Vulnerability CVE-2020-8631

Vulnerability Name:

CVE-2020-8631 (CCN-175803)

Assigned:

2020-02-04

Published:

2020-02-04

Updated:

2021-12-22

Summary:

cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for attackers to predict passwords, because rand_str in cloudinit/util.py calls the random.choice function.

CVSS v3 Severity:

5.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
4.9 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:U/RC:R)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): None Availibility (A): None

7.5 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
6.6 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:U/RC:R)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): None Availibility (A): None

8.1 High (REDHAT CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
7.1 High (REDHAT Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:U/RC:R)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): High Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

2.1 Low (CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

7.8 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): None Availibility (A): None

Vulnerability Type:

CWE-330

Vulnerability Consequences:

Obtain Information

References:

Source: MITRE
Type: CNA
CVE-2020-8631

Source: SUSE
Type: Mailing List, Third Party Advisory
openSUSE-SU-2020:0400

Source: MISC
Type: Issue Tracking, Patch, Third Party Advisory
https://bugs.launchpad.net/ubuntu/+source/cloud-init/+bug/1860795

Source: XF
Type: UNKNOWN
cloutinit-cve20208631-info-disc(175803)

Source: CCN
Type: cloud-init GIT Repository
utils: use SystemRandom when generating random password. #204

Source: MISC
Type: Patch, Third Party Advisory
https://github.com/canonical/cloud-init/pull/204

Source: MLIST
Type: Mailing List, Third Party Advisory
[debian-lts-announce] 20200221 [SECURITY] [DLA 2113-1] cloud-init security update

Vulnerable Configuration:

Configuration 1:

cpe:/a:canonical:cloud-init:*:*:*:*:*:*:*:* (Version <= 19.4)

Configuration 2:

cpe:/o:opensuse:leap:15.1:*:*:*:*:*:*:*

Configuration 3:

cpe:/o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Configuration RedHat 1:

cpe:/o:redhat:enterprise_linux:7:*:*:*:*:*:*:*

Configuration RedHat 2:

cpe:/o:redhat:enterprise_linux:7::server:*:*:*:*:*

Configuration RedHat 3:

cpe:/a:redhat:enterprise_linux:8:*:*:*:*:*:*:*

Configuration RedHat 4:

cpe:/a:redhat:enterprise_linux:8::appstream:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20208631	V	CVE-2020-8631	2022-09-02
oval:org.opensuse.security:def:4669	P	Security update for the Linux Kernel (Live Patch 30 for SLE 12 SP5) (Important)	2022-08-10
oval:org.opensuse.security:def:3773	P	Security update for oracleasm (Important)	2022-08-03
oval:org.opensuse.security:def:4653	P	Security update for the Linux Kernel (Live Patch 22 for SLE 12 SP5) (Important)	2022-07-21
oval:org.opensuse.security:def:3794	P	Security update for the Linux Kernel (Important)	2022-07-21
oval:org.opensuse.security:def:3800	P	systemtap-3.0-20.11 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3827	P	xlockmore-5.43-5.30 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3215	P	libncurses5-32bit-5.9-64.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3165	P	libdjvulibre21-3.5.25.3-5.3.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3229	P	libpcap1-1.8.1-10.3.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3437	P	audiofile-0.3.6-11.3.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3124	P	libFLAC++6-1.3.0-11.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3233	P	libpng12-0-1.2.50-19.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:4630	P	Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP5) (Important)	2022-06-28
oval:org.opensuse.security:def:3112	P	java-1_7_0-openjdk-1.7.0.231-43.27.2 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3790	P	squashfs-4.3-6.2 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3206	P	liblua5_2-32bit-5.2.4-6.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3157	P	libass5-0.10.2-3.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3117	P	kdump-0.8.16-9.2 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3230	P	libpcre1-32bit-8.39-8.3.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3425	P	alsa-1.0.27.2-15.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3451	P	chrony-2.3-5.6.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3811	P	unixODBC-2.3.6-7.9.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3227	P	libotr5-4.0.0-9.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3779	P	rsyslog-8.24.0-3.28.2 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3176	P	libgcrypt20-1.6.1-16.68.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3138	P	libXfont1-1.5.1-11.3.12 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:95081	P	cloud-init-21.4-150100.8.58.1 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:4646	P	Security update for the Linux Kernel (Live Patch 20 for SLE 12 SP5) (Important)	2022-01-31
oval:org.opensuse.security:def:112084	P	cloud-init-21.2-1.2 on GA media (Moderate)	2022-01-17
oval:org.opensuse.security:def:69279	P	Security update for nodejs14 (Important)	2021-12-07
oval:org.opensuse.security:def:51685	P	Security update for transfig (Important)	2021-10-29
oval:org.opensuse.security:def:30139	P	Security update for postgresql10 (Important)	2021-10-20
oval:org.opensuse.security:def:64596	P	Security update for ncurses (Moderate)	2021-10-20
oval:org.opensuse.security:def:33727	P	Security update for curl (Moderate)	2021-10-12
oval:org.opensuse.security:def:105626	P	cloud-init-21.2-1.2 on GA media (Moderate)	2021-10-01
oval:org.opensuse.security:def:51662	P	Security update for the Linux Kernel (Live Patch 40 for SLE 12 SP3) (Important)	2021-09-23
oval:org.opensuse.security:def:33973	P	Security update for mariadb (Moderate)	2021-09-09
oval:org.opensuse.security:def:51651	P	Security update for openexr (Important)	2021-09-02
oval:org.opensuse.security:def:14898	P	giflib-progs-5.0.5-12.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14074	P	DirectFB-1.7.1-6.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14247	P	libksba8-1.3.0-23.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:13990	P	openslp-2.0.0-11.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14192	P	libXcursor1-1.1.14-3.59 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14055	P	w3m-0.5.3-157.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:13922	P	libldap-2_4-2-2.4.41-18.25.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14260	P	libmysqlclient18-10.0.30-28.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:13892	P	libdcerpc-atsvc0-4.2.4-26.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14236	P	libidn-tools-1.28-4.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14920	P	gzip-1.10-2.12 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14167	P	hplip-3.16.11-1.33 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14037	P	strongswan-5.1.3-22.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:13900	P	libgc1-7.2d-3.75 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:94181	P	(Important)	2021-08-12
oval:org.opensuse.security:def:63487	P	liblcms2-2-32bit-2.9-3.3.1 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:63123	P	cloud-init-20.2-8.45.1 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:2034	P	cloud-init-20.2-8.45.1 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:72735	P	jcl-over-slf4j-1.7.30-1.34 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62991	P	binutils-devel-32bit-2.35.1-7.18.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62788	P	libical-devel-3.0.6-4.3.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62781	P	libdjvulibre-devel-3.5.27-9.28 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62813	P	libsrt1-1.3.4-1.45 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:100894	P	libXxf86dga-devel-1.1.4-1.24 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:72483	P	libIlmImf-2_2-23-2.2.1-3.24.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62785	P	libgme-devel-0.6.2-1.17 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:51628	P	Security update for webkit2gtk3 (Important)	2021-08-03
oval:org.opensuse.security:def:74650	P	Security update for jdom2 (Important)	2021-07-12
oval:org.opensuse.security:def:69130	P	Security update for qemu (Moderate)	2021-06-30
oval:org.opensuse.security:def:66850	P	Security update for qemu (Moderate)	2021-06-30
oval:org.opensuse.security:def:64538	P	Security update for libgcrypt (Important)	2021-06-24
oval:org.opensuse.security:def:30095	P	Security update for xterm (Important)	2021-06-18
oval:org.opensuse.security:def:64708	P	Security update for ucode-intel (Important)	2021-06-10
oval:org.opensuse.security:def:33670	P	Security update for qemu (Important)	2021-06-10
oval:org.opensuse.security:def:51581	P	Security update for qemu (Important)	2021-06-08
oval:org.opensuse.security:def:51558	P	Security update for avahi (Important)	2021-06-03
oval:org.opensuse.security:def:1464	P	Security update for graphviz (Critical)	2021-05-19
oval:org.opensuse.security:def:30076	P	Security update for djvulibre (Important)	2021-05-19
oval:org.opensuse.security:def:66758	P	Security update for MozillaFirefox (Important)	2021-04-29
oval:org.opensuse.security:def:70206	P	Security update for MozillaFirefox (Important)	2021-04-29
oval:org.opensuse.security:def:29348	P	Security update for sudo (Important)	2021-04-20
oval:org.opensuse.security:def:51870	P	Security update for glibc (Important)	2021-04-13
oval:org.opensuse.security:def:51760	P	Security update for openssl (Moderate)	2021-03-24
oval:org.opensuse.security:def:30037	P	Security update for wpa_supplicant (Important)	2021-03-09
oval:org.opensuse.security:def:34031	P	Security update for perl-XML-Twig (Moderate)	2021-03-01
oval:org.opensuse.security:def:51737	P	Security update for java-1_8_0-ibm (Important)	2021-02-26
oval:org.opensuse.security:def:39440	P	Security update for python27 (Important)	2021-02-08
oval:org.opensuse.security:def:29419	P	Security update for openvswitch (Important)	2021-02-03
oval:org.opensuse.security:def:51475	P	Security update for the Linux Kernel (Live Patch 33 for SLE 12 SP3) (Important)	2020-12-07
oval:org.opensuse.security:def:72367	P	libICE6-32bit-1.0.9-1.25 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:63634	P	libpurple-2.13.0-10.105 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3964	P	libcdio++0-0.90-6.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3880	P	e2fsprogs-devel-1.43.8-3.8.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3980	P	libgit2-24-0.24.1-7.9.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3886	P	flac-devel-1.3.0-11.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:4011	P	libmusicbrainz-devel-2.1.5-27.79 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:72619	P	glibc-devel-32bit-2.26-13.19.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:117118	P	cloud-init-19.4-8.20.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:4003	P	liblcms2-devel-2.7-9.7.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:107560	P	cloud-init-19.4-8.20.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3908	P	gnome-shell-devel-3.20.4-77.23.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3849	P	alsa-devel-1.0.27.2-15.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3959	P	libatalk12-3.1.0-3.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3870	P	crash-devel-7.2.1-6.42 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3985	P	libgssglue-devel-0.4-3.76 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3884	P	file-devel-5.22-10.12.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3992	P	libimobiledevice-devel-1.2.0-7.31 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:63113	P	cloud-init-19.4-8.20.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:2024	P	cloud-init-19.4-8.20.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3981	P	libgme-devel-0.6.0-5.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:63284	P	libvirt-6.0.0-11.3 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3892	P	freetype2-devel-2.6.3-7.15.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:4008	P	libmms-devel-0.6.2-15.8 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3942	P	libXp-devel-1.0.2-3.57 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:4015	P	libneon-devel-0.30.0-3.64 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3858	P	avahi-compat-howl-devel-0.6.32-32.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3988	P	libical-devel-1.0.1-16.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3871	P	cups-ddk-1.7.5-20.23.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:2696	P	Security update for ImageMagick (Moderate)	2020-12-02
oval:org.opensuse.security:def:2771	P	Security update for libqt5-qtbase (Important)	2020-12-02
oval:org.opensuse.security:def:2732	P	Security update for ImageMagick (Moderate)	2020-12-02
oval:org.opensuse.security:def:2700	P	Security update for wireshark (Moderate)	2020-12-02
oval:org.opensuse.security:def:2785	P	Security update for netpbm (Moderate)	2020-12-02
oval:org.opensuse.security:def:2747	P	Security update for libqt5-qtsvg (Moderate)	2020-12-02
oval:org.opensuse.security:def:2718	P	Security update for wavpack (Low)	2020-12-02
oval:org.opensuse.security:def:2777	P	Security update for MozillaFirefox (Important)	2020-12-02
oval:org.opensuse.security:def:2738	P	Security update for ffmpeg (Important)	2020-12-02
oval:org.opensuse.security:def:2706	P	Security update for ImageMagick (Moderate)	2020-12-02
oval:org.opensuse.security:def:2787	P	Security update for SDL2 (Moderate)	2020-12-02
oval:org.opensuse.security:def:37900	P	libjasper1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29550	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:64328	P	libgstgl-1_0-0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:34119	P	Security update for ncurses (Important)	2020-12-01
oval:org.opensuse.security:def:49629	P	gdm on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33439	P	Security update for ethereal and wireshark	2020-12-01
oval:org.opensuse.security:def:34188	P	Security update for openvpn (Moderate)	2020-12-01
oval:org.opensuse.security:def:51126	P	Security update for taglib (Low)	2020-12-01
oval:org.opensuse.security:def:65945	P	Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP1) (Important)	2020-12-01
oval:org.opensuse.security:def:50695	P	Security update for ucode-intel (Important)	2020-12-01
oval:org.opensuse.security:def:39398	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:50312	P	Security update for openssl-1_1 (Moderate)	2020-12-01
oval:org.opensuse.security:def:50940	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:50443	P	Security update for tcpdump (Moderate)	2020-12-01
oval:org.opensuse.security:def:50638	P	Security update for gpg2 (Important)	2020-12-01
oval:org.opensuse.security:def:33346	P	Security update for openssh-openssl1 (Critical)	2020-12-01
oval:org.opensuse.security:def:50135	P	NetworkManager-applet on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50363	P	Security update for jasper (Moderate)	2020-12-01
oval:org.opensuse.security:def:70101	P	libmodplug-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:49649	P	libSoundTouch0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:49965	P	libwsman-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50904	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:53013	P	Security update for nmap (Important)	2020-12-01
oval:org.opensuse.security:def:49564	P	libndp-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38600	P	gdm on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:65783	P	Security update for cloud-init (Moderate)	2020-12-01
oval:org.opensuse.security:def:49214	P	libpcre2-16-0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38291	P	libgcrypt20 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29988	P	Security update for libssh2_org (Moderate)	2020-12-01
oval:org.opensuse.security:def:38688	P	libjpeg-turbo on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:34866	P	Security update for cloud-init (Moderate)	2020-12-01
oval:org.opensuse.security:def:50290	P	Security update for samba (Important)	2020-12-01
oval:org.opensuse.security:def:37995	P	libz1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29694	P	Security update for expat (Moderate)	2020-12-01
oval:org.opensuse.security:def:38760	P	openvpn on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:73541	P	cloud-init on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:64192	P	ctdb on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33358	P	Security update for openssl1 (Moderate)	2020-12-01
oval:org.opensuse.security:def:51497	P	Security update for graphviz (Low)	2020-12-01
oval:org.opensuse.security:def:34144	P	Security update for openldap2	2020-12-01
oval:org.opensuse.security:def:49851	P	openldap2-devel-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:69382	P	Security update for cloud-init (Moderate)	2020-12-01
oval:org.opensuse.security:def:50962	P	Security update for libX11 (Moderate)	2020-12-01
oval:org.opensuse.security:def:52316	P	Security update for cloud-init (Moderate)	2020-12-01
oval:org.opensuse.security:def:29337	P	Security update for spacewalk	2020-12-01
oval:org.opensuse.security:def:50464	P	Security update for ghostscript (Important)	2020-12-01
oval:org.opensuse.security:def:51374	P	Security update for ImageMagick (Important)	2020-12-01
oval:org.opensuse.security:def:37899	P	libjansson4 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50836	P	Security update for ceph (Moderate)	2020-12-01
oval:org.opensuse.security:def:50805	P	Security update for graphviz (Low)	2020-12-01
oval:org.opensuse.security:def:74783	P	Security update for cloud-init (Moderate)	2020-12-01
oval:org.opensuse.security:def:29336	P	Security update for cobbler	2020-12-01
oval:org.opensuse.security:def:50332	P	Security update for lcms2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:50394	P	Security update for systemd (Important)	2020-12-01
oval:org.opensuse.security:def:53036	P	Security update for freetds (Moderate)	2020-12-01
oval:org.opensuse.security:def:49984	P	uuidd on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50293	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:66035	P	Security update for cloud-init (Moderate)	2020-12-01
oval:org.opensuse.security:def:49630	P	gnome-desktop-lang on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:49808	P	rpm-build on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50428	P	Security update for LibreOffice (Moderate)	2020-12-01
oval:org.opensuse.security:def:73423	P	libgxps-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50311	P	Security update for libX11 (Moderate)	2020-12-01
oval:org.opensuse.security:def:49359	P	xorg-x11 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38541	P	apache-commons-beanutils on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50532	P	Security update for file (Moderate)	2020-12-01
oval:org.opensuse.security:def:30814	P	Security update for cloud-init (Moderate)	2020-12-01
oval:org.opensuse.security:def:38233	P	kernel-default on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29933	P	Security update for libgssglue	2020-12-01
oval:org.opensuse.security:def:34080	P	Security update for libzip1	2020-12-01
oval:org.opensuse.security:def:69027	P	Security update for openldap2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:37911	P	libldb1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29637	P	Security update for clamav (Important)	2020-12-01
oval:org.opensuse.security:def:33816	P	Security update for glib2 (Important)	2020-12-01
oval:org.opensuse.security:def:64329	P	libgtk-vnc-2_0-0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38716	P	libproxy1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:51808	P	Security update for openwsman (Important)	2020-12-01
oval:org.opensuse.security:def:33574	P	Security update for LibVNCServer (Important)	2020-12-01
oval:org.opensuse.security:def:63863	P	Security update for java-1_7_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:53077	P	Security update for cloud-init (Moderate)	2020-12-01
oval:org.opensuse.security:def:33347	P	Security update for openssh-openssl1 (Moderate)	2020-12-01
oval:org.opensuse.security:def:51396	P	Security update for git (Moderate)	2020-12-01
oval:org.opensuse.security:def:49213	P	libpcre1-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50858	P	Security update for systemd (Important)	2020-12-01
oval:org.opensuse.security:def:51104	P	Security update for tiff (Moderate)	2020-12-01
oval:org.opensuse.security:def:65693	P	Security update for tomcat (Important)	2020-12-01
oval:org.opensuse.security:def:50673	P	Security update for sqlite3 (Moderate)	2020-12-01
oval:org.opensuse.security:def:50731	P	Security update for samba (Important)	2020-12-01
oval:org.opensuse.security:def:34826	P	Security update for avahi (Moderate)	2020-12-01
oval:org.opensuse.security:def:50291	P	Security update for qemu (Moderate)	2020-12-01
oval:org.opensuse.security:def:50235	P	libgadu-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50872	P	Security update for c-ares (Moderate)	2020-12-01
oval:org.opensuse.security:def:30777	P	Security update for axis (Moderate)	2020-12-01
oval:org.opensuse.security:def:49905	P	cloud-init on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:49777	P	checkbashisms on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50203	P	libreoffice on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50978	P	Security update for python-pip (Moderate)	2020-12-01
oval:org.opensuse.security:def:49710	P	ppp on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38649	P	libXt6 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:49232	P	libsmi on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38381	P	libtcnative-1-0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:64436	P	perl-Mail-SpamAssassin on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50459	P	Security update for openssl-1_1 (Moderate)	2020-12-01
oval:org.opensuse.security:def:52254	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:38132	P	audiofile on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29780	P	Security update for gnutls (Important)	2020-12-01
oval:org.opensuse.security:def:53100	P	Security update for cloud-init (Moderate)	2020-12-01
oval:com.redhat.rhsa:def:20204650	P	RHSA-2020:4650: cloud-init security, bug fix, and enhancement update (Moderate)	2020-11-04
oval:com.redhat.rhsa:def:20203898	P	RHSA-2020:3898: cloud-init security, bug fix, and enhancement update (Moderate)	2020-09-29
oval:org.opensuse.security:def:110445	P	Security update for cloud-init (Moderate)	2020-03-29
oval:org.opensuse.security:def:91173	P	Security update for cloud-init (Moderate)	2020-03-23
oval:org.opensuse.security:def:105276	P	Security update for cloud-init (Moderate)	2020-03-23
oval:org.opensuse.security:def:98586	P	Security update for cloud-init (Moderate)	2020-03-23
oval:org.opensuse.security:def:75534	P	Security update for cloud-init (Moderate)	2020-03-23
oval:org.opensuse.security:def:91621	P	Security update for cloud-init (Moderate)	2020-03-23
oval:org.opensuse.security:def:104828	P	Security update for cloud-init (Moderate)	2020-03-23
oval:org.opensuse.security:def:98138	P	Security update for cloud-init (Moderate)	2020-03-23
oval:com.ubuntu.bionic:def:202086310000000	V	CVE-2020-8631 on Ubuntu 18.04 LTS (bionic) - low.	2020-02-06
oval:com.ubuntu.xenial:def:202086310000000	V	CVE-2020-8631 on Ubuntu 16.04 LTS (xenial) - low.	2020-02-06

BACK