensuse.security:def:118463
    P
    Security update for rmt-server (Important)
    2020-10-26
    oval:org.opensuse.security:def:95892
    P
    Security update for rmt-server (Important)
    2020-10-26
    oval:org.opensuse.security:def:109367
    P
    Security update for rmt-server (Important)
    2020-10-26
    oval:org.opensuse.security:def:102605
    P
    Security update for rmt-server (Important)
    2020-10-26
    oval:org.opensuse.security:def:96011
    P
    Security update for rmt-server (Important)
    2020-10-26
    oval:org.opensuse.security:def:118357
    P
    Security update for rmt-server (Important)
    2020-10-26
    oval:org.opensuse.security:def:102701
    P
    Security update for rmt-server (Important)
    2020-10-26
    oval:org.opensuse.security:def:87996
    P
    Security update for ardana-ansible, ardana-barbican, ardana-cluster, ardana-db, ardana-designate, ardana-input-model, ardana-logging, ardana-monasca, ardana-mq, ardana-neutron, ardana-octavia, ardana-osconfig, ardana-tempest, ardana-tls, crowbar-core, crowbar-ha, crowbar-openstack, memcached, openstack-ceilometer, openstack-cinder, openstack-designate, openstack-heat, openstack-ironic, openstack-ironic-image, openstack-manila, openstack-neutron, openstack-nova, openstack-octavia, openstack-octavia-amphora-image, python-cinderclient, python-glanceclient, python-ironic-lib, python-ironicclient, python-keystonemiddleware, python-manila-tempest-plugin, python-novaclient, python-octaviaclient, python-openstackclient, python-os-brick, python-oslo.config, python-oslo.rootwrap, python-oslo.utils, python-swiftclient, python-watcherclient, release-notes-suse-openstack-cloud, rubygem-crowbar-client, rubygem-puma, zookeeper (Moderate)
    2020-05-05
    oval:org.opensuse.security:def:88300
    P
    Security update for ardana-ansible, ardana-barbican, ardana-cluster, ardana-db, ardana-designate, ardana-input-model, ardana-logging, ardana-monasca, ardana-mq, ardana-neutron, ardana-octavia, ardana-osconfig, ardana-tempest, ardana-tls, crowbar-core, crowbar-ha, crowbar-openstack, memcached, openstack-ceilometer, openstack-cinder, openstack-designate, openstack-heat, openstack-ironic, openstack-ironic-image, openstack-manila, openstack-neutron, openstack-nova, openstack-octavia, openstack-octavia-amphora-image, python-cinderclient, python-glanceclient, python-ironic-lib, python-ironicclient, python-keystonemiddleware, python-manila-tempest-plugin, python-novaclient, python-octaviaclient, python-openstackclient, python-os-brick, python-oslo.config, python-oslo.rootwrap, python-oslo.utils, python-swiftclient, python-watcherclient, release-notes-suse-openstack-cloud, rubygem-crowbar-client, rubygem-puma, zookeeper (Moderate)
    2020-05-05
    oval:org.opensuse.security:def:84395
    P
    Security update for ardana-ansible, ardana-barbican, ardana-db, ardana-monasca, ardana-mq, ardana-neutron, ardana-octavia, ardana-tempest, crowbar-core, crowbar-ha, crowbar-openstack, documentation-suse-openstack-cloud, memcached, openstack-manila, openstack-neutron, openstack-nova, pdns, python-amqp, rubygem-puma, zookeeper (Moderate)
    2020-04-22
    oval:org.opensuse.security:def:83943
    P
    Security update for ardana-ansible, ardana-barbican, ardana-db, ardana-monasca, ardana-mq, ardana-neutron, ardana-octavia, ardana-tempest, crowbar-core, crowbar-ha, crowbar-openstack, documentation-suse-openstack-cloud, memcached, openstack-manila, openstack-neutron, openstack-nova, pdns, python-amqp, rubygem-puma, zookeeper (Moderate)
    2020-04-22
    BACK
    ruby-lang ruby *
    ruby-lang ruby *
    ruby-lang ruby *
    ruby-lang ruby *
    puma puma *
    puma puma *
    ruby-lang ruby 2.7.0 preview1
    debian debian linux 9.0
    fedoraproject fedora 30
    fedoraproject fedora 31
    fedoraproject fedora 32
    puma puma 3.12.1
    puma puma 4.3.1