[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Security numbers in pkgsrc



		Hi EdgeBSD users & developers,

I would like to share with you the first run of a very simple tool I just wrote, which name is currently simply "pkgquery" [1]. In essence, all this shell script does at the moment is browse through every package available and either:
- lists all the packages for a given maintainer, eg

   $ pkgquery -M pkgsrc-users@xxxxxxxxxx

- lists the known security issues for every package available, eg

   $ pkgquery -S

Of course I have plans to generate different output formats and extend the functionalities. I am attaching a log I just generated on the "trunk" branch from the Git conversion for pkgsrc [2] (commit [3]).

It should be relatively easy - and hopefully interesting - to create more elaborate reports out of this, like graphing the amount and type of vulnerabilities over time, for successive releases.

Disclaimer: it will *not* be indicative of how "secure" any release is, was or will be (eg in case of 0days) but it could provide interesting metrics.

First few numbers:
- 1964 active vulnerability entries
- among which 102 different types of vulnerabilities reported, with
   most active entries being Denial of Service: (DoS)

  43 cross-site-scripting
  75 remote-system-access
  83 buffer-overflow
  84 heap-overflow
 156 arbitrary-code-execution
 181 multiple-vulnerabilities
 224 end-of-life
 549 denial-of-service

- affecting a total of 491 packages, with:
   * one vulnerability reported (230), or
   * more than one vulnerability reported (261)
- up to 44 known vulnerabilities for one package:

  25 suse32_libtiff-10.0nb4
  25 suse_libtiff-10.0nb4
  35 suse32_base-12.1nb7
  35 suse_base-12.1nb7
  40 suse32_openssl-10.0nb5
  40 suse_openssl-10.0nb5
  44 suse32_base-10.0nb8
  44 suse_base-10.0nb8

   (there is a pattern here)

Do not hesitate to follow-up for more details.

[1] https://git.edgebsd.org/gitweb/?p=infrastructure.git;a=blob;f=pkgsrc/pkgquery;hb=HEAD
[2] https://github.com/netbsd/pkgsrc
[3] https://github.com/NetBSD/pkgsrc/commit/3945eca4f5821e76bc2046c8678259644ea677a1

--
khorben
Known security issues:
Package gdm-2.20.11nb24 has a security-bypass vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7496
Package kdebase-3.5.10nb39 has a privilege-escalation vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0436
Package kdelibs-3.5.10nb40 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5698
Package kdelibs-3.5.10nb40 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1687
Package kdelibs-3.5.10nb40 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1690
Package kdelibs-3.5.10nb40 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1698
Package kdelibs-3.5.10nb40 has a ssl-cert-spoofing vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2702
Package kdelibs-3.5.10nb40 has a sensitive-information-disclosure vulnerability, see https://www.kde.org/info/security/advisory-20170228-1.txt
Package libXpm-3.5.12 has a denial-of-service vulnerability, see https://www.debian.org/security/2017/dsa-3772
Package modular-xorg-server-1.12.4nb17 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-3418
Package p5-gtk2-1.249nb9 has a arbitrary-code-execution vulnerability, see https://www.debian.org/security/2015/dsa-3173
Package ruby23-tk-2.3.4nb4 has a arbitrary-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2337
Package ruby23-tk-2.3.4nb4 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2337
Package rxvt-2.7.10nb6 has a out-of-bounds-read vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7483
Package arc-5.21p has a directory-traversal vulnerability, see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774527
Package ark-4.14.3nb9 has a arbitrary-code-execution vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-5330
Package gcpio-2.12nb1 has a out-of-bounds-write vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9112
Package gcpio-2.12nb1 has a directory-traversal vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1197
Package gcpio-2.12nb1 has a out-of-bounds-write vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2037
Package lha-114.9nb4 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1925
Package libarchive-3.3.1 has a out-of-bounds-read vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2016-10349
Package libarchive-3.3.1 has a out-of-bounds-read vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2016-10350
Package lrzip-0.631 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8844
Package lrzip-0.631 has a use-after-free vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8846
Package lrzip-0.631 has a null-dereference vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8847
Package lrzip-0.631 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8842
Package lrzip-0.631 has a null-dereference vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8843
Package lzo-2.10 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8845
Package rzip-2.1 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8364
Package unace-1.2.2nb2 has a buffer-overflow vulnerability, see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775003
Package zziplib-0.13.59 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5974
Package zziplib-0.13.59 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5975
Package zziplib-0.13.59 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5976
Package zziplib-0.13.59 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5977
Package zziplib-0.13.59 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5978
Package zziplib-0.13.59 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5979
Package zziplib-0.13.59 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5980
Package zziplib-0.13.59 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5981
Package ampache-3.5.3nb3 has a cross-site-scripting vulnerability, see http://secunia.com/advisories/44497/
Package csound5-5.19.01nb1 has a remote-system-access vulnerability, see http://secunia.com/advisories/48719/
Package flite-1.3nb3 has a local-symlink-attack vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0027
Package flite-1.3nb3 has a symlink-attack vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0027
Package icecast-1.3.12nb14 has a sensitive-information-disclosure vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9018
Package icecast-1.3.12nb14 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3026
Package icecast-1.3.12nb14 has a denial-of-service vulnerability, see http://lists.xiph.org/pipermail/icecast-dev/2015-April/002460.html
Package lame-3.99.5nb3 has a buffer-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8419
Package libaudiofile-0.3.6nb1 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6827
Package libaudiofile-0.3.6nb1 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6828
Package libaudiofile-0.3.6nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6829
Package libaudiofile-0.3.6nb1 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6830
Package libaudiofile-0.3.6nb1 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6831
Package libaudiofile-0.3.6nb1 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6832
Package libaudiofile-0.3.6nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6833
Package libaudiofile-0.3.6nb1 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6834
Package libaudiofile-0.3.6nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6835
Package libaudiofile-0.3.6nb1 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6836
Package libaudiofile-0.3.6nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6837
Package libaudiofile-0.3.6nb1 has a integer-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6838
Package libaudiofile-0.3.6nb1 has a integer-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6839
Package libmad-0.15.1bnb1 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8373
Package libmad-0.15.1bnb1 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8374
Package libsndfile-1.0.28 has a buffer-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8365
Package libsndfile-1.0.28 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8362
Package libsndfile-1.0.28 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8363
Package libsndfile-1.0.28 has a buffer-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8361
Package libsndfile-1.0.28 has a out-of-bounds-read vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8365
Package libsndfile-1.0.28 has a buffer-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8361
Package libsndfile-1.0.28 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8362
Package libsndfile-1.0.28 has a out-of-bounds-read vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8363
Package tcl-snack-2.2.10nb5 has a remote-system-access vulnerability, see http://secunia.com/advisories/49889/
Package tcl-snack-2.2.10nb5 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6303
Package lmbench-2.11anb8 has a privilege-escalation vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4968
Package spice-3f5.1nb6 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package atheme-3.0.4nb5 has a denial-of-service vulnerability, see http://secunia.com/advisories/51852/
Package atheme-3.0.4nb5 has a denial-of-service vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4478
Package atheme-3.0.4nb5 has a denial-of-service vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4478
Package atheme-3.0.4nb5 has a remote-information-modification vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9773
Package empathy-2.34.0nb54 has a cross-site-scripting vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3635
Package gajim-0.15nb16 has a remote-spoofing vulnerability, see http://secunia.com/advisories/51209/
Package gajim-0.15nb16 has a man-in-the-middle vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8688
Package gajim-0.15nb16 has a remote-information-modification vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8688
Package hexchat-2.12.3nb1 has a stack-overflow vulnerability, see https://github.com/hexchat/hexchat/issues/1934
Package inspircd-1.1.23nb28 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1836
Package inspircd-1.1.23nb28 has a denial-of-service vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8702
Package inspircd-1.1.23nb28 has a signature-spoofing vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7142
Package inspircd-1.1.23nb28 has a buffer-underflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-6674
Package inspircd-1.1.23nb28 has a infinite-loop vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-6697
Package inspircd-1.2.0nb28 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1836
Package inspircd-1.2.0nb28 has a denial-of-service vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8702
Package inspircd-1.2.0nb28 has a signature-spoofing vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7142
Package inspircd-1.2.0nb28 has a buffer-underflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-6674
Package inspircd-1.2.0nb28 has a infinite-loop vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-6697
Package jabberd-2.5.0nb1 has a information-disclosure vulnerability, see https://github.com/jabberd2/jabberd2/issues/85
Package jabberd-2.5.0nb1 has a information-disclosure vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2058
Package konversation-1.1nb38 has a denial-of-service vulnerability, see http://secunia.com/advisories/38711/
Package libtlen-20041113 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3720
Package mcabber-1.0.0nb5 has a weak-authentication vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5604
Package pidgin-2.12.0 has a information-disclosure vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2375
Package pidgin-2.12.0 has a out-of-bounds-read vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2373
Package pidgin-2.12.0 has a remote-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2371
Package pidgin-2.12.0 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2369
Package pidgin-2.12.0 has a information-disclosure vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2367
Package pidgin-2.12.0 has a out-of-bounds-read vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2366
Package pidgin-2.12.0 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2365
Package pidgin-2.12.0 has a arbitrary-file-overwrite vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4323
Package pidgin-2.12.0 has a out-of-bounds-read vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2380
Package pidgin-2.12.0 has a buffer-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2378
Package pidgin-2.12.0 has a out-of-bounds-read vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2370
Package pidgin-2.12.0 has a out-of-bounds-write vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2374
Package pidgin-2.12.0 has a out-of-bounds-read vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2372
Package pidgin-2.12.0 has a remote-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2368
Package pidgin-2.12.0 has a remote-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2376
Package psi-0.15nb9 has a ssl-cert-spoofing vulnerability, see http://secunia.com/advisories/46349/
Package psi-0.15nb9 has a weak-authentication vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5593
Package telepathy-idle-0.1.8nb10 has a man-in-the-middle-attack vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6746
Package unrealircd-3.2.10.5nb5 has a ssl-certificate-spoofing vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7144
Package asterisk-14.2.0nb6 has a denial-of-service vulnerability, see http://downloads.digium.com/pub/security/AST-2016-009.html
Package asterisk-14.2.0nb6 has a authentication-bypass vulnerability, see http://downloads.digium.com/pub/security/AST-2016-010.html
Package asterisk-14.2.0nb6 has a buffer-overflow vulnerability, see http://downloads.asterisk.org/pub/security/AST-2017-001.html
Package asterisk-1.8.32.3nb17 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package srtp-1.4.4 has a denial-of-service vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6360
Package cross-arm-none-eabi-binutils-2.28 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7299
Package cross-arm-none-eabi-binutils-2.28 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7300
Package cross-arm-none-eabi-binutils-2.28 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7301
Package cross-arm-none-eabi-binutils-2.28 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7302
Package cross-arm-none-eabi-binutils-2.28 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7303
Package cross-arm-none-eabi-binutils-2.28 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7304
Package cross-arm-none-eabi-binutils-2.28 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8392
Package cross-arm-none-eabi-binutils-2.28 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8393
Package cross-arm-none-eabi-binutils-2.28 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8394
Package cross-arm-none-eabi-binutils-2.28 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8395
Package cross-arm-none-eabi-binutils-2.28 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8396
Package cross-arm-none-eabi-binutils-2.28 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8397
Package cross-arm-none-eabi-binutils-2.28 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8398
Package avr-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7299
Package avr-binutils-2.27 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7300
Package avr-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7301
Package avr-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7302
Package avr-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7303
Package avr-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7304
Package avr-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8392
Package avr-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8393
Package avr-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8394
Package avr-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8395
Package avr-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8396
Package avr-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8397
Package avr-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8398
Package cross-binutils-2.17.0.0nb4 has a out-of-bounds-write vulnerability, see http://www.cvedetails.com/cve/CVE-2014-8501/
Package cross-binutils-2.17.0.0nb4 has a denial-of-service vulnerability, see http://www.cvedetails.com/cve/CVE-2014-8502/
Package cross-binutils-2.17.0.0nb4 has a denial-of-service vulnerability, see http://www.cvedetails.com/cve/CVE-2014-8503/
Package cross-freemint-binutils-2.24 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7299
Package cross-freemint-binutils-2.24 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7300
Package cross-freemint-binutils-2.24 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7301
Package cross-freemint-binutils-2.24 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7302
Package cross-freemint-binutils-2.24 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7303
Package cross-freemint-binutils-2.24 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7304
Package cross-freemint-binutils-2.24 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8392
Package cross-freemint-binutils-2.24 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8393
Package cross-freemint-binutils-2.24 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8394
Package cross-freemint-binutils-2.24 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8395
Package cross-freemint-binutils-2.24 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8396
Package cross-freemint-binutils-2.24 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8397
Package cross-freemint-binutils-2.24 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8398
Package cross-h8300-elf-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7299
Package cross-h8300-elf-binutils-2.27 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7300
Package cross-h8300-elf-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7301
Package cross-h8300-elf-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7302
Package cross-h8300-elf-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7303
Package cross-h8300-elf-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7304
Package cross-h8300-elf-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8392
Package cross-h8300-elf-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8393
Package cross-h8300-elf-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8394
Package cross-h8300-elf-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8395
Package cross-h8300-elf-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8396
Package cross-h8300-elf-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8397
Package cross-h8300-elf-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8398
Package cross-h8300-hms-binutils-2.12.1nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7299
Package cross-h8300-hms-binutils-2.12.1nb1 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7300
Package cross-h8300-hms-binutils-2.12.1nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7301
Package cross-h8300-hms-binutils-2.12.1nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7302
Package cross-h8300-hms-binutils-2.12.1nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7303
Package cross-h8300-hms-binutils-2.12.1nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7304
Package cross-h8300-hms-binutils-2.12.1nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8392
Package cross-h8300-hms-binutils-2.12.1nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8393
Package cross-h8300-hms-binutils-2.12.1nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8394
Package cross-h8300-hms-binutils-2.12.1nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8395
Package cross-h8300-hms-binutils-2.12.1nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8396
Package cross-h8300-hms-binutils-2.12.1nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8397
Package cross-h8300-hms-binutils-2.12.1nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8398
Package mingw-binutils-2.18nb2 has a out-of-bounds-write vulnerability, see http://www.cvedetails.com/cve/CVE-2014-8501/
Package mingw-binutils-2.18nb2 has a denial-of-service vulnerability, see http://www.cvedetails.com/cve/CVE-2014-8502/
Package mingw-binutils-2.18nb2 has a denial-of-service vulnerability, see http://www.cvedetails.com/cve/CVE-2014-8503/
Package mingw-binutils-2.18nb2 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7299
Package mingw-binutils-2.18nb2 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7300
Package mingw-binutils-2.18nb2 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7301
Package mingw-binutils-2.18nb2 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7302
Package mingw-binutils-2.18nb2 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7303
Package mingw-binutils-2.18nb2 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7304
Package mingw-binutils-2.18nb2 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8392
Package mingw-binutils-2.18nb2 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8393
Package mingw-binutils-2.18nb2 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8394
Package mingw-binutils-2.18nb2 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8395
Package mingw-binutils-2.18nb2 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8396
Package mingw-binutils-2.18nb2 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8397
Package mingw-binutils-2.18nb2 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8398
Package nios2-binutils-2.24nb3 has a out-of-bounds-write vulnerability, see http://www.cvedetails.com/cve/CVE-2014-8501/
Package nios2-binutils-2.24nb3 has a denial-of-service vulnerability, see http://www.cvedetails.com/cve/CVE-2014-8502/
Package nios2-binutils-2.24nb3 has a denial-of-service vulnerability, see http://www.cvedetails.com/cve/CVE-2014-8503/
Package nios2-binutils-2.24nb3 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7299
Package nios2-binutils-2.24nb3 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7300
Package nios2-binutils-2.24nb3 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7301
Package nios2-binutils-2.24nb3 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7302
Package nios2-binutils-2.24nb3 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7303
Package nios2-binutils-2.24nb3 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7304
Package nios2-binutils-2.24nb3 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8392
Package nios2-binutils-2.24nb3 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8393
Package nios2-binutils-2.24nb3 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8394
Package nios2-binutils-2.24nb3 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8395
Package nios2-binutils-2.24nb3 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8396
Package nios2-binutils-2.24nb3 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8397
Package nios2-binutils-2.24nb3 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8398
Package adodb-4.96anb2 has a sql-injection vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7405
Package apache-cassandra-1.2.19nb1 has a remote-code-execution vulnerability, see http://www.openwall.com/lists/oss-security/2015/04/01/6
Package db5-5.3.28nb1 has a multiple-vulnerabilities vulnerability, see http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html#AppendixBDB
Package jdbc-mysql-3.1.14 has a unspecified vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2575
Package jdbc-mysql-5.0.8 has a unspecified vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2575
Package mariadb-client-5.5.52 has a use-after-free vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3302
Package mariadb-server-5.5.52 has a unauthorized-access vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3313
Package mongodb-3.2.10nb2 has a sensitive-information-disclosure vulnerability, see https://jira.mongodb.org/browse/SERVER-25335
Package mysql-cluster-7.4.12 has a multiple-vulnerabilities vulnerability, see http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL
Package mysql-client-5.1.73 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0001
Package mysql-client-5.1.73 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package mysql-client-5.1.73 has a ssl-downgrade vulnerability, see http://www.ocert.org/advisories/ocert-2015-003.html
Package mysql-server-5.1.73 has a valid-account-enumeration vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5615
Package mysql-server-5.1.73 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package mysql-client-5.5.56 has a ssl-downgrade vulnerability, see http://www.ocert.org/advisories/ocert-2015-003.html
Package mysql-client-5.5.56 has a use-after-free vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3302
Package mysql-server-5.5.56 has a valid-account-enumeration vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5615
Package mysql-client-5.6.36 has a ssl-downgrade vulnerability, see http://www.ocert.org/advisories/ocert-2015-003.html
Package phpmyadmin-4.6.5.2 has a server-side-request-forgery vulnerability, see https://www.phpmyadmin.net/security/PMASA-2016-44/
Package rrdtool-1.2.30nb13 has a memory-corruption vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2131
Package apache-ant-1.5.4nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2098
Package apache-ant-1.5.4nb2 has a remote-spoofing vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1571
Package binutils-2.26.1 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6965
Package binutils-2.26.1 has a use-after-free vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6966
Package binutils-2.26.1 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6969
Package binutils-2.26.1 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7209
Package binutils-2.26.1 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7210
Package binutils-2.26.1 has a buffer-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7223
Package binutils-2.26.1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7224
Package binutils-2.26.1 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7225
Package binutils-2.26.1 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7226
Package binutils-2.26.1 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7227
Package binutils-2.26.1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7299
Package binutils-2.26.1 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7300
Package binutils-2.26.1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7301
Package binutils-2.26.1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7302
Package binutils-2.26.1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7303
Package binutils-2.26.1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7304
Package binutils-2.26.1 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7614
Package binutils-2.26.1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8392
Package binutils-2.26.1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8393
Package binutils-2.26.1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8394
Package binutils-2.26.1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8395
Package binutils-2.26.1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8396
Package binutils-2.26.1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8397
Package binutils-2.26.1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8398
Package boehm-gc-7.6.0nb2 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2016-9427
Package bugzilla-3.6.8 has a cross-site-scripting vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0465
Package bugzilla-3.6.8 has a cross-site-scripting vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0466
Package bugzilla-3.6.8 has a sensitive-information-exposure vulnerability, see https://secunia.com/advisories/50040/
Package bugzilla-3.6.8 has a information-disclosure vulnerability, see http://secunia.com/advisories/50433/
Package bugzilla-3.6.8 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/52254/
Package bugzilla-3.6.8 has a cross-site-scripting vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1546
Package bugzilla-3.6.8 has a multiple-vulnerabilities vulnerability, see http://www.bugzilla.org/security/4.0.14/
Package bugzilla-3.6.8 has a multiple-vulnerabilities vulnerability, see http://www.bugzilla.org/security/4.0.15/
Package bugzilla-3.6.8 has a security-bypass vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4499
Package bugzilla-3.6.8 has a cross-site-scripting vulnerability, see https://bugzilla.mozilla.org/show_bug.cgi?id=1221518
Package bugzilla-3.6.8 has a information-leak vulnerability, see https://bugzilla.mozilla.org/show_bug.cgi?id=1232785
Package bugzilla-3.6.8 has a code-injection vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8508
Package bugzilla-3.6.8 has a code-injection vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8508
Package bugzilla-3.6.8 has a code-injection vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2803
Package capstone-3.0.4nb2 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6952
Package cogito-0.18.2nb9 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package eclipse-3.0.1nb2 has a cross-site-scripting vulnerability, see http://secunia.com/advisories/42236/
Package jenkins-2.25 has a cross-site-scripting vulnerability, see http://secunia.com/advisories/48056/
Package jenkins-2.25 has a script-insertion vulnerability, see http://secunia.com/advisories/56152/
Package jenkins-2.25 has a cross-site-request-forgeries vulnerability, see http://seclists.org/bugtraq/2015/Aug/161
Package jenkins-2.25 has a arbitrary-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9299
Package jenkins-2.19.1 has a cross-site-scripting vulnerability, see http://secunia.com/advisories/48056/
Package jenkins-2.19.1 has a script-insertion vulnerability, see http://secunia.com/advisories/56152/
Package jenkins-2.19.1 has a cross-site-request-forgeries vulnerability, see http://seclists.org/bugtraq/2015/Aug/161
Package jenkins-2.19.1 has a arbitrary-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9299
Package jq-1.5nb1 has a denial-of-service vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4074
Package kio-5.25.0nb7 has a sensitive-information-disclosure vulnerability, see https://www.kde.org/info/security/advisory-20170228-1.txt
Package libblkid-2.18 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-5011
Package libdwarf-20161124 has a heap-buffer-overflow vulnerability, see https://www.prevanders.net/dwarfbug.html#DW201611-006
Package libgsf-1.14.34nb1 has a null-dereference vulnerability, see https://github.com/GNOME/libgsf/commit/95a8351a75758cf10b3bf6abae0b6b461f90d9e5
Package libiberty-1.0nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4487
Package libiberty-1.0nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4488
Package libiberty-1.0nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4489
Package libiberty-1.0nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4490
Package libiberty-1.0nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4491
Package libiberty-1.0nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4492
Package libiberty-1.0nb2 has a out-of-bounds-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4493
Package libiberty-1.0nb2 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2226
Package libmimedir-0.5.1 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3205
Package libosip2-4.1.0 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10324
Package libosip2-4.1.0 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10325
Package libosip2-4.1.0 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10326
Package libosip2-4.1.0 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7853
Package libtar-1.2.20 has a data-manipulation vulnerability, see http://secunia.com/advisories/55138/
Package mantis-1.3.1nb2 has a arbitrary-code-execution vulnerability, see https://legalhackers.com/advisories/PHPMailer-Exploit-Remote-Code-Exec-CVE-2016-10033-Vuln.html
Package mantis-1.3.1nb2 has a javascript-injection vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6797
Package mantis-1.3.1nb2 has a cross-site-scripting vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7222
Package mantis-1.3.1nb2 has a cross-site-scripting vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6973
Package mantis-1.3.1nb2 has a cross-site-scripting vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7241
Package mantis-1.3.1nb2 has a cross-site-scripting vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7309
Package p5-Parallel-ForkManager-1.19 has a insecure-temp-files vulnerability, see http://secunia.com/advisories/46784/
Package p5-XSLoader-0.24 has a arbitrary-code-execution vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6185
Package pcre-8.40nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7246
Package pcre-8.40nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7245
Package pcre-8.40nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7244
Package pcre-8.40nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7186
Package pcre2-10.23 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7186
Package pcre2-10.23 has a stack-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8399
Package pcre2-10.23 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8786
Package php71-gmp-7.1.5 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7963
Package ptlib-2.10.7nb10 has a denial-of-service vulnerability, see http://secunia.com/advisories/52659/
Package ptlib-2.10.7nb10 has a denial-of-service vulnerability, see http://secunia.com/advisories/52659/
Package py27-ipython-0.10.2nb1 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3429
Package py27-ipython-0.13.2 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3429
Package py27-logilab-common-1.3.0 has a insecure-temp-file vulnerability, see http://secunia.com/advisories/56720/
Package py27-rope-0.10.2 has a remote-code-execution vulnerability, see https://github.com/python-rope/rope/issues/105
Package py27-trytond-4.2.1 has a insecure-file-permissions vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-0360
Package radare2-0.10.3nb1 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6197
Package radare2-0.10.3nb1 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6319
Package radare2-0.10.3nb1 has a out-of-bounds-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6387
Package radare2-0.10.3nb1 has a null-dereference vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6415
Package radare2-0.10.3nb1 has a unspecified vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6448
Package radare2-0.10.3nb1 has a unspecified vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6194
Package radare2-0.10.3nb1 has a null-dereference vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7274
Package radare2-0.10.3nb1 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7716
Package radare2-0.10.3nb1 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7854
Package radare2-0.10.3nb1 has a use-after-free vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7946
Package roundup-1.4.19nb2 has a cross-site-scripting vulnerability, see http://secunia.com/advisories/51230/
Package roundup-1.4.19nb2 has a sensitive-information-disclosure vulnerability, see https://pypi.python.org/pypi/roundup/1.5.1
Package ruby23-fiddle-2.3.4 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2339
Package tre-0.8.0 has a out-of-bounds-write vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-8859
Package xulrunner10-10.0.12nb39 has a arbitrary-code-execution vulnerability, see http://www.mozilla.org/security/announce/2013/mfsa2013-21.html
Package xulrunner10-10.0.12nb39 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package xulrunner17-17.0.11nb27 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package xulrunner17-17.0.11nb27 has a arbitrary-code-execution vulnerability, see http://www.mozilla.org/security/announce/2013/mfsa2013-104.html
Package xulrunner192-1.9.2.28nb37 has a arbitrary-code-execution vulnerability, see http://secunia.com/advisories/48069/
Package xulrunner192-1.9.2.28nb37 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package xulrunner31-31.8.0nb11 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package zookeeper-3.4.8nb1 has a buffer-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-5017
Package TeXmacs-1.99.5nb1 has a privilege-escalation vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3394
Package gobby-0.4.12nb29 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/46698/
Package xemacs-21.4.24nb1 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2142
Package xemacs-21.4.24nb1 has a remote-system-access vulnerability, see http://secunia.com/advisories/35348/
Package xemacs-21.5.27nb23 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2142
Package xemacs-21.5.27nb23 has a remote-system-access vulnerability, see http://secunia.com/advisories/35348/
Package xemacs-nox11-21.5.27nb23 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2142
Package xemacs-nox11-21.5.27nb23 has a remote-system-access vulnerability, see http://secunia.com/advisories/35348/
Package xemacs-nox11-21.4.24nb1 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2142
Package xemacs-nox11-21.4.24nb1 has a remote-system-access vulnerability, see http://secunia.com/advisories/35348/
Package compat14-1.4.3.1nb2 has a remote-root-shell vulnerability, see http://www.pine.nl/advisories/pine-cert-20020601.html
Package compat14-1.4.3.1nb2 has a remote-root-shell vulnerability, see http://www.kb.cert.org/vuls/id/738331
Package compat15-1.5.3 has a remote-root-shell vulnerability, see http://www.kb.cert.org/vuls/id/738331
Package netbsd32_compat15-1.5.3 has a remote-root-shell vulnerability, see http://www.kb.cert.org/vuls/id/738331
Package qemu-2.9.0nb1 has a information-disclosure vulnerability, see http://xenbits.xen.org/xsa/advisory-140.html
Package qemu-2.9.0nb1 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8577
Package qemu-2.9.0nb1 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8576
Package qemu-2.9.0nb1 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8667
Package qemu-2.9.0nb1 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8578
Package qemu-2.9.0nb1 has a out-of-bounds-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8668
Package qemu-2.9.0nb1 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8909
Package qemu-2.9.0nb1 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8669
Package qemu-2.9.0nb1 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8910
Package qemu-2.9.0nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9101
Package qemu-2.9.0nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9907
Package qemu-2.9.0nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9923
Package qemu-2.9.0nb1 has a information-disclosure vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9908
Package qemu-2.9.0nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9911
Package qemu-2.9.0nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9921
Package qemu-2.9.0nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9912
Package qemu-2.9.0nb1 has a infinite-loop vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8112
Package qemu-2.9.0nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8086
Package qemu-2.9.0nb1 has a out-of-bounds-read vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7718
Package suse32_alsa-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_alsa-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_alsa-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_aspell-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_aspell-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_aspell-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_base-10.0nb8 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_base-10.0nb8 has a privilege-escalation vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3856
Package suse32_base-10.0nb8 has a arbitrary-code-execution vulnerability, see https://hermes.opensuse.org/messages/7712778
Package suse32_base-10.0nb8 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2011-1071.html
Package suse32_base-10.0nb8 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1659
Package suse32_base-10.0nb8 has a remote-system-access vulnerability, see http://lists.opensuse.org/opensuse-updates/2011-07/msg00041.html
Package suse32_base-10.0nb8 has a information-disclosure vulnerability, see http://secunia.com/advisories/47432/
Package suse32_base-10.0nb8 has a local-system-compromise vulnerability, see http://secunia.com/advisories/47409/
Package suse32_base-10.0nb8 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_base-10.0nb8 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_base-10.0nb8 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-4043.html
Package suse32_base-10.0nb8 has a directory-traversal vulnerability, see http://support.novell.com/security/cve/CVE-2014-0475.html
Package suse32_base-10.0nb8 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-5119.html
Package suse32_base-10.0nb8 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-6040.html
Package suse32_base-10.0nb8 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html
Package suse32_base-10.0nb8 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0235
Package suse32_base-10.0nb8 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2015-02/msg00089.html
Package suse32_base-10.0nb8 has a invalid-file-descriptor-reuse vulnerability, see http://www.openwall.com/lists/oss-security/2015/01/28/20
Package suse32_base-10.0nb8 has a buffer-overrun vulnerability, see http://www.openwall.com/lists/oss-security/2015/02/04/1
Package suse32_base-10.0nb8 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-1781
Package suse32_base-10.0nb8 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2327
Package suse32_base-10.0nb8 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2328
Package suse32_base-10.0nb8 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8380
Package suse32_base-10.0nb8 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8382
Package suse32_base-10.0nb8 has a uninitialized-memory-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8390
Package suse32_base-10.0nb8 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8383
Package suse32_base-10.0nb8 has a integer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8394
Package suse32_base-10.0nb8 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8381
Package suse32_base-10.0nb8 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8392
Package suse32_base-10.0nb8 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8386
Package suse32_base-10.0nb8 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8385
Package suse32_base-10.0nb8 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8388
Package suse32_base-10.0nb8 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8384
Package suse32_base-10.0nb8 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8389
Package suse32_base-10.0nb8 has a sensitive-information-disclosure vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8393
Package suse32_base-10.0nb8 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8391
Package suse32_base-10.0nb8 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8395
Package suse32_base-10.0nb8 has a security-bypass vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8777
Package suse32_base-10.0nb8 has a stack-overflow vulnerability, see https://sourceware.org/bugzilla/show_bug.cgi?id=17905
Package suse32_base-10.0nb8 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2016/dsa-3481
Package suse32_base-10.0nb8 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html
Package suse32_base-10.0nb8 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-06/msg00030.html
Package suse32_base-10.0nb8 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-5417
Package suse32_base-10.0nb8 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8804
Package suse32_compat-10.0nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_compat-10.0nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_compat-10.0nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_expat-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_expat-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_expat-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_expat-10.0nb2 has a denial-of-service vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4472
Package suse32_fontconfig-10.0nb7 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_fontconfig-10.0nb7 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_fontconfig-10.0nb7 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_fontconfig-10.0nb7 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5384
Package suse32_freetype2-10.0nb5 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0946
Package suse32_freetype2-10.0nb5 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_freetype2-10.0nb5 has a buffer-overflow vulnerability, see http://secunia.com/advisories/44008/
Package suse32_freetype2-10.0nb5 has a arbitrary-code-execution vulnerability, see http://secunia.com/advisories/41958/
Package suse32_freetype2-10.0nb5 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2011-0226.html
Package suse32_freetype2-10.0nb5 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3256
Package suse32_freetype2-10.0nb5 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3439
Package suse32_freetype2-10.0nb5 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_freetype2-10.0nb5 has a local-system-compromise vulnerability, see http://secunia.com/advisories/48805/
Package suse32_freetype2-10.0nb5 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2012-5668.html
Package suse32_freetype2-10.0nb5 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2012-5669.html
Package suse32_freetype2-10.0nb5 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_glx-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_glx-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_glx-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_gtk2-10.0nb4 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1194
Package suse32_gtk2-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_gtk2-10.0nb4 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2011-03/msg00019.html
Package suse32_gtk2-10.0nb4 has a local-security-bypass vulnerability, see http://secunia.com/advisories/43933/
Package suse32_gtk2-10.0nb4 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4352
Package suse32_gtk2-10.0nb4 has a denial-of-service vulnerability, see http://secunia.com/advisories/45308/
Package suse32_gtk2-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_gtk2-10.0nb4 has a remote-system-access vulnerability, see http://secunia.com/advisories/49983/
Package suse32_gtk2-10.0nb4 has a multiple-vulnerabilities vulnerability, see https://secunia.com/advisories/51170/
Package suse32_gtk2-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_gtk2-10.0nb4 has a arbitrary-code-execution vulnerability, see http://lists.opensuse.org/opensuse-updates/2014-12/msg00062.html
Package suse32_krb5-10.0 has a unknown-impact vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
Package suse32_krb5-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_krb5-10.0 has a remote-spoofing vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1323
Package suse32_krb5-10.0 has a privilege-escalation vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1324
Package suse32_krb5-10.0 has a remote-security-bypass vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4020
Package suse32_krb5-10.0 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html
Package suse32_krb5-10.0 has a arbitrary-code-execution vulnerability, see http://secunia.com/advisories/44027/
Package suse32_krb5-10.0 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/46546/
Package suse32_krb5-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_krb5-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_krb5-10.0 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-4341.html
Package suse32_krb5-10.0 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-4342.html
Package suse32_krb5-10.0 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-4343.html
Package suse32_krb5-10.0 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-4344.html
Package suse32_krb5-10.0 has a denial-of-service vulnerability, see http://www.secunia.com/advisories/62976
Package suse32_libcups-10.0nb4 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1182
Package suse32_libcups-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_libcups-10.0nb4 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/40165/
Package suse32_libcups-10.0nb4 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/41706/
Package suse32_libcups-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_libcups-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_libcups-10.0nb4 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-3537.html
Package suse32_libcups-10.0nb4 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5029.html
Package suse32_libcups-10.0nb4 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5030.html
Package suse32_libcups-10.0nb4 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5031.html
Package suse32_libidn-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_libjpeg-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_libjpeg-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_libjpeg-10.0nb2 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2012-2806.html
Package suse32_libjpeg-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_libpng-10.0nb4 has a information-disclosure vulnerability, see http://secunia.com/advisories/35346/
Package suse32_libpng-10.0nb4 has a unknown-impact vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
Package suse32_libpng-10.0nb4 has a remote-system-access vulnerability, see http://secunia.com/advisories/40302/
Package suse32_libpng-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_libpng-10.0nb4 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-updates/2011-08/msg00026.html
Package suse32_libpng-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_libpng-10.0nb4 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3026
Package suse32_libpng-10.0nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2011-3045.html
Package suse32_libpng-10.0nb4 has a local-system-compromise vulnerability, see http://support.novell.com/security/cve/CVE-2011-3048.html
Package suse32_libpng-10.0nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2012-3425.html
Package suse32_libpng-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_libpng-10.0nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-6954.html
Package suse32_libpng-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2013-7354.html
Package suse32_libpng-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2013-7353.html
Package suse32_libsigc++2-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_libsigc++2-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_libsigc++2-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_libtiff-10.0nb4 has a denial-of-service vulnerability, see http://secunia.com/advisories/40422/
Package suse32_libtiff-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_libtiff-10.0nb4 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5022
Package suse32_libtiff-10.0nb4 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3087
Package suse32_libtiff-10.0nb4 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0192
Package suse32_libtiff-10.0nb4 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1167
Package suse32_libtiff-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_libtiff-10.0nb4 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1173
Package suse32_libtiff-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2012-2088.html
Package suse32_libtiff-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2012-2113.html
Package suse32_libtiff-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2012-3401.html
Package suse32_libtiff-10.0nb4 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4447
Package suse32_libtiff-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2013-1960.html
Package suse32_libtiff-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2013-1961.html
Package suse32_libtiff-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_libtiff-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2013-6369.html
Package suse32_libtiff-10.0nb4 has a multiple-vulnerabilities vulnerability, see http://advisories.mageia.org/MGASA-2015-0112.html
Package suse32_libtiff-10.0nb4 has a arbitrary-memory-access vulnerability, see http://www.securityfocus.com/archive/1/537205
Package suse32_libtiff-10.0nb4 has a heap-overflow vulnerability, see http://www.securityfocus.com/archive/1/537208
Package suse32_libtiff-10.0nb4 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8781
Package suse32_libtiff-10.0nb4 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8782
Package suse32_libtiff-10.0nb4 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8783
Package suse32_libtiff-10.0nb4 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2016/dsa-3467
Package suse32_libtiff-10.0nb4 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1547
Package suse32_libtiff-10.0nb4 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3186
Package suse32_libxml2-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4008
Package suse32_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4494
Package suse32_libxml2-10.0nb2 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2011-1944.html
Package suse32_libxml2-10.0nb2 has a remote-system-access vulnerability, see http://secunia.com/advisories/47572/
Package suse32_libxml2-10.0nb2 has a remote-system-access vulnerability, see http://secunia.com/advisories/47647/
Package suse32_libxml2-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_libxml2-10.0nb2 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2011-3102.html
Package suse32_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2012-2807.html
Package suse32_libxml2-10.0nb2 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5134
Package suse32_libxml2-10.0nb2 has a multiple-vulnerabilities vulnerability, see http://support.novell.com/security/cve/CVE-2013-1969.html
Package suse32_libxml2-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0191.html
Package suse32_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0191.html
Package suse32_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3660
Package suse32_libxml2-10.0nb2 has a out-of-bounds-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7942
Package suse32_libxml2-10.0nb2 has a out-of-bounds-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7941
Package suse32_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8035
Package suse32_libxml2-10.0nb2 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2015/dsa-3430
Package suse32_libxml2-10.0nb2 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8806
Package suse32_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html
Package suse32_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html
Package suse32_locale-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_locale-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_locale-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_openmotif-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_openmotif-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_openmotif-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_openssl-10.0nb5 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0590
Package suse32_openssl-10.0nb5 has a signature-spoofing vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0591
Package suse32_openssl-10.0nb5 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0789
Package suse32_openssl-10.0nb5 has a remote-denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1377
Package suse32_openssl-10.0nb5 has a remote-denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1378
Package suse32_openssl-10.0nb5 has a remote-denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1379
Package suse32_openssl-10.0nb5 has a signature-spoofing vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5077
Package suse32_openssl-10.0nb5 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1386
Package suse32_openssl-10.0nb5 has a session-hijack vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00009.html
Package suse32_openssl-10.0nb5 has a man-in-the-middle-attack vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00000.html
Package suse32_openssl-10.0nb5 has a unknown-impact vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
Package suse32_openssl-10.0nb5 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_openssl-10.0nb5 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2939
Package suse32_openssl-10.0nb5 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3864
Package suse32_openssl-10.0nb5 has a remote-security-bypass vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4180
Package suse32_openssl-10.0nb5 has a sensitive-information-disclosure vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0014
Package suse32_openssl-10.0nb5 has a sensitive-information-disclosure vulnerability, see http://support.novell.com/security/cve/CVE-2011-1945.html
Package suse32_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2011-3207.html
Package suse32_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2011-3210.html
Package suse32_openssl-10.0nb5 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2006-7250.html
Package suse32_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2012-1165.html
Package suse32_openssl-10.0nb5 has a man-in-the-middle-attack vulnerability, see http://support.novell.com/security/cve/CVE-2012-0884.html
Package suse32_openssl-10.0nb5 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/52292/
Package suse32_openssl-10.0nb5 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-6449.html
Package suse32_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-6450.html
Package suse32_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-4353.html
Package suse32_openssl-10.0nb5 has a sensitive-information-disclosure vulnerability, see http://support.novell.com/security/cve/CVE-2014-0076.html
Package suse32_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2010-5298.html
Package suse32_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0198.html
Package suse32_openssl-10.0nb5 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-0195.html
Package suse32_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0221.html
Package suse32_openssl-10.0nb5 has a man-in-the-middle-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-0224.html
Package suse32_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-3470.html
Package suse32_openssl-10.0nb5 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20140806.txt
Package suse32_openssl-10.0nb5 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20141015.txt
Package suse32_openssl-10.0nb5 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20150611.txt
Package suse32_openssl-10.0nb5 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv/20151203.txt
Package suse32_openssl-10.0nb5 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv/20151203.txt
Package suse32_resmgr-10.0nb1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_slang-10.0nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_slang-10.0nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_slang-10.0nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_x11-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_x11-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_x11-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_x11-10.0nb4 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-2062.html
Package suse32_x11-10.0nb4 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-1981.html
Package suse32_x11-10.0nb4 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-1997.html
Package suse32_x11-10.0nb4 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-2004.html
Package suse32_x11-10.0nb4 has a privilege-escalation vulnerability, see http://support.novell.com/security/cve/CVE-2013-6462.html
Package suse32_x11-10.0nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-6425.html
Package suse32_x11-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-0209.html
Package suse32_x11-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-0210.html
Package suse32_x11-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-0211.html
Package suse_alsa-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_alsa-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_alsa-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_aspell-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_aspell-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_aspell-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_base-10.0nb8 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_base-10.0nb8 has a privilege-escalation vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3856
Package suse_base-10.0nb8 has a arbitrary-code-execution vulnerability, see https://hermes.opensuse.org/messages/7712778
Package suse_base-10.0nb8 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2011-1071.html
Package suse_base-10.0nb8 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1659
Package suse_base-10.0nb8 has a remote-system-access vulnerability, see http://lists.opensuse.org/opensuse-updates/2011-07/msg00041.html
Package suse_base-10.0nb8 has a information-disclosure vulnerability, see http://secunia.com/advisories/47432/
Package suse_base-10.0nb8 has a local-system-compromise vulnerability, see http://secunia.com/advisories/47409/
Package suse_base-10.0nb8 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_base-10.0nb8 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_base-10.0nb8 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-4043.html
Package suse_base-10.0nb8 has a directory-traversal vulnerability, see http://support.novell.com/security/cve/CVE-2014-0475.html
Package suse_base-10.0nb8 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-5119.html
Package suse_base-10.0nb8 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-6040.html
Package suse_base-10.0nb8 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html
Package suse_base-10.0nb8 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0235
Package suse_base-10.0nb8 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2015-02/msg00089.html
Package suse_base-10.0nb8 has a invalid-file-descriptor-reuse vulnerability, see http://www.openwall.com/lists/oss-security/2015/01/28/20
Package suse_base-10.0nb8 has a buffer-overrun vulnerability, see http://www.openwall.com/lists/oss-security/2015/02/04/1
Package suse_base-10.0nb8 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-1781
Package suse_base-10.0nb8 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2327
Package suse_base-10.0nb8 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2328
Package suse_base-10.0nb8 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8380
Package suse_base-10.0nb8 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8382
Package suse_base-10.0nb8 has a uninitialized-memory-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8390
Package suse_base-10.0nb8 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8383
Package suse_base-10.0nb8 has a integer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8394
Package suse_base-10.0nb8 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8381
Package suse_base-10.0nb8 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8392
Package suse_base-10.0nb8 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8386
Package suse_base-10.0nb8 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8385
Package suse_base-10.0nb8 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8388
Package suse_base-10.0nb8 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8384
Package suse_base-10.0nb8 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8389
Package suse_base-10.0nb8 has a sensitive-information-disclosure vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8393
Package suse_base-10.0nb8 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8391
Package suse_base-10.0nb8 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8395
Package suse_base-10.0nb8 has a security-bypass vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8777
Package suse_base-10.0nb8 has a stack-overflow vulnerability, see https://sourceware.org/bugzilla/show_bug.cgi?id=17905
Package suse_base-10.0nb8 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2016/dsa-3481
Package suse_base-10.0nb8 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html
Package suse_base-10.0nb8 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-06/msg00030.html
Package suse_base-10.0nb8 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-5417
Package suse_base-10.0nb8 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8804
Package suse_compat-10.0nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_compat-10.0nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_compat-10.0nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_expat-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_expat-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_expat-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_expat-10.0nb2 has a denial-of-service vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4472
Package suse_fontconfig-10.0nb7 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_fontconfig-10.0nb7 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_fontconfig-10.0nb7 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_fontconfig-10.0nb7 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5384
Package suse_freetype2-10.0nb5 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0946
Package suse_freetype2-10.0nb5 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_freetype2-10.0nb5 has a buffer-overflow vulnerability, see http://secunia.com/advisories/44008/
Package suse_freetype2-10.0nb5 has a arbitrary-code-execution vulnerability, see http://secunia.com/advisories/41958/
Package suse_freetype2-10.0nb5 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2011-0226.html
Package suse_freetype2-10.0nb5 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3256
Package suse_freetype2-10.0nb5 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3439
Package suse_freetype2-10.0nb5 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_freetype2-10.0nb5 has a local-system-compromise vulnerability, see http://secunia.com/advisories/48805/
Package suse_freetype2-10.0nb5 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2012-5668.html
Package suse_freetype2-10.0nb5 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2012-5669.html
Package suse_freetype2-10.0nb5 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_glx-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_glx-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_glx-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_gtk2-10.0nb4 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1194
Package suse_gtk2-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_gtk2-10.0nb4 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2011-03/msg00019.html
Package suse_gtk2-10.0nb4 has a local-security-bypass vulnerability, see http://secunia.com/advisories/43933/
Package suse_gtk2-10.0nb4 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4352
Package suse_gtk2-10.0nb4 has a denial-of-service vulnerability, see http://secunia.com/advisories/45308/
Package suse_gtk2-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_gtk2-10.0nb4 has a remote-system-access vulnerability, see http://secunia.com/advisories/49983/
Package suse_gtk2-10.0nb4 has a multiple-vulnerabilities vulnerability, see https://secunia.com/advisories/51170/
Package suse_gtk2-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_gtk2-10.0nb4 has a arbitrary-code-execution vulnerability, see http://lists.opensuse.org/opensuse-updates/2014-12/msg00062.html
Package suse_krb5-10.0 has a unknown-impact vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
Package suse_krb5-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_krb5-10.0 has a remote-spoofing vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1323
Package suse_krb5-10.0 has a privilege-escalation vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1324
Package suse_krb5-10.0 has a remote-security-bypass vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4020
Package suse_krb5-10.0 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html
Package suse_krb5-10.0 has a arbitrary-code-execution vulnerability, see http://secunia.com/advisories/44027/
Package suse_krb5-10.0 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/46546/
Package suse_krb5-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_krb5-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_krb5-10.0 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-4341.html
Package suse_krb5-10.0 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-4342.html
Package suse_krb5-10.0 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-4343.html
Package suse_krb5-10.0 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-4344.html
Package suse_krb5-10.0 has a denial-of-service vulnerability, see http://www.secunia.com/advisories/62976
Package suse_libcups-10.0nb4 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1182
Package suse_libcups-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_libcups-10.0nb4 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/40165/
Package suse_libcups-10.0nb4 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/41706/
Package suse_libcups-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_libcups-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_libcups-10.0nb4 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-3537.html
Package suse_libcups-10.0nb4 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5029.html
Package suse_libcups-10.0nb4 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5030.html
Package suse_libcups-10.0nb4 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5031.html
Package suse_libidn-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_libjpeg-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_libjpeg-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_libjpeg-10.0nb2 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2012-2806.html
Package suse_libjpeg-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_libpng-10.0nb4 has a information-disclosure vulnerability, see http://secunia.com/advisories/35346/
Package suse_libpng-10.0nb4 has a unknown-impact vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
Package suse_libpng-10.0nb4 has a remote-system-access vulnerability, see http://secunia.com/advisories/40302/
Package suse_libpng-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_libpng-10.0nb4 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-updates/2011-08/msg00026.html
Package suse_libpng-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_libpng-10.0nb4 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3026
Package suse_libpng-10.0nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2011-3045.html
Package suse_libpng-10.0nb4 has a local-system-compromise vulnerability, see http://support.novell.com/security/cve/CVE-2011-3048.html
Package suse_libpng-10.0nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2012-3425.html
Package suse_libpng-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_libpng-10.0nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-6954.html
Package suse_libpng-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2013-7354.html
Package suse_libpng-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2013-7353.html
Package suse_libsigc++2-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_libsigc++2-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_libsigc++2-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_libtiff-10.0nb4 has a denial-of-service vulnerability, see http://secunia.com/advisories/40422/
Package suse_libtiff-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_libtiff-10.0nb4 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5022
Package suse_libtiff-10.0nb4 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3087
Package suse_libtiff-10.0nb4 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0192
Package suse_libtiff-10.0nb4 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1167
Package suse_libtiff-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_libtiff-10.0nb4 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1173
Package suse_libtiff-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2012-2088.html
Package suse_libtiff-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2012-2113.html
Package suse_libtiff-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2012-3401.html
Package suse_libtiff-10.0nb4 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4447
Package suse_libtiff-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2013-1960.html
Package suse_libtiff-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2013-1961.html
Package suse_libtiff-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_libtiff-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2013-6369.html
Package suse_libtiff-10.0nb4 has a multiple-vulnerabilities vulnerability, see http://advisories.mageia.org/MGASA-2015-0112.html
Package suse_libtiff-10.0nb4 has a arbitrary-memory-access vulnerability, see http://www.securityfocus.com/archive/1/537205
Package suse_libtiff-10.0nb4 has a heap-overflow vulnerability, see http://www.securityfocus.com/archive/1/537208
Package suse_libtiff-10.0nb4 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8781
Package suse_libtiff-10.0nb4 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8782
Package suse_libtiff-10.0nb4 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8783
Package suse_libtiff-10.0nb4 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2016/dsa-3467
Package suse_libtiff-10.0nb4 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1547
Package suse_libtiff-10.0nb4 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3186
Package suse_libxml2-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4008
Package suse_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4494
Package suse_libxml2-10.0nb2 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2011-1944.html
Package suse_libxml2-10.0nb2 has a remote-system-access vulnerability, see http://secunia.com/advisories/47572/
Package suse_libxml2-10.0nb2 has a remote-system-access vulnerability, see http://secunia.com/advisories/47647/
Package suse_libxml2-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_libxml2-10.0nb2 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2011-3102.html
Package suse_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2012-2807.html
Package suse_libxml2-10.0nb2 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5134
Package suse_libxml2-10.0nb2 has a multiple-vulnerabilities vulnerability, see http://support.novell.com/security/cve/CVE-2013-1969.html
Package suse_libxml2-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0191.html
Package suse_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0191.html
Package suse_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3660
Package suse_libxml2-10.0nb2 has a out-of-bounds-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7942
Package suse_libxml2-10.0nb2 has a out-of-bounds-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7941
Package suse_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8035
Package suse_libxml2-10.0nb2 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2015/dsa-3430
Package suse_libxml2-10.0nb2 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8806
Package suse_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html
Package suse_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html
Package suse_locale-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_locale-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_locale-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_openmotif-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_openmotif-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_openmotif-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_openssl-10.0nb5 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0590
Package suse_openssl-10.0nb5 has a signature-spoofing vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0591
Package suse_openssl-10.0nb5 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0789
Package suse_openssl-10.0nb5 has a remote-denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1377
Package suse_openssl-10.0nb5 has a remote-denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1378
Package suse_openssl-10.0nb5 has a remote-denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1379
Package suse_openssl-10.0nb5 has a signature-spoofing vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5077
Package suse_openssl-10.0nb5 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1386
Package suse_openssl-10.0nb5 has a session-hijack vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00009.html
Package suse_openssl-10.0nb5 has a man-in-the-middle-attack vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00000.html
Package suse_openssl-10.0nb5 has a unknown-impact vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
Package suse_openssl-10.0nb5 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_openssl-10.0nb5 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2939
Package suse_openssl-10.0nb5 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3864
Package suse_openssl-10.0nb5 has a remote-security-bypass vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4180
Package suse_openssl-10.0nb5 has a sensitive-information-disclosure vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0014
Package suse_openssl-10.0nb5 has a sensitive-information-disclosure vulnerability, see http://support.novell.com/security/cve/CVE-2011-1945.html
Package suse_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2011-3207.html
Package suse_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2011-3210.html
Package suse_openssl-10.0nb5 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2006-7250.html
Package suse_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2012-1165.html
Package suse_openssl-10.0nb5 has a man-in-the-middle-attack vulnerability, see http://support.novell.com/security/cve/CVE-2012-0884.html
Package suse_openssl-10.0nb5 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/52292/
Package suse_openssl-10.0nb5 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-6449.html
Package suse_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-6450.html
Package suse_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-4353.html
Package suse_openssl-10.0nb5 has a sensitive-information-disclosure vulnerability, see http://support.novell.com/security/cve/CVE-2014-0076.html
Package suse_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2010-5298.html
Package suse_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0198.html
Package suse_openssl-10.0nb5 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-0195.html
Package suse_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0221.html
Package suse_openssl-10.0nb5 has a man-in-the-middle-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-0224.html
Package suse_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-3470.html
Package suse_openssl-10.0nb5 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20140806.txt
Package suse_openssl-10.0nb5 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20141015.txt
Package suse_openssl-10.0nb5 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20150611.txt
Package suse_openssl-10.0nb5 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv/20151203.txt
Package suse_openssl-10.0nb5 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv/20151203.txt
Package suse_resmgr-10.0nb1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_slang-10.0nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_slang-10.0nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_slang-10.0nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_x11-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_x11-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_x11-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_x11-10.0nb4 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-2062.html
Package suse_x11-10.0nb4 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-1981.html
Package suse_x11-10.0nb4 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-1997.html
Package suse_x11-10.0nb4 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-2004.html
Package suse_x11-10.0nb4 has a privilege-escalation vulnerability, see http://support.novell.com/security/cve/CVE-2013-6462.html
Package suse_x11-10.0nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-6425.html
Package suse_x11-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-0209.html
Package suse_x11-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-0210.html
Package suse_x11-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-0211.html
Package suse32_alsa-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_aspell-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_base-12.1nb7 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_base-12.1nb7 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-4043.html
Package suse32_base-12.1nb7 has a directory-traversal vulnerability, see http://support.novell.com/security/cve/CVE-2014-0475.html
Package suse32_base-12.1nb7 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-5119.html
Package suse32_base-12.1nb7 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-6040.html
Package suse32_base-12.1nb7 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html
Package suse32_base-12.1nb7 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0235
Package suse32_base-12.1nb7 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2015-02/msg00089.html
Package suse32_base-12.1nb7 has a invalid-file-descriptor-reuse vulnerability, see http://www.openwall.com/lists/oss-security/2015/01/28/20
Package suse32_base-12.1nb7 has a buffer-overrun vulnerability, see http://www.openwall.com/lists/oss-security/2015/02/04/1
Package suse32_base-12.1nb7 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-1781
Package suse32_base-12.1nb7 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2327
Package suse32_base-12.1nb7 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2328
Package suse32_base-12.1nb7 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8380
Package suse32_base-12.1nb7 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8382
Package suse32_base-12.1nb7 has a uninitialized-memory-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8390
Package suse32_base-12.1nb7 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8383
Package suse32_base-12.1nb7 has a integer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8394
Package suse32_base-12.1nb7 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8381
Package suse32_base-12.1nb7 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8392
Package suse32_base-12.1nb7 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8386
Package suse32_base-12.1nb7 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8385
Package suse32_base-12.1nb7 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8388
Package suse32_base-12.1nb7 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8384
Package suse32_base-12.1nb7 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8389
Package suse32_base-12.1nb7 has a sensitive-information-disclosure vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8393
Package suse32_base-12.1nb7 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8391
Package suse32_base-12.1nb7 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8395
Package suse32_base-12.1nb7 has a security-bypass vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8777
Package suse32_base-12.1nb7 has a stack-overflow vulnerability, see https://sourceware.org/bugzilla/show_bug.cgi?id=17905
Package suse32_base-12.1nb7 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2016/dsa-3481
Package suse32_base-12.1nb7 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html
Package suse32_base-12.1nb7 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-06/msg00030.html
Package suse32_base-12.1nb7 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-5417
Package suse32_base-12.1nb7 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8804
Package suse32_compat-12.1nb1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_expat-12.1nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_expat-12.1nb2 has a denial-of-service vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4472
Package suse32_fontconfig-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_fontconfig-12.1 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5384
Package suse32_freetype2-12.1nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_glx-12.1nb1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_gtk2-12.1nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_gtk2-12.1nb4 has a arbitrary-code-execution vulnerability, see http://lists.opensuse.org/opensuse-updates/2014-12/msg00062.html
Package suse32_krb5-12.1nb1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_krb5-12.1nb1 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-4341.html
Package suse32_krb5-12.1nb1 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-4342.html
Package suse32_krb5-12.1nb1 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-4343.html
Package suse32_krb5-12.1nb1 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-4344.html
Package suse32_krb5-12.1nb1 has a denial-of-service vulnerability, see http://www.secunia.com/advisories/62976
Package suse32_libcups-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_libcups-12.1 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-3537.html
Package suse32_libcups-12.1 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5029.html
Package suse32_libcups-12.1 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5030.html
Package suse32_libcups-12.1 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5031.html
Package suse32_libcurl-12.1nb1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_libcurl-12.1nb1 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-2174.html
Package suse32_libcurl-12.1nb1 has a privilege-escalation vulnerability, see http://support.novell.com/security/cve/CVE-2014-0138.html
Package suse32_libcurl-12.1nb1 has a ssl-certificate-spoofing vulnerability, see http://support.novell.com/security/cve/CVE-2014-0139.html
Package suse32_libcurl-12.1nb1 has a weak-ssl-authentication vulnerability, see https://curl.haxx.se/docs/adv_20160803A.html
Package suse32_libcurl-12.1nb1 has a weak-ssl-authentication vulnerability, see https://curl.haxx.se/docs/adv_20160803B.html
Package suse32_libcurl-12.1nb1 has a use-after-free vulnerability, see https://curl.haxx.se/docs/adv_20160803C.html
Package suse32_libdrm-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_libjpeg-12.1nb1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_libpng-12.1nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_libpng-12.1nb3 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-6954.html
Package suse32_libpng-12.1nb3 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2013-7354.html
Package suse32_libpng-12.1nb3 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2013-7353.html
Package suse32_libsigc++2-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_libtiff-12.1nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_libtiff-12.1nb3 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2013-6369.html
Package suse32_libtiff-12.1nb3 has a multiple-vulnerabilities vulnerability, see http://advisories.mageia.org/MGASA-2015-0112.html
Package suse32_libtiff-12.1nb3 has a multiple-vulnerabilities vulnerability, see http://advisories.mageia.org/MGASA-2015-0112.html
Package suse32_libtiff-12.1nb3 has a arbitrary-memory-access vulnerability, see http://www.securityfocus.com/archive/1/537205
Package suse32_libtiff-12.1nb3 has a heap-overflow vulnerability, see http://www.securityfocus.com/archive/1/537208
Package suse32_libtiff-12.1nb3 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8781
Package suse32_libtiff-12.1nb3 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8782
Package suse32_libtiff-12.1nb3 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8783
Package suse32_libtiff-12.1nb3 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2016/dsa-3467
Package suse32_libtiff-12.1nb3 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1547
Package suse32_libtiff-12.1nb3 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3186
Package suse32_libxml2-12.1nb6 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_libxml2-12.1nb6 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0191.html
Package suse32_libxml2-12.1nb6 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0191.html
Package suse32_libxml2-12.1nb6 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3660
Package suse32_libxml2-12.1nb6 has a out-of-bounds-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7942
Package suse32_libxml2-12.1nb6 has a out-of-bounds-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7941
Package suse32_libxml2-12.1nb6 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8035
Package suse32_libxml2-12.1nb6 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2015/dsa-3430
Package suse32_libxml2-12.1nb6 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8806
Package suse32_libxml2-12.1nb6 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html
Package suse32_libxml2-12.1nb6 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html
Package suse32_locale-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_openmotif-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_openssl-12.1nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_openssl-12.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-6449.html
Package suse32_openssl-12.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-6450.html
Package suse32_openssl-12.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-4353.html
Package suse32_openssl-12.1nb4 has a sensitive-information-disclosure vulnerability, see http://support.novell.com/security/cve/CVE-2014-0076.html
Package suse32_openssl-12.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2010-5298.html
Package suse32_openssl-12.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0198.html
Package suse32_openssl-12.1nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-0195.html
Package suse32_openssl-12.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0221.html
Package suse32_openssl-12.1nb4 has a man-in-the-middle-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-0224.html
Package suse32_openssl-12.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-3470.html
Package suse32_openssl-12.1nb4 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20140806.txt
Package suse32_openssl-12.1nb4 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20141015.txt
Package suse32_openssl-12.1nb4 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20150319.txt
Package suse32_openssl-12.1nb4 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20150611.txt
Package suse32_openssl-12.1nb4 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv/20151203.txt
Package suse32_openssl-12.1nb4 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv/20151203.txt
Package suse32_qt4-12.1nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_qt4-12.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-4549.html
Package suse32_qt4-12.1nb4 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
Package suse32_qt4-12.1nb4 has a multiple-vulnerabilities vulnerability, see http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
Package suse32_slang-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_sqlite3-12.1 has a multiple-vulnerabilities vulnerability, see http://lcamtuf.blogspot.dk/2015/04/finding-bugs-in-sqlite-easy-way.html
Package suse32_sqlite3-12.1 has a data-leak vulnerability, see https://www.korelogic.com/Resources/Advisories/KL-001-2016-003.txt
Package suse32_x11-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse32_x11-12.1 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-2062.html
Package suse32_x11-12.1 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-1981.html
Package suse32_x11-12.1 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-1997.html
Package suse32_x11-12.1 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-2004.html
Package suse32_x11-12.1 has a privilege-escalation vulnerability, see http://support.novell.com/security/cve/CVE-2013-6462.html
Package suse32_x11-12.1 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-6425.html
Package suse32_x11-12.1 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-0209.html
Package suse32_x11-12.1 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-0210.html
Package suse32_x11-12.1 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-0211.html
Package suse_alsa-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_aspell-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_base-12.1nb7 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_base-12.1nb7 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-4043.html
Package suse_base-12.1nb7 has a directory-traversal vulnerability, see http://support.novell.com/security/cve/CVE-2014-0475.html
Package suse_base-12.1nb7 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-5119.html
Package suse_base-12.1nb7 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-6040.html
Package suse_base-12.1nb7 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html
Package suse_base-12.1nb7 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0235
Package suse_base-12.1nb7 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2015-02/msg00089.html
Package suse_base-12.1nb7 has a invalid-file-descriptor-reuse vulnerability, see http://www.openwall.com/lists/oss-security/2015/01/28/20
Package suse_base-12.1nb7 has a buffer-overrun vulnerability, see http://www.openwall.com/lists/oss-security/2015/02/04/1
Package suse_base-12.1nb7 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-1781
Package suse_base-12.1nb7 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2327
Package suse_base-12.1nb7 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2328
Package suse_base-12.1nb7 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8380
Package suse_base-12.1nb7 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8382
Package suse_base-12.1nb7 has a uninitialized-memory-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8390
Package suse_base-12.1nb7 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8383
Package suse_base-12.1nb7 has a integer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8394
Package suse_base-12.1nb7 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8381
Package suse_base-12.1nb7 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8392
Package suse_base-12.1nb7 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8386
Package suse_base-12.1nb7 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8385
Package suse_base-12.1nb7 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8388
Package suse_base-12.1nb7 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8384
Package suse_base-12.1nb7 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8389
Package suse_base-12.1nb7 has a sensitive-information-disclosure vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8393
Package suse_base-12.1nb7 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8391
Package suse_base-12.1nb7 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8395
Package suse_base-12.1nb7 has a security-bypass vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8777
Package suse_base-12.1nb7 has a stack-overflow vulnerability, see https://sourceware.org/bugzilla/show_bug.cgi?id=17905
Package suse_base-12.1nb7 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2016/dsa-3481
Package suse_base-12.1nb7 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html
Package suse_base-12.1nb7 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-06/msg00030.html
Package suse_base-12.1nb7 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-5417
Package suse_base-12.1nb7 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8804
Package suse_compat-12.1nb1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_expat-12.1nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_expat-12.1nb2 has a denial-of-service vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4472
Package suse_fontconfig-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_fontconfig-12.1 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5384
Package suse_freetype2-12.1nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_glx-12.1nb1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_gtk2-12.1nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_gtk2-12.1nb4 has a arbitrary-code-execution vulnerability, see http://lists.opensuse.org/opensuse-updates/2014-12/msg00062.html
Package suse_krb5-12.1nb1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_krb5-12.1nb1 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-4341.html
Package suse_krb5-12.1nb1 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-4342.html
Package suse_krb5-12.1nb1 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-4343.html
Package suse_krb5-12.1nb1 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-4344.html
Package suse_krb5-12.1nb1 has a denial-of-service vulnerability, see http://www.secunia.com/advisories/62976
Package suse_libcups-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_libcups-12.1 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-3537.html
Package suse_libcups-12.1 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5029.html
Package suse_libcups-12.1 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5030.html
Package suse_libcups-12.1 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5031.html
Package suse_libcurl-12.1nb1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_libcurl-12.1nb1 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-2174.html
Package suse_libcurl-12.1nb1 has a privilege-escalation vulnerability, see http://support.novell.com/security/cve/CVE-2014-0138.html
Package suse_libcurl-12.1nb1 has a ssl-certificate-spoofing vulnerability, see http://support.novell.com/security/cve/CVE-2014-0139.html
Package suse_libcurl-12.1nb1 has a weak-ssl-authentication vulnerability, see https://curl.haxx.se/docs/adv_20160803A.html
Package suse_libcurl-12.1nb1 has a weak-ssl-authentication vulnerability, see https://curl.haxx.se/docs/adv_20160803B.html
Package suse_libcurl-12.1nb1 has a use-after-free vulnerability, see https://curl.haxx.se/docs/adv_20160803C.html
Package suse_libdrm-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_libjpeg-12.1nb1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_libpng-12.1nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_libpng-12.1nb3 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-6954.html
Package suse_libpng-12.1nb3 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2013-7354.html
Package suse_libpng-12.1nb3 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2013-7353.html
Package suse_libsigc++2-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_libtiff-12.1nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_libtiff-12.1nb3 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2013-6369.html
Package suse_libtiff-12.1nb3 has a multiple-vulnerabilities vulnerability, see http://advisories.mageia.org/MGASA-2015-0112.html
Package suse_libtiff-12.1nb3 has a multiple-vulnerabilities vulnerability, see http://advisories.mageia.org/MGASA-2015-0112.html
Package suse_libtiff-12.1nb3 has a arbitrary-memory-access vulnerability, see http://www.securityfocus.com/archive/1/537205
Package suse_libtiff-12.1nb3 has a heap-overflow vulnerability, see http://www.securityfocus.com/archive/1/537208
Package suse_libtiff-12.1nb3 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8781
Package suse_libtiff-12.1nb3 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8782
Package suse_libtiff-12.1nb3 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8783
Package suse_libtiff-12.1nb3 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2016/dsa-3467
Package suse_libtiff-12.1nb3 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1547
Package suse_libtiff-12.1nb3 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3186
Package suse_libxml2-12.1nb6 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_libxml2-12.1nb6 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0191.html
Package suse_libxml2-12.1nb6 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0191.html
Package suse_libxml2-12.1nb6 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3660
Package suse_libxml2-12.1nb6 has a out-of-bounds-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7942
Package suse_libxml2-12.1nb6 has a out-of-bounds-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7941
Package suse_libxml2-12.1nb6 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8035
Package suse_libxml2-12.1nb6 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2015/dsa-3430
Package suse_libxml2-12.1nb6 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8806
Package suse_libxml2-12.1nb6 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html
Package suse_libxml2-12.1nb6 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html
Package suse_locale-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_openmotif-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_openssl-12.1nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_openssl-12.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-6449.html
Package suse_openssl-12.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-6450.html
Package suse_openssl-12.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-4353.html
Package suse_openssl-12.1nb4 has a sensitive-information-disclosure vulnerability, see http://support.novell.com/security/cve/CVE-2014-0076.html
Package suse_openssl-12.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2010-5298.html
Package suse_openssl-12.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0198.html
Package suse_openssl-12.1nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-0195.html
Package suse_openssl-12.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0221.html
Package suse_openssl-12.1nb4 has a man-in-the-middle-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-0224.html
Package suse_openssl-12.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-3470.html
Package suse_openssl-12.1nb4 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20140806.txt
Package suse_openssl-12.1nb4 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20141015.txt
Package suse_openssl-12.1nb4 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20150319.txt
Package suse_openssl-12.1nb4 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20150611.txt
Package suse_openssl-12.1nb4 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv/20151203.txt
Package suse_openssl-12.1nb4 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv/20151203.txt
Package suse_qt4-12.1nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_qt4-12.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-4549.html
Package suse_qt4-12.1nb4 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
Package suse_qt4-12.1nb4 has a multiple-vulnerabilities vulnerability, see http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
Package suse_slang-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_sqlite3-12.1 has a multiple-vulnerabilities vulnerability, see http://lcamtuf.blogspot.dk/2015/04/finding-bugs-in-sqlite-easy-way.html
Package suse_sqlite3-12.1 has a data-leak vulnerability, see https://www.korelogic.com/Resources/Advisories/KL-001-2016-003.txt
Package suse_x11-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse_x11-12.1 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-2062.html
Package suse_x11-12.1 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-1981.html
Package suse_x11-12.1 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-1997.html
Package suse_x11-12.1 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-2004.html
Package suse_x11-12.1 has a privilege-escalation vulnerability, see http://support.novell.com/security/cve/CVE-2013-6462.html
Package suse_x11-12.1 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-6425.html
Package suse_x11-12.1 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-0209.html
Package suse_x11-12.1 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-0210.html
Package suse_x11-12.1 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-0211.html
Package suse32_base-13.1nb13 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-1781
Package suse32_base-13.1nb13 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2327
Package suse32_base-13.1nb13 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2328
Package suse32_base-13.1nb13 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8380
Package suse32_base-13.1nb13 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8382
Package suse32_base-13.1nb13 has a uninitialized-memory-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8390
Package suse32_base-13.1nb13 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8383
Package suse32_base-13.1nb13 has a integer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8394
Package suse32_base-13.1nb13 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8381
Package suse32_base-13.1nb13 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8392
Package suse32_base-13.1nb13 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8386
Package suse32_base-13.1nb13 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8385
Package suse32_base-13.1nb13 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8388
Package suse32_base-13.1nb13 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8384
Package suse32_base-13.1nb13 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8389
Package suse32_base-13.1nb13 has a sensitive-information-disclosure vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8393
Package suse32_base-13.1nb13 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8391
Package suse32_base-13.1nb13 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8395
Package suse32_base-13.1nb13 has a stack-overflow vulnerability, see https://sourceware.org/bugzilla/show_bug.cgi?id=17905
Package suse32_base-13.1nb13 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html
Package suse32_base-13.1nb13 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-06/msg00030.html
Package suse32_base-13.1nb13 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-5417
Package suse32_base-13.1nb13 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8804
Package suse32_expat-13.1 has a denial-of-service vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4472
Package suse32_fontconfig-13.1nb1 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5384
Package suse32_krb5-13.1nb4 has a denial-of-service vulnerability, see http://www.secunia.com/advisories/62976
Package suse32_libcups-13.1nb1 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-3537.html
Package suse32_libcups-13.1nb1 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5029.html
Package suse32_libcups-13.1nb1 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5030.html
Package suse32_libcups-13.1nb1 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5031.html
Package suse32_libcurl-13.1nb7 has a weak-ssl-authentication vulnerability, see https://curl.haxx.se/docs/adv_20160803A.html
Package suse32_libcurl-13.1nb7 has a weak-ssl-authentication vulnerability, see https://curl.haxx.se/docs/adv_20160803B.html
Package suse32_libcurl-13.1nb7 has a use-after-free vulnerability, see https://curl.haxx.se/docs/adv_20160803C.html
Package suse32_libdbus-13.1nb7 has a denial-of-service vulnerability, see https://bugs.freedesktop.org/show_bug.cgi?id=85105
Package suse32_libsndfile-13.1nb3 has a stack-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7585
Package suse32_libsndfile-13.1nb3 has a stack-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7586
Package suse32_libsndfile-13.1nb3 has a stack-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7741
Package suse32_libsndfile-13.1nb3 has a stack-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7742
Package suse32_libsndfile-13.1nb3 has a buffer-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8365
Package suse32_libsndfile-13.1nb3 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8362
Package suse32_libsndfile-13.1nb3 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8363
Package suse32_libsndfile-13.1nb3 has a buffer-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8361
Package suse32_libsndfile-13.1nb3 has a out-of-bounds-read vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8365
Package suse32_libsndfile-13.1nb3 has a buffer-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8361
Package suse32_libsndfile-13.1nb3 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8362
Package suse32_libsndfile-13.1nb3 has a out-of-bounds-read vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8363
Package suse32_libtiff-13.1nb3 has a multiple-vulnerabilities vulnerability, see http://advisories.mageia.org/MGASA-2015-0112.html
Package suse32_libtiff-13.1nb3 has a multiple-vulnerabilities vulnerability, see http://advisories.mageia.org/MGASA-2015-0112.html
Package suse32_libtiff-13.1nb3 has a multiple-vulnerabilities vulnerability, see http://advisories.mageia.org/MGASA-2015-0112.html
Package suse32_libtiff-13.1nb3 has a arbitrary-memory-access vulnerability, see http://www.securityfocus.com/archive/1/537205
Package suse32_libtiff-13.1nb3 has a heap-overflow vulnerability, see http://www.securityfocus.com/archive/1/537208
Package suse32_libtiff-13.1nb3 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8781
Package suse32_libtiff-13.1nb3 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8782
Package suse32_libtiff-13.1nb3 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8783
Package suse32_libtiff-13.1nb3 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2016/dsa-3467
Package suse32_libtiff-13.1nb3 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1547
Package suse32_libtiff-13.1nb3 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3186
Package suse32_libxml2-13.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0191.html
Package suse32_libxml2-13.1nb4 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3660
Package suse32_libxml2-13.1nb4 has a out-of-bounds-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7942
Package suse32_libxml2-13.1nb4 has a out-of-bounds-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7941
Package suse32_libxml2-13.1nb4 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8035
Package suse32_libxml2-13.1nb4 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2015/dsa-3430
Package suse32_libxml2-13.1nb4 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8806
Package suse32_libxml2-13.1nb4 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html
Package suse32_libxml2-13.1nb4 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html
Package suse32_mozilla-nspr-13.1nb5 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1951
Package suse32_openssl-13.1nb14 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20150319.txt
Package suse32_openssl-13.1nb14 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20150319.txt
Package suse32_openssl-13.1nb14 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20150611.txt
Package suse32_openssl-13.1nb14 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv/20151203.txt
Package suse32_openssl-13.1nb14 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv/20151203.txt
Package suse32_qt4-13.1nb4 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
Package suse32_qt4-13.1nb4 has a multiple-vulnerabilities vulnerability, see http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
Package suse32_sqlite3-13.1 has a multiple-vulnerabilities vulnerability, see http://lcamtuf.blogspot.dk/2015/04/finding-bugs-in-sqlite-easy-way.html
Package suse32_sqlite3-13.1 has a data-leak vulnerability, see https://www.korelogic.com/Resources/Advisories/KL-001-2016-003.txt
Package suse_base-13.1nb13 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-1781
Package suse_base-13.1nb13 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2327
Package suse_base-13.1nb13 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2328
Package suse_base-13.1nb13 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8380
Package suse_base-13.1nb13 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8382
Package suse_base-13.1nb13 has a uninitialized-memory-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8390
Package suse_base-13.1nb13 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8383
Package suse_base-13.1nb13 has a integer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8394
Package suse_base-13.1nb13 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8381
Package suse_base-13.1nb13 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8392
Package suse_base-13.1nb13 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8386
Package suse_base-13.1nb13 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8385
Package suse_base-13.1nb13 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8388
Package suse_base-13.1nb13 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8384
Package suse_base-13.1nb13 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8389
Package suse_base-13.1nb13 has a sensitive-information-disclosure vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8393
Package suse_base-13.1nb13 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8391
Package suse_base-13.1nb13 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8395
Package suse_base-13.1nb13 has a stack-overflow vulnerability, see https://sourceware.org/bugzilla/show_bug.cgi?id=17905
Package suse_base-13.1nb13 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html
Package suse_base-13.1nb13 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-06/msg00030.html
Package suse_base-13.1nb13 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-5417
Package suse_base-13.1nb13 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8804
Package suse_expat-13.1 has a denial-of-service vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4472
Package suse_fontconfig-13.1nb1 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5384
Package suse_krb5-13.1nb4 has a denial-of-service vulnerability, see http://www.secunia.com/advisories/62976
Package suse_libcups-13.1nb1 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-3537.html
Package suse_libcups-13.1nb1 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5029.html
Package suse_libcups-13.1nb1 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5030.html
Package suse_libcups-13.1nb1 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5031.html
Package suse_libcurl-13.1nb7 has a weak-ssl-authentication vulnerability, see https://curl.haxx.se/docs/adv_20160803A.html
Package suse_libcurl-13.1nb7 has a weak-ssl-authentication vulnerability, see https://curl.haxx.se/docs/adv_20160803B.html
Package suse_libcurl-13.1nb7 has a use-after-free vulnerability, see https://curl.haxx.se/docs/adv_20160803C.html
Package suse_libdbus-13.1nb7 has a denial-of-service vulnerability, see https://bugs.freedesktop.org/show_bug.cgi?id=85105
Package suse_libsndfile-13.1nb3 has a stack-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7585
Package suse_libsndfile-13.1nb3 has a stack-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7586
Package suse_libsndfile-13.1nb3 has a stack-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7741
Package suse_libsndfile-13.1nb3 has a stack-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7742
Package suse_libsndfile-13.1nb3 has a buffer-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8365
Package suse_libsndfile-13.1nb3 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8362
Package suse_libsndfile-13.1nb3 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8363
Package suse_libsndfile-13.1nb3 has a buffer-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8361
Package suse_libsndfile-13.1nb3 has a out-of-bounds-read vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8365
Package suse_libsndfile-13.1nb3 has a buffer-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8361
Package suse_libsndfile-13.1nb3 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8362
Package suse_libsndfile-13.1nb3 has a out-of-bounds-read vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8363
Package suse_libtiff-13.1nb3 has a multiple-vulnerabilities vulnerability, see http://advisories.mageia.org/MGASA-2015-0112.html
Package suse_libtiff-13.1nb3 has a multiple-vulnerabilities vulnerability, see http://advisories.mageia.org/MGASA-2015-0112.html
Package suse_libtiff-13.1nb3 has a multiple-vulnerabilities vulnerability, see http://advisories.mageia.org/MGASA-2015-0112.html
Package suse_libtiff-13.1nb3 has a arbitrary-memory-access vulnerability, see http://www.securityfocus.com/archive/1/537205
Package suse_libtiff-13.1nb3 has a heap-overflow vulnerability, see http://www.securityfocus.com/archive/1/537208
Package suse_libtiff-13.1nb3 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8781
Package suse_libtiff-13.1nb3 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8782
Package suse_libtiff-13.1nb3 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8783
Package suse_libtiff-13.1nb3 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2016/dsa-3467
Package suse_libtiff-13.1nb3 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1547
Package suse_libtiff-13.1nb3 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3186
Package suse_libxml2-13.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0191.html
Package suse_libxml2-13.1nb4 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3660
Package suse_libxml2-13.1nb4 has a out-of-bounds-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7942
Package suse_libxml2-13.1nb4 has a out-of-bounds-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7941
Package suse_libxml2-13.1nb4 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8035
Package suse_libxml2-13.1nb4 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2015/dsa-3430
Package suse_libxml2-13.1nb4 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8806
Package suse_libxml2-13.1nb4 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html
Package suse_libxml2-13.1nb4 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html
Package suse_mozilla-nspr-13.1nb5 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1951
Package suse_openssl-13.1nb14 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20150319.txt
Package suse_openssl-13.1nb14 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20150319.txt
Package suse_openssl-13.1nb14 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20150611.txt
Package suse_openssl-13.1nb14 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv/20151203.txt
Package suse_openssl-13.1nb14 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv/20151203.txt
Package suse_qt4-13.1nb4 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
Package suse_qt4-13.1nb4 has a multiple-vulnerabilities vulnerability, see http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
Package suse_sqlite3-13.1 has a multiple-vulnerabilities vulnerability, see http://lcamtuf.blogspot.dk/2015/04/finding-bugs-in-sqlite-easy-way.html
Package suse_sqlite3-13.1 has a data-leak vulnerability, see https://www.korelogic.com/Resources/Advisories/KL-001-2016-003.txt
Package fuse-2.9.3 has a denial-of-service vulnerability, see http://secunia.com/advisories/42961/
Package fuse-2.9.3 has a privilege-escalation vulnerability, see https://www.debian.org/security/2015/dsa-3266
Package fuse-2.9.3 has a arbitrary-file-overwrite vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-3202
Package fuse-encfs-1.2.0.2nb5 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/41158/
Package fuse-ntfs-3g-2015.3.14 has a privilege-escalation vulnerability, see https://www.debian.org/security/2015/dsa-3268
Package libntfs-2015.3.14 has a privilege-escalation vulnerability, see https://www.debian.org/security/2015/dsa-3268
Package openafs-1.6.17nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0159
Package openafs-1.6.17nb2 has a information-disclosure vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9772
Package openafs-1.7.11nb1 has a sensitive-information-exposure vulnerability, see http://www.openafs.org/pages/security/OPENAFS-SA-2013-004.txt
Package openafs-1.7.11nb1 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0159
Package openafs-1.7.11nb1 has a information-leak vulnerability, see https://www.openafs.org/pages/security/OPENAFS-SA-2015-007.txt
Package squashfs-4.3nb2 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-4646
Package magento-1.9.2.2nb1 has a multiple-vulnerabilities vulnerability, see http://blog.checkpoint.com/2015/04/20/analyzing-magento-vulnerability/
Package magento-1.9.2.2nb1 has a input-validation vulnerability, see http://www.vulnerability-lab.com/get_content.php?id=1570
Package magento-1.9.2.2nb1 has a cross-site-request-forgeries vulnerability, see http://www.vulnerability-lab.com/get_content.php?id=1643
Package magento-1.9.2.2nb1 has a input-validation vulnerability, see http://www.vulnerability-lab.com/get_content.php?id=1636
Package magento-1.9.2.2nb1 has a validation-bypass vulnerability, see http://www.vulnerability-lab.com/get_content.php?id=1203
Package magento-1.9.2.2nb1 has a man-in-the-middle vulnerability, see https://cxsecurity.com/issue/WLB-2016010129
Package magento-1.9.2.2nb1 has a weak-authentication vulnerability, see https://magento.com/security/patches/supee-7405
Package magento-1.9.2.2nb1 has a php-object-injection vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4010
Package magento-1.9.2.2nb1 has a multiple-vulnerabilities vulnerability, see http://www.defensecode.com/advisories/DC-2017-04-003_Magento_Arbitrary_File_Upload.pdf
Package crossfire-server-1.11.0nb25 has a privilege-escalation vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4908
Package flightgear-2.8.0nb35 has a buffer-overflow vulnerability, see http://secunia.com/advisories/48780/
Package flightgear-2.8.0nb35 has a arbitrary-file-overwrite vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9956
Package gnuchess-6.2.3 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8972
Package ioquake3-1.36nb2 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2764
Package ioquake3-1.36nb2 has a arbitrary-file-overwrite vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3345
Package ioquake3-1.36nb2 has a arbitrary-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6903
Package simgear-2.8.0nb35 has a denial-of-service vulnerability, see http://secunia.com/advisories/44434/
Package ufoai-2.2.1nb18 has a remote-system-access vulnerability, see http://secunia.com/advisories/40321/
Package gpsdrive-1.31nb25 has a privilege-escalation vulnerability, see http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496436
Package mapserver-5.6.8nb29 has a arbitrary-sql-injection vulnerability, see http://secunia.com/advisories/56155/
Package mapserver-5.6.8nb29 has a stack-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5522
Package GraphicsMagick-1.3.25nb2 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7996
Package GraphicsMagick-1.3.25nb2 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7997
Package GraphicsMagick-1.3.25nb2 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7800
Package GraphicsMagick-1.3.25nb2 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-8682
Package GraphicsMagick-1.3.25nb2 has a unspecified vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-8683
Package GraphicsMagick-1.3.25nb2 has a unspecified vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-8684
Package GraphicsMagick-1.3.25nb2 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9830
Package GraphicsMagick-1.3.25nb2 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6335
Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7941
Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7942
Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7943
Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8343
Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8344
Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8345
Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8346
Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8347
Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8348
Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8349
Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8350
Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8351
Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8352
Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8353
Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8354
Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8355
Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8356
Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8357
Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8765
Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8830
Package ImageMagick6-6.9.7.9nb1 has a out-of-bounds-write vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5509
Package ImageMagick6-6.9.7.9nb1 has a unspecified vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5506
Package ImageMagick6-6.9.7.9nb1 has a unspecified vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10144
Package ImageMagick6-6.9.7.9nb1 has a unspecified vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10145
Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8343
Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8344
Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8345
Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8346
Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8347
Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8348
Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8349
Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8350
Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8351
Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8352
Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8353
Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8354
Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8355
Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8356
Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8357
Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8765
Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8830
Package autotrace-0.31.1nb36 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7392
Package blender-2.77anb6 has a multiple-vulnerabilities vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5105
Package cairo-1.14.8 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9082
Package darktable-2.0.7nb5 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2126
Package dcraw-9.27.0 has a denial-of-service vulnerability, see http://www.ocert.org/advisories/ocert-2015-006.html
Package djvulibre-tools-3.5.27 has a insecure-temp-file vulnerability, see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775193
Package exiv2-0.25 has a heap-overflow vulnerability, see http://dev.exiv2.org/issues/960
Package exiv2-0.25 has a buffer-overflow vulnerability, see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=781123
Package freetype-1.5 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10244
Package freetype2-2.8 has a out-of-bounds-write vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7857
Package freetype2-2.8 has a out-of-bounds-write vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7858
Package freetype2-2.8 has a out-of-bounds-write vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7864
Package freetype2-2.8 has a out-of-bounds-write vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8105
Package freetype2-2.8 has a out-of-bounds-write vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8287
Package gdk-pixbuf2-2.36.6 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6311
Package gdk-pixbuf2-2.36.6 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6312
Package gdk-pixbuf2-2.36.6 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6313
Package gdk-pixbuf2-2.36.6 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6314
Package giflib-util-5.1.4 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3977
Package gimp-ufraw-0.22nb4 has a denial-of-service vulnerability, see http://www.ocert.org/advisories/ocert-2015-006.html
Package graphite2-1.3.7 has a out-of-bounds-write vulnerability, see https://www.mozilla.org/en-US/security/advisories/mfsa2017-10/
Package jasper-2.0.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5498
Package jasper-2.0.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5499
Package jasper-2.0.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5500
Package jasper-2.0.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5501
Package jasper-2.0.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5502
Package jasper-2.0.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5503
Package jasper-2.0.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5504
Package jasper-2.0.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5505
Package jasper-2.0.12 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6850
Package jasper-2.0.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6851
Package jbig2dec-0.13 has a integer-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9601
Package jbig2dec-0.13 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7885
Package jbig2dec-0.13 has a out-of-bounds-write vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7975
Package jbig2dec-0.13 has a out-of-bounds-write vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7976
Package jpeg-9b has a multiple-vulnerabilities vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-3616
Package kdegraphics-3.5.10nb46 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0945
Package kdegraphics-3.5.10nb46 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1709
Package kdegraphics-3.5.10nb46 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4035
Package kdegraphics-3.5.10nb46 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4035
Package lib3ds-1.2.0nb7 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0280
Package libbpg-0.9.2 has a out-of-bounds-write vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8710
Package libkdcraw-15.08.3nb4 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2126
Package libkdcraw-0.1.9nb28 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2126
Package libraw-0.13.8 has a remote-system-access vulnerability, see http://secunia.com/advisories/53547/
Package libraw-0.13.8 has a denial-of-service vulnerability, see http://www.ocert.org/advisories/ocert-2015-006.html
Package libwmf-0.2.8.4nb16 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2016-9011
Package opencv-3.2.0 has a arbitrary-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1516
Package opencv-3.2.0 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1517
Package opencv-2.4.11nb6 has a arbitrary-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1516
Package opencv-2.4.11nb6 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1517
Package openjpeg-2.1.2 has a null-pointer-bug vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9114
Package openjpeg-2.1.2 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9117
Package openjpeg-2.1.2 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9115
Package openjpeg-2.1.2 has a buffer-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9118
Package openjpeg-2.1.2 has a null-pointer-bug vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9113
Package openjpeg-2.1.2 has a null-pointer-bug vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9116
Package openjpeg-2.1.2 has a floating-point-exception vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9112
Package potrace-1.14 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7263
Package potrace-1.14 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7263
Package sane-backends-1.0.25nb4 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6318
Package shotwell-0.22.0nb12 has a man-in-the-middle vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1000033
Package tiff-4.0.7nb11 has a arbitrary-memory-access vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-7554
Package tiff-4.0.7nb11 has a remote-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-8331
Package tiff-4.0.7nb11 has a buffer-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10095
Package tiff-4.0.7nb11 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2016-10269
Package chicken-4.11.0 has a buffer-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6830
Package chicken-4.11.0 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6831
Package chicken-4.11.0 has a buffer-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-6949
Package chicken-4.11.0 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9954
Package gcc3-3.3.6 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package gcc3-c++-3.3.6 has a denial-of-service vulnerability, see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=61601
Package gcc3-c++-3.3.6 has a memory-corruption vulnerability, see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=61582
Package gcc34-3.4.6nb8 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package gcc34-3.4.6nb8 has a denial-of-service vulnerability, see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=61601
Package gcc34-3.4.6nb8 has a memory-corruption vulnerability, see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=61582
Package gcc44-4.4.7nb7 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package gcc44-4.4.7nb7 has a denial-of-service vulnerability, see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=61601
Package gcc44-4.4.7nb7 has a memory-corruption vulnerability, see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=61582
Package gcc48-4.8.5 has a insufficiently-random-numbers vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5276
Package gcc48-libs-4.8.5nb1 has a insufficiently-random-numbers vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5276
Package guile-1.8.8nb8 has a insecure-file-permissions vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-8605
Package openjdk7-1.7.80nb7 has a multiple-vulnerabilities vulnerability, see http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html#AppendixJAVA
Package openjdk7-1.7.80nb7 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package oracle-jdk8-8.0.121 has a multiple-vulnerabilities vulnerability, see http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA
Package oracle-jre8-8.0.121 has a multiple-vulnerabilities vulnerability, see http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA
Package ruby21-2.1.10 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package ruby21-base-2.1.10 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package sun-jdk6-6.0.45nb2 has a arbitrary-code-execution vulnerability, see http://secunia.com/advisories/45173/
Package sun-jdk6-6.0.45nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package sun-jdk6-6.0.45nb2 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/53846/
Package sun-jdk6-6.0.45nb2 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/55315/
Package sun-jdk6-6.0.45nb2 has a unspecified vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5772
Package sun-jdk6-6.0.45nb2 has a unspecified vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802
Package sun-jdk6-6.0.45nb2 has a multiple-vulnerabilities vulnerability, see http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html#AppendixJAVA
Package sun-jdk6-6.0.45nb2 has a multiple-vulnerabilities vulnerability, see http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixJAVA
Package sun-jdk6-6.0.45nb2 has a multiple-vulnerabilities vulnerability, see http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html#AppendixJAVA
Package sun-jdk7-7.0.80nb1 has a multiple-vulnerabilities vulnerability, see http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html#AppendixJAVA
Package sun-jdk7-7.0.80nb1 has a multiple-vulnerabilities vulnerability, see http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html#AppendixJAVA
Package sun-jdk7-7.0.80nb1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package sun-jre6-6.0.45nb1 has a arbitrary-code-execution vulnerability, see http://secunia.com/advisories/45173/
Package sun-jre6-6.0.45nb1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package sun-jre6-6.0.45nb1 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/53846/
Package sun-jre6-6.0.45nb1 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/55315/
Package sun-jre6-6.0.45nb1 has a unspecified vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5772
Package sun-jre6-6.0.45nb1 has a unspecified vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802
Package sun-jre6-6.0.45nb1 has a multiple-vulnerabilities vulnerability, see http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html#AppendixJAVA
Package sun-jre6-6.0.45nb1 has a multiple-vulnerabilities vulnerability, see http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixJAVA
Package sun-jre6-6.0.45nb1 has a multiple-vulnerabilities vulnerability, see http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html#AppendixJAVA
Package sun-jre7-7.0.80 has a multiple-vulnerabilities vulnerability, see http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html#AppendixJAVA
Package sun-jre7-7.0.80 has a multiple-vulnerabilities vulnerability, see http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html#AppendixJAVA
Package sun-jre7-7.0.80 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package claws-mail-3.14.1nb1 has a buffer-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8708
Package cyrus-imapd-2.2.13p1nb15 has a remote-data-manipulation vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1926
Package cyrus-imapd-2.2.13p1nb15 has a buffer-overflow vulnerability, see http://secunia.com/advisories/45938/
Package cyrus-imapd-2.2.13p1nb15 has a security-bypass vulnerability, see http://secunia.com/advisories/46093/
Package cyrus-imapd-2.3.18nb22 has a unspecified vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8077
Package cyrus-imapd-2.3.18nb22 has a sensitive-information-disclosure vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8076
Package cyrus-imapd-2.3.18nb22 has a unspecified vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8078
Package cyrus-imapd-2.4.18nb1 has a unspecified vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8077
Package cyrus-imapd-2.4.18nb1 has a unspecified vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8078
Package deliver-2.1.14nb3 has a insecure-lock-files vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0439
Package deliver-2.1.14nb3 has a insecure-lock-files vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1123
Package dovecot-1.2.17nb24 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package evolution-data-server-2.32.3nb46 has a remote-information-exposure vulnerability, see http://secunia.com/advisories/45941/
Package exim-3.36nb17 has a privilege-escalation vulnerability, see http://secunia.com/advisories/40019/
Package exim-3.36nb17 has a privilege-escalation vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4345
Package exim-3.36nb17 has a local-privilege-escalation vulnerability, see http://secunia.com/advisories/43101/
Package exim-3.36nb17 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1407
Package exim-3.36nb17 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1764
Package exim-3.36nb17 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5671
Package exim-3.36nb17 has a input-validation vulnerability, see https://lists.exim.org/lurker/message/20140722.152452.d6c019e8.en.html
Package exim-3.36nb17 has a privilege-escalation vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1531
Package exim-3.36nb17 has a information-leak vulnerability, see https://exim.org/static/doc/CVE-2016-9963.txt
Package imp-4.3.11nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package imp-4.3.11nb2 has a cross-site-scripting vulnerability, see http://lists.horde.org/archives/announce/2015/001089.html
Package ingo-1.2.6nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package libytnef-1.5 has a null-dereference vulnerability, see http://www.securityfocus.com/archive/1/540133
Package mailman-2.1.20 has a cross-site-request-forgery vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6893
Package p5-Email-Address-1.908nb1 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7686
Package sqwebmail-5.5.3nb7 has a cross-site-scripting vulnerability, see http://secunia.com/advisories/15119/
Package thunderbird24-24.8.1nb5 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package thunderbird31-31.7.0nb6 has a multiple-vulnerabilities vulnerability, see https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/#firefoxesr31.8
Package thunderbird31-31.7.0nb6 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package turba-2.3.6nb7 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package wmmail-0.64nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package R-3.3.3nb1 has a buffer-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-8714
Package gnumeric-1.8.4nb44 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6836
Package gnumeric-1.10.17nb27 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6836
Package suse-10.0nb5 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse-10.0nb5 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse-10.0nb5 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package suse-12.1nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package bsdiff-4.3 has a arbitrary-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9862
Package calibre-1.48.0nb26 has a information-disclosure vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10187
Package dpkg-1.18.23nb1 has a directory-traversal vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8283
Package kdeutils-3.5.10nb37 has a directory-traversal vulnerability, see http://secunia.com/advisories/45378/
Package koffice-1.6.3nb77 has a arbitrary-code-execution vulnerability, see http://secunia.com/advisories/40966/
Package koffice-1.6.3nb77 has a buffer-overflow vulnerability, see http://secunia.com/advisories/50199/
Package libreoffice5-bin-5.1.0 has a memory-corruption vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0794
Package libreoffice5-bin-5.1.0 has a memory-corruption vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0795
Package php56-orangehrm-2.7 has a multiple-vulnerabilities vulnerability, see http://www.securityfocus.com/archive/1/535245
Package ruby23-bundler-1.14.6 has a code-injection vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7954
Package udfclient-0.8 has a buffer-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8305
Package adobe-flash-plugin-11.2.202.644nb1 has a multiple-vulnerabilities vulnerability, see https://helpx.adobe.com/security/products/flash-player/apsb16-39.html
Package adobe-flash-plugin-11.2.202.644nb1 has a multiple-vulnerabilities vulnerability, see https://helpx.adobe.com/security/products/flash-player/apsb17-02.html
Package avidemux-2.5.4nb34 has a multiple-vulnerabilities vulnerability, see http://advisories.mageia.org/MGASA-2015-0233.html
Package ffmpeg010-20150312.0.10.16nb5 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-5361
Package ffmpeg1-1.2.12nb7 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5479
Package ffmpeg1-1.2.12nb7 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6881
Package ffmpeg1-1.2.12nb7 has a multiple-vulnerabilities vulnerability, see http://www.openwall.com/lists/oss-security/2016/10/08/1
Package ffmpeg2-2.8.11nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6671
Package ffmpeg2-2.8.11nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6881
Package ffmpeg2-2.8.11nb1 has a multiple-vulnerabilities vulnerability, see http://www.openwall.com/lists/oss-security/2016/10/08/1
Package ffmpeg2-2.8.11nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-8595
Package gnash-0.8.10nb52 has a remote-system-access vulnerability, see http://secunia.com/advisories/47183/
Package gst-plugins0.10-bad-0.10.23nb6 has a arbitrary-code-execution vulnerability, see https://www.debian.org/security/2015/dsa-3225
Package gst-plugins0.10-good-0.10.31nb4 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2016/dsa-3724
Package libquicktime-1.2.4nb13 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2399
Package ming-0.4.5nb6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2016-9266
Package ming-0.4.5nb6 has a unspecified vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2016-9265
Package ming-0.4.5nb6 has a out-of-bounds-read vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2016-9264
Package ming-0.4.5nb6 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7578
Package pitivi-0.15.2nb10 has a arbitrary-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0855
Package vlc-2.2.4nb6 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/62720
Package vlc-2.0.9nb32 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/62720
Package vlc-2.0.9nb32 has a cross-site-scripting vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9743
Package vlc-2.0.9nb32 has a arbitrary-code-execution vulnerability, see http://www.ocert.org/advisories/ocert-2015-009.html
Package vlc-2.0.9nb32 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3941
Package vlc-2.0.9nb32 has a arbitrary-code-execution vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5108
Package win32-codecs-071007 has a arbitrary-code-execution vulnerability, see http://secunia.com/advisories/40936/
Package win32-codecs-071007 has a remote-system-access vulnerability, see http://secunia.com/advisories/40934/
Package Radicale-1.1.1nb2 has a brute-force-attack vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8342
Package apollo-1.4 has a clickjacking vulnerability, see http://activemq.apache.org/security-advisories.data/CVE-2016-0734-announcement.txt
Package apollo-1.4 has a cross-sites-scripting vulnerability, see http://activemq.apache.org/security-advisories.data/CVE-2016-0782-announcement.txt
Package apollo-1.4 has a arbitrary-code-execution vulnerability, see http://activemq.apache.org/security-advisories.data/CVE-2015-5254-announcement.txt
Package argus-3.7nb3 has a stack-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8333
Package argus-3.7nb3 has a stack-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8335
Package avahi-0.6.32nb6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-6519
Package cacti-0.8.8hnb3 has a remote-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-3659
Package cacti-0.8.8hnb3 has a sql-injection vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3659
Package cacti-0.8.8hnb3 has a sql-injection vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3172
Package cacti-0.8.8hnb3 has a security-bypass vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2313
Package cacti-spine-0.8.8hnb1 has a cross-site-scripting vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5588
Package cacti-spine-0.8.8hnb1 has a sql-injection vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5589
Package cacti-spine-0.8.8hnb1 has a cross-site-scripting vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2326
Package cacti-spine-0.8.8hnb1 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2328
Package cacti-spine-0.8.8hnb1 has a sql-injection vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2708
Package cacti-spine-0.8.8hnb1 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2709
Package chrony-1.31.1nb4 has a validation-bypass vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1567
Package citrix_ica-10.6.115659nb2 has a arbitrary-code-execution vulnerability, see http://secunia.com/advisories/40808/
Package corkscrew-2.0 has a buffer-overflow vulnerability, see http://people.freebsd.org/~niels/issues/corkscrew-20100821.txt
Package echoping-6.0.2nb9 has a remote-system-access vulnerability, see http://secunia.com/advisories/42619/
Package ettercap-0.6.bnb34 has a remote-system-access vulnerability, see http://secunia.com/advisories/51731/
Package ettercap-0.6.bnb34 has a multiple-vulnerabilities vulnerability, see https://www.obrela.com/home/security-labs/advisories/osi-advisory-osi-1402/
Package ettercap-0.6.bnb34 has a out-of-bounds-read vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6430
Package ettercap-0.6.bnb34 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8366
Package ettercap-NG-0.7.3nb14 has a remote-system-access vulnerability, see http://secunia.com/advisories/51731/
Package ettercap-NG-0.7.3nb14 has a out-of-bounds-read vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6430
Package ettercap-NG-0.7.3nb14 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8366
Package freeradius-1.1.8nb14 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4966
Package freeradius-1.1.8nb14 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3547
Package freeradius-1.1.8nb14 has a denial-of-service vulnerability, see http://secunia.com/advisories/56956/
Package freeradius-1.1.8nb14 has a invalid-crl-checks vulnerability, see http://www.ocert.org/advisories/ocert-2015-008.html
Package freerdp-1.0.2nb22 has a unknown vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0791
Package freerdp-1.0.2nb22 has a null-pointer-bug vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4118
Package freerdp-1.0.2nb22 has a null-pointer-bug vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4119
Package gnugk-2.2.0nb7 has a unknown vulnerability, see http://secunia.com/advisories/50343/
Package hesiod-3.0.2 has a weak-suid-check vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10151
Package hesiod-3.0.2 has a privilege-elevation vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2016-10152
Package icinga-base-1.9.4nb8 has a buffer-overflow vulnerability, see https://www.icinga.org/2014/02/11/bugfix-releases-1-10-3-1-9-5-1-8-6/
Package icinga-base-1.9.4nb8 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2386
Package icinga-base-1.9.4nb8 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1878
Package icinga-base-1.9.4nb8 has a cross-site-scripting vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7107
Package icinga-base-1.9.4nb8 has a stack-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2386
Package libgdata-0.6.6nb21 has a man-in-the-middle-attack vulnerability, see http://secunia.com/advisories/48315/
Package libupnp-1.6.19 has a remote-security-bypass vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6255
Package libupnp-1.6.19 has a remote-code-execution vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8863
Package libupnp-1.6.19 has a arbitrary-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-8863
Package mDNSResponder-258.14nb2 has a denial-of-service vulnerability, see https://www.kb.cert.org/vuls/id/143335
Package nagios-base-4.0.8nb9 has a remote-code-execution vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9565
Package nagios-base-4.0.8nb9 has a privilege-escalation vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9566
Package nagios-base-4.0.8nb9 has a cross-site-scripting vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2016-6209
Package net6-1.3.14nb3 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/46605/
Package ntop-4.1.0nb27 has a cross-site-scripting vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4165
Package ntopng-2.4nb8 has a cross-site-request-forgery vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5473
Package openslp-1.2.1nb9 has a null-dereference vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2016-4912
Package pppd-2.4.3nb2 has a privilege-escalation vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3158
Package pppd-2.4.3nb2 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-3310
Package quagga-1.0.20160315nb1 has a denial-of-service vulnerability, see http://secunia.com/advisories/49401/
Package quagga-1.0.20160315nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4049
Package quagga-1.0.20160315nb1 has a buffer-overflow vulnerability, see https://lists.quagga.net/pipermail/quagga-users/2016-October/014478.html
Package quagga-1.0.20160315nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5495
Package rtmpdump-2.4nb3 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8270
Package rtmpdump-2.4nb3 has a arbitrary-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8271
Package rtmpdump-2.4nb3 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8272
Package samba-3.6.25nb4 has a privilege-escalation vulnerability, see https://www.samba.org/samba/security/CVE-2015-5299.html
Package samba-3.6.25nb4 has a man-in-the-middle vulnerability, see https://www.samba.org/samba/security/CVE-2015-5296.html
Package samba-3.6.25nb4 has a symlink-attack vulnerability, see https://www.samba.org/samba/security/CVE-2015-5252.html
Package samba-3.6.25nb4 has a security-bypass vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-7560
Package samba-3.6.25nb4 has a man-in-the-middle-attack vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2118
Package samba-3.6.25nb4 has a man-in-the-middle-attack vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2110
Package samba-3.6.25nb4 has a denial-of-service vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-5370
Package samba-3.6.25nb4 has a man-in-the-middle-attack vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2113
Package samba-3.6.25nb4 has a man-in-the-middle-attack vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2114
Package samba-3.6.25nb4 has a man-in-the-middle-attack vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2115
Package samba-3.6.25nb4 has a sensitive-information-disclosure vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2111
Package samba-3.6.25nb4 has a man-in-the-middle-attack vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2112
Package samba-3.6.25nb4 has a information-disclosure vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-2619
Package slurm-0.3.3nb2 has a remote-information-modification vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10030
Package tcpreplay-3.4.4 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6160
Package tcpreplay-3.4.4 has a buffer-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6429
Package tigervnc-1.7.1nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-8241
Package tigervnc-1.7.1nb1 has a memory-corruption vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7392
Package tigervnc-1.7.1nb1 has a arbitrary-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7393
Package tigervnc-1.7.1nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7394
Package tigervnc-1.7.1nb1 has a integer-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7395
Package tigervnc-1.7.1nb1 has a memory-corruption vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7396
Package tsclient-0.132nb80 has a remote-system-access vulnerability, see http://secunia.com/advisories/43120/
Package userppp-001107nb2 has a privilege-escalation vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1215
Package vino-2.32.2nb26 has a information-disclosure vulnerability, see http://secunia.com/advisories/50527/
Package vino-2.32.2nb26 has a denial-of-service vulnerability, see http://secunia.com/advisories/54995/
Package vino-2.32.2nb26 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5745
Package wget-1.19.1nb1 has a http-header-injection vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-6508
Package slurm-2.6.4nb9 has a remote-information-modification vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10030
Package acroread7-7.0.9nb4 has a remote-user-shell vulnerability, see http://www.securityfocus.com/bid/22753
Package acroread7-7.0.9nb4 has a remote-stack-smash vulnerability, see http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=657
Package acroread7-7.0.9nb4 has a remote-user-shell vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5663
Package acroread7-7.0.9nb4 has a remote-user-shell vulnerability, see http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=655
Package acroread7-7.0.9nb4 has a multiple-unspecified vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0655
Package acroread7-7.0.9nb4 has a remote-printing vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0667
Package acroread7-7.0.9nb4 has a remote-user-shell vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0726
Package acroread7-7.0.9nb4 has a temporary-files-race vulnerability, see http://support.novell.com/techcenter/psdb/d8c48c63359fc807624182696d3d149c.html
Package acroread7-7.0.9nb4 has a arbitrary-code-execution vulnerability, see http://www.adobe.com/go/kb403079
Package acroread7-7.0.9nb4 has a arbitrary-file-reading vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1199
Package acroread7-7.0.9nb4 has a arbitrary-code-execution vulnerability, see http://www.adobe.com/support/security/bulletins/apsb08-15.html
Package acroread7-7.0.9nb4 has a arbitrary-code-execution vulnerability, see http://www.adobe.com/support/security/advisories/apsa09-01.html
Package acroread7-7.0.9nb4 has a arbitrary-code-execution vulnerability, see http://www.adobe.com/support/security/bulletins/apsb09-06.html
Package acroread7-7.0.9nb4 has a arbitrary-code-execution vulnerability, see http://www.adobe.com/support/security/bulletins/apsb09-07.html
Package acroread7-7.0.9nb4 has a arbitrary-code-execution vulnerability, see http://www.adobe.com/support/security/bulletins/apsb09-15.html
Package acroread7-7.0.9nb4 has a arbitrary-code-execution vulnerability, see http://www.adobe.com/support/security/advisories/apsa09-07.html
Package acroread7-7.0.9nb4 has a multiple-vulnerabilities vulnerability, see http://www.adobe.com/support/security/bulletins/apsb10-02.html
Package acroread7-7.0.9nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package acroread8-8.1.7nb4 has a arbitrary-code-execution vulnerability, see http://www.adobe.com/support/security/advisories/apsa09-07.html
Package acroread8-8.1.7nb4 has a multiple-vulnerabilities vulnerability, see http://www.adobe.com/support/security/bulletins/apsb10-02.html
Package acroread8-8.1.7nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package acroread8-8.1.7nb4 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2862
Package acroread8-8.1.7nb4 has a arbitrary-code-execution vulnerability, see http://secunia.com/advisories/42095/
Package acroread9-9.5.5nb3 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/50290/
Package acroread9-9.5.5nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package cups-1.5.4nb16 has a symlink-attack vulnerability, see http://www.cups.org/str.php?L4450
Package cups-1.5.4nb16 has a symlink-attack vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5029
Package cups-1.5.4nb16 has a symlink-attack vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5030
Package cups-1.5.4nb16 has a sensitive-information-disclosure vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5031
Package cups-1.5.4nb16 has a symlink-attack vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3537
Package cups-1.5.4nb16 has a symlink-attack vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5029
Package cups-1.5.4nb16 has a symlink-attack vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5030
Package cups-1.5.4nb16 has a sensitive-information-disclosure vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5031
Package cups-1.5.4nb16 has a buffer-overflow vulnerability, see https://www.cups.org/str.php?L4551
Package cups-1.5.4nb16 has a privilege-escalation vulnerability, see http://www.cups.org/str.php?L4609
Package foomatic-filters-3.0.2nb13 has a command-injection vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2697
Package foomatic-filters-4.0.17nb9 has a input-validation vulnerability, see https://www.debian.org/security/2015/dsa-3419
Package foomatic-filters-4.0.17nb9 has a remote-code-execution vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8560
Package ghostscript-agpl-9.21 has a use-after-free vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6196
Package ghostscript-agpl-9.21 has a use-after-free vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10217
Package ghostscript-agpl-9.21 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10218
Package ghostscript-agpl-9.21 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10219
Package ghostscript-agpl-9.21 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10220
Package ghostscript-agpl-9.21 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5951
Package ghostscript-agpl-9.21 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10317
Package ghostscript-agpl-9.21 has a out-of-bounds-write vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7948
Package ghostscript-agpl-9.21 has a remote-code-execution vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8291
Package ghostscript-gpl-9.06nb12 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10317
Package ghostscript-gpl-9.06nb12 has a out-of-bounds-write vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7948
Package ghostscript-gpl-9.06nb12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-8602
Package ghostscript-gpl-9.06nb12 has a remote-code-execution vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8291
Package podofo-0.9.5 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6840
Package podofo-0.9.5 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6841
Package podofo-0.9.5 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6842
Package podofo-0.9.5 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6843
Package podofo-0.9.5 has a buffer-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6844
Package podofo-0.9.5 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6845
Package podofo-0.9.5 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6846
Package podofo-0.9.5 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6847
Package podofo-0.9.5 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6848
Package podofo-0.9.5 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6849
Package podofo-0.9.5 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7378
Package podofo-0.9.5 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7379
Package podofo-0.9.5 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7380
Package podofo-0.9.5 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7381
Package podofo-0.9.5 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7382
Package podofo-0.9.5 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7383
Package podofo-0.9.5 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7994
Package podofo-0.9.5 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-8053
Package podofo-0.9.5 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-8054
Package podofo-0.9.5 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8787
Package podofo-0.9.5 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8378
Package podofo-0.9.5 has a null-dereference vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7994
Package podofo-0.9.5 has a infinite-loop vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8054
Package podofo-0.9.5 has a infinite-loop vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8053
Package poppler-0.16.7nb8 has a multiple-vulnerabilities vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1788
Package poppler-0.16.7nb8 has a multiple-vulnerabilities vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1789
Package poppler-0.16.7nb8 has a multiple-vulnerabilities vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1790
Package poppler-0.16.7nb8 has a denial-of-service vulnerability, see http://secunia.com/advisories/56268/
Package poppler-0.16.7nb8 has a denial-of-service vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8868
Package base-1.4.3.1nb12 has a sql-injection vulnerability, see http://www.securityfocus.com/bid/51874/discuss
Package clamav-0.99.2nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1405
Package cryptopp-5.6.2nb3 has a sensitive-information-exposure vulnerability, see http://www.mail-archive.com/cryptopp-users@xxxxxxxxxxxxxxxx/msg07835.html
Package cryptopp-5.6.2nb3 has a sensitive-information-disclosure vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7420
Package cryptopp-5.6.2nb3 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9939
Package dropbear-2013.62 has a command-injection vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3116
Package dropbear-2013.62 has a arbitrary-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7406
Package dropbear-2013.62 has a arbitrary-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7407
Package dropbear-2013.62 has a arbitrary-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7408
Package dropbear-2013.62 has a sensitive-information-disclosure vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7409
Package fwbuilder-5.1.0.3599nb2 has a privilege-escalation vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4956
Package gnutls-3.5.9 has a out-of-bounds-write vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7869
Package libprelude-0.9.24.1nb14 has a privilege-escalation vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3736
Package libtomcrypt-1.17nb2 has a signature-forgery vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6129
Package mbedtls-2.2.1nb1 has a remote-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-2784
Package mbedtls-1.3.17 has a remote-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-2784
Package mcrypt-2.6.8nb3 has a arbitrary-code-execution vulnerability, see http://secunia.com/advisories/50507/
Package openvas-server-2.0.0nb11 has a local-privilege-escalation vulnerability, see http://secunia.com/advisories/45836/
Package openvas-server-2.0.0nb11 has a remote-system-access vulnerability, see http://secunia.com/advisories/49128/
Package policykit-0.9nb20 has a integer-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-4625
Package policykit-0.9nb20 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-3218
Package policykit-0.9nb20 has a privilege-escalation vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-3255
Package policykit-0.9nb20 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-3256
Package prelude-manager-0.9.15nb10 has a sensitive-information-exposure vulnerability, see http://secunia.com/advisories/34987/
Package py27-gnupg-0.3.2nb2 has a arbitrary-command-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7323
Package py27-gnupg-0.3.2nb2 has a arbitrary-command-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1927
Package py27-gnupg-0.3.2nb2 has a arbitrary-command-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1928
Package py27-gnupg-0.3.2nb2 has a arbitrary-command-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1929
Package py27-prewikka-0.9.17.1nb1 has a sensitive-information-exposure vulnerability, see http://secunia.com/advisories/34928/
Package yara-3.4.0 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10210
Package yara-3.4.0 has a use-after-free vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10211
Package yara-3.4.0 has a out-of-bounds-read vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5923
Package yara-3.4.0 has a use-after-free vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5924
Package zoneminder-1.28.1nb12 has a authentication-bypass vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10140
Package zoneminder-1.28.1nb12 has a multiple-vulnerabilities vulnerability, see http://www.securityfocus.com/archive/1/540089
Package zoneminder-1.28.1nb12 has a multiple-vulnerabilities vulnerability, see http://www.securityfocus.com/archive/1/540093
Package zoneminder-1.28.1nb12 has a cross-site-scripting vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7203
Package bash-2.05.2.13 has a privilege-elevation vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7543
Package bash-2.05.2.13 has a security-bypass vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9401
Package bash-2.05.2.13 has a privilege-elevation vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-5932
Package lshell-0.9.16 has a arbitrary-command-execution vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2016-6903
Package ansible-1.9.4nb2 has a insecure-temp-files vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-3096
Package ansible-1.9.4nb2 has a arbitrary-file-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3096
Package grub2-2.00nb5 has a authentication-bypass vulnerability, see http://hmarco.org/bugs/CVE-2015-8370-Grub2-authentication-bypass.html
Package kdirstat-2.4.4nb31 has a arbitrary-command-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2527
Package kdirstat-2.4.4nb31 has a arbitrary-command-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2528
Package libvirt-1.2.9nb16 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3445
Package libvirt-1.2.9nb16 has a denial-of-service vulnerability, see http://secunia.com/advisories/53440/
Package libvirt-1.2.9nb16 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/54169/
Package libvirt-1.2.9nb16 has a privilege-edescalation vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4153
Package libvirt-1.2.9nb16 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4154
Package libvirt-1.2.9nb16 has a denial-of-service vulnerability, see http://secunia.com/advisories/54400/
Package libvirt-1.2.9nb16 has a denial-of-service vulnerability, see http://secunia.com/advisories/55202/
Package libvirt-1.2.9nb16 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/54786/
Package libvirt-1.2.9nb16 has a denial-of-service vulnerability, see http://secunia.com/advisories/56245/
Package libvirt-1.2.9nb16 has a denial-of-service vulnerability, see http://secunia.com/advisories/56186/
Package libvirt-1.2.9nb16 has a denial-of-service vulnerability, see http://secunia.com/advisories/56321/
Package libvirt-1.2.9nb16 has a sensitive-information-disclosure vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7823
Package libvirt-1.2.9nb16 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8131
Package libvirt-1.2.9nb16 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8135
Package libvirt-1.2.9nb16 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8136
Package libvirt-1.2.9nb16 has a security-bypass vulnerability, see http://security.libvirt.org/2015/0001.html
Package libvirt-1.2.9nb16 has a arbitrary-file-access vulnerability, see http://security.libvirt.org/2015/0004.html
Package libvirt-1.2.9nb16 has a denial-of-service vulnerability, see http://www.openwall.com/lists/oss-security/2016/05/24/5
Package libvirt-1.2.9nb16 has a authentication-bypass vulnerability, see http://security.libvirt.org/2016/0001.html
Package ruby23-mcollective-2.1.1 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2788
Package munin-server-1.3.2nb10 has a arbitrary-file-overwrite vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6188
Package nautilus-2.32.2.1nb25 has a denial-of-service vulnerability, see http://seclists.org/bugtraq/2015/Dec/11
Package open-vm-tools-10.1.5nb1 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/43798/
Package ruby21-puppet-3.8.7 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package ruby21-chef-12.0.3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package sysinfo-3.5.1 has a local-privilege-escalation vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6516
Package xenkernel42-4.2.5nb15 has a denial-of-service vulnerability, see http://xenbits.xen.org/xsa/advisory-150.html
Package xenkernel42-4.2.5nb15 has a denial-of-service vulnerability, see http://xenbits.xen.org/xsa/advisory-153.html
Package xenkernel42-4.2.5nb15 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package xenkernel42-4.2.5nb15 has a information-leak vulnerability, see http://xenbits.xen.org/xsa/advisory-200.html
Package xenkernel42-4.2.5nb15 has a denial-of-service vulnerability, see http://xenbits.xen.org/xsa/advisory-202.html
Package xenkernel42-4.2.5nb15 has a privilege-elevation vulnerability, see http://xenbits.xen.org/xsa/advisory-204.html
Package xenkernel42-4.2.5nb15 has a privilege-elevation vulnerability, see http://xenbits.xen.org/xsa/advisory-192.html
Package xenkernel42-4.2.5nb15 has a denial-of-service vulnerability, see http://xenbits.xen.org/xsa/advisory-193.html
Package xenkernel42-4.2.5nb15 has a arbitrary-code-execution vulnerability, see http://xenbits.xen.org/xsa/advisory-195.html
Package xenkernel42-4.2.5nb15 has a privilege-elevation vulnerability, see http://xenbits.xen.org/xsa/advisory-197.html
Package xenkernel42-4.2.5nb15 has a privilege-elevation vulnerability, see http://xenbits.xen.org/xsa/advisory-191.html
Package xentools42-4.2.5nb21 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package xentools42-4.2.5nb21 has a arbitrary-file-overwrite vulnerability, see http://xenbits.xen.org/xsa/advisory-198.html
Package xentools46-4.6.5nb2 has a denial-of-service vulnerability, see http://xenbits.xen.org/xsa/advisory-175.html
Package xentools46-4.6.5nb2 has a denial-of-service vulnerability, see http://xenbits.xen.org/xsa/advisory-184.html
Package xfsprogs-2.7.3nb3 has a information-disclosure vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2150
Package jansson-2.7 has a denial-of-service vulnerability, see http://secunia.com/advisories/56777/
Package jansson-2.7 has a stack-overflow vulnerability, see https://github.com/akheron/jansson/issues/282
Package libplist-1.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5209
Package libplist-1.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5545
Package libplist-1.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5834
Package libplist-1.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5835
Package libplist-1.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5836
Package libplist-1.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6435
Package libplist-1.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6436
Package libplist-1.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6437
Package libplist-1.12 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6438
Package libplist-1.12 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6439
Package libplist-1.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6440
Package libplist-1.12 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7982
Package libxml2-2.9.4nb2 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5969
Package libxslt-1.1.29nb1 has a insufficiently-random-numbers vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2015-9019
Package p5-Data-FormValidator-4.86 has a sensitive-information-exposure vulnerability, see http://secunia.com/advisories/44832/
Package p5-XML-Twig-3.52 has a xml-external-entity vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9180
Package py27-docx-0.8.5 has a xml-external-entity vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-5851
Package py27-openpyxl-2.1.2 has a xml-external-entity vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5992
Package raptor-1.4.21nb14 has a sensitive-information-exposure vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0037
Package yaml-cpp-0.5.3 has a memory-corruption vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-5950
Package kronolith-2.3.6nb3 has a cross-site-scripting vulnerability, see http://secunia.com/advisories/51233/
Package kronolith-2.3.6nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package libical-1.0nb3 has a multiple-vulnerabilities vulnerability, see http://www.openwall.com/lists/oss-security/2016/06/25/4
Package libical-1.0nb3 has a heap-buffer-overflow vulnerability, see http://www.securityfocus.com/bid/94948/info
Package SOGo-2.3.20nb2 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6188
Package SOGo-2.3.20nb2 has a code-injection vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6191
Package amaya-11.3.1nb35 has a system-access vulnerability, see http://secunia.com/advisories/32848/
Package amaya-11.3.1nb35 has a arbitrary-code-execution vulnerability, see http://secunia.com/advisories/34531/
Package ap24-auth-mellon-0.12.0nb5 has a cross-site-session-transfer vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6807
Package apache-tomcat-5.5.35 has a cross-site-request-forgery vulnerability, see http://secunia.com/advisories/39261/
Package apache-tomcat-5.5.35 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package apache-tomcat-5.5.35 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/51138/
Package apache-tomcat-5.5.35 has a access-bypass vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5388
Package apache-tomcat-5.5.35 has a access-bypass vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5388
Package apache-tomcat-5.5.35 has a directory-traversal vulnerability, see http://www.defensecode.com/advisories/DC-2017-03-001_DefenseCode_ThunderScan_SAST_Apache_Tomcat_Security_Advisory.pdf
Package apache-tomcat-6.0.45 has a access-bypass vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5388
Package apache-tomcat-6.0.45 has a access-bypass vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5388
Package apache-tomcat-6.0.45 has a information-leak vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8745
Package apache-tomcat-6.0.45 has a denial-of-service vulnerability, see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851304
Package apache-tomcat-6.0.45 has a remote-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-8735
Package apache-tomcat-6.0.45 has a information-disclosure vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5647
Package apache-tomcat-6.0.45 has a directory-traversal vulnerability, see http://www.defensecode.com/advisories/DC-2017-03-001_DefenseCode_ThunderScan_SAST_Apache_Tomcat_Security_Advisory.pdf
Package apache-tomcat-7.0.77 has a access-bypass vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5388
Package apache-tomcat-7.0.77 has a access-bypass vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5388
Package apache-tomcat-7.0.77 has a denial-of-service vulnerability, see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851304
Package apache-tomcat-7.0.77 has a directory-traversal vulnerability, see http://www.defensecode.com/advisories/DC-2017-03-001_DefenseCode_ThunderScan_SAST_Apache_Tomcat_Security_Advisory.pdf
Package apache-tomcat-8.0.43 has a directory-traversal vulnerability, see http://www.defensecode.com/advisories/DC-2017-03-001_DefenseCode_ThunderScan_SAST_Apache_Tomcat_Security_Advisory.pdf
Package apache-tomcat-8.5.13 has a directory-traversal vulnerability, see http://www.defensecode.com/advisories/DC-2017-03-001_DefenseCode_ThunderScan_SAST_Apache_Tomcat_Security_Advisory.pdf
Package asp2php-0.77.3 has a remote-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1261
Package c-icap-0.4.4 has a denial-of-service vulnerability, see http://www.gentoo.org/security/en/glsa/glsa-201409-07.xml
Package firefox10-10.0.12nb28 has a multiple-vulnerabilities vulnerability, see http://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html
Package firefox10-10.0.12nb28 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package firefox17-17.0.11nb19 has a multiple-vulnerabilities vulnerability, see http://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html#firefox24.1
Package firefox17-17.0.11nb19 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package firefox24-24.8.1nb18 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package firefox31-31.8.0nb14 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package firefox36-3.6.28nb29 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package firefox36-3.6.28nb29 has a multiple-vulnerabilities vulnerability, see https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/
Package gallery-1.5.10nb9 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package gallery-1.5.10nb9 has a cross-site-scripting vulnerability, see http://secunia.com/advisories/53664/
Package gallery-1.5.10nb9 has a unknown vulnerability, see http://secunia.com/advisories/53964/
Package gallery-2.3.2nb1 has a cross-site-scripting vulnerability, see http://secunia.com/advisories/53664/
Package gallery-2.3.2nb1 has a unknown vulnerability, see http://secunia.com/advisories/53964/
Package ganglia-webfrontend-3.7.2nb1 has a cross-site-scripting vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0275
Package ganglia-webfrontend-3.7.2nb1 has a cross-site-scripting vulnerability, see http://secunia.com/advisories/52673/
Package ganglia-webfrontend-3.7.2nb1 has a cross-site-scripting vulnerability, see http://secunia.com/advisories/55854/
Package hiawatha-0.1nb5 has a multiple-vulnerabilities vulnerability, see http://www.hiawatha-webserver.org/changelog
Package horde-3.3.13nb4 has a cross-site-scripting vulnerability, see http://secunia.com/advisories/51233/
Package horde-3.3.13nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package horde-3.3.13nb4 has a remote-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1691
Package horde-3.3.13nb4 has a cross-site-scripting vulnerability, see http://lists.horde.org/archives/announce/2015/001088.html
Package horde-3.3.13nb4 has a cross-site-scripting vulnerability, see http://lists.horde.org/archives/announce/2016/001140.html
Package icedtea-web-1.5.2nb9 has a security-bypass vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-5234
Package icedtea-web-1.5.2nb9 has a security-bypass vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-5235
Package jetty-7.6.8.20121106nb1 has a remote-security-bypass vulnerability, see http://secunia.com/advisories/55861/
Package jetty-7.6.8.20121106nb1 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0254
Package jetty-9.2.14.20151106 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0254
Package mini_httpd-1.21nb1 has a escape-sequence-injection vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-4490
Package moodle-3.2.2nb1 has a information-disclosure vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7919
Package moodle-3.2.2nb1 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9186
Package moodle-3.2.2nb1 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9187
Package moodle-3.2.2nb1 has a cross-site-scripting vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9188
Package moodle-3.2.2nb1 has a cross-site-scripting vulnerability, see http://www.daimacn.com/post/12.html
Package opera-12.16 has a sensitive-information-exposure vulnerability, see http://secunia.com/advisories/47128/
Package opera-12.16 has a multiple-vulnerabilities vulnerability, see http://www.opera.com/docs/changelogs/unified/2600/
Package opera-12.16 has a unknown-impact vulnerability, see http://www.opera.com/docs/changelogs/unified/2800/
Package php56-concrete5-5.7.5.6nb1 has a http-header-injection vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7725
Package php56-concrete5-5.7.5.6nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8082
Package php56-http-2.6.0nb1 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5873
Package php56-ja-wordpress-4.5.3 has a directory-traversal vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7169
Package php56-ja-wordpress-4.5.3 has a cross-site-scripting vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7168
Package php56-ja-wordpress-4.5.3 has a multiple-vulnerabilities vulnerability, see https://codex.wordpress.org/Version_4.7.1
Package php56-ja-wordpress-4.5.3 has a multiple-vulnerabilities vulnerability, see https://codex.wordpress.org/Version_4.7.2
Package php56-ja-wordpress-4.5.3 has a multiple-vulnerabilities vulnerability, see https://codex.wordpress.org/Version_4.7.3
Package php56-ja-wordpress-4.5.3 has a security-bypass vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8295
Package php56-piwigo-2.7.4 has a cross-site-scripting vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9751
Package php56-piwigo-2.7.4 has a multiple-vulnerabilities vulnerability, see http://piwigo.org/releases/2.8.5
Package php56-piwigo-2.7.4 has a cross-site-scripting vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5608
Package privoxy-3.0.23nb2 has a denial-of-service vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1982
Package privoxy-3.0.23nb2 has a denial-of-service vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1983
Package py27-django-cms-3.4.3 has a validation-bypass vulnerability, see http://www.vulnerability-lab.com/get_content.php?id=1821
Package py27-django-1.4.22 has a sensitive-information-exposure vulnerability, see http://secunia.com/advisories/54197/
Package py27-django-1.4.22 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/60181/
Package py27-django-1.4.22 has a cross-site-scripting vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2241
Package py27-django-1.4.22 has a spoofing-attack vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2512
Package py27-django-1.4.22 has a cross-site-request-forgeries vulnerability, see https://www.djangoproject.com/weblog/2016/sep/26/security-releases/
Package py27-django-1.4.22 has a multiple-vulnerabilities vulnerability, see https://www.djangoproject.com/weblog/2016/nov/01/security-releases/
Package py27-moin-1.9.7nb3 has a remote-information-exposure vulnerability, see http://secunia.com/advisories/32686/
Package py27-moin-1.9.7nb3 has a multiple-vulnerabilities vulnerability, see https://www.curesec.com/blog/article/blog/MoinMoin-198-XSS-175.html
Package squidGuard-1.4nb12 has a remote-security-bypass vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3826
Package squidGuard-1.4nb12 has a cross-site-scripting vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8936
Package thttpd-2.26 has a escape-sequence-injection vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-4491
Package varnish-3.0.6nb2 has a http-header-injection vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8852
Package webkit-gtk-2.12.4nb6 has a multiple-vulnerabilities vulnerability, see https://webkitgtk.org/security/WSA-2017-0002.html
Package webkit-gtk-2.12.4nb6 has a multiple-vulnerabilities vulnerability, see https://webkitgtk.org/security/WSA-2017-0001.html
Package webkit24-gtk-2.4.11nb9 has a multiple-vulnerabilities vulnerability, see http://webkitgtk.org/security/WSA-2015-0002.html
Package webkit24-gtk-2.4.11nb9 has a multiple-vulnerabilities vulnerability, see http://webkitgtk.org/security/WSA-2016-0001.html
Package webkit24-gtk-2.4.11nb9 has a multiple-vulnerabilities vulnerability, see http://webkitgtk.org/security/WSA-2016-0002.html
Package webkit24-gtk-2.4.11nb9 has a multiple-vulnerabilities vulnerability, see http://webkitgtk.org/security/WSA-2016-0003.html
Package webkit24-gtk-2.4.11nb9 has a multiple-vulnerabilities vulnerability, see http://webkitgtk.org/security/WSA-2016-0004.html
Package webkit24-gtk-2.4.11nb9 has a multiple-vulnerabilities vulnerability, see http://webkitgtk.org/security/WSA-2016-0005.html
Package webkit24-gtk-2.4.11nb9 has a multiple-vulnerabilities vulnerability, see https://webkitgtk.org/security/WSA-2017-0002.html
Package webkit24-gtk-2.4.11nb9 has a multiple-vulnerabilities vulnerability, see https://webkitgtk.org/security/WSA-2017-0001.html
Package webkit24-gtk-2.4.11nb9 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9643
Package webkit24-gtk3-2.4.11nb8 has a multiple-vulnerabilities vulnerability, see http://webkitgtk.org/security/WSA-2015-0002.html
Package webkit24-gtk3-2.4.11nb8 has a multiple-vulnerabilities vulnerability, see http://webkitgtk.org/security/WSA-2016-0001.html
Package webkit24-gtk3-2.4.11nb8 has a multiple-vulnerabilities vulnerability, see http://webkitgtk.org/security/WSA-2016-0002.html
Package webkit24-gtk3-2.4.11nb8 has a multiple-vulnerabilities vulnerability, see http://webkitgtk.org/security/WSA-2016-0003.html
Package webkit24-gtk3-2.4.11nb8 has a multiple-vulnerabilities vulnerability, see http://webkitgtk.org/security/WSA-2016-0004.html
Package webkit24-gtk3-2.4.11nb8 has a multiple-vulnerabilities vulnerability, see http://webkitgtk.org/security/WSA-2016-0005.html
Package webkit24-gtk3-2.4.11nb8 has a multiple-vulnerabilities vulnerability, see https://webkitgtk.org/security/WSA-2017-0002.html
Package webkit24-gtk3-2.4.11nb8 has a multiple-vulnerabilities vulnerability, see https://webkitgtk.org/security/WSA-2017-0001.html
Package webkit24-gtk3-2.4.11nb8 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9643
Package websvn-2.2.1nb2 has a cross-site-scripting vulnerability, see http://secunia.com/advisories/47288/
Package websvn-2.2.1nb2 has a symlink-attack vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6892
Package websvn-2.2.1nb2 has a cross-site-scripting vulnerability, see https://marc.info/?l=full-disclosure&m=145614987429774&w=2
Package websvn-2.2.1nb2 has a cross-site-scripting vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2511
Package websvn-2.2.1nb2 has a cross-site-scripting vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1236
Package wordpress-4.7.3nb1 has a security-bypass vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8295