Google Security Advisories · October 2020 — Google Security Advisories
175 advisories 100 CVEs 7 EXPLOITED

GCVE / Google Cloud / Chrome / Android / Project Zero / OSS for 2020-10. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 7 are already weaponised in the wild.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

openSUSE-SU-2020:1737-1

Open SourceExploitedCISA KEV listedCRITICAL2020-10-25

Security update for chromium

Affected products

ProductStatusVendorPackageEcosystem
chromium affected openSUSE:Leap 15.2 chromium —
Upstream advisory

openSUSE-SU-2020:1731-1

Open SourceExploitedCISA KEV listedCRITICAL2020-10-25

Security update for chromium

Affected products

ProductStatusVendorPackageEcosystem
chromium affected SUSE:Package Hub 15 SP1 chromium —
Upstream advisory

openSUSE-SU-2020:1718-1

Open SourceExploitedCISA KEV listedCRITICAL2020-10-23

Security update for chromium

Affected products

ProductStatusVendorPackageEcosystem
chromium affected openSUSE:Leap 15.1 chromium —
Upstream advisory

CVE-2020-15999

Project ZeroExploitedCISA KEV listed2020-10-19

Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVEs:CVE-2020-15999

Upstream advisory

CVE-2020-15999

GoogleExploitedCISA KEV listedMEDIUM2020-10-19

Heap buffer overflow in CefSharp

CVEs:CVE-2020-15999

Affected products

ProductStatusVendorPackageEcosystem
CefSharp.Common affected NuGet CefSharp.Common —
CefSharp.WinForms affected NuGet CefSharp.WinForms —
CefSharp.Wpf affected NuGet CefSharp.Wpf —
CefSharp.Wpf.HwndHost affected NuGet CefSharp.Wpf.HwndHost —
Upstream advisory

CVE-2020-15999

GoogleExploitedCISA KEV listedCRITICAL2020-10-19

Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVEs:CVE-2020-15999

Affected products

ProductStatusVendorPackageEcosystem
backports_sle affected opensuse — —
chrome affected google — —
debian_linux affected debian — —
fedora affected fedoraproject — —
freetype affected freetype — —
ontap_select_deploy_administration_utility affected netapp — —
Upstream advisory

RHSA-2020:4366

Open SourceExploitedVulnCheck KEV listedHIGH2020-10-27

Red Hat Security Advisory: Satellite 6.8 release

Affected products

ProductStatusVendorPackageEcosystem
ansible-collection-redhat-satellite affected Red Hat:satellite:6.8::el7 ansible-collection-redhat-satellite —
ansible-collection-redhat-satellite affected Red Hat:satellite_capsule:6.8::el7 ansible-collection-redhat-satellite —
ansiblerole-foreman_scap_client affected Red Hat:satellite:6.8::el7 ansiblerole-foreman_scap_client —
ansiblerole-foreman_scap_client affected Red Hat:satellite_capsule:6.8::el7 ansiblerole-foreman_scap_client —
ansiblerole-insights-client affected Red Hat:satellite:6.8::el7 ansiblerole-insights-client —
ansiblerole-insights-client affected Red Hat:satellite_capsule:6.8::el7 ansiblerole-insights-client —
ansiblerole-satellite-receptor-installer affected Red Hat:satellite:6.8::el7 ansiblerole-satellite-receptor-installer —
ansiblerole-satellite-receptor-installer affected Red Hat:satellite_capsule:6.8::el7 ansiblerole-satellite-receptor-installer —
ansible-runner affected Red Hat:satellite:6.8::el7 ansible-runner —
ansible-runner affected Red Hat:satellite_capsule:6.8::el7 ansible-runner —
candlepin affected Red Hat:satellite:6.8::el7 candlepin —
candlepin-selinux affected Red Hat:satellite:6.8::el7 candlepin-selinux —
crane-selinux affected Red Hat:satellite_capsule:6.8::el7 crane-selinux —
crane-selinux affected Red Hat:satellite:6.8::el7 crane-selinux —
createrepo_c affected Red Hat:satellite:6.8::el7 createrepo_c —
createrepo_c affected Red Hat:satellite_capsule:6.8::el7 createrepo_c —
createrepo_c-debuginfo affected Red Hat:satellite:6.8::el7 createrepo_c-debuginfo —
createrepo_c-debuginfo affected Red Hat:satellite_capsule:6.8::el7 createrepo_c-debuginfo —
createrepo_c-libs affected Red Hat:satellite_capsule:6.8::el7 createrepo_c-libs —
createrepo_c-libs affected Red Hat:satellite:6.8::el7 createrepo_c-libs —
foreman affected Red Hat:satellite_capsule:6.8::el7 foreman —
foreman affected Red Hat:satellite:6.8::el7 foreman —
foreman-bootloaders-redhat affected Red Hat:satellite:6.8::el7 foreman-bootloaders-redhat —
foreman-bootloaders-redhat affected Red Hat:satellite_capsule:6.8::el7 foreman-bootloaders-redhat —
foreman-bootloaders-redhat-tftpboot affected Red Hat:satellite_capsule:6.8::el7 foreman-bootloaders-redhat-tftpboot —
foreman-bootloaders-redhat-tftpboot affected Red Hat:satellite:6.8::el7 foreman-bootloaders-redhat-tftpboot —
foreman-cli affected Red Hat:satellite_capsule:6.8::el7 foreman-cli —
foreman-cli affected Red Hat:satellite:6.8::el7 foreman-cli —
foreman-debug affected Red Hat:satellite:6.8::el7 foreman-debug —
foreman-debug affected Red Hat:satellite_capsule:6.8::el7 foreman-debug —
foreman-discovery-image affected Red Hat:satellite:6.8::el7 foreman-discovery-image —
foreman-discovery-image affected Red Hat:satellite_capsule:6.8::el7 foreman-discovery-image —
foreman-discovery-image-service affected Red Hat:satellite:6.8::el7 foreman-discovery-image-service —
foreman-discovery-image-service affected Red Hat:satellite_capsule:6.8::el7 foreman-discovery-image-service —
foreman-discovery-image-service-tui affected Red Hat:satellite_capsule:6.8::el7 foreman-discovery-image-service-tui —
foreman-discovery-image-service-tui affected Red Hat:satellite:6.8::el7 foreman-discovery-image-service-tui —
foreman-dynflow-sidekiq affected Red Hat:satellite_capsule:6.8::el7 foreman-dynflow-sidekiq —
foreman-dynflow-sidekiq affected Red Hat:satellite:6.8::el7 foreman-dynflow-sidekiq —
foreman-ec2 affected Red Hat:satellite:6.8::el7 foreman-ec2 —
foreman-ec2 affected Red Hat:satellite_capsule:6.8::el7 foreman-ec2 —
foreman-gce affected Red Hat:satellite_capsule:6.8::el7 foreman-gce —
foreman-gce affected Red Hat:satellite:6.8::el7 foreman-gce —
foreman-installer affected Red Hat:satellite:6.8::el7 foreman-installer —
foreman-installer affected Red Hat:satellite_capsule:6.8::el7 foreman-installer —
foreman-installer-katello affected Red Hat:satellite_capsule:6.8::el7 foreman-installer-katello —
foreman-installer-katello affected Red Hat:satellite:6.8::el7 foreman-installer-katello —
foreman-journald affected Red Hat:satellite:6.8::el7 foreman-journald —
foreman-journald affected Red Hat:satellite_capsule:6.8::el7 foreman-journald —
foreman-libvirt affected Red Hat:satellite:6.8::el7 foreman-libvirt —
foreman-libvirt affected Red Hat:satellite_capsule:6.8::el7 foreman-libvirt —
foreman-openstack affected Red Hat:satellite:6.8::el7 foreman-openstack —
foreman-openstack affected Red Hat:satellite_capsule:6.8::el7 foreman-openstack —
foreman-ovirt affected Red Hat:satellite:6.8::el7 foreman-ovirt —
foreman-ovirt affected Red Hat:satellite_capsule:6.8::el7 foreman-ovirt —
foreman-postgresql affected Red Hat:satellite:6.8::el7 foreman-postgresql —
foreman-postgresql affected Red Hat:satellite_capsule:6.8::el7 foreman-postgresql —
foreman-proxy affected Red Hat:satellite_capsule:6.8::el7 foreman-proxy —
foreman-proxy affected Red Hat:satellite:6.8::el7 foreman-proxy —
foreman-proxy-content affected Red Hat:satellite_capsule:6.8::el7 foreman-proxy-content —
foreman-proxy-content affected Red Hat:satellite:6.8::el7 foreman-proxy-content —
foreman-proxy-journald affected Red Hat:satellite:6.8::el7 foreman-proxy-journald —
foreman-proxy-journald affected Red Hat:satellite_capsule:6.8::el7 foreman-proxy-journald —
foreman-selinux affected Red Hat:satellite:6.8::el7 foreman-selinux —
foreman-service affected Red Hat:satellite_capsule:6.8::el7 foreman-service —
foreman-service affected Red Hat:satellite:6.8::el7 foreman-service —
foreman-telemetry affected Red Hat:satellite_capsule:6.8::el7 foreman-telemetry —
foreman-telemetry affected Red Hat:satellite:6.8::el7 foreman-telemetry —
foreman-vmware affected Red Hat:satellite_capsule:6.8::el7 foreman-vmware —
foreman-vmware affected Red Hat:satellite:6.8::el7 foreman-vmware —
future affected Red Hat:satellite:6.8::el7 future —
future affected Red Hat:satellite_capsule:6.8::el7 future —
gofer affected Red Hat:satellite_capsule:6.8::el7 gofer —
gofer affected Red Hat:satellite:6.8::el7 gofer —
hfsplus-tools affected Red Hat:satellite_capsule:6.8::el7 hfsplus-tools —
hfsplus-tools affected Red Hat:satellite:6.8::el7 hfsplus-tools —
hfsplus-tools-debuginfo affected Red Hat:satellite:6.8::el7 hfsplus-tools-debuginfo —
hfsplus-tools-debuginfo affected Red Hat:satellite_capsule:6.8::el7 hfsplus-tools-debuginfo —
katello affected Red Hat:satellite_capsule:6.8::el7 katello —
katello affected Red Hat:satellite:6.8::el7 katello —
katello-certs-tools affected Red Hat:satellite:6.8::el7 katello-certs-tools —
katello-certs-tools affected Red Hat:satellite_capsule:6.8::el7 katello-certs-tools —
katello-client-bootstrap affected Red Hat:satellite_capsule:6.8::el7 katello-client-bootstrap —
katello-client-bootstrap affected Red Hat:satellite:6.8::el7 katello-client-bootstrap —
katello-common affected Red Hat:satellite:6.8::el7 katello-common —
katello-common affected Red Hat:satellite_capsule:6.8::el7 katello-common —
katello-debug affected Red Hat:satellite_capsule:6.8::el7 katello-debug —
katello-debug affected Red Hat:satellite:6.8::el7 katello-debug —
katello-selinux affected Red Hat:satellite:6.8::el7 katello-selinux —
katello-selinux affected Red Hat:satellite_capsule:6.8::el7 katello-selinux —
keycloak-httpd-client-install affected Red Hat:satellite:6.8::el7 keycloak-httpd-client-install —
kobo affected Red Hat:satellite:6.8::el7 kobo —
kobo affected Red Hat:satellite_capsule:6.8::el7 kobo —
libmodulemd affected Red Hat:satellite:6.8::el7 libmodulemd —
libmodulemd affected Red Hat:satellite_capsule:6.8::el7 libmodulemd —
libmodulemd-debuginfo affected Red Hat:satellite_capsule:6.8::el7 libmodulemd-debuginfo —
libmodulemd-debuginfo affected Red Hat:satellite:6.8::el7 libmodulemd-debuginfo —
libsolv affected Red Hat:satellite:6.8::el7 libsolv —
libsolv affected Red Hat:satellite_capsule:6.8::el7 libsolv —
libsolv-debuginfo affected Red Hat:satellite:6.8::el7 libsolv-debuginfo —
libsolv-debuginfo affected Red Hat:satellite_capsule:6.8::el7 libsolv-debuginfo —
libwebsockets affected Red Hat:satellite:6.8::el7 libwebsockets —
libwebsockets affected Red Hat:satellite_capsule:6.8::el7 libwebsockets —
libwebsockets-debuginfo affected Red Hat:satellite_capsule:6.8::el7 libwebsockets-debuginfo —
libwebsockets-debuginfo affected Red Hat:satellite:6.8::el7 libwebsockets-debuginfo —
livecd-tools affected Red Hat:satellite:6.8::el7 livecd-tools —
livecd-tools affected Red Hat:satellite_capsule:6.8::el7 livecd-tools —
mod_passenger affected Red Hat:satellite:6.8::el7 mod_passenger —
mod_xsendfile affected Red Hat:satellite:6.8::el7 mod_xsendfile —
mod_xsendfile affected Red Hat:satellite_capsule:6.8::el7 mod_xsendfile —
mod_xsendfile-debuginfo affected Red Hat:satellite_capsule:6.8::el7 mod_xsendfile-debuginfo —
mod_xsendfile-debuginfo affected Red Hat:satellite:6.8::el7 mod_xsendfile-debuginfo —
ostree affected Red Hat:satellite_capsule:6.8::el7 ostree —
ostree affected Red Hat:satellite:6.8::el7 ostree —
ostree-debuginfo affected Red Hat:satellite_capsule:6.8::el7 ostree-debuginfo —
ostree-debuginfo affected Red Hat:satellite:6.8::el7 ostree-debuginfo —
pcp-mmvstatsd affected Red Hat:satellite:6.8::el7 pcp-mmvstatsd —
pulp affected Red Hat:satellite_capsule:6.8::el7 pulp —
pulp affected Red Hat:satellite:6.8::el7 pulp —
pulp-admin-client affected Red Hat:satellite:6.8::el7 pulp-admin-client —
pulp-admin-client affected Red Hat:satellite_capsule:6.8::el7 pulp-admin-client —
pulp-docker affected Red Hat:satellite:6.8::el7 pulp-docker —
pulp-docker affected Red Hat:satellite_capsule:6.8::el7 pulp-docker —
pulp-docker-admin-extensions affected Red Hat:satellite_capsule:6.8::el7 pulp-docker-admin-extensions —
pulp-docker-admin-extensions affected Red Hat:satellite:6.8::el7 pulp-docker-admin-extensions —
pulp-docker-plugins affected Red Hat:satellite:6.8::el7 pulp-docker-plugins —
pulp-docker-plugins affected Red Hat:satellite_capsule:6.8::el7 pulp-docker-plugins —
pulp-katello affected Red Hat:satellite:6.8::el7 pulp-katello —
pulp-katello affected Red Hat:satellite_capsule:6.8::el7 pulp-katello —
pulp-maintenance affected Red Hat:satellite:6.8::el7 pulp-maintenance —
pulp-maintenance affected Red Hat:satellite_capsule:6.8::el7 pulp-maintenance —
pulp-nodes-child affected Red Hat:satellite:6.8::el7 pulp-nodes-child —
pulp-nodes-child affected Red Hat:satellite_capsule:6.8::el7 pulp-nodes-child —
pulp-nodes-common affected Red Hat:satellite_capsule:6.8::el7 pulp-nodes-common —
pulp-nodes-common affected Red Hat:satellite:6.8::el7 pulp-nodes-common —
pulp-nodes-parent affected Red Hat:satellite:6.8::el7 pulp-nodes-parent —
pulp-nodes-parent affected Red Hat:satellite_capsule:6.8::el7 pulp-nodes-parent —
pulp-ostree affected Red Hat:satellite_capsule:6.8::el7 pulp-ostree —
pulp-ostree affected Red Hat:satellite:6.8::el7 pulp-ostree —
pulp-ostree-admin-extensions affected Red Hat:satellite:6.8::el7 pulp-ostree-admin-extensions —
pulp-ostree-admin-extensions affected Red Hat:satellite_capsule:6.8::el7 pulp-ostree-admin-extensions —
pulp-ostree-plugins affected Red Hat:satellite:6.8::el7 pulp-ostree-plugins —
pulp-ostree-plugins affected Red Hat:satellite_capsule:6.8::el7 pulp-ostree-plugins —
pulp-puppet affected Red Hat:satellite:6.8::el7 pulp-puppet —
pulp-puppet affected Red Hat:satellite_capsule:6.8::el7 pulp-puppet —
pulp-puppet-admin-extensions affected Red Hat:satellite_capsule:6.8::el7 pulp-puppet-admin-extensions —
pulp-puppet-admin-extensions affected Red Hat:satellite:6.8::el7 pulp-puppet-admin-extensions —
pulp-puppet-plugins affected Red Hat:satellite_capsule:6.8::el7 pulp-puppet-plugins —
pulp-puppet-plugins affected Red Hat:satellite:6.8::el7 pulp-puppet-plugins —
pulp-puppet-tools affected Red Hat:satellite:6.8::el7 pulp-puppet-tools —
pulp-puppet-tools affected Red Hat:satellite_capsule:6.8::el7 pulp-puppet-tools —
pulp-rpm affected Red Hat:satellite:6.8::el7 pulp-rpm —
pulp-rpm affected Red Hat:satellite_capsule:6.8::el7 pulp-rpm —
pulp-rpm-admin-extensions affected Red Hat:satellite_capsule:6.8::el7 pulp-rpm-admin-extensions —
pulp-rpm-admin-extensions affected Red Hat:satellite:6.8::el7 pulp-rpm-admin-extensions —
pulp-rpm-plugins affected Red Hat:satellite_capsule:6.8::el7 pulp-rpm-plugins —
pulp-rpm-plugins affected Red Hat:satellite:6.8::el7 pulp-rpm-plugins —
pulp-selinux affected Red Hat:satellite:6.8::el7 pulp-selinux —
pulp-selinux affected Red Hat:satellite_capsule:6.8::el7 pulp-selinux —
pulp-server affected Red Hat:satellite_capsule:6.8::el7 pulp-server —
pulp-server affected Red Hat:satellite:6.8::el7 pulp-server —
puppet-agent affected Red Hat:satellite_capsule:6.8::el7 puppet-agent —
puppet-agent affected Red Hat:satellite:6.8::el7 puppet-agent —
puppet-agent-oauth affected Red Hat:satellite:6.8::el7 puppet-agent-oauth —
puppet-agent-oauth affected Red Hat:satellite_capsule:6.8::el7 puppet-agent-oauth —
puppet-foreman_scap_client affected Red Hat:satellite_capsule:6.8::el7 puppet-foreman_scap_client —
puppet-foreman_scap_client affected Red Hat:satellite:6.8::el7 puppet-foreman_scap_client —
puppetlabs-stdlib affected Red Hat:satellite:6.8::el7 puppetlabs-stdlib —
puppetlabs-stdlib affected Red Hat:satellite_capsule:6.8::el7 puppetlabs-stdlib —
puppetserver affected Red Hat:satellite:6.8::el7 puppetserver —
puppetserver affected Red Hat:satellite_capsule:6.8::el7 puppetserver —
pycairo affected Red Hat:satellite_capsule:6.8::el7 pycairo —
pycairo affected Red Hat:satellite:6.8::el7 pycairo —
pycairo-debuginfo affected Red Hat:satellite:6.8::el7 pycairo-debuginfo —
pycairo-debuginfo affected Red Hat:satellite_capsule:6.8::el7 pycairo-debuginfo —
pygobject3 affected Red Hat:satellite_capsule:6.8::el7 pygobject3 —
pygobject3 affected Red Hat:satellite:6.8::el7 pygobject3 —
pygobject3-debuginfo affected Red Hat:satellite:6.8::el7 pygobject3-debuginfo —
pygobject3-debuginfo affected Red Hat:satellite_capsule:6.8::el7 pygobject3-debuginfo —
python2-amqp affected Red Hat:satellite:6.8::el7 python2-amqp —
python2-amqp affected Red Hat:satellite_capsule:6.8::el7 python2-amqp —
python2-ansible-runner affected Red Hat:satellite_capsule:6.8::el7 python2-ansible-runner —
python2-ansible-runner affected Red Hat:satellite:6.8::el7 python2-ansible-runner —
python2-anyjson affected Red Hat:satellite_capsule:6.8::el7 python2-anyjson —
python2-anyjson affected Red Hat:satellite:6.8::el7 python2-anyjson —
python2-apypie affected Red Hat:satellite_capsule:6.8::el7 python2-apypie —
python2-apypie affected Red Hat:satellite:6.8::el7 python2-apypie —
python2-billiard affected Red Hat:satellite_capsule:6.8::el7 python2-billiard —
python2-billiard affected Red Hat:satellite:6.8::el7 python2-billiard —
python2-celery affected Red Hat:satellite:6.8::el7 python2-celery —
python2-celery affected Red Hat:satellite_capsule:6.8::el7 python2-celery —
python2-click affected Red Hat:satellite_capsule:6.8::el7 python2-click —
python2-click affected Red Hat:satellite:6.8::el7 python2-click —
python2-crane affected Red Hat:satellite:6.8::el7 python2-crane —
python2-crane affected Red Hat:satellite_capsule:6.8::el7 python2-crane —
python2-daemon affected Red Hat:satellite:6.8::el7 python2-daemon —
python2-daemon affected Red Hat:satellite_capsule:6.8::el7 python2-daemon —
python2-django affected Red Hat:satellite_capsule:6.8::el7 python2-django —
python2-django affected Red Hat:satellite:6.8::el7 python2-django —
python2-flask affected Red Hat:satellite:6.8::el7 python2-flask —
python2-flask affected Red Hat:satellite_capsule:6.8::el7 python2-flask —
python2-future affected Red Hat:satellite_capsule:6.8::el7 python2-future —
python2-future affected Red Hat:satellite:6.8::el7 python2-future —
python2-gobject affected Red Hat:satellite_capsule:6.8::el7 python2-gobject —
python2-gobject affected Red Hat:satellite:6.8::el7 python2-gobject —
python2-gobject-base affected Red Hat:satellite:6.8::el7 python2-gobject-base —
python2-gobject-base affected Red Hat:satellite_capsule:6.8::el7 python2-gobject-base —
python2-isodate affected Red Hat:satellite_capsule:6.8::el7 python2-isodate —
python2-isodate affected Red Hat:satellite:6.8::el7 python2-isodate —
python2-itsdangerous affected Red Hat:satellite_capsule:6.8::el7 python2-itsdangerous —
python2-itsdangerous affected Red Hat:satellite:6.8::el7 python2-itsdangerous —
python2-jinja2 affected Red Hat:satellite_capsule:6.8::el7 python2-jinja2 —
python2-jinja2 affected Red Hat:satellite:6.8::el7 python2-jinja2 —
python2-jmespath affected Red Hat:satellite_capsule:6.8::el7 python2-jmespath —
python2-jmespath affected Red Hat:satellite:6.8::el7 python2-jmespath —
python2-keycloak-httpd-client-install affected Red Hat:satellite:6.8::el7 python2-keycloak-httpd-client-install —
python2-kombu affected Red Hat:satellite:6.8::el7 python2-kombu —
python2-kombu affected Red Hat:satellite_capsule:6.8::el7 python2-kombu —
python2-lockfile affected Red Hat:satellite:6.8::el7 python2-lockfile —
python2-lockfile affected Red Hat:satellite_capsule:6.8::el7 python2-lockfile —
python2-markupsafe affected Red Hat:satellite:6.8::el7 python2-markupsafe —
python2-markupsafe affected Red Hat:satellite_capsule:6.8::el7 python2-markupsafe —
python2-okaara affected Red Hat:satellite:6.8::el7 python2-okaara —
python2-okaara affected Red Hat:satellite_capsule:6.8::el7 python2-okaara —
python2-pexpect affected Red Hat:satellite:6.8::el7 python2-pexpect —
python2-pexpect affected Red Hat:satellite_capsule:6.8::el7 python2-pexpect —
python2-ptyprocess affected Red Hat:satellite_capsule:6.8::el7 python2-ptyprocess —
python2-ptyprocess affected Red Hat:satellite:6.8::el7 python2-ptyprocess —
python2-pycurl affected Red Hat:satellite_capsule:6.8::el7 python2-pycurl —
python2-pycurl affected Red Hat:satellite:6.8::el7 python2-pycurl —
python2-solv affected Red Hat:satellite:6.8::el7 python2-solv —
python2-solv affected Red Hat:satellite_capsule:6.8::el7 python2-solv —
python2-twisted affected Red Hat:satellite_capsule:6.8::el7 python2-twisted —
python2-twisted affected Red Hat:satellite:6.8::el7 python2-twisted —
python2-vine affected Red Hat:satellite_capsule:6.8::el7 python2-vine —
python2-vine affected Red Hat:satellite:6.8::el7 python2-vine —
python2-werkzeug affected Red Hat:satellite:6.8::el7 python2-werkzeug —
python2-werkzeug affected Red Hat:satellite_capsule:6.8::el7 python2-werkzeug —
python3-aiohttp affected Red Hat:satellite:6.8::el7 python3-aiohttp —
python3-async-timeout affected Red Hat:satellite:6.8::el7 python3-async-timeout —
python3-attrs affected Red Hat:satellite:6.8::el7 python3-attrs —
python3-chardet affected Red Hat:satellite:6.8::el7 python3-chardet —
python3-dateutil affected Red Hat:satellite:6.8::el7 python3-dateutil —
python3-idna affected Red Hat:satellite:6.8::el7 python3-idna —
python3-idna-ssl affected Red Hat:satellite:6.8::el7 python3-idna-ssl —
python3-multidict affected Red Hat:satellite:6.8::el7 python3-multidict —
python3-prometheus-client affected Red Hat:satellite:6.8::el7 python3-prometheus-client —
python3-receptor-satellite affected Red Hat:satellite:6.8::el7 python3-receptor-satellite —
python3-six affected Red Hat:satellite:6.8::el7 python3-six —
python3-typing-extensions affected Red Hat:satellite:6.8::el7 python3-typing-extensions —
python3-yarl affected Red Hat:satellite:6.8::el7 python3-yarl —
python-aiohttp affected Red Hat:satellite:6.8::el7 python-aiohttp —
python-aiohttp-debuginfo affected Red Hat:satellite:6.8::el7 python-aiohttp-debuginfo —
python-amqp affected Red Hat:satellite:6.8::el7 python-amqp —
python-amqp affected Red Hat:satellite_capsule:6.8::el7 python-amqp —
python-anyjson affected Red Hat:satellite_capsule:6.8::el7 python-anyjson —
python-anyjson affected Red Hat:satellite:6.8::el7 python-anyjson —
python-apypie affected Red Hat:satellite:6.8::el7 python-apypie —
python-apypie affected Red Hat:satellite_capsule:6.8::el7 python-apypie —
python-async-timeout affected Red Hat:satellite:6.8::el7 python-async-timeout —
python-attrs affected Red Hat:satellite:6.8::el7 python-attrs —
python-billiard affected Red Hat:satellite:6.8::el7 python-billiard —
python-billiard affected Red Hat:satellite_capsule:6.8::el7 python-billiard —
python-billiard-debuginfo affected Red Hat:satellite_capsule:6.8::el7 python-billiard-debuginfo —
python-billiard-debuginfo affected Red Hat:satellite:6.8::el7 python-billiard-debuginfo —
python-blinker affected Red Hat:satellite_capsule:6.8::el7 python-blinker —
python-blinker affected Red Hat:satellite:6.8::el7 python-blinker —
python-bson affected Red Hat:satellite:6.8::el7 python-bson —
python-bson affected Red Hat:satellite_capsule:6.8::el7 python-bson —
python-celery affected Red Hat:satellite_capsule:6.8::el7 python-celery —
python-celery affected Red Hat:satellite:6.8::el7 python-celery —
python-chardet affected Red Hat:satellite:6.8::el7 python-chardet —
python-click affected Red Hat:satellite:6.8::el7 python-click —
python-click affected Red Hat:satellite_capsule:6.8::el7 python-click —
python-crane affected Red Hat:satellite_capsule:6.8::el7 python-crane —
python-crane affected Red Hat:satellite:6.8::el7 python-crane —
python-daemon affected Red Hat:satellite_capsule:6.8::el7 python-daemon —
python-daemon affected Red Hat:satellite:6.8::el7 python-daemon —
python-dateutil affected Red Hat:satellite:6.8::el7 python-dateutil —
python-django affected Red Hat:satellite:6.8::el7 python-django —
python-django affected Red Hat:satellite_capsule:6.8::el7 python-django —
python-flask affected Red Hat:satellite_capsule:6.8::el7 python-flask —
python-flask affected Red Hat:satellite:6.8::el7 python-flask —
python-gnupg affected Red Hat:satellite:6.8::el7 python-gnupg —
python-gnupg affected Red Hat:satellite_capsule:6.8::el7 python-gnupg —
python-gofer affected Red Hat:satellite_capsule:6.8::el7 python-gofer —
python-gofer affected Red Hat:satellite:6.8::el7 python-gofer —
python-gofer-qpid affected Red Hat:satellite:6.8::el7 python-gofer-qpid —
python-gofer-qpid affected Red Hat:satellite_capsule:6.8::el7 python-gofer-qpid —
python-idna affected Red Hat:satellite:6.8::el7 python-idna —
python-idna-ssl affected Red Hat:satellite:6.8::el7 python-idna-ssl —
python-imgcreate affected Red Hat:satellite_capsule:6.8::el7 python-imgcreate —
python-imgcreate affected Red Hat:satellite:6.8::el7 python-imgcreate —
python-isodate affected Red Hat:satellite:6.8::el7 python-isodate —
python-isodate affected Red Hat:satellite_capsule:6.8::el7 python-isodate —
python-itsdangerous affected Red Hat:satellite_capsule:6.8::el7 python-itsdangerous —
python-itsdangerous affected Red Hat:satellite:6.8::el7 python-itsdangerous —
python-jinja2 affected Red Hat:satellite:6.8::el7 python-jinja2 —
python-jinja2 affected Red Hat:satellite_capsule:6.8::el7 python-jinja2 —
python-jmespath affected Red Hat:satellite:6.8::el7 python-jmespath —
python-jmespath affected Red Hat:satellite_capsule:6.8::el7 python-jmespath —
python-kid affected Red Hat:satellite_capsule:6.8::el7 python-kid —
python-kid affected Red Hat:satellite:6.8::el7 python-kid —
python-kombu affected Red Hat:satellite_capsule:6.8::el7 python-kombu —
python-kombu affected Red Hat:satellite:6.8::el7 python-kombu —
python-lockfile affected Red Hat:satellite:6.8::el7 python-lockfile —
python-lockfile affected Red Hat:satellite_capsule:6.8::el7 python-lockfile —
python-markupsafe affected Red Hat:satellite_capsule:6.8::el7 python-markupsafe —
python-markupsafe affected Red Hat:satellite:6.8::el7 python-markupsafe —
python-markupsafe-debuginfo affected Red Hat:satellite_capsule:6.8::el7 python-markupsafe-debuginfo —
python-markupsafe-debuginfo affected Red Hat:satellite:6.8::el7 python-markupsafe-debuginfo —
python-mongoengine affected Red Hat:satellite:6.8::el7 python-mongoengine —
python-mongoengine affected Red Hat:satellite_capsule:6.8::el7 python-mongoengine —
python-multidict affected Red Hat:satellite:6.8::el7 python-multidict —
python-multidict-debuginfo affected Red Hat:satellite:6.8::el7 python-multidict-debuginfo —
python-nectar affected Red Hat:satellite_capsule:6.8::el7 python-nectar —
python-nectar affected Red Hat:satellite:6.8::el7 python-nectar —
python-oauth2 affected Red Hat:satellite_capsule:6.8::el7 python-oauth2 —
python-oauth2 affected Red Hat:satellite:6.8::el7 python-oauth2 —
python-okaara affected Red Hat:satellite_capsule:6.8::el7 python-okaara —
python-okaara affected Red Hat:satellite:6.8::el7 python-okaara —
python-pexpect affected Red Hat:satellite_capsule:6.8::el7 python-pexpect —
python-pexpect affected Red Hat:satellite:6.8::el7 python-pexpect —
python-prometheus-client affected Red Hat:satellite:6.8::el7 python-prometheus-client —
python-psutil affected Red Hat:satellite_capsule:6.8::el7 python-psutil —
python-psutil affected Red Hat:satellite:6.8::el7 python-psutil —
python-psutil-debuginfo affected Red Hat:satellite:6.8::el7 python-psutil-debuginfo —
python-psutil-debuginfo affected Red Hat:satellite_capsule:6.8::el7 python-psutil-debuginfo —
python-ptyprocess affected Red Hat:satellite_capsule:6.8::el7 python-ptyprocess —
python-ptyprocess affected Red Hat:satellite:6.8::el7 python-ptyprocess —
python-pulp-agent-lib affected Red Hat:satellite:6.8::el7 python-pulp-agent-lib —
python-pulp-agent-lib affected Red Hat:satellite_capsule:6.8::el7 python-pulp-agent-lib —
python-pulp-bindings affected Red Hat:satellite_capsule:6.8::el7 python-pulp-bindings —
python-pulp-bindings affected Red Hat:satellite:6.8::el7 python-pulp-bindings —
python-pulp-client-lib affected Red Hat:satellite_capsule:6.8::el7 python-pulp-client-lib —
python-pulp-client-lib affected Red Hat:satellite:6.8::el7 python-pulp-client-lib —
python-pulp-common affected Red Hat:satellite_capsule:6.8::el7 python-pulp-common —
python-pulp-common affected Red Hat:satellite:6.8::el7 python-pulp-common —
python-pulp-docker-common affected Red Hat:satellite:6.8::el7 python-pulp-docker-common —
python-pulp-docker-common affected Red Hat:satellite_capsule:6.8::el7 python-pulp-docker-common —
python-pulp-integrity affected Red Hat:satellite_capsule:6.8::el7 python-pulp-integrity —
python-pulp-integrity affected Red Hat:satellite:6.8::el7 python-pulp-integrity —
python-pulp-oid_validation affected Red Hat:satellite_capsule:6.8::el7 python-pulp-oid_validation —
python-pulp-oid_validation affected Red Hat:satellite:6.8::el7 python-pulp-oid_validation —
python-pulp-ostree-common affected Red Hat:satellite:6.8::el7 python-pulp-ostree-common —
python-pulp-ostree-common affected Red Hat:satellite_capsule:6.8::el7 python-pulp-ostree-common —
python-pulp-puppet-common affected Red Hat:satellite:6.8::el7 python-pulp-puppet-common —
python-pulp-puppet-common affected Red Hat:satellite_capsule:6.8::el7 python-pulp-puppet-common —
python-pulp-repoauth affected Red Hat:satellite:6.8::el7 python-pulp-repoauth —
python-pulp-repoauth affected Red Hat:satellite_capsule:6.8::el7 python-pulp-repoauth —
python-pulp-rpm-common affected Red Hat:satellite:6.8::el7 python-pulp-rpm-common —
python-pulp-rpm-common affected Red Hat:satellite_capsule:6.8::el7 python-pulp-rpm-common —
python-pulp-streamer affected Red Hat:satellite_capsule:6.8::el7 python-pulp-streamer —
python-pulp-streamer affected Red Hat:satellite:6.8::el7 python-pulp-streamer —
python-pycurl affected Red Hat:satellite_capsule:6.8::el7 python-pycurl —
python-pycurl affected Red Hat:satellite:6.8::el7 python-pycurl —
python-pycurl-debuginfo affected Red Hat:satellite_capsule:6.8::el7 python-pycurl-debuginfo —
python-pycurl-debuginfo affected Red Hat:satellite:6.8::el7 python-pycurl-debuginfo —
python-pymongo affected Red Hat:satellite_capsule:6.8::el7 python-pymongo —
python-pymongo affected Red Hat:satellite:6.8::el7 python-pymongo —
python-pymongo-debuginfo affected Red Hat:satellite:6.8::el7 python-pymongo-debuginfo —
python-pymongo-debuginfo affected Red Hat:satellite_capsule:6.8::el7 python-pymongo-debuginfo —
python-pymongo-gridfs affected Red Hat:satellite_capsule:6.8::el7 python-pymongo-gridfs —
python-pymongo-gridfs affected Red Hat:satellite:6.8::el7 python-pymongo-gridfs —
python-qpid affected Red Hat:satellite_capsule:6.8::el7 python-qpid —
python-qpid affected Red Hat:satellite:6.8::el7 python-qpid —
python-qpid-proton affected Red Hat:satellite:6.8::el7 python-qpid-proton —
python-qpid-proton affected Red Hat:satellite_capsule:6.8::el7 python-qpid-proton —
python-qpid-qmf affected Red Hat:satellite_capsule:6.8::el7 python-qpid-qmf —
python-qpid-qmf affected Red Hat:satellite:6.8::el7 python-qpid-qmf —
python-receptor-satellite affected Red Hat:satellite:6.8::el7 python-receptor-satellite —
python-saslwrapper affected Red Hat:satellite_capsule:6.8::el7 python-saslwrapper —
python-saslwrapper affected Red Hat:satellite:6.8::el7 python-saslwrapper —
python-semantic_version affected Red Hat:satellite:6.8::el7 python-semantic_version —
python-semantic_version affected Red Hat:satellite_capsule:6.8::el7 python-semantic_version —
python-simplejson affected Red Hat:satellite_capsule:6.8::el7 python-simplejson —
python-simplejson affected Red Hat:satellite:6.8::el7 python-simplejson —
python-simplejson-debuginfo affected Red Hat:satellite_capsule:6.8::el7 python-simplejson-debuginfo —
python-simplejson-debuginfo affected Red Hat:satellite:6.8::el7 python-simplejson-debuginfo —
python-six affected Red Hat:satellite:6.8::el7 python-six —
python-twisted affected Red Hat:satellite:6.8::el7 python-twisted —
python-twisted affected Red Hat:satellite_capsule:6.8::el7 python-twisted —
python-twisted-debuginfo affected Red Hat:satellite:6.8::el7 python-twisted-debuginfo —
python-twisted-debuginfo affected Red Hat:satellite_capsule:6.8::el7 python-twisted-debuginfo —
python-typing-extensions affected Red Hat:satellite:6.8::el7 python-typing-extensions —
python-vine affected Red Hat:satellite:6.8::el7 python-vine —
python-vine affected Red Hat:satellite_capsule:6.8::el7 python-vine —
python-werkzeug affected Red Hat:satellite_capsule:6.8::el7 python-werkzeug —
python-werkzeug affected Red Hat:satellite:6.8::el7 python-werkzeug —
python-yarl affected Red Hat:satellite:6.8::el7 python-yarl —
python-yarl-debuginfo affected Red Hat:satellite:6.8::el7 python-yarl-debuginfo —
python-zope-interface affected Red Hat:satellite_capsule:6.8::el7 python-zope-interface —
python-zope-interface affected Red Hat:satellite:6.8::el7 python-zope-interface —
python-zope-interface-debuginfo affected Red Hat:satellite_capsule:6.8::el7 python-zope-interface-debuginfo —
python-zope-interface-debuginfo affected Red Hat:satellite:6.8::el7 python-zope-interface-debuginfo —
qpid-cpp affected Red Hat:satellite:6.8::el7 qpid-cpp —
qpid-cpp affected Red Hat:satellite_capsule:6.8::el7 qpid-cpp —
qpid-cpp-client affected Red Hat:satellite_capsule:6.8::el7 qpid-cpp-client —
qpid-cpp-client affected Red Hat:satellite:6.8::el7 qpid-cpp-client —
qpid-cpp-client-devel affected Red Hat:satellite:6.8::el7 qpid-cpp-client-devel —
qpid-cpp-client-devel affected Red Hat:satellite_capsule:6.8::el7 qpid-cpp-client-devel —
qpid-cpp-debuginfo affected Red Hat:satellite_capsule:6.8::el7 qpid-cpp-debuginfo —
qpid-cpp-debuginfo affected Red Hat:satellite:6.8::el7 qpid-cpp-debuginfo —
qpid-cpp-server affected Red Hat:satellite:6.8::el7 qpid-cpp-server —
qpid-cpp-server affected Red Hat:satellite_capsule:6.8::el7 qpid-cpp-server —
qpid-cpp-server-linearstore affected Red Hat:satellite_capsule:6.8::el7 qpid-cpp-server-linearstore —
qpid-cpp-server-linearstore affected Red Hat:satellite:6.8::el7 qpid-cpp-server-linearstore —
qpid-dispatch affected Red Hat:satellite_capsule:6.8::el7 qpid-dispatch —
qpid-dispatch affected Red Hat:satellite:6.8::el7 qpid-dispatch —
qpid-dispatch-debuginfo affected Red Hat:satellite:6.8::el7 qpid-dispatch-debuginfo —
qpid-dispatch-debuginfo affected Red Hat:satellite_capsule:6.8::el7 qpid-dispatch-debuginfo —
qpid-dispatch-router affected Red Hat:satellite_capsule:6.8::el7 qpid-dispatch-router —
qpid-dispatch-router affected Red Hat:satellite:6.8::el7 qpid-dispatch-router —
qpid-dispatch-tools affected Red Hat:satellite:6.8::el7 qpid-dispatch-tools —
qpid-dispatch-tools affected Red Hat:satellite_capsule:6.8::el7 qpid-dispatch-tools —
qpid-proton affected Red Hat:satellite_capsule:6.8::el7 qpid-proton —
qpid-proton affected Red Hat:satellite:6.8::el7 qpid-proton —
qpid-proton-c affected Red Hat:satellite:6.8::el7 qpid-proton-c —
qpid-proton-c affected Red Hat:satellite_capsule:6.8::el7 qpid-proton-c —
qpid-proton-debuginfo affected Red Hat:satellite:6.8::el7 qpid-proton-debuginfo —
qpid-proton-debuginfo affected Red Hat:satellite_capsule:6.8::el7 qpid-proton-debuginfo —
qpid-qmf affected Red Hat:satellite_capsule:6.8::el7 qpid-qmf —
qpid-qmf affected Red Hat:satellite:6.8::el7 qpid-qmf —
qpid-tools affected Red Hat:satellite:6.8::el7 qpid-tools —
qpid-tools affected Red Hat:satellite_capsule:6.8::el7 qpid-tools —
receptor affected Red Hat:satellite:6.8::el7 receptor —
redhat-access-insights-puppet affected Red Hat:satellite:6.8::el7 redhat-access-insights-puppet —
redhat-access-insights-puppet affected Red Hat:satellite_capsule:6.8::el7 redhat-access-insights-puppet —
repoview affected Red Hat:satellite_capsule:6.8::el7 repoview —
repoview affected Red Hat:satellite:6.8::el7 repoview —
rhel8-kickstart-setup affected Red Hat:satellite:6.8::el7 rhel8-kickstart-setup —
rh-postgresql12-postgresql-evr affected Red Hat:satellite:6.8::el7 rh-postgresql12-postgresql-evr —
rubygem-facter affected Red Hat:satellite:6.8::el7 rubygem-facter —
rubygem-fast_gettext affected Red Hat:satellite_capsule:6.8::el7 rubygem-fast_gettext —
rubygem-fast_gettext affected Red Hat:satellite:6.8::el7 rubygem-fast_gettext —
rubygem-foreman_scap_client affected Red Hat:satellite:6.8::el7 rubygem-foreman_scap_client —
rubygem-highline affected Red Hat:satellite_capsule:6.8::el7 rubygem-highline —
rubygem-highline affected Red Hat:satellite:6.8::el7 rubygem-highline —
rubygem-newt affected Red Hat:satellite_capsule:6.8::el7 rubygem-newt —
rubygem-newt affected Red Hat:satellite:6.8::el7 rubygem-newt —
rubygem-newt-debuginfo affected Red Hat:satellite:6.8::el7 rubygem-newt-debuginfo —
rubygem-newt-debuginfo affected Red Hat:satellite_capsule:6.8::el7 rubygem-newt-debuginfo —
rubygem-oauth affected Red Hat:satellite_capsule:6.8::el7 rubygem-oauth —
rubygem-oauth affected Red Hat:satellite:6.8::el7 rubygem-oauth —
rubygem-passenger affected Red Hat:satellite:6.8::el7 rubygem-passenger —
rubygem-passenger-debuginfo affected Red Hat:satellite:6.8::el7 rubygem-passenger-debuginfo —
rubygem-passenger-native affected Red Hat:satellite:6.8::el7 rubygem-passenger-native —
rubygem-passenger-native-libs affected Red Hat:satellite:6.8::el7 rubygem-passenger-native-libs —
rubygem-rack affected Red Hat:satellite:6.8::el7 rubygem-rack —
rubygem-rake affected Red Hat:satellite:6.8::el7 rubygem-rake —
saslwrapper affected Red Hat:satellite_capsule:6.8::el7 saslwrapper —
saslwrapper affected Red Hat:satellite:6.8::el7 saslwrapper —
saslwrapper-debuginfo affected Red Hat:satellite:6.8::el7 saslwrapper-debuginfo —
saslwrapper-debuginfo affected Red Hat:satellite_capsule:6.8::el7 saslwrapper-debuginfo —
satellite affected Red Hat:satellite:6.8::el7 satellite —
satellite affected Red Hat:satellite_capsule:6.8::el7 satellite —
satellite-capsule affected Red Hat:satellite:6.8::el7 satellite-capsule —
satellite-capsule affected Red Hat:satellite_capsule:6.8::el7 satellite-capsule —
satellite-cli affected Red Hat:satellite_capsule:6.8::el7 satellite-cli —
satellite-cli affected Red Hat:satellite:6.8::el7 satellite-cli —
satellite-common affected Red Hat:satellite:6.8::el7 satellite-common —
satellite-common affected Red Hat:satellite_capsule:6.8::el7 satellite-common —
satellite-debug-tools affected Red Hat:satellite:6.8::el7 satellite-debug-tools —
satellite-debug-tools affected Red Hat:satellite_capsule:6.8::el7 satellite-debug-tools —
satellite-installer affected Red Hat:satellite_capsule:6.8::el7 satellite-installer —
satellite-installer affected Red Hat:satellite:6.8::el7 satellite-installer —
tfm affected Red Hat:satellite_capsule:6.8::el7 tfm —
tfm affected Red Hat:satellite:6.8::el7 tfm —
tfm-rubygem-actioncable affected Red Hat:satellite:6.8::el7 tfm-rubygem-actioncable —
tfm-rubygem-actionmailbox affected Red Hat:satellite:6.8::el7 tfm-rubygem-actionmailbox —
tfm-rubygem-actionmailer affected Red Hat:satellite:6.8::el7 tfm-rubygem-actionmailer —
tfm-rubygem-actionpack affected Red Hat:satellite:6.8::el7 tfm-rubygem-actionpack —
tfm-rubygem-actiontext affected Red Hat:satellite:6.8::el7 tfm-rubygem-actiontext —
tfm-rubygem-actionview affected Red Hat:satellite:6.8::el7 tfm-rubygem-actionview —
tfm-rubygem-activejob affected Red Hat:satellite:6.8::el7 tfm-rubygem-activejob —
tfm-rubygem-activemodel affected Red Hat:satellite:6.8::el7 tfm-rubygem-activemodel —
tfm-rubygem-activerecord affected Red Hat:satellite:6.8::el7 tfm-rubygem-activerecord —
tfm-rubygem-activerecord-import affected Red Hat:satellite:6.8::el7 tfm-rubygem-activerecord-import —
tfm-rubygem-activerecord-session_store affected Red Hat:satellite:6.8::el7 tfm-rubygem-activerecord-session_store —
tfm-rubygem-activestorage affected Red Hat:satellite:6.8::el7 tfm-rubygem-activestorage —
tfm-rubygem-activesupport affected Red Hat:satellite:6.8::el7 tfm-rubygem-activesupport —
tfm-rubygem-addressable affected Red Hat:satellite:6.8::el7 tfm-rubygem-addressable —
tfm-rubygem-algebrick affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-algebrick —
tfm-rubygem-algebrick affected Red Hat:satellite:6.8::el7 tfm-rubygem-algebrick —
tfm-rubygem-amazing_print affected Red Hat:satellite:6.8::el7 tfm-rubygem-amazing_print —
tfm-rubygem-ancestry affected Red Hat:satellite:6.8::el7 tfm-rubygem-ancestry —
tfm-rubygem-anemone affected Red Hat:satellite:6.8::el7 tfm-rubygem-anemone —
tfm-rubygem-angular-rails-templates affected Red Hat:satellite:6.8::el7 tfm-rubygem-angular-rails-templates —
tfm-rubygem-ansi affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-ansi —
tfm-rubygem-ansi affected Red Hat:satellite:6.8::el7 tfm-rubygem-ansi —
tfm-rubygem-apipie-bindings affected Red Hat:satellite:6.8::el7 tfm-rubygem-apipie-bindings —
tfm-rubygem-apipie-dsl affected Red Hat:satellite:6.8::el7 tfm-rubygem-apipie-dsl —
tfm-rubygem-apipie-params affected Red Hat:satellite:6.8::el7 tfm-rubygem-apipie-params —
tfm-rubygem-apipie-params affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-apipie-params —
tfm-rubygem-apipie-rails affected Red Hat:satellite:6.8::el7 tfm-rubygem-apipie-rails —
tfm-rubygem-audited affected Red Hat:satellite:6.8::el7 tfm-rubygem-audited —
tfm-rubygem-azure_mgmt_compute affected Red Hat:satellite:6.8::el7 tfm-rubygem-azure_mgmt_compute —
tfm-rubygem-azure_mgmt_network affected Red Hat:satellite:6.8::el7 tfm-rubygem-azure_mgmt_network —
tfm-rubygem-azure_mgmt_resources affected Red Hat:satellite:6.8::el7 tfm-rubygem-azure_mgmt_resources —
tfm-rubygem-azure_mgmt_storage affected Red Hat:satellite:6.8::el7 tfm-rubygem-azure_mgmt_storage —
tfm-rubygem-azure_mgmt_subscriptions affected Red Hat:satellite:6.8::el7 tfm-rubygem-azure_mgmt_subscriptions —
tfm-rubygem-bcrypt affected Red Hat:satellite:6.8::el7 tfm-rubygem-bcrypt —
tfm-rubygem-bcrypt-debuginfo affected Red Hat:satellite:6.8::el7 tfm-rubygem-bcrypt-debuginfo —
tfm-rubygem-builder affected Red Hat:satellite:6.8::el7 tfm-rubygem-builder —
tfm-rubygem-bundler_ext affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-bundler_ext —
tfm-rubygem-bundler_ext affected Red Hat:satellite:6.8::el7 tfm-rubygem-bundler_ext —
tfm-rubygem-clamp affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-clamp —
tfm-rubygem-clamp affected Red Hat:satellite:6.8::el7 tfm-rubygem-clamp —
tfm-rubygem-coffee-rails affected Red Hat:satellite:6.8::el7 tfm-rubygem-coffee-rails —
tfm-rubygem-coffee-script affected Red Hat:satellite:6.8::el7 tfm-rubygem-coffee-script —
tfm-rubygem-coffee-script-source affected Red Hat:satellite:6.8::el7 tfm-rubygem-coffee-script-source —
tfm-rubygem-concurrent-ruby affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-concurrent-ruby —
tfm-rubygem-concurrent-ruby affected Red Hat:satellite:6.8::el7 tfm-rubygem-concurrent-ruby —
tfm-rubygem-concurrent-ruby-edge affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-concurrent-ruby-edge —
tfm-rubygem-concurrent-ruby-edge affected Red Hat:satellite:6.8::el7 tfm-rubygem-concurrent-ruby-edge —
tfm-rubygem-connection_pool affected Red Hat:satellite:6.8::el7 tfm-rubygem-connection_pool —
tfm-rubygem-crass affected Red Hat:satellite:6.8::el7 tfm-rubygem-crass —
tfm-rubygem-css_parser affected Red Hat:satellite:6.8::el7 tfm-rubygem-css_parser —
tfm-rubygem-daemons affected Red Hat:satellite:6.8::el7 tfm-rubygem-daemons —
tfm-rubygem-deacon affected Red Hat:satellite:6.8::el7 tfm-rubygem-deacon —
tfm-rubygem-declarative affected Red Hat:satellite:6.8::el7 tfm-rubygem-declarative —
tfm-rubygem-declarative-option affected Red Hat:satellite:6.8::el7 tfm-rubygem-declarative-option —
tfm-rubygem-deep_cloneable affected Red Hat:satellite:6.8::el7 tfm-rubygem-deep_cloneable —
tfm-rubygem-deface affected Red Hat:satellite:6.8::el7 tfm-rubygem-deface —
tfm-rubygem-diffy affected Red Hat:satellite:6.8::el7 tfm-rubygem-diffy —
tfm-rubygem-domain_name affected Red Hat:satellite:6.8::el7 tfm-rubygem-domain_name —
tfm-rubygem-domain_name affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-domain_name —
tfm-rubygem-dynflow affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-dynflow —
tfm-rubygem-dynflow affected Red Hat:satellite:6.8::el7 tfm-rubygem-dynflow —
tfm-rubygem-erubi affected Red Hat:satellite:6.8::el7 tfm-rubygem-erubi —
tfm-rubygem-excon affected Red Hat:satellite:6.8::el7 tfm-rubygem-excon —
tfm-rubygem-execjs affected Red Hat:satellite:6.8::el7 tfm-rubygem-execjs —
tfm-rubygem-facter affected Red Hat:satellite:6.8::el7 tfm-rubygem-facter —
tfm-rubygem-faraday affected Red Hat:satellite:6.8::el7 tfm-rubygem-faraday —
tfm-rubygem-faraday affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-faraday —
tfm-rubygem-faraday-cookie_jar affected Red Hat:satellite:6.8::el7 tfm-rubygem-faraday-cookie_jar —
tfm-rubygem-faraday_middleware affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-faraday_middleware —
tfm-rubygem-faraday_middleware affected Red Hat:satellite:6.8::el7 tfm-rubygem-faraday_middleware —
tfm-rubygem-fast_gettext affected Red Hat:satellite:6.8::el7 tfm-rubygem-fast_gettext —
tfm-rubygem-ffi affected Red Hat:satellite:6.8::el7 tfm-rubygem-ffi —
tfm-rubygem-ffi affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-ffi —
tfm-rubygem-ffi-debuginfo affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-ffi-debuginfo —
tfm-rubygem-ffi-debuginfo affected Red Hat:satellite:6.8::el7 tfm-rubygem-ffi-debuginfo —
tfm-rubygem-fog-aws affected Red Hat:satellite:6.8::el7 tfm-rubygem-fog-aws —
tfm-rubygem-fog-core affected Red Hat:satellite:6.8::el7 tfm-rubygem-fog-core —
tfm-rubygem-fog-google affected Red Hat:satellite:6.8::el7 tfm-rubygem-fog-google —
tfm-rubygem-fog-json affected Red Hat:satellite:6.8::el7 tfm-rubygem-fog-json —
tfm-rubygem-fog-kubevirt affected Red Hat:satellite:6.8::el7 tfm-rubygem-fog-kubevirt —
tfm-rubygem-fog-libvirt affected Red Hat:satellite:6.8::el7 tfm-rubygem-fog-libvirt —
tfm-rubygem-fog-openstack affected Red Hat:satellite:6.8::el7 tfm-rubygem-fog-openstack —
tfm-rubygem-fog-ovirt affected Red Hat:satellite:6.8::el7 tfm-rubygem-fog-ovirt —
tfm-rubygem-fog-vsphere affected Red Hat:satellite:6.8::el7 tfm-rubygem-fog-vsphere —
tfm-rubygem-fog-xml affected Red Hat:satellite:6.8::el7 tfm-rubygem-fog-xml —
tfm-rubygem-foreman_ansible affected Red Hat:satellite:6.8::el7 tfm-rubygem-foreman_ansible —
tfm-rubygem-foreman_ansible_core affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-foreman_ansible_core —
tfm-rubygem-foreman_ansible_core affected Red Hat:satellite:6.8::el7 tfm-rubygem-foreman_ansible_core —
tfm-rubygem-foreman_azure_rm affected Red Hat:satellite:6.8::el7 tfm-rubygem-foreman_azure_rm —
tfm-rubygem-foreman_bootdisk affected Red Hat:satellite:6.8::el7 tfm-rubygem-foreman_bootdisk —
tfm-rubygem-foreman_discovery affected Red Hat:satellite:6.8::el7 tfm-rubygem-foreman_discovery —
tfm-rubygem-foreman_hooks affected Red Hat:satellite:6.8::el7 tfm-rubygem-foreman_hooks —
tfm-rubygem-foreman_kubevirt affected Red Hat:satellite:6.8::el7 tfm-rubygem-foreman_kubevirt —
tfm-rubygem-foreman_leapp affected Red Hat:satellite:6.8::el7 tfm-rubygem-foreman_leapp —
tfm-rubygem-foreman_openscap affected Red Hat:satellite:6.8::el7 tfm-rubygem-foreman_openscap —
tfm-rubygem-foreman_remote_execution affected Red Hat:satellite:6.8::el7 tfm-rubygem-foreman_remote_execution —
tfm-rubygem-foreman_remote_execution-cockpit affected Red Hat:satellite:6.8::el7 tfm-rubygem-foreman_remote_execution-cockpit —
tfm-rubygem-foreman_remote_execution_core affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-foreman_remote_execution_core —
tfm-rubygem-foreman_remote_execution_core affected Red Hat:satellite:6.8::el7 tfm-rubygem-foreman_remote_execution_core —
tfm-rubygem-foreman_rh_cloud affected Red Hat:satellite:6.8::el7 tfm-rubygem-foreman_rh_cloud —
tfm-rubygem-foreman-tasks affected Red Hat:satellite:6.8::el7 tfm-rubygem-foreman-tasks —
tfm-rubygem-foreman-tasks-core affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-foreman-tasks-core —
tfm-rubygem-foreman-tasks-core affected Red Hat:satellite:6.8::el7 tfm-rubygem-foreman-tasks-core —
tfm-rubygem-foreman_templates affected Red Hat:satellite:6.8::el7 tfm-rubygem-foreman_templates —
tfm-rubygem-foreman_theme_satellite affected Red Hat:satellite:6.8::el7 tfm-rubygem-foreman_theme_satellite —
tfm-rubygem-foreman_virt_who_configure affected Red Hat:satellite:6.8::el7 tfm-rubygem-foreman_virt_who_configure —
tfm-rubygem-formatador affected Red Hat:satellite:6.8::el7 tfm-rubygem-formatador —
tfm-rubygem-friendly_id affected Red Hat:satellite:6.8::el7 tfm-rubygem-friendly_id —
tfm-rubygem-fx affected Red Hat:satellite:6.8::el7 tfm-rubygem-fx —
tfm-rubygem-get_process_mem affected Red Hat:satellite:6.8::el7 tfm-rubygem-get_process_mem —
tfm-rubygem-gettext affected Red Hat:satellite:6.8::el7 tfm-rubygem-gettext —
tfm-rubygem-gettext_i18n_rails affected Red Hat:satellite:6.8::el7 tfm-rubygem-gettext_i18n_rails —
tfm-rubygem-git affected Red Hat:satellite:6.8::el7 tfm-rubygem-git —
tfm-rubygem-gitlab-sidekiq-fetcher affected Red Hat:satellite:6.8::el7 tfm-rubygem-gitlab-sidekiq-fetcher —
tfm-rubygem-globalid affected Red Hat:satellite:6.8::el7 tfm-rubygem-globalid —
tfm-rubygem-google-api-client affected Red Hat:satellite:6.8::el7 tfm-rubygem-google-api-client —
tfm-rubygem-googleauth affected Red Hat:satellite:6.8::el7 tfm-rubygem-googleauth —
tfm-rubygem-graphql affected Red Hat:satellite:6.8::el7 tfm-rubygem-graphql —
tfm-rubygem-graphql-batch affected Red Hat:satellite:6.8::el7 tfm-rubygem-graphql-batch —
tfm-rubygem-gssapi affected Red Hat:satellite:6.8::el7 tfm-rubygem-gssapi —
tfm-rubygem-gssapi affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-gssapi —
tfm-rubygem-hammer_cli affected Red Hat:satellite:6.8::el7 tfm-rubygem-hammer_cli —
tfm-rubygem-hammer_cli_foreman affected Red Hat:satellite:6.8::el7 tfm-rubygem-hammer_cli_foreman —
tfm-rubygem-hammer_cli_foreman_admin affected Red Hat:satellite:6.8::el7 tfm-rubygem-hammer_cli_foreman_admin —
tfm-rubygem-hammer_cli_foreman_ansible affected Red Hat:satellite:6.8::el7 tfm-rubygem-hammer_cli_foreman_ansible —
tfm-rubygem-hammer_cli_foreman_azure_rm affected Red Hat:satellite:6.8::el7 tfm-rubygem-hammer_cli_foreman_azure_rm —
tfm-rubygem-hammer_cli_foreman_bootdisk affected Red Hat:satellite:6.8::el7 tfm-rubygem-hammer_cli_foreman_bootdisk —
tfm-rubygem-hammer_cli_foreman_discovery affected Red Hat:satellite:6.8::el7 tfm-rubygem-hammer_cli_foreman_discovery —
tfm-rubygem-hammer_cli_foreman_docker affected Red Hat:satellite:6.8::el7 tfm-rubygem-hammer_cli_foreman_docker —
tfm-rubygem-hammer_cli_foreman_kubevirt affected Red Hat:satellite:6.8::el7 tfm-rubygem-hammer_cli_foreman_kubevirt —
tfm-rubygem-hammer_cli_foreman_leapp affected Red Hat:satellite:6.8::el7 tfm-rubygem-hammer_cli_foreman_leapp —
tfm-rubygem-hammer_cli_foreman_openscap affected Red Hat:satellite:6.8::el7 tfm-rubygem-hammer_cli_foreman_openscap —
tfm-rubygem-hammer_cli_foreman_remote_execution affected Red Hat:satellite:6.8::el7 tfm-rubygem-hammer_cli_foreman_remote_execution —
tfm-rubygem-hammer_cli_foreman_tasks affected Red Hat:satellite:6.8::el7 tfm-rubygem-hammer_cli_foreman_tasks —
tfm-rubygem-hammer_cli_foreman_templates affected Red Hat:satellite:6.8::el7 tfm-rubygem-hammer_cli_foreman_templates —
tfm-rubygem-hammer_cli_foreman_virt_who_configure affected Red Hat:satellite:6.8::el7 tfm-rubygem-hammer_cli_foreman_virt_who_configure —
tfm-rubygem-hammer_cli_katello affected Red Hat:satellite:6.8::el7 tfm-rubygem-hammer_cli_katello —
tfm-rubygem-hashie affected Red Hat:satellite:6.8::el7 tfm-rubygem-hashie —
tfm-rubygem-hashie affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-hashie —
tfm-rubygem-highline affected Red Hat:satellite:6.8::el7 tfm-rubygem-highline —
tfm-rubygem-highline affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-highline —
tfm-rubygem-http affected Red Hat:satellite:6.8::el7 tfm-rubygem-http —
tfm-rubygem-httpclient affected Red Hat:satellite:6.8::el7 tfm-rubygem-httpclient —
tfm-rubygem-http-cookie affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-http-cookie —
tfm-rubygem-http-cookie affected Red Hat:satellite:6.8::el7 tfm-rubygem-http-cookie —
tfm-rubygem-http-form_data affected Red Hat:satellite:6.8::el7 tfm-rubygem-http-form_data —
tfm-rubygem-http_parser.rb affected Red Hat:satellite:6.8::el7 tfm-rubygem-http_parser.rb —
tfm-rubygem-http_parser.rb-debuginfo affected Red Hat:satellite:6.8::el7 tfm-rubygem-http_parser.rb-debuginfo —
tfm-rubygem-i18n affected Red Hat:satellite:6.8::el7 tfm-rubygem-i18n —
tfm-rubygem-infoblox affected Red Hat:satellite:6.8::el7 tfm-rubygem-infoblox —
tfm-rubygem-infoblox affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-infoblox —
tfm-rubygem-ipaddress affected Red Hat:satellite:6.8::el7 tfm-rubygem-ipaddress —
tfm-rubygem-jgrep affected Red Hat:satellite:6.8::el7 tfm-rubygem-jgrep —
tfm-rubygem-journald-logger affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-journald-logger —
tfm-rubygem-journald-logger affected Red Hat:satellite:6.8::el7 tfm-rubygem-journald-logger —
tfm-rubygem-journald-native affected Red Hat:satellite:6.8::el7 tfm-rubygem-journald-native —
tfm-rubygem-journald-native affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-journald-native —
tfm-rubygem-journald-native-debuginfo affected Red Hat:satellite:6.8::el7 tfm-rubygem-journald-native-debuginfo —
tfm-rubygem-journald-native-debuginfo affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-journald-native-debuginfo —
tfm-rubygem-jwt affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-jwt —
tfm-rubygem-jwt affected Red Hat:satellite:6.8::el7 tfm-rubygem-jwt —
tfm-rubygem-kafo affected Red Hat:satellite:6.8::el7 tfm-rubygem-kafo —
tfm-rubygem-kafo affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-kafo —
tfm-rubygem-kafo_parsers affected Red Hat:satellite:6.8::el7 tfm-rubygem-kafo_parsers —
tfm-rubygem-kafo_parsers affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-kafo_parsers —
tfm-rubygem-kafo_wizards affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-kafo_wizards —
tfm-rubygem-kafo_wizards affected Red Hat:satellite:6.8::el7 tfm-rubygem-kafo_wizards —
tfm-rubygem-katello affected Red Hat:satellite:6.8::el7 tfm-rubygem-katello —
tfm-rubygem-kubeclient affected Red Hat:satellite:6.8::el7 tfm-rubygem-kubeclient —
tfm-rubygem-ldap_fluff affected Red Hat:satellite:6.8::el7 tfm-rubygem-ldap_fluff —
tfm-rubygem-little-plugger affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-little-plugger —
tfm-rubygem-little-plugger affected Red Hat:satellite:6.8::el7 tfm-rubygem-little-plugger —
tfm-rubygem-locale affected Red Hat:satellite:6.8::el7 tfm-rubygem-locale —
tfm-rubygem-logging affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-logging —
tfm-rubygem-logging affected Red Hat:satellite:6.8::el7 tfm-rubygem-logging —
tfm-rubygem-logging-journald affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-logging-journald —
tfm-rubygem-logging-journald affected Red Hat:satellite:6.8::el7 tfm-rubygem-logging-journald —
tfm-rubygem-loofah affected Red Hat:satellite:6.8::el7 tfm-rubygem-loofah —
tfm-rubygem-mail affected Red Hat:satellite:6.8::el7 tfm-rubygem-mail —
tfm-rubygem-marcel affected Red Hat:satellite:6.8::el7 tfm-rubygem-marcel —
tfm-rubygem-memoist affected Red Hat:satellite:6.8::el7 tfm-rubygem-memoist —
tfm-rubygem-method_source affected Red Hat:satellite:6.8::el7 tfm-rubygem-method_source —
tfm-rubygem-mimemagic affected Red Hat:satellite:6.8::el7 tfm-rubygem-mimemagic —
tfm-rubygem-mime-types affected Red Hat:satellite:6.8::el7 tfm-rubygem-mime-types —
tfm-rubygem-mime-types affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-mime-types —
tfm-rubygem-mime-types-data affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-mime-types-data —
tfm-rubygem-mime-types-data affected Red Hat:satellite:6.8::el7 tfm-rubygem-mime-types-data —
tfm-rubygem-mini_mime affected Red Hat:satellite:6.8::el7 tfm-rubygem-mini_mime —
tfm-rubygem-mini_portile2 affected Red Hat:satellite:6.8::el7 tfm-rubygem-mini_portile2 —
tfm-rubygem-ms_rest affected Red Hat:satellite:6.8::el7 tfm-rubygem-ms_rest —
tfm-rubygem-ms_rest_azure affected Red Hat:satellite:6.8::el7 tfm-rubygem-ms_rest_azure —
tfm-rubygem-multi_json affected Red Hat:satellite:6.8::el7 tfm-rubygem-multi_json —
tfm-rubygem-multi_json affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-multi_json —
tfm-rubygem-multipart-post affected Red Hat:satellite:6.8::el7 tfm-rubygem-multipart-post —
tfm-rubygem-multipart-post affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-multipart-post —
tfm-rubygem-mustermann affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-mustermann —
tfm-rubygem-mustermann affected Red Hat:satellite:6.8::el7 tfm-rubygem-mustermann —
tfm-rubygem-net-ldap affected Red Hat:satellite:6.8::el7 tfm-rubygem-net-ldap —
tfm-rubygem-net-ping affected Red Hat:satellite:6.8::el7 tfm-rubygem-net-ping —
tfm-rubygem-netrc affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-netrc —
tfm-rubygem-netrc affected Red Hat:satellite:6.8::el7 tfm-rubygem-netrc —
tfm-rubygem-net-scp affected Red Hat:satellite:6.8::el7 tfm-rubygem-net-scp —
tfm-rubygem-net-ssh affected Red Hat:satellite:6.8::el7 tfm-rubygem-net-ssh —
tfm-rubygem-net-ssh affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-net-ssh —
tfm-rubygem-net-ssh-krb affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-net-ssh-krb —
tfm-rubygem-net-ssh-krb affected Red Hat:satellite:6.8::el7 tfm-rubygem-net-ssh-krb —
tfm-rubygem-nio4r affected Red Hat:satellite:6.8::el7 tfm-rubygem-nio4r —
tfm-rubygem-nio4r-debuginfo affected Red Hat:satellite:6.8::el7 tfm-rubygem-nio4r-debuginfo —
tfm-rubygem-nokogiri affected Red Hat:satellite:6.8::el7 tfm-rubygem-nokogiri —
tfm-rubygem-nokogiri-debuginfo affected Red Hat:satellite:6.8::el7 tfm-rubygem-nokogiri-debuginfo —
tfm-rubygem-oauth affected Red Hat:satellite:6.8::el7 tfm-rubygem-oauth —
tfm-rubygem-openscap affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-openscap —
tfm-rubygem-openscap affected Red Hat:satellite:6.8::el7 tfm-rubygem-openscap —
tfm-rubygem-optimist affected Red Hat:satellite:6.8::el7 tfm-rubygem-optimist —
tfm-rubygem-os affected Red Hat:satellite:6.8::el7 tfm-rubygem-os —
tfm-rubygem-ovirt-engine-sdk affected Red Hat:satellite:6.8::el7 tfm-rubygem-ovirt-engine-sdk —
tfm-rubygem-ovirt-engine-sdk-debuginfo affected Red Hat:satellite:6.8::el7 tfm-rubygem-ovirt-engine-sdk-debuginfo —
tfm-rubygem-ovirt_provision_plugin affected Red Hat:satellite:6.8::el7 tfm-rubygem-ovirt_provision_plugin —
tfm-rubygem-parse-cron affected Red Hat:satellite:6.8::el7 tfm-rubygem-parse-cron —
tfm-rubygem-passenger affected Red Hat:satellite:6.8::el7 tfm-rubygem-passenger —
tfm-rubygem-passenger-debuginfo affected Red Hat:satellite:6.8::el7 tfm-rubygem-passenger-debuginfo —
tfm-rubygem-passenger-native affected Red Hat:satellite:6.8::el7 tfm-rubygem-passenger-native —
tfm-rubygem-passenger-native-libs affected Red Hat:satellite:6.8::el7 tfm-rubygem-passenger-native-libs —
tfm-rubygem-pg affected Red Hat:satellite:6.8::el7 tfm-rubygem-pg —
tfm-rubygem-pg-debuginfo affected Red Hat:satellite:6.8::el7 tfm-rubygem-pg-debuginfo —
tfm-rubygem-polyglot affected Red Hat:satellite:6.8::el7 tfm-rubygem-polyglot —
tfm-rubygem-powerbar affected Red Hat:satellite:6.8::el7 tfm-rubygem-powerbar —
tfm-rubygem-powerbar affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-powerbar —
tfm-rubygem-prometheus-client affected Red Hat:satellite:6.8::el7 tfm-rubygem-prometheus-client —
tfm-rubygem-promise.rb affected Red Hat:satellite:6.8::el7 tfm-rubygem-promise.rb —
tfm-rubygem-public_suffix affected Red Hat:satellite:6.8::el7 tfm-rubygem-public_suffix —
tfm-rubygem-pulp_2to3_migration_client affected Red Hat:satellite:6.8::el7 tfm-rubygem-pulp_2to3_migration_client —
tfm-rubygem-pulp_ansible_client affected Red Hat:satellite:6.8::el7 tfm-rubygem-pulp_ansible_client —
tfm-rubygem-pulp_certguard_client affected Red Hat:satellite:6.8::el7 tfm-rubygem-pulp_certguard_client —
tfm-rubygem-pulp_container_client affected Red Hat:satellite:6.8::el7 tfm-rubygem-pulp_container_client —
tfm-rubygem-pulpcore_client affected Red Hat:satellite:6.8::el7 tfm-rubygem-pulpcore_client —
tfm-rubygem-pulp_file_client affected Red Hat:satellite:6.8::el7 tfm-rubygem-pulp_file_client —
tfm-rubygem-pulp_rpm_client affected Red Hat:satellite:6.8::el7 tfm-rubygem-pulp_rpm_client —
tfm-rubygem-puma affected Red Hat:satellite:6.8::el7 tfm-rubygem-puma —
tfm-rubygem-puma-debuginfo affected Red Hat:satellite:6.8::el7 tfm-rubygem-puma-debuginfo —
tfm-rubygem-puma-plugin-systemd affected Red Hat:satellite:6.8::el7 tfm-rubygem-puma-plugin-systemd —
tfm-rubygem-quantile affected Red Hat:satellite:6.8::el7 tfm-rubygem-quantile —
tfm-rubygem-rabl affected Red Hat:satellite:6.8::el7 tfm-rubygem-rabl —
tfm-rubygem-rack affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-rack —
tfm-rubygem-rack affected Red Hat:satellite:6.8::el7 tfm-rubygem-rack —
tfm-rubygem-rack-cors affected Red Hat:satellite:6.8::el7 tfm-rubygem-rack-cors —
tfm-rubygem-rack-jsonp affected Red Hat:satellite:6.8::el7 tfm-rubygem-rack-jsonp —
tfm-rubygem-rack-protection affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-rack-protection —
tfm-rubygem-rack-protection affected Red Hat:satellite:6.8::el7 tfm-rubygem-rack-protection —
tfm-rubygem-rack-test affected Red Hat:satellite:6.8::el7 tfm-rubygem-rack-test —
tfm-rubygem-rails affected Red Hat:satellite:6.8::el7 tfm-rubygem-rails —
tfm-rubygem-rails-dom-testing affected Red Hat:satellite:6.8::el7 tfm-rubygem-rails-dom-testing —
tfm-rubygem-rails-html-sanitizer affected Red Hat:satellite:6.8::el7 tfm-rubygem-rails-html-sanitizer —
tfm-rubygem-rails-i18n affected Red Hat:satellite:6.8::el7 tfm-rubygem-rails-i18n —
tfm-rubygem-railties affected Red Hat:satellite:6.8::el7 tfm-rubygem-railties —
tfm-rubygem-rainbow affected Red Hat:satellite:6.8::el7 tfm-rubygem-rainbow —
tfm-rubygem-rb-inotify affected Red Hat:satellite:6.8::el7 tfm-rubygem-rb-inotify —
tfm-rubygem-rb-inotify affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-rb-inotify —
tfm-rubygem-rbovirt affected Red Hat:satellite:6.8::el7 tfm-rubygem-rbovirt —
tfm-rubygem-rbvmomi affected Red Hat:satellite:6.8::el7 tfm-rubygem-rbvmomi —
tfm-rubygem-record_tag_helper affected Red Hat:satellite:6.8::el7 tfm-rubygem-record_tag_helper —
tfm-rubygem-recursive-open-struct affected Red Hat:satellite:6.8::el7 tfm-rubygem-recursive-open-struct —
tfm-rubygem-redhat_access affected Red Hat:satellite:6.8::el7 tfm-rubygem-redhat_access —
tfm-rubygem-redhat_access_lib affected Red Hat:satellite:6.8::el7 tfm-rubygem-redhat_access_lib —
tfm-rubygem-redis affected Red Hat:satellite:6.8::el7 tfm-rubygem-redis —
tfm-rubygem-representable affected Red Hat:satellite:6.8::el7 tfm-rubygem-representable —
tfm-rubygem-responders affected Red Hat:satellite:6.8::el7 tfm-rubygem-responders —
tfm-rubygem-rest-client affected Red Hat:satellite:6.8::el7 tfm-rubygem-rest-client —
tfm-rubygem-rest-client affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-rest-client —
tfm-rubygem-retriable affected Red Hat:satellite:6.8::el7 tfm-rubygem-retriable —
tfm-rubygem-rkerberos affected Red Hat:satellite:6.8::el7 tfm-rubygem-rkerberos —
tfm-rubygem-rkerberos affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-rkerberos —
tfm-rubygem-rkerberos-debuginfo affected Red Hat:satellite:6.8::el7 tfm-rubygem-rkerberos-debuginfo —
tfm-rubygem-rkerberos-debuginfo affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-rkerberos-debuginfo —
tfm-rubygem-roadie affected Red Hat:satellite:6.8::el7 tfm-rubygem-roadie —
tfm-rubygem-roadie-rails affected Red Hat:satellite:6.8::el7 tfm-rubygem-roadie-rails —
tfm-rubygem-robotex affected Red Hat:satellite:6.8::el7 tfm-rubygem-robotex —
tfm-rubygem-rsec affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-rsec —
tfm-rubygem-rsec affected Red Hat:satellite:6.8::el7 tfm-rubygem-rsec —
tfm-rubygem-ruby2ruby affected Red Hat:satellite:6.8::el7 tfm-rubygem-ruby2ruby —
tfm-rubygem-rubyipmi affected Red Hat:satellite:6.8::el7 tfm-rubygem-rubyipmi —
tfm-rubygem-rubyipmi affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-rubyipmi —
tfm-rubygem-ruby-libvirt affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-ruby-libvirt —
tfm-rubygem-ruby-libvirt affected Red Hat:satellite:6.8::el7 tfm-rubygem-ruby-libvirt —
tfm-rubygem-ruby-libvirt-debuginfo affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-ruby-libvirt-debuginfo —
tfm-rubygem-ruby-libvirt-debuginfo affected Red Hat:satellite:6.8::el7 tfm-rubygem-ruby-libvirt-debuginfo —
tfm-rubygem-ruby_parser affected Red Hat:satellite:6.8::el7 tfm-rubygem-ruby_parser —
tfm-rubygem-runcible affected Red Hat:satellite:6.8::el7 tfm-rubygem-runcible —
tfm-rubygem-safemode affected Red Hat:satellite:6.8::el7 tfm-rubygem-safemode —
tfm-rubygem-scoped_search affected Red Hat:satellite:6.8::el7 tfm-rubygem-scoped_search —
tfm-rubygem-secure_headers affected Red Hat:satellite:6.8::el7 tfm-rubygem-secure_headers —
tfm-rubygem-sequel affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-sequel —
tfm-rubygem-sequel affected Red Hat:satellite:6.8::el7 tfm-rubygem-sequel —
tfm-rubygem-sexp_processor affected Red Hat:satellite:6.8::el7 tfm-rubygem-sexp_processor —
tfm-rubygem-sidekiq affected Red Hat:satellite:6.8::el7 tfm-rubygem-sidekiq —
tfm-rubygem-signet affected Red Hat:satellite:6.8::el7 tfm-rubygem-signet —
tfm-rubygem-sinatra affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-sinatra —
tfm-rubygem-sinatra affected Red Hat:satellite:6.8::el7 tfm-rubygem-sinatra —
tfm-rubygem-smart_proxy_ansible affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-smart_proxy_ansible —
tfm-rubygem-smart_proxy_ansible affected Red Hat:satellite:6.8::el7 tfm-rubygem-smart_proxy_ansible —
tfm-rubygem-smart_proxy_dhcp_infoblox affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-smart_proxy_dhcp_infoblox —
tfm-rubygem-smart_proxy_dhcp_infoblox affected Red Hat:satellite:6.8::el7 tfm-rubygem-smart_proxy_dhcp_infoblox —
tfm-rubygem-smart_proxy_dhcp_remote_isc affected Red Hat:satellite:6.8::el7 tfm-rubygem-smart_proxy_dhcp_remote_isc —
tfm-rubygem-smart_proxy_dhcp_remote_isc affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-smart_proxy_dhcp_remote_isc —
tfm-rubygem-smart_proxy_discovery affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-smart_proxy_discovery —
tfm-rubygem-smart_proxy_discovery affected Red Hat:satellite:6.8::el7 tfm-rubygem-smart_proxy_discovery —
tfm-rubygem-smart_proxy_discovery_image affected Red Hat:satellite:6.8::el7 tfm-rubygem-smart_proxy_discovery_image —
tfm-rubygem-smart_proxy_discovery_image affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-smart_proxy_discovery_image —
tfm-rubygem-smart_proxy_dns_infoblox affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-smart_proxy_dns_infoblox —
tfm-rubygem-smart_proxy_dns_infoblox affected Red Hat:satellite:6.8::el7 tfm-rubygem-smart_proxy_dns_infoblox —
tfm-rubygem-smart_proxy_dynflow affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-smart_proxy_dynflow —
tfm-rubygem-smart_proxy_dynflow affected Red Hat:satellite:6.8::el7 tfm-rubygem-smart_proxy_dynflow —
tfm-rubygem-smart_proxy_dynflow_core affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-smart_proxy_dynflow_core —
tfm-rubygem-smart_proxy_dynflow_core affected Red Hat:satellite:6.8::el7 tfm-rubygem-smart_proxy_dynflow_core —
tfm-rubygem-smart_proxy_openscap affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-smart_proxy_openscap —
tfm-rubygem-smart_proxy_openscap affected Red Hat:satellite:6.8::el7 tfm-rubygem-smart_proxy_openscap —
tfm-rubygem-smart_proxy_pulp affected Red Hat:satellite:6.8::el7 tfm-rubygem-smart_proxy_pulp —
tfm-rubygem-smart_proxy_pulp affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-smart_proxy_pulp —
tfm-rubygem-smart_proxy_remote_execution_ssh affected Red Hat:satellite:6.8::el7 tfm-rubygem-smart_proxy_remote_execution_ssh —
tfm-rubygem-smart_proxy_remote_execution_ssh affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-smart_proxy_remote_execution_ssh —
tfm-rubygem-sprockets affected Red Hat:satellite:6.8::el7 tfm-rubygem-sprockets —
tfm-rubygem-sprockets-rails affected Red Hat:satellite:6.8::el7 tfm-rubygem-sprockets-rails —
tfm-rubygem-sqlite3 affected Red Hat:satellite:6.8::el7 tfm-rubygem-sqlite3 —
tfm-rubygem-sqlite3 affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-sqlite3 —
tfm-rubygem-sqlite3-debuginfo affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-sqlite3-debuginfo —
tfm-rubygem-sqlite3-debuginfo affected Red Hat:satellite:6.8::el7 tfm-rubygem-sqlite3-debuginfo —
tfm-rubygem-sshkey affected Red Hat:satellite:6.8::el7 tfm-rubygem-sshkey —
tfm-rubygem-statsd-instrument affected Red Hat:satellite:6.8::el7 tfm-rubygem-statsd-instrument —
tfm-rubygem-statsd-instrument affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-statsd-instrument —
tfm-rubygem-stomp affected Red Hat:satellite:6.8::el7 tfm-rubygem-stomp —
tfm-rubygem-text affected Red Hat:satellite:6.8::el7 tfm-rubygem-text —
tfm-rubygem-thor affected Red Hat:satellite:6.8::el7 tfm-rubygem-thor —
tfm-rubygem-thread_safe affected Red Hat:satellite:6.8::el7 tfm-rubygem-thread_safe —
tfm-rubygem-tilt affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-tilt —
tfm-rubygem-tilt affected Red Hat:satellite:6.8::el7 tfm-rubygem-tilt —
tfm-rubygem-timeliness affected Red Hat:satellite:6.8::el7 tfm-rubygem-timeliness —
tfm-rubygem-tzinfo affected Red Hat:satellite:6.8::el7 tfm-rubygem-tzinfo —
tfm-rubygem-uber affected Red Hat:satellite:6.8::el7 tfm-rubygem-uber —
tfm-rubygem-unf affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-unf —
tfm-rubygem-unf affected Red Hat:satellite:6.8::el7 tfm-rubygem-unf —
tfm-rubygem-unf_ext affected Red Hat:satellite:6.8::el7 tfm-rubygem-unf_ext —
tfm-rubygem-unf_ext affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-unf_ext —
tfm-rubygem-unf_ext-debuginfo affected Red Hat:satellite:6.8::el7 tfm-rubygem-unf_ext-debuginfo —
tfm-rubygem-unf_ext-debuginfo affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-unf_ext-debuginfo —
tfm-rubygem-unicode affected Red Hat:satellite:6.8::el7 tfm-rubygem-unicode —
tfm-rubygem-unicode-debuginfo affected Red Hat:satellite:6.8::el7 tfm-rubygem-unicode-debuginfo —
tfm-rubygem-unicode-display_width affected Red Hat:satellite:6.8::el7 tfm-rubygem-unicode-display_width —
tfm-rubygem-validates_lengths_from_database affected Red Hat:satellite:6.8::el7 tfm-rubygem-validates_lengths_from_database —
tfm-rubygem-webpack-rails affected Red Hat:satellite:6.8::el7 tfm-rubygem-webpack-rails —
tfm-rubygem-websocket-driver affected Red Hat:satellite:6.8::el7 tfm-rubygem-websocket-driver —
tfm-rubygem-websocket-driver-debuginfo affected Red Hat:satellite:6.8::el7 tfm-rubygem-websocket-driver-debuginfo —
tfm-rubygem-websocket-extensions affected Red Hat:satellite:6.8::el7 tfm-rubygem-websocket-extensions —
tfm-rubygem-will_paginate affected Red Hat:satellite:6.8::el7 tfm-rubygem-will_paginate —
tfm-rubygem-x-editable-rails affected Red Hat:satellite:6.8::el7 tfm-rubygem-x-editable-rails —
tfm-rubygem-xmlrpc affected Red Hat:satellite_capsule:6.8::el7 tfm-rubygem-xmlrpc —
tfm-rubygem-xmlrpc affected Red Hat:satellite:6.8::el7 tfm-rubygem-xmlrpc —
tfm-rubygem-zeitwerk affected Red Hat:satellite:6.8::el7 tfm-rubygem-zeitwerk —
tfm-runtime affected Red Hat:satellite_capsule:6.8::el7 tfm-runtime —
tfm-runtime affected Red Hat:satellite:6.8::el7 tfm-runtime —
Upstream advisory

DLA-2402-1

Open SourceWeaponized exploit2020-10-08

golang-go.crypto - security update

Affected products

ProductStatusVendorPackageEcosystem
golang-go.crypto affected Debian:9 golang-go.crypto —
Upstream advisory

openSUSE-SU-2020:1715-1

Open SourceWeaponized exploitCRITICAL2020-10-23

Security update for chromium

Affected products

ProductStatusVendorPackageEcosystem
chromium affected SUSE:Package Hub 15 SP1 chromium —
gn affected SUSE:Package Hub 15 SP1 gn —
Upstream advisory

openSUSE-SU-2020:1705-1

Open SourceWeaponized exploitCRITICAL2020-10-22

Security update for chromium

Affected products

ProductStatusVendorPackageEcosystem
chromium affected openSUSE:Leap 15.2 chromium —
chromium affected openSUSE:Leap 15.1 chromium —
gn affected openSUSE:Leap 15.1 gn —
gn affected openSUSE:Leap 15.2 gn —
Upstream advisory

CVE-2020-15972

GoogleWeaponized exploitCRITICAL2020-10-07

Use after free in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVEs:CVE-2020-15972

Affected products

ProductStatusVendorPackageEcosystem
backports_sle affected opensuse — —
chrome affected google — —
debian_linux affected debian — —
fedora affected fedoraproject — —
Upstream advisory

CVE-2020-15969

GoogleWeaponized exploitCRITICAL2020-10-07

Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVEs:CVE-2020-15969

Affected products

ProductStatusVendorPackageEcosystem
backports_sle affected opensuse — —
chrome affected google — —
debian_linux affected debian — —
fedora affected fedoraproject — —
ipados affected apple — —
iphone_os affected apple — —
macos affected apple — —
safari affected apple — —
tvos affected apple — —
watchos affected apple — —
Upstream advisory

CVE-2020-16844

Open SourceActive exploitation (sightings)MEDIUM2020-10-01

Authorization bypass in Istio

CVEs:CVE-2020-16844

Affected products

ProductStatusVendorPackageEcosystem
istio affected istio.io istio.io/istio —
Upstream advisory

CVE-2020-16844

Open SourceActive exploitation (sightings)CRITICAL2020-10-01

In Istio 1.5.0 though 1.5.8 and Istio 1.6.0 through 1.6.7, when users specify an AuthorizationPolicy resource with DENY actions using wildcard suffixes (e.g. *-some-suffix) for source principals or namespace fields, callers will never be denied access,...

CVEs:CVE-2020-16844

Affected products

ProductStatusVendorPackageEcosystem
istio affected istio — —
Upstream advisory

RHSA-2020:4214

Open SourcePoC exploitHIGH2020-10-08

Red Hat Security Advisory: go-toolset-1.13-golang security and bug fix update

Affected products

ProductStatusVendorPackageEcosystem
go-toolset-1.13 affected Red Hat:devtools:2020 go-toolset-1.13 —
go-toolset-1.13-build affected Red Hat:devtools:2020 go-toolset-1.13-build —
go-toolset-1.13-golang affected Red Hat:devtools:2020 go-toolset-1.13-golang —
go-toolset-1.13-golang-bin affected Red Hat:devtools:2020 go-toolset-1.13-golang-bin —
go-toolset-1.13-golang-docs affected Red Hat:devtools:2020 go-toolset-1.13-golang-docs —
go-toolset-1.13-golang-misc affected Red Hat:devtools:2020 go-toolset-1.13-golang-misc —
go-toolset-1.13-golang-race affected Red Hat:devtools:2020 go-toolset-1.13-golang-race —
go-toolset-1.13-golang-src affected Red Hat:devtools:2020 go-toolset-1.13-golang-src —
go-toolset-1.13-golang-tests affected Red Hat:devtools:2020 go-toolset-1.13-golang-tests —
go-toolset-1.13-runtime affected Red Hat:devtools:2020 go-toolset-1.13-runtime —
Upstream advisory

SUSE-SU-2020:2832-1

Open SourcePoC exploitCRITICAL2020-10-02

Security update for SUSE Manager Server 4.1

Affected products

ProductStatusVendorPackageEcosystem
golang-github-prometheus-node_exporter affected SUSE:Manager Server Module 4.1 golang-github-prometheus-node_exporter —
golang-github-QubitProducts-exporter_exporter affected SUSE:Manager Server Module 4.1 golang-github-QubitProducts-exporter_exporter —
hibernate5 affected SUSE:Manager Server Module 4.1 hibernate5 —
hub-xmlrpc-api affected SUSE:Manager Server Module 4.1 hub-xmlrpc-api —
patterns-suse-manager affected SUSE:Manager Server Module 4.1 patterns-suse-manager —
prometheus-exporters-formula affected SUSE:Manager Server Module 4.1 prometheus-exporters-formula —
salt-netapi-client affected SUSE:Manager Server Module 4.1 salt-netapi-client —
spacecmd affected SUSE:Manager Server Module 4.1 spacecmd —
spacewalk-backend affected SUSE:Manager Server Module 4.1 spacewalk-backend —
spacewalk-branding affected SUSE:Manager Server Module 4.1 spacewalk-branding —
spacewalk-certs-tools affected SUSE:Manager Server Module 4.1 spacewalk-certs-tools —
spacewalk-client-tools affected SUSE:Manager Server Module 4.1 spacewalk-client-tools —
spacewalk-java affected SUSE:Manager Server Module 4.1 spacewalk-java —
spacewalk-utils affected SUSE:Manager Server Module 4.1 spacewalk-utils —
spacewalk-web affected SUSE:Manager Server Module 4.1 spacewalk-web —
subscription-matcher affected SUSE:Manager Server Module 4.1 subscription-matcher —
susemanager affected SUSE:Manager Server Module 4.1 susemanager —
susemanager-build-keys affected SUSE:Manager Server Module 4.1 susemanager-build-keys —
susemanager-doc-indexes affected SUSE:Manager Server Module 4.1 susemanager-doc-indexes —
susemanager-docs_en affected SUSE:Manager Server Module 4.1 susemanager-docs_en —
susemanager-schema affected SUSE:Manager Server Module 4.1 susemanager-schema —
susemanager-sls affected SUSE:Manager Server Module 4.1 susemanager-sls —
uyuni-config-formula affected SUSE:Manager Server Module 4.1 uyuni-config-formula —
Upstream advisory

CVE-2020-0377

Open SourcePoC exploitHIGH2020-10-06

In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth server with no additional execution privileges needed. User interact...

CVEs:CVE-2020-0377

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2020-0413

Open SourcePoC exploitHIGH2020-10-06

In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth server with no additional execution privileges needed. User interact...

CVEs:CVE-2020-0413

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2020-0416

Open SourcePoC exploitHIGH2020-10-06

In multiple settings screens, there are possible tapjacking attacks due to an insecure default value. This could lead to local escalation of privilege and permissions with no additional execution privileges needed. User interaction is needed for exploi...

CVEs:CVE-2020-0416

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2020-0423

Open SourcePoC exploitHIGH2020-10-06

In binder_release_work of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitati...

CVEs:CVE-2020-0423

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
debian_linux affected debian — —
Upstream advisory

ASB-A-161151868

GooglePoC exploitHIGH2020-10-01

ASB-A-161151868

Affected products

ProductStatusVendorPackageEcosystem
:unknown: affected Android :unknown: —
Upstream advisory

ASB-A-140417248

GooglePoC exploitNONE2020-10-01

ASB-A-140417248

Affected products

ProductStatusVendorPackageEcosystem
:unknown: affected Android :unknown: —
Upstream advisory

CVE-2020-0421

Open SourcePoC exploitHIGH2020-10-06

In appendFormatV of String8.cpp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.P...

CVEs:CVE-2020-0421

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2020-16002

GoogleCoalition ESS 30-63%CRITICAL2020-10-21

Use after free in PDFium in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.

CVEs:CVE-2020-16002

Affected products

ProductStatusVendorPackageEcosystem
backports_sle affected opensuse — —
chrome affected google — —
debian_linux affected debian — —
fedora affected fedoraproject — —
Upstream advisory

CVE-2020-15985

GoogleCoalition ESS < 30%MEDIUM2020-10-07

Inappropriate implementation in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to spoof security UI via a crafted HTML page.

CVEs:CVE-2020-15985

Affected products

ProductStatusVendorPackageEcosystem
backports_sle affected opensuse — —
chrome affected google — —
debian_linux affected debian — —
fedora affected fedoraproject — —
Upstream advisory

CVE-2020-15979

GoogleCoalition ESS < 30%HIGH2020-10-07

Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVEs:CVE-2020-15979

Affected products

ProductStatusVendorPackageEcosystem
backports_sle affected opensuse — —
chrome affected google — —
debian_linux affected debian — —
fedora affected fedoraproject — —
Upstream advisory

CVE-2020-16000

GoogleCoalition ESS < 30%HIGH2020-10-21

Inappropriate implementation in Blink in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVEs:CVE-2020-16000

Affected products

ProductStatusVendorPackageEcosystem
backports_sle affected opensuse — —
chrome affected google — —
debian_linux affected debian — —
fedora affected fedoraproject — —
Upstream advisory

CVE-2020-16001

GoogleCoalition ESS < 30%CRITICAL2020-10-21

Use after free in media in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVEs:CVE-2020-16001

Affected products

ProductStatusVendorPackageEcosystem
backports_sle affected opensuse — —
chrome affected google — —
debian_linux affected debian — —
fedora affected fedoraproject — —
Upstream advisory

CVE-2020-15968

GoogleCoalition ESS < 30%CRITICAL2020-10-07

Use after free in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVEs:CVE-2020-15968

Affected products

ProductStatusVendorPackageEcosystem
backports_sle affected opensuse — —
chrome affected google — —
debian_linux affected debian — —
fedora affected fedoraproject — —
Upstream advisory

CVE-2020-6557

GoogleCoalition ESS < 30%MEDIUM2020-10-07

Inappropriate implementation in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.

CVEs:CVE-2020-6557

Affected products

ProductStatusVendorPackageEcosystem
backports_sle affected opensuse — —
chrome affected google — —
debian_linux affected debian — —
fedora affected fedoraproject — —
Upstream advisory

CVE-2020-15978

GoogleCoalition ESS < 30%HIGH2020-10-07

Insufficient data validation in navigation in Google Chrome on Android prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.

CVEs:CVE-2020-15978

Affected products

ProductStatusVendorPackageEcosystem
backports_sle affected opensuse — —
chrome affected google — —
debian_linux affected debian — —
fedora affected fedoraproject — —
Upstream advisory

CVE-2020-16003

GoogleCoalition ESS < 30%CRITICAL2020-10-21

Use after free in printing in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVEs:CVE-2020-16003

Affected products

ProductStatusVendorPackageEcosystem
backports_sle affected opensuse — —
chrome affected google — —
debian_linux affected debian — —
fedora affected fedoraproject — —
Upstream advisory

CVE-2020-15974

GoogleCoalition ESS < 30%CRITICAL2020-10-07

Integer overflow in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to bypass site isolation via a crafted HTML page.

CVEs:CVE-2020-15974

Affected products

ProductStatusVendorPackageEcosystem
backports_sle affected opensuse — —
chrome affected google — —
debian_linux affected debian — —
fedora affected fedoraproject — —
Upstream advisory

CVE-2020-15976

GoogleCoalition ESS < 30%CRITICAL2020-10-07

Use after free in WebXR in Google Chrome on Android prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVEs:CVE-2020-15976

Affected products

ProductStatusVendorPackageEcosystem
backports_sle affected opensuse — —
chrome affected google — —
debian_linux affected debian — —
fedora affected fedoraproject — —
Upstream advisory

CVE-2020-15977

GoogleCoalition ESS < 30%HIGH2020-10-07

Insufficient data validation in dialogs in Google Chrome on OS X prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page.

CVEs:CVE-2020-15977

Affected products

ProductStatusVendorPackageEcosystem
backports_sle affected opensuse — —
chrome affected google — —
debian_linux affected debian — —
fedora affected fedoraproject — —
Upstream advisory

CVE-2020-15991

GoogleCoalition ESS < 30%CRITICAL2020-10-07

Use after free in password manager in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVEs:CVE-2020-15991

Affected products

ProductStatusVendorPackageEcosystem
backports_sle affected opensuse — —
chrome affected google — —
debian_linux affected debian — —
fedora affected fedoraproject — —
Upstream advisory

CVE-2020-15992

GoogleCoalition ESS < 30%CRITICAL2020-10-07

Insufficient policy enforcement in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page.

CVEs:CVE-2020-15992

Affected products

ProductStatusVendorPackageEcosystem
backports_sle affected opensuse — —
chrome affected google — —
debian_linux affected debian — —
fedora affected fedoraproject — —
Upstream advisory

CVE-2020-15990

GoogleCoalition ESS < 30%CRITICAL2020-10-07

Use after free in autofill in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVEs:CVE-2020-15990

Affected products

ProductStatusVendorPackageEcosystem
backports_sle affected opensuse — —
chrome affected google — —
debian_linux affected debian — —
fedora affected fedoraproject — —
Upstream advisory

CVE-2020-15967

GoogleCoalition ESS < 30%CRITICAL2020-10-07

Use after free in payments in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVEs:CVE-2020-15967

Affected products

ProductStatusVendorPackageEcosystem
backports_sle affected opensuse — —
chrome affected google — —
debian_linux affected debian — —
fedora affected fedoraproject — —
Upstream advisory

CVE-2020-15970

GoogleCoalition ESS < 30%CRITICAL2020-10-07

Use after free in NFC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVEs:CVE-2020-15970

Affected products

ProductStatusVendorPackageEcosystem
backports_sle affected opensuse — —
chrome affected google — —
debian_linux affected debian — —
fedora affected fedoraproject — —
Upstream advisory

CVE-2020-15971

GoogleCoalition ESS < 30%CRITICAL2020-10-07

Use after free in printing in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVEs:CVE-2020-15971

Affected products

ProductStatusVendorPackageEcosystem
backports_sle affected opensuse — —
chrome affected google — —
debian_linux affected debian — —
fedora affected fedoraproject — —
Upstream advisory

CVE-2020-15981

GoogleCoalition ESS < 30%HIGH2020-10-07

Out of bounds read in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

CVEs:CVE-2020-15981

Affected products

ProductStatusVendorPackageEcosystem
backports_sle affected opensuse — —
chrome affected google — —
debian_linux affected debian — —
fedora affected fedoraproject — —
Upstream advisory

CVE-2020-15982

GoogleCoalition ESS < 30%HIGH2020-10-07

Inappropriate implementation in cache in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

CVEs:CVE-2020-15982

Affected products

ProductStatusVendorPackageEcosystem
backports_sle affected opensuse — —
chrome affected google — —
debian_linux affected debian — —
fedora affected fedoraproject — —
Upstream advisory

CVE-2020-15975

GoogleCoalition ESS < 30%CRITICAL2020-10-07

Integer overflow in SwiftShader in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVEs:CVE-2020-15975

Affected products

ProductStatusVendorPackageEcosystem
backports_sle affected opensuse — —
chrome affected google — —
debian_linux affected debian — —
fedora affected fedoraproject — —
Upstream advisory

CVE-2020-15986

GoogleCoalition ESS < 30%CRITICAL2020-10-07

Integer overflow in media in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVEs:CVE-2020-15986

Affected products

ProductStatusVendorPackageEcosystem
backports_sle affected opensuse — —
chrome affected google — —
debian_linux affected debian — —
fedora affected fedoraproject — —
Upstream advisory

CVE-2020-15984

GoogleCoalition ESS < 30%CRITICAL2020-10-07

Insufficient policy enforcement in Omnibox in Google Chrome on iOS prior to 86.0.4240.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted URL.

CVEs:CVE-2020-15984

Affected products

ProductStatusVendorPackageEcosystem
backports_sle affected opensuse — —
chrome affected google — —
debian_linux affected debian — —
fedora affected fedoraproject — —
Upstream advisory

openSUSE-SU-2020:1766-1

Open SourceCoalition ESS < 30%HIGH2020-10-29

Security update for tensorflow2

Affected products

ProductStatusVendorPackageEcosystem
tensorflow2 affected openSUSE:Leap 15.2 tensorflow2 —
tensorflow2_2_1_2-gnu-hpc affected openSUSE:Leap 15.2 tensorflow2_2_1_2-gnu-hpc —
tensorflow2_2_1_2-gnu-openmpi2-hpc affected openSUSE:Leap 15.2 tensorflow2_2_1_2-gnu-openmpi2-hpc —
tensorflow2-lite affected openSUSE:Leap 15.2 tensorflow2-lite —
Upstream advisory

CVE-2020-15988

GoogleCoalition ESS < 30%CRITICAL2020-10-07

Insufficient policy enforcement in downloads in Google Chrome on Windows prior to 86.0.4240.75 allowed a remote attacker who convinced the user to open files to execute arbitrary code via a crafted HTML page.

CVEs:CVE-2020-15988

Affected products

ProductStatusVendorPackageEcosystem
backports_sle affected opensuse — —
chrome affected google — —
debian_linux affected debian — —
fedora affected fedoraproject — —
Upstream advisory

CVE-2020-15989

GoogleCoalition ESS < 30%HIGH2020-10-07

Uninitialized data in PDFium in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file.

CVEs:CVE-2020-15989

Affected products

ProductStatusVendorPackageEcosystem
backports_sle affected opensuse — —
chrome affected google — —
debian_linux affected debian — —
fedora affected fedoraproject — —
Upstream advisory

CVE-2020-15987

GoogleCoalition ESS < 30%CRITICAL2020-10-07

Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC stream.

CVEs:CVE-2020-15987

Affected products

ProductStatusVendorPackageEcosystem
backports_sle affected opensuse — —
chrome affected google — —
debian_linux affected debian — —
fedora affected fedoraproject — —
Upstream advisory

CVE-2020-15973

GoogleCoalition ESS < 30%CRITICAL2020-10-07

Insufficient policy enforcement in extensions in Google Chrome prior to 86.0.4240.75 allowed an attacker who convinced a user to install a malicious extension to bypass same origin policy via a crafted Chrome Extension.

CVEs:CVE-2020-15973

Affected products

ProductStatusVendorPackageEcosystem
backports_sle affected opensuse — —
chrome affected google — —
debian_linux affected debian — —
fedora affected fedoraproject — —
Upstream advisory

CVE-2020-0414

Open SourceCoalition ESS < 30%MEDIUM2020-10-06

In AudioFlinger::RecordThread::threadLoop of audioflinger/Threads.cpp, there is a possible non-silenced audio buffer due to a permissions bypass. This could lead to remote information disclosure with no additional execution privileges needed. User inte...

CVEs:CVE-2020-0414

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

PYSEC-2020-139

Open SourceCoalition ESS < 30%2020-10-21

PYSEC-2020-139

Affected products

ProductStatusVendorPackageEcosystem
tensorflow affected PyPI tensorflow —
Upstream advisory

PYSEC-2020-296

Open SourceCoalition ESS < 30%2020-10-21

PYSEC-2020-296

Affected products

ProductStatusVendorPackageEcosystem
tensorflow-cpu affected PyPI tensorflow-cpu —
Upstream advisory

PYSEC-2020-331

Open SourceCoalition ESS < 30%2020-10-21

PYSEC-2020-331

Affected products

ProductStatusVendorPackageEcosystem
tensorflow-gpu affected PyPI tensorflow-gpu —
Upstream advisory

CVE-2020-15266

Open SourceCoalition ESS < 30%HIGH2020-10-21

In Tensorflow before version 2.4.0, when the `boxes` argument of `tf.image.crop_and_resize` has a very large value, the CPU kernel implementation receives it as a C++ `nan` floating point value. Attempting to operate on this is undefined behavior which...

CVEs:CVE-2020-15266

Affected products

ProductStatusVendorPackageEcosystem
tensorflow affected google — —
Upstream advisory

CVE-2020-15266

Open SourceCoalition ESS < 30%MEDIUM2020-10-21

Float cast overflow undefined behavior

CVEs:CVE-2020-15266

Affected products

ProductStatusVendorPackageEcosystem
tensorflow affected PyPI tensorflow —
tensorflow-cpu affected PyPI tensorflow-cpu —
tensorflow-gpu affected PyPI tensorflow-gpu —
Upstream advisory

CVE-2020-15266

Open SourceCoalition ESS < 30%MEDIUM2020-10-21

PYSEC-2020-331

CVEs:CVE-2020-15266

Affected products

ProductStatusVendorPackageEcosystem
tensorflow affected PyPI tensorflow —
tensorflow-cpu affected PyPI tensorflow-cpu —
tensorflow-gpu affected PyPI tensorflow-gpu —
Upstream advisory

PYSEC-2020-138

Open SourceCoalition ESS < 30%2020-10-21

PYSEC-2020-138

Affected products

ProductStatusVendorPackageEcosystem
tensorflow affected PyPI tensorflow —
Upstream advisory

PYSEC-2020-295

Open SourceCoalition ESS < 30%2020-10-21

PYSEC-2020-295

Affected products

ProductStatusVendorPackageEcosystem
tensorflow-cpu affected PyPI tensorflow-cpu —
Upstream advisory

PYSEC-2020-330

Open SourceCoalition ESS < 30%2020-10-21

PYSEC-2020-330

Affected products

ProductStatusVendorPackageEcosystem
tensorflow-gpu affected PyPI tensorflow-gpu —
Upstream advisory

CVE-2020-15265

Open SourceCoalition ESS < 30%HIGH2020-10-21

Segfault in `tf.quantization.quantize_and_dequantize`

CVEs:CVE-2020-15265

Affected products

ProductStatusVendorPackageEcosystem
tensorflow affected PyPI tensorflow —
tensorflow-cpu affected PyPI tensorflow-cpu —
tensorflow-gpu affected PyPI tensorflow-gpu —
Upstream advisory

CVE-2020-15265

Open SourceCoalition ESS < 30%HIGH2020-10-21

In Tensorflow before version 2.4.0, an attacker can pass an invalid `axis` value to `tf.quantization.quantize_and_dequantize`. This results in accessing a dimension outside the rank of the input tensor in the C++ kernel implementation. However, dim_siz...

CVEs:CVE-2020-15265

Affected products

ProductStatusVendorPackageEcosystem
tensorflow affected google — —
Upstream advisory

CVE-2020-15265

Open SourceCoalition ESS < 30%HIGH2020-10-21

PYSEC-2020-330

CVEs:CVE-2020-15265

Affected products

ProductStatusVendorPackageEcosystem
tensorflow affected PyPI tensorflow —
tensorflow-cpu affected PyPI tensorflow-cpu —
tensorflow-gpu affected PyPI tensorflow-gpu —
Upstream advisory

CVE-2020-0411

Open SourceCoalition ESS < 30%HIGH2020-10-06

In ~AACExtractor() of AACExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Prod...

CVEs:CVE-2020-0411

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

ASB-A-143464314

GoogleCoalition ESS < 30%HIGH2020-10-01

ASB-A-143464314

Affected products

ProductStatusVendorPackageEcosystem
:unknown: affected Android :unknown: —
Upstream advisory

CVE-2020-0371

Open SourceCoalition ESS < 30%HIGH2020-10-06

There is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-163008256

CVEs:CVE-2020-0371

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

ASB-A-163008256

GoogleCoalition ESS < 30%2020-10-01

ASB-A-163008256

Affected products

ProductStatusVendorPackageEcosystem
:unknown: affected Android :unknown: —
Upstream advisory

CVE-2020-0339

Open SourceCoalition ESS < 30%HIGH2020-10-06

There is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-162980705

CVEs:CVE-2020-0339

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2020-0376

Open SourceCoalition ESS < 30%HIGH2020-10-06

There is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-163003156

CVEs:CVE-2020-0376

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

ASB-A-162980455

GoogleCoalition ESS < 30%CRITICAL2020-10-01

ASB-A-162980455

Affected products

ProductStatusVendorPackageEcosystem
:unknown: affected Android :unknown: —
Upstream advisory

ASB-A-162980705

GoogleCoalition ESS < 30%2020-10-01

ASB-A-162980705

Affected products

ProductStatusVendorPackageEcosystem
:unknown: affected Android :unknown: —
Upstream advisory

ASB-A-163003156

GoogleCoalition ESS < 30%MEDIUM2020-10-01

ASB-A-163003156

Affected products

ProductStatusVendorPackageEcosystem
:unknown: affected Android :unknown: —
Upstream advisory

CVE-2020-0283

Open SourceCoalition ESS < 30%HIGH2020-10-06

There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-163008257

CVEs:CVE-2020-0283

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

ASB-A-163008257

GoogleCoalition ESS < 30%CRITICAL2020-10-01

ASB-A-163008257

Affected products

ProductStatusVendorPackageEcosystem
:unknown: affected Android :unknown: —
Upstream advisory

CVE-2020-26603

Open SourceCoalition ESS < 30%MEDIUM2020-10-06

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Sticker Center allows directory traversal for an unprivileged process to read arbitrary files. The Samsung ID is SVE-2020-18433 (October 2020).

CVEs:CVE-2020-26603

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2020-0367

Open SourceCoalition ESS < 30%HIGH2020-10-06

There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-162980455

CVEs:CVE-2020-0367

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2020-26607

Open SourceCoalition ESS < 30%CRITICAL2020-10-06

An issue was discovered in TimaService on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. PendingIntent with an empty intent is mishandled, allowing an attacker to perform a privileged action via a modified intent. The Samsung ID is S...

CVEs:CVE-2020-26607

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

PYSEC-2020-142

Open SourceCoalition ESS < 30%HIGH2020-10-19

PYSEC-2020-142

Affected products

ProductStatusVendorPackageEcosystem
tink affected PyPI tink —
Upstream advisory

CVE-2020-8929

Open SourceCoalition ESS < 30%HIGH2020-10-16

A mis-handling of invalid unicode characters in the Java implementation of Tink versions prior to 1.5 allows an attacker to change the ID part of a ciphertext, which result in the creation of a second ciphertext that can decrypt to the same plaintext. ...

CVEs:CVE-2020-8929

Affected products

ProductStatusVendorPackageEcosystem
tink_java affected google — —
Upstream advisory

CVE-2020-8929

Open SourceCoalition ESS < 30%MEDIUM2020-10-16

Ciphertext Malleability Issue in Tink Java

CVEs:CVE-2020-8929

Affected products

ProductStatusVendorPackageEcosystem
com.google.crypto.tink:tink affected Maven com.google.crypto.tink:tink —
Upstream advisory

GHSA-g5vf-v6wf-7w2r

Open SourceCoalition ESS < 30%MEDIUM2020-10-16

Ciphertext Malleability Issue in Tink Java

Affected products

ProductStatusVendorPackageEcosystem
com.google.crypto.tink:tink affected Maven com.google.crypto.tink:tink —
Upstream advisory

GHSA-g5vf-v6wf-7w2r

Open SourceCoalition ESS < 30%MEDIUM2020-10-16

Ciphertext Malleability Issue in Tink Java

Affected products

ProductStatusVendorPackageEcosystem
com.google.crypto.tink:tink affected Maven com.google.crypto.tink:tink —
Upstream advisory

CVE-2020-26602

Open SourceCoalition ESS < 30%HIGH2020-10-06

An issue was discovered in EthernetNetwork on Samsung mobile devices with O(8.1), P(9.0), Q(10.0), and R(11.0) software. PendingIntent allows sdcard access by an unprivileged process. The Samsung ID is SVE-2020-18392 (October 2020).

CVEs:CVE-2020-26602

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2020-26606

Open SourceCoalition ESS < 30%HIGH2020-10-06

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software. An attacker can access certain Secure Folder content via a debugging command. The Samsung ID is SVE-2020-18673 (October 2020).

CVEs:CVE-2020-26606

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2020-26597

Open SourceCoalition ESS < 30%HIGH2020-10-06

An issue was discovered on LG mobile devices with Android OS 9.0 and 10 software. The Wi-Fi subsystem has incorrect input validation, leading to a crash. The LG ID is LVE-SMP-200022 (October 2020).

CVEs:CVE-2020-26597

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2020-26600

Open SourceCoalition ESS < 30%HIGH2020-10-06

An issue was discovered on Samsung mobile devices with Q(10.0) software. Auto Hotspot allows attackers to obtain sensitive information. The Samsung ID is SVE-2020-17288 (October 2020).

CVEs:CVE-2020-26600

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2020-26604

Open SourceCoalition ESS < 30%HIGH2020-10-06

An issue was discovered in SystemUI on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software. PendingIntent allows an unprivileged process to access contact numbers. The Samsung ID is SVE-2020-18467 (October 2020).

CVEs:CVE-2020-26604

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2020-26605

Open SourceCoalition ESS < 30%HIGH2020-10-06

An issue was discovered on Samsung mobile devices with Q(10.0) and R(11.0) (Exynos chipsets) software. They allow attackers to obtain sensitive information by reading a log. The Samsung ID is SVE-2020-18596 (October 2020).

CVEs:CVE-2020-26605

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2020-26601

Open SourceCoalition ESS < 30%HIGH2020-10-06

An issue was discovered in DirEncryptService on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. PendingIntent with an empty intent is mishandled, allowing an attacker to perform a privileged action via a modified intent. The Samsung I...

CVEs:CVE-2020-26601

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2020-26598

Open SourceCoalition ESS < 30%HIGH2020-10-06

An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, and 9.0 software. The Network Management component could allow an unauthorized actor to kill a TCP connection. The LG ID is LVE-SMP-200023 (October 2020).

CVEs:CVE-2020-26598

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2020-26599

Open SourceCoalition ESS < 30%MEDIUM2020-10-06

An issue was discovered on Samsung mobile devices with Q(10.0) software. The DynamicLockscreen Terms and Conditions can be accepted without authentication. The Samsung ID is SVE-2020-17079 (October 2020).

CVEs:CVE-2020-26599

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2020-15983

GoogleCoalition ESS < 30%HIGH2020-10-07

Insufficient data validation in webUI in Google Chrome on ChromeOS prior to 86.0.4240.75 allowed a local attacker to bypass content security policy via a crafted HTML page.

CVEs:CVE-2020-15983

Affected products

ProductStatusVendorPackageEcosystem
backports_sle affected opensuse — —
chrome affected google — —
debian_linux affected debian — —
fedora affected fedoraproject — —
Upstream advisory

CVE-2020-15980

GoogleCoalition ESS < 30%HIGH2020-10-07

Insufficient policy enforcement in Intents in Google Chrome on Android prior to 86.0.4240.75 allowed a local attacker to bypass navigation restrictions via crafted Intents.

CVEs:CVE-2020-15980

Affected products

ProductStatusVendorPackageEcosystem
backports_sle affected opensuse — —
chrome affected google — —
debian_linux affected debian — —
fedora affected fedoraproject — —
Upstream advisory

CVE-2020-0400

Open SourceCoalition ESS < 30%MEDIUM2020-10-06

In showDataRoamingNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for expl...

CVEs:CVE-2020-0400

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2020-0398

Open SourceCoalition ESS < 30%MEDIUM2020-10-06

In updateMwi of NotificationMgr.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: An...

CVEs:CVE-2020-0398

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2020-0408

Open SourceCoalition ESS < 30%HIGH2020-10-06

In remove of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: And...

CVEs:CVE-2020-0408

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

ASB-A-160605820

GoogleCoalition ESS < 30%2020-10-01

ASB-A-160605820

Affected products

ProductStatusVendorPackageEcosystem
:linux_kernel:Qualcomm affected Android :linux_kernel:Qualcomm —
Upstream advisory

ASB-A-160605900

GoogleCoalition ESS < 30%2020-10-01

ASB-A-160605900

Affected products

ProductStatusVendorPackageEcosystem
:linux_kernel:Qualcomm affected Android :linux_kernel:Qualcomm —
Upstream advisory

ASB-A-160605604

GoogleCoalition ESS < 30%2020-10-01

ASB-A-160605604

Affected products

ProductStatusVendorPackageEcosystem
:linux_kernel:Qualcomm affected Android :linux_kernel:Qualcomm —
Upstream advisory

CVE-2020-0415

Open SourceCoalition ESS < 30%MEDIUM2020-10-06

In various locations in SystemUI, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges needed. User interaction is not needed for exploitati...

CVEs:CVE-2020-0415

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
android affected google — —
Upstream advisory

CVE-2020-0246

Open SourceCoalition ESS < 30%MEDIUM2020-10-06

In getCarrierPrivilegeStatus of UiccAccessRule.java, there is a missing permission check. This could lead to local information disclosure of EID data with no additional execution privileges needed. User interaction is not needed for exploitation.Produc...

CVEs:CVE-2020-0246

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2020-0422

Open SourceCoalition ESS < 30%MEDIUM2020-10-06

In constructImportFailureNotification of NotificationImportExportListener.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges needed...

CVEs:CVE-2020-0422

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2020-0378

Open SourceCoalition ESS < 30%MEDIUM2020-10-06

In onWnmFrameReceived of PasspointManager.java, there is a missing permission check. This could lead to local information disclosure of location data with User execution privileges needed. User interaction is not needed for exploitation.Product: Androi...

CVEs:CVE-2020-0378

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2020-0412

Open SourceCoalition ESS < 30%MEDIUM2020-10-06

In setProcessMemoryTrimLevel of ActivityManagerService.java, there is a missing permission check. This could lead to local information disclosure of foreground processes with no additional execution privileges needed. User interaction is not needed for...

CVEs:CVE-2020-0412

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2020-0410

Open SourceCoalition ESS < 30%MEDIUM2020-10-06

In setNotification of SapServer.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: An...

CVEs:CVE-2020-0410

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2020-0419

Open SourceCoalition ESS < 30%MEDIUM2020-10-06

In generateInfo of PackageInstallerSession.java, there is a possible leak of cross-profile URI data during app installation due to a missing permission check. This could lead to local information disclosure with no additional execution privileges neede...

CVEs:CVE-2020-0419

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

ASB-A-160605709

GoogleCoalition ESS < 30%2020-10-01

ASB-A-160605709

Affected products

ProductStatusVendorPackageEcosystem
:linux_kernel:Qualcomm affected Android :linux_kernel:Qualcomm —
Upstream advisory

CVE-2020-0420

Open SourceCoalition ESS < 30%HIGH2020-10-06

In setUpdatableDriverPath of GpuService.cpp, there is a possible memory corruption due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for ex...

CVEs:CVE-2020-0420

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.