[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Security numbers in pkgsrc
- To: EdgeBSD developers <edgebsd-developers@xxxxxxxxxxxxxxxxx>, EdgeBSD users <edgebsd-users@xxxxxxxxxxxxxxxxx>
- Subject: Security numbers in pkgsrc
- From: Pierre Pronchery <khorben@xxxxxxxxxxx>
- Date: Tue, 16 May 2017 01:04:11 +0200
- Delivered-to: edgebsd-developers@xxxxxxxxxxxxxxxxx
- Organization: The EdgeBSD Project
- User-agent: Mozilla/5.0 (X11; NetBSD amd64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
Hi EdgeBSD users & developers,I would like to share with you the first run of a very simple tool I just wrote, which name is currently simply "pkgquery" [1]. In essence, all this shell script does at the moment is browse through every package available and either:
- lists all the packages for a given maintainer, eg $ pkgquery -M pkgsrc-users@xxxxxxxxxx - lists the known security issues for every package available, eg $ pkgquery -SOf course I have plans to generate different output formats and extend the functionalities. I am attaching a log I just generated on the "trunk" branch from the Git conversion for pkgsrc [2] (commit [3]).
It should be relatively easy - and hopefully interesting - to create more elaborate reports out of this, like graphing the amount and type of vulnerabilities over time, for successive releases.
Disclaimer: it will *not* be indicative of how "secure" any release is, was or will be (eg in case of 0days) but it could provide interesting metrics.
First few numbers: - 1964 active vulnerability entries - among which 102 different types of vulnerabilities reported, with most active entries being Denial of Service: (DoS)
43 cross-site-scripting 75 remote-system-access 83 buffer-overflow 84 heap-overflow 156 arbitrary-code-execution 181 multiple-vulnerabilities 224 end-of-life 549 denial-of-service
- affecting a total of 491 packages, with: * one vulnerability reported (230), or * more than one vulnerability reported (261) - up to 44 known vulnerabilities for one package:
25 suse32_libtiff-10.0nb4 25 suse_libtiff-10.0nb4 35 suse32_base-12.1nb7 35 suse_base-12.1nb7 40 suse32_openssl-10.0nb5 40 suse_openssl-10.0nb5 44 suse32_base-10.0nb8 44 suse_base-10.0nb8
(there is a pattern here) Do not hesitate to follow-up for more details.[1] https://git.edgebsd.org/gitweb/?p=infrastructure.git;a=blob;f=pkgsrc/pkgquery;hb=HEAD
[2] https://github.com/netbsd/pkgsrc[3] https://github.com/NetBSD/pkgsrc/commit/3945eca4f5821e76bc2046c8678259644ea677a1
-- khorben
Known security issues: Package gdm-2.20.11nb24 has a security-bypass vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7496 Package kdebase-3.5.10nb39 has a privilege-escalation vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0436 Package kdelibs-3.5.10nb40 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5698 Package kdelibs-3.5.10nb40 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1687 Package kdelibs-3.5.10nb40 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1690 Package kdelibs-3.5.10nb40 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1698 Package kdelibs-3.5.10nb40 has a ssl-cert-spoofing vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2702 Package kdelibs-3.5.10nb40 has a sensitive-information-disclosure vulnerability, see https://www.kde.org/info/security/advisory-20170228-1.txt Package libXpm-3.5.12 has a denial-of-service vulnerability, see https://www.debian.org/security/2017/dsa-3772 Package modular-xorg-server-1.12.4nb17 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-3418 Package p5-gtk2-1.249nb9 has a arbitrary-code-execution vulnerability, see https://www.debian.org/security/2015/dsa-3173 Package ruby23-tk-2.3.4nb4 has a arbitrary-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2337 Package ruby23-tk-2.3.4nb4 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2337 Package rxvt-2.7.10nb6 has a out-of-bounds-read vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7483 Package arc-5.21p has a directory-traversal vulnerability, see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774527 Package ark-4.14.3nb9 has a arbitrary-code-execution vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-5330 Package gcpio-2.12nb1 has a out-of-bounds-write vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9112 Package gcpio-2.12nb1 has a directory-traversal vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1197 Package gcpio-2.12nb1 has a out-of-bounds-write vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2037 Package lha-114.9nb4 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1925 Package libarchive-3.3.1 has a out-of-bounds-read vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2016-10349 Package libarchive-3.3.1 has a out-of-bounds-read vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2016-10350 Package lrzip-0.631 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8844 Package lrzip-0.631 has a use-after-free vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8846 Package lrzip-0.631 has a null-dereference vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8847 Package lrzip-0.631 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8842 Package lrzip-0.631 has a null-dereference vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8843 Package lzo-2.10 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8845 Package rzip-2.1 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8364 Package unace-1.2.2nb2 has a buffer-overflow vulnerability, see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775003 Package zziplib-0.13.59 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5974 Package zziplib-0.13.59 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5975 Package zziplib-0.13.59 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5976 Package zziplib-0.13.59 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5977 Package zziplib-0.13.59 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5978 Package zziplib-0.13.59 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5979 Package zziplib-0.13.59 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5980 Package zziplib-0.13.59 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5981 Package ampache-3.5.3nb3 has a cross-site-scripting vulnerability, see http://secunia.com/advisories/44497/ Package csound5-5.19.01nb1 has a remote-system-access vulnerability, see http://secunia.com/advisories/48719/ Package flite-1.3nb3 has a local-symlink-attack vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0027 Package flite-1.3nb3 has a symlink-attack vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0027 Package icecast-1.3.12nb14 has a sensitive-information-disclosure vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9018 Package icecast-1.3.12nb14 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3026 Package icecast-1.3.12nb14 has a denial-of-service vulnerability, see http://lists.xiph.org/pipermail/icecast-dev/2015-April/002460.html Package lame-3.99.5nb3 has a buffer-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8419 Package libaudiofile-0.3.6nb1 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6827 Package libaudiofile-0.3.6nb1 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6828 Package libaudiofile-0.3.6nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6829 Package libaudiofile-0.3.6nb1 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6830 Package libaudiofile-0.3.6nb1 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6831 Package libaudiofile-0.3.6nb1 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6832 Package libaudiofile-0.3.6nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6833 Package libaudiofile-0.3.6nb1 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6834 Package libaudiofile-0.3.6nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6835 Package libaudiofile-0.3.6nb1 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6836 Package libaudiofile-0.3.6nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6837 Package libaudiofile-0.3.6nb1 has a integer-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6838 Package libaudiofile-0.3.6nb1 has a integer-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6839 Package libmad-0.15.1bnb1 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8373 Package libmad-0.15.1bnb1 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8374 Package libsndfile-1.0.28 has a buffer-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8365 Package libsndfile-1.0.28 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8362 Package libsndfile-1.0.28 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8363 Package libsndfile-1.0.28 has a buffer-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8361 Package libsndfile-1.0.28 has a out-of-bounds-read vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8365 Package libsndfile-1.0.28 has a buffer-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8361 Package libsndfile-1.0.28 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8362 Package libsndfile-1.0.28 has a out-of-bounds-read vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8363 Package tcl-snack-2.2.10nb5 has a remote-system-access vulnerability, see http://secunia.com/advisories/49889/ Package tcl-snack-2.2.10nb5 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6303 Package lmbench-2.11anb8 has a privilege-escalation vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4968 Package spice-3f5.1nb6 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package atheme-3.0.4nb5 has a denial-of-service vulnerability, see http://secunia.com/advisories/51852/ Package atheme-3.0.4nb5 has a denial-of-service vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4478 Package atheme-3.0.4nb5 has a denial-of-service vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4478 Package atheme-3.0.4nb5 has a remote-information-modification vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9773 Package empathy-2.34.0nb54 has a cross-site-scripting vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3635 Package gajim-0.15nb16 has a remote-spoofing vulnerability, see http://secunia.com/advisories/51209/ Package gajim-0.15nb16 has a man-in-the-middle vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8688 Package gajim-0.15nb16 has a remote-information-modification vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8688 Package hexchat-2.12.3nb1 has a stack-overflow vulnerability, see https://github.com/hexchat/hexchat/issues/1934 Package inspircd-1.1.23nb28 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1836 Package inspircd-1.1.23nb28 has a denial-of-service vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8702 Package inspircd-1.1.23nb28 has a signature-spoofing vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7142 Package inspircd-1.1.23nb28 has a buffer-underflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-6674 Package inspircd-1.1.23nb28 has a infinite-loop vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-6697 Package inspircd-1.2.0nb28 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1836 Package inspircd-1.2.0nb28 has a denial-of-service vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8702 Package inspircd-1.2.0nb28 has a signature-spoofing vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7142 Package inspircd-1.2.0nb28 has a buffer-underflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-6674 Package inspircd-1.2.0nb28 has a infinite-loop vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-6697 Package jabberd-2.5.0nb1 has a information-disclosure vulnerability, see https://github.com/jabberd2/jabberd2/issues/85 Package jabberd-2.5.0nb1 has a information-disclosure vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2058 Package konversation-1.1nb38 has a denial-of-service vulnerability, see http://secunia.com/advisories/38711/ Package libtlen-20041113 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3720 Package mcabber-1.0.0nb5 has a weak-authentication vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5604 Package pidgin-2.12.0 has a information-disclosure vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2375 Package pidgin-2.12.0 has a out-of-bounds-read vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2373 Package pidgin-2.12.0 has a remote-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2371 Package pidgin-2.12.0 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2369 Package pidgin-2.12.0 has a information-disclosure vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2367 Package pidgin-2.12.0 has a out-of-bounds-read vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2366 Package pidgin-2.12.0 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2365 Package pidgin-2.12.0 has a arbitrary-file-overwrite vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4323 Package pidgin-2.12.0 has a out-of-bounds-read vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2380 Package pidgin-2.12.0 has a buffer-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2378 Package pidgin-2.12.0 has a out-of-bounds-read vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2370 Package pidgin-2.12.0 has a out-of-bounds-write vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2374 Package pidgin-2.12.0 has a out-of-bounds-read vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2372 Package pidgin-2.12.0 has a remote-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2368 Package pidgin-2.12.0 has a remote-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2376 Package psi-0.15nb9 has a ssl-cert-spoofing vulnerability, see http://secunia.com/advisories/46349/ Package psi-0.15nb9 has a weak-authentication vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5593 Package telepathy-idle-0.1.8nb10 has a man-in-the-middle-attack vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6746 Package unrealircd-3.2.10.5nb5 has a ssl-certificate-spoofing vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7144 Package asterisk-14.2.0nb6 has a denial-of-service vulnerability, see http://downloads.digium.com/pub/security/AST-2016-009.html Package asterisk-14.2.0nb6 has a authentication-bypass vulnerability, see http://downloads.digium.com/pub/security/AST-2016-010.html Package asterisk-14.2.0nb6 has a buffer-overflow vulnerability, see http://downloads.asterisk.org/pub/security/AST-2017-001.html Package asterisk-1.8.32.3nb17 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package srtp-1.4.4 has a denial-of-service vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6360 Package cross-arm-none-eabi-binutils-2.28 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7299 Package cross-arm-none-eabi-binutils-2.28 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7300 Package cross-arm-none-eabi-binutils-2.28 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7301 Package cross-arm-none-eabi-binutils-2.28 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7302 Package cross-arm-none-eabi-binutils-2.28 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7303 Package cross-arm-none-eabi-binutils-2.28 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7304 Package cross-arm-none-eabi-binutils-2.28 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8392 Package cross-arm-none-eabi-binutils-2.28 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8393 Package cross-arm-none-eabi-binutils-2.28 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8394 Package cross-arm-none-eabi-binutils-2.28 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8395 Package cross-arm-none-eabi-binutils-2.28 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8396 Package cross-arm-none-eabi-binutils-2.28 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8397 Package cross-arm-none-eabi-binutils-2.28 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8398 Package avr-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7299 Package avr-binutils-2.27 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7300 Package avr-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7301 Package avr-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7302 Package avr-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7303 Package avr-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7304 Package avr-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8392 Package avr-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8393 Package avr-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8394 Package avr-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8395 Package avr-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8396 Package avr-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8397 Package avr-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8398 Package cross-binutils-2.17.0.0nb4 has a out-of-bounds-write vulnerability, see http://www.cvedetails.com/cve/CVE-2014-8501/ Package cross-binutils-2.17.0.0nb4 has a denial-of-service vulnerability, see http://www.cvedetails.com/cve/CVE-2014-8502/ Package cross-binutils-2.17.0.0nb4 has a denial-of-service vulnerability, see http://www.cvedetails.com/cve/CVE-2014-8503/ Package cross-freemint-binutils-2.24 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7299 Package cross-freemint-binutils-2.24 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7300 Package cross-freemint-binutils-2.24 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7301 Package cross-freemint-binutils-2.24 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7302 Package cross-freemint-binutils-2.24 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7303 Package cross-freemint-binutils-2.24 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7304 Package cross-freemint-binutils-2.24 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8392 Package cross-freemint-binutils-2.24 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8393 Package cross-freemint-binutils-2.24 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8394 Package cross-freemint-binutils-2.24 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8395 Package cross-freemint-binutils-2.24 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8396 Package cross-freemint-binutils-2.24 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8397 Package cross-freemint-binutils-2.24 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8398 Package cross-h8300-elf-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7299 Package cross-h8300-elf-binutils-2.27 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7300 Package cross-h8300-elf-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7301 Package cross-h8300-elf-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7302 Package cross-h8300-elf-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7303 Package cross-h8300-elf-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7304 Package cross-h8300-elf-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8392 Package cross-h8300-elf-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8393 Package cross-h8300-elf-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8394 Package cross-h8300-elf-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8395 Package cross-h8300-elf-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8396 Package cross-h8300-elf-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8397 Package cross-h8300-elf-binutils-2.27 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8398 Package cross-h8300-hms-binutils-2.12.1nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7299 Package cross-h8300-hms-binutils-2.12.1nb1 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7300 Package cross-h8300-hms-binutils-2.12.1nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7301 Package cross-h8300-hms-binutils-2.12.1nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7302 Package cross-h8300-hms-binutils-2.12.1nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7303 Package cross-h8300-hms-binutils-2.12.1nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7304 Package cross-h8300-hms-binutils-2.12.1nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8392 Package cross-h8300-hms-binutils-2.12.1nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8393 Package cross-h8300-hms-binutils-2.12.1nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8394 Package cross-h8300-hms-binutils-2.12.1nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8395 Package cross-h8300-hms-binutils-2.12.1nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8396 Package cross-h8300-hms-binutils-2.12.1nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8397 Package cross-h8300-hms-binutils-2.12.1nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8398 Package mingw-binutils-2.18nb2 has a out-of-bounds-write vulnerability, see http://www.cvedetails.com/cve/CVE-2014-8501/ Package mingw-binutils-2.18nb2 has a denial-of-service vulnerability, see http://www.cvedetails.com/cve/CVE-2014-8502/ Package mingw-binutils-2.18nb2 has a denial-of-service vulnerability, see http://www.cvedetails.com/cve/CVE-2014-8503/ Package mingw-binutils-2.18nb2 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7299 Package mingw-binutils-2.18nb2 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7300 Package mingw-binutils-2.18nb2 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7301 Package mingw-binutils-2.18nb2 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7302 Package mingw-binutils-2.18nb2 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7303 Package mingw-binutils-2.18nb2 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7304 Package mingw-binutils-2.18nb2 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8392 Package mingw-binutils-2.18nb2 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8393 Package mingw-binutils-2.18nb2 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8394 Package mingw-binutils-2.18nb2 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8395 Package mingw-binutils-2.18nb2 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8396 Package mingw-binutils-2.18nb2 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8397 Package mingw-binutils-2.18nb2 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8398 Package nios2-binutils-2.24nb3 has a out-of-bounds-write vulnerability, see http://www.cvedetails.com/cve/CVE-2014-8501/ Package nios2-binutils-2.24nb3 has a denial-of-service vulnerability, see http://www.cvedetails.com/cve/CVE-2014-8502/ Package nios2-binutils-2.24nb3 has a denial-of-service vulnerability, see http://www.cvedetails.com/cve/CVE-2014-8503/ Package nios2-binutils-2.24nb3 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7299 Package nios2-binutils-2.24nb3 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7300 Package nios2-binutils-2.24nb3 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7301 Package nios2-binutils-2.24nb3 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7302 Package nios2-binutils-2.24nb3 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7303 Package nios2-binutils-2.24nb3 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7304 Package nios2-binutils-2.24nb3 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8392 Package nios2-binutils-2.24nb3 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8393 Package nios2-binutils-2.24nb3 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8394 Package nios2-binutils-2.24nb3 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8395 Package nios2-binutils-2.24nb3 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8396 Package nios2-binutils-2.24nb3 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8397 Package nios2-binutils-2.24nb3 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8398 Package adodb-4.96anb2 has a sql-injection vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7405 Package apache-cassandra-1.2.19nb1 has a remote-code-execution vulnerability, see http://www.openwall.com/lists/oss-security/2015/04/01/6 Package db5-5.3.28nb1 has a multiple-vulnerabilities vulnerability, see http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html#AppendixBDB Package jdbc-mysql-3.1.14 has a unspecified vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2575 Package jdbc-mysql-5.0.8 has a unspecified vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2575 Package mariadb-client-5.5.52 has a use-after-free vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3302 Package mariadb-server-5.5.52 has a unauthorized-access vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3313 Package mongodb-3.2.10nb2 has a sensitive-information-disclosure vulnerability, see https://jira.mongodb.org/browse/SERVER-25335 Package mysql-cluster-7.4.12 has a multiple-vulnerabilities vulnerability, see http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL Package mysql-client-5.1.73 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0001 Package mysql-client-5.1.73 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package mysql-client-5.1.73 has a ssl-downgrade vulnerability, see http://www.ocert.org/advisories/ocert-2015-003.html Package mysql-server-5.1.73 has a valid-account-enumeration vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5615 Package mysql-server-5.1.73 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package mysql-client-5.5.56 has a ssl-downgrade vulnerability, see http://www.ocert.org/advisories/ocert-2015-003.html Package mysql-client-5.5.56 has a use-after-free vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3302 Package mysql-server-5.5.56 has a valid-account-enumeration vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5615 Package mysql-client-5.6.36 has a ssl-downgrade vulnerability, see http://www.ocert.org/advisories/ocert-2015-003.html Package phpmyadmin-4.6.5.2 has a server-side-request-forgery vulnerability, see https://www.phpmyadmin.net/security/PMASA-2016-44/ Package rrdtool-1.2.30nb13 has a memory-corruption vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2131 Package apache-ant-1.5.4nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2098 Package apache-ant-1.5.4nb2 has a remote-spoofing vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1571 Package binutils-2.26.1 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6965 Package binutils-2.26.1 has a use-after-free vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6966 Package binutils-2.26.1 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6969 Package binutils-2.26.1 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7209 Package binutils-2.26.1 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7210 Package binutils-2.26.1 has a buffer-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7223 Package binutils-2.26.1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7224 Package binutils-2.26.1 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7225 Package binutils-2.26.1 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7226 Package binutils-2.26.1 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7227 Package binutils-2.26.1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7299 Package binutils-2.26.1 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7300 Package binutils-2.26.1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7301 Package binutils-2.26.1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7302 Package binutils-2.26.1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7303 Package binutils-2.26.1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7304 Package binutils-2.26.1 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7614 Package binutils-2.26.1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8392 Package binutils-2.26.1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8393 Package binutils-2.26.1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8394 Package binutils-2.26.1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8395 Package binutils-2.26.1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8396 Package binutils-2.26.1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8397 Package binutils-2.26.1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8398 Package boehm-gc-7.6.0nb2 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2016-9427 Package bugzilla-3.6.8 has a cross-site-scripting vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0465 Package bugzilla-3.6.8 has a cross-site-scripting vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0466 Package bugzilla-3.6.8 has a sensitive-information-exposure vulnerability, see https://secunia.com/advisories/50040/ Package bugzilla-3.6.8 has a information-disclosure vulnerability, see http://secunia.com/advisories/50433/ Package bugzilla-3.6.8 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/52254/ Package bugzilla-3.6.8 has a cross-site-scripting vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1546 Package bugzilla-3.6.8 has a multiple-vulnerabilities vulnerability, see http://www.bugzilla.org/security/4.0.14/ Package bugzilla-3.6.8 has a multiple-vulnerabilities vulnerability, see http://www.bugzilla.org/security/4.0.15/ Package bugzilla-3.6.8 has a security-bypass vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4499 Package bugzilla-3.6.8 has a cross-site-scripting vulnerability, see https://bugzilla.mozilla.org/show_bug.cgi?id=1221518 Package bugzilla-3.6.8 has a information-leak vulnerability, see https://bugzilla.mozilla.org/show_bug.cgi?id=1232785 Package bugzilla-3.6.8 has a code-injection vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8508 Package bugzilla-3.6.8 has a code-injection vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8508 Package bugzilla-3.6.8 has a code-injection vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2803 Package capstone-3.0.4nb2 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6952 Package cogito-0.18.2nb9 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package eclipse-3.0.1nb2 has a cross-site-scripting vulnerability, see http://secunia.com/advisories/42236/ Package jenkins-2.25 has a cross-site-scripting vulnerability, see http://secunia.com/advisories/48056/ Package jenkins-2.25 has a script-insertion vulnerability, see http://secunia.com/advisories/56152/ Package jenkins-2.25 has a cross-site-request-forgeries vulnerability, see http://seclists.org/bugtraq/2015/Aug/161 Package jenkins-2.25 has a arbitrary-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9299 Package jenkins-2.19.1 has a cross-site-scripting vulnerability, see http://secunia.com/advisories/48056/ Package jenkins-2.19.1 has a script-insertion vulnerability, see http://secunia.com/advisories/56152/ Package jenkins-2.19.1 has a cross-site-request-forgeries vulnerability, see http://seclists.org/bugtraq/2015/Aug/161 Package jenkins-2.19.1 has a arbitrary-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9299 Package jq-1.5nb1 has a denial-of-service vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4074 Package kio-5.25.0nb7 has a sensitive-information-disclosure vulnerability, see https://www.kde.org/info/security/advisory-20170228-1.txt Package libblkid-2.18 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-5011 Package libdwarf-20161124 has a heap-buffer-overflow vulnerability, see https://www.prevanders.net/dwarfbug.html#DW201611-006 Package libgsf-1.14.34nb1 has a null-dereference vulnerability, see https://github.com/GNOME/libgsf/commit/95a8351a75758cf10b3bf6abae0b6b461f90d9e5 Package libiberty-1.0nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4487 Package libiberty-1.0nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4488 Package libiberty-1.0nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4489 Package libiberty-1.0nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4490 Package libiberty-1.0nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4491 Package libiberty-1.0nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4492 Package libiberty-1.0nb2 has a out-of-bounds-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4493 Package libiberty-1.0nb2 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2226 Package libmimedir-0.5.1 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3205 Package libosip2-4.1.0 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10324 Package libosip2-4.1.0 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10325 Package libosip2-4.1.0 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10326 Package libosip2-4.1.0 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7853 Package libtar-1.2.20 has a data-manipulation vulnerability, see http://secunia.com/advisories/55138/ Package mantis-1.3.1nb2 has a arbitrary-code-execution vulnerability, see https://legalhackers.com/advisories/PHPMailer-Exploit-Remote-Code-Exec-CVE-2016-10033-Vuln.html Package mantis-1.3.1nb2 has a javascript-injection vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6797 Package mantis-1.3.1nb2 has a cross-site-scripting vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7222 Package mantis-1.3.1nb2 has a cross-site-scripting vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6973 Package mantis-1.3.1nb2 has a cross-site-scripting vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7241 Package mantis-1.3.1nb2 has a cross-site-scripting vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7309 Package p5-Parallel-ForkManager-1.19 has a insecure-temp-files vulnerability, see http://secunia.com/advisories/46784/ Package p5-XSLoader-0.24 has a arbitrary-code-execution vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6185 Package pcre-8.40nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7246 Package pcre-8.40nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7245 Package pcre-8.40nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7244 Package pcre-8.40nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7186 Package pcre2-10.23 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7186 Package pcre2-10.23 has a stack-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8399 Package pcre2-10.23 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8786 Package php71-gmp-7.1.5 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7963 Package ptlib-2.10.7nb10 has a denial-of-service vulnerability, see http://secunia.com/advisories/52659/ Package ptlib-2.10.7nb10 has a denial-of-service vulnerability, see http://secunia.com/advisories/52659/ Package py27-ipython-0.10.2nb1 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3429 Package py27-ipython-0.13.2 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3429 Package py27-logilab-common-1.3.0 has a insecure-temp-file vulnerability, see http://secunia.com/advisories/56720/ Package py27-rope-0.10.2 has a remote-code-execution vulnerability, see https://github.com/python-rope/rope/issues/105 Package py27-trytond-4.2.1 has a insecure-file-permissions vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-0360 Package radare2-0.10.3nb1 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6197 Package radare2-0.10.3nb1 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6319 Package radare2-0.10.3nb1 has a out-of-bounds-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6387 Package radare2-0.10.3nb1 has a null-dereference vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6415 Package radare2-0.10.3nb1 has a unspecified vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6448 Package radare2-0.10.3nb1 has a unspecified vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6194 Package radare2-0.10.3nb1 has a null-dereference vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7274 Package radare2-0.10.3nb1 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7716 Package radare2-0.10.3nb1 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7854 Package radare2-0.10.3nb1 has a use-after-free vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7946 Package roundup-1.4.19nb2 has a cross-site-scripting vulnerability, see http://secunia.com/advisories/51230/ Package roundup-1.4.19nb2 has a sensitive-information-disclosure vulnerability, see https://pypi.python.org/pypi/roundup/1.5.1 Package ruby23-fiddle-2.3.4 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2339 Package tre-0.8.0 has a out-of-bounds-write vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-8859 Package xulrunner10-10.0.12nb39 has a arbitrary-code-execution vulnerability, see http://www.mozilla.org/security/announce/2013/mfsa2013-21.html Package xulrunner10-10.0.12nb39 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package xulrunner17-17.0.11nb27 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package xulrunner17-17.0.11nb27 has a arbitrary-code-execution vulnerability, see http://www.mozilla.org/security/announce/2013/mfsa2013-104.html Package xulrunner192-1.9.2.28nb37 has a arbitrary-code-execution vulnerability, see http://secunia.com/advisories/48069/ Package xulrunner192-1.9.2.28nb37 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package xulrunner31-31.8.0nb11 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package zookeeper-3.4.8nb1 has a buffer-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-5017 Package TeXmacs-1.99.5nb1 has a privilege-escalation vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3394 Package gobby-0.4.12nb29 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/46698/ Package xemacs-21.4.24nb1 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2142 Package xemacs-21.4.24nb1 has a remote-system-access vulnerability, see http://secunia.com/advisories/35348/ Package xemacs-21.5.27nb23 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2142 Package xemacs-21.5.27nb23 has a remote-system-access vulnerability, see http://secunia.com/advisories/35348/ Package xemacs-nox11-21.5.27nb23 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2142 Package xemacs-nox11-21.5.27nb23 has a remote-system-access vulnerability, see http://secunia.com/advisories/35348/ Package xemacs-nox11-21.4.24nb1 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2142 Package xemacs-nox11-21.4.24nb1 has a remote-system-access vulnerability, see http://secunia.com/advisories/35348/ Package compat14-1.4.3.1nb2 has a remote-root-shell vulnerability, see http://www.pine.nl/advisories/pine-cert-20020601.html Package compat14-1.4.3.1nb2 has a remote-root-shell vulnerability, see http://www.kb.cert.org/vuls/id/738331 Package compat15-1.5.3 has a remote-root-shell vulnerability, see http://www.kb.cert.org/vuls/id/738331 Package netbsd32_compat15-1.5.3 has a remote-root-shell vulnerability, see http://www.kb.cert.org/vuls/id/738331 Package qemu-2.9.0nb1 has a information-disclosure vulnerability, see http://xenbits.xen.org/xsa/advisory-140.html Package qemu-2.9.0nb1 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8577 Package qemu-2.9.0nb1 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8576 Package qemu-2.9.0nb1 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8667 Package qemu-2.9.0nb1 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8578 Package qemu-2.9.0nb1 has a out-of-bounds-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8668 Package qemu-2.9.0nb1 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8909 Package qemu-2.9.0nb1 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8669 Package qemu-2.9.0nb1 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8910 Package qemu-2.9.0nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9101 Package qemu-2.9.0nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9907 Package qemu-2.9.0nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9923 Package qemu-2.9.0nb1 has a information-disclosure vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9908 Package qemu-2.9.0nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9911 Package qemu-2.9.0nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9921 Package qemu-2.9.0nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9912 Package qemu-2.9.0nb1 has a infinite-loop vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8112 Package qemu-2.9.0nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8086 Package qemu-2.9.0nb1 has a out-of-bounds-read vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7718 Package suse32_alsa-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_alsa-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_alsa-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_aspell-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_aspell-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_aspell-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_base-10.0nb8 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_base-10.0nb8 has a privilege-escalation vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3856 Package suse32_base-10.0nb8 has a arbitrary-code-execution vulnerability, see https://hermes.opensuse.org/messages/7712778 Package suse32_base-10.0nb8 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2011-1071.html Package suse32_base-10.0nb8 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1659 Package suse32_base-10.0nb8 has a remote-system-access vulnerability, see http://lists.opensuse.org/opensuse-updates/2011-07/msg00041.html Package suse32_base-10.0nb8 has a information-disclosure vulnerability, see http://secunia.com/advisories/47432/ Package suse32_base-10.0nb8 has a local-system-compromise vulnerability, see http://secunia.com/advisories/47409/ Package suse32_base-10.0nb8 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_base-10.0nb8 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_base-10.0nb8 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-4043.html Package suse32_base-10.0nb8 has a directory-traversal vulnerability, see http://support.novell.com/security/cve/CVE-2014-0475.html Package suse32_base-10.0nb8 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-5119.html Package suse32_base-10.0nb8 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-6040.html Package suse32_base-10.0nb8 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html Package suse32_base-10.0nb8 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0235 Package suse32_base-10.0nb8 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2015-02/msg00089.html Package suse32_base-10.0nb8 has a invalid-file-descriptor-reuse vulnerability, see http://www.openwall.com/lists/oss-security/2015/01/28/20 Package suse32_base-10.0nb8 has a buffer-overrun vulnerability, see http://www.openwall.com/lists/oss-security/2015/02/04/1 Package suse32_base-10.0nb8 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-1781 Package suse32_base-10.0nb8 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2327 Package suse32_base-10.0nb8 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2328 Package suse32_base-10.0nb8 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8380 Package suse32_base-10.0nb8 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8382 Package suse32_base-10.0nb8 has a uninitialized-memory-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8390 Package suse32_base-10.0nb8 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8383 Package suse32_base-10.0nb8 has a integer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8394 Package suse32_base-10.0nb8 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8381 Package suse32_base-10.0nb8 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8392 Package suse32_base-10.0nb8 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8386 Package suse32_base-10.0nb8 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8385 Package suse32_base-10.0nb8 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8388 Package suse32_base-10.0nb8 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8384 Package suse32_base-10.0nb8 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8389 Package suse32_base-10.0nb8 has a sensitive-information-disclosure vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8393 Package suse32_base-10.0nb8 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8391 Package suse32_base-10.0nb8 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8395 Package suse32_base-10.0nb8 has a security-bypass vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8777 Package suse32_base-10.0nb8 has a stack-overflow vulnerability, see https://sourceware.org/bugzilla/show_bug.cgi?id=17905 Package suse32_base-10.0nb8 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2016/dsa-3481 Package suse32_base-10.0nb8 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html Package suse32_base-10.0nb8 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-06/msg00030.html Package suse32_base-10.0nb8 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-5417 Package suse32_base-10.0nb8 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8804 Package suse32_compat-10.0nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_compat-10.0nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_compat-10.0nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_expat-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_expat-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_expat-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_expat-10.0nb2 has a denial-of-service vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4472 Package suse32_fontconfig-10.0nb7 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_fontconfig-10.0nb7 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_fontconfig-10.0nb7 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_fontconfig-10.0nb7 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5384 Package suse32_freetype2-10.0nb5 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0946 Package suse32_freetype2-10.0nb5 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_freetype2-10.0nb5 has a buffer-overflow vulnerability, see http://secunia.com/advisories/44008/ Package suse32_freetype2-10.0nb5 has a arbitrary-code-execution vulnerability, see http://secunia.com/advisories/41958/ Package suse32_freetype2-10.0nb5 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2011-0226.html Package suse32_freetype2-10.0nb5 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3256 Package suse32_freetype2-10.0nb5 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3439 Package suse32_freetype2-10.0nb5 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_freetype2-10.0nb5 has a local-system-compromise vulnerability, see http://secunia.com/advisories/48805/ Package suse32_freetype2-10.0nb5 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2012-5668.html Package suse32_freetype2-10.0nb5 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2012-5669.html Package suse32_freetype2-10.0nb5 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_glx-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_glx-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_glx-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_gtk2-10.0nb4 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1194 Package suse32_gtk2-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_gtk2-10.0nb4 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2011-03/msg00019.html Package suse32_gtk2-10.0nb4 has a local-security-bypass vulnerability, see http://secunia.com/advisories/43933/ Package suse32_gtk2-10.0nb4 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4352 Package suse32_gtk2-10.0nb4 has a denial-of-service vulnerability, see http://secunia.com/advisories/45308/ Package suse32_gtk2-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_gtk2-10.0nb4 has a remote-system-access vulnerability, see http://secunia.com/advisories/49983/ Package suse32_gtk2-10.0nb4 has a multiple-vulnerabilities vulnerability, see https://secunia.com/advisories/51170/ Package suse32_gtk2-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_gtk2-10.0nb4 has a arbitrary-code-execution vulnerability, see http://lists.opensuse.org/opensuse-updates/2014-12/msg00062.html Package suse32_krb5-10.0 has a unknown-impact vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html Package suse32_krb5-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_krb5-10.0 has a remote-spoofing vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1323 Package suse32_krb5-10.0 has a privilege-escalation vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1324 Package suse32_krb5-10.0 has a remote-security-bypass vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4020 Package suse32_krb5-10.0 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html Package suse32_krb5-10.0 has a arbitrary-code-execution vulnerability, see http://secunia.com/advisories/44027/ Package suse32_krb5-10.0 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/46546/ Package suse32_krb5-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_krb5-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_krb5-10.0 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-4341.html Package suse32_krb5-10.0 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-4342.html Package suse32_krb5-10.0 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-4343.html Package suse32_krb5-10.0 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-4344.html Package suse32_krb5-10.0 has a denial-of-service vulnerability, see http://www.secunia.com/advisories/62976 Package suse32_libcups-10.0nb4 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1182 Package suse32_libcups-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_libcups-10.0nb4 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/40165/ Package suse32_libcups-10.0nb4 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/41706/ Package suse32_libcups-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_libcups-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_libcups-10.0nb4 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-3537.html Package suse32_libcups-10.0nb4 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5029.html Package suse32_libcups-10.0nb4 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5030.html Package suse32_libcups-10.0nb4 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5031.html Package suse32_libidn-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_libjpeg-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_libjpeg-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_libjpeg-10.0nb2 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2012-2806.html Package suse32_libjpeg-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_libpng-10.0nb4 has a information-disclosure vulnerability, see http://secunia.com/advisories/35346/ Package suse32_libpng-10.0nb4 has a unknown-impact vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html Package suse32_libpng-10.0nb4 has a remote-system-access vulnerability, see http://secunia.com/advisories/40302/ Package suse32_libpng-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_libpng-10.0nb4 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-updates/2011-08/msg00026.html Package suse32_libpng-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_libpng-10.0nb4 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3026 Package suse32_libpng-10.0nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2011-3045.html Package suse32_libpng-10.0nb4 has a local-system-compromise vulnerability, see http://support.novell.com/security/cve/CVE-2011-3048.html Package suse32_libpng-10.0nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2012-3425.html Package suse32_libpng-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_libpng-10.0nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-6954.html Package suse32_libpng-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2013-7354.html Package suse32_libpng-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2013-7353.html Package suse32_libsigc++2-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_libsigc++2-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_libsigc++2-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_libtiff-10.0nb4 has a denial-of-service vulnerability, see http://secunia.com/advisories/40422/ Package suse32_libtiff-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_libtiff-10.0nb4 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5022 Package suse32_libtiff-10.0nb4 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3087 Package suse32_libtiff-10.0nb4 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0192 Package suse32_libtiff-10.0nb4 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1167 Package suse32_libtiff-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_libtiff-10.0nb4 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1173 Package suse32_libtiff-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2012-2088.html Package suse32_libtiff-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2012-2113.html Package suse32_libtiff-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2012-3401.html Package suse32_libtiff-10.0nb4 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4447 Package suse32_libtiff-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2013-1960.html Package suse32_libtiff-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2013-1961.html Package suse32_libtiff-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_libtiff-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2013-6369.html Package suse32_libtiff-10.0nb4 has a multiple-vulnerabilities vulnerability, see http://advisories.mageia.org/MGASA-2015-0112.html Package suse32_libtiff-10.0nb4 has a arbitrary-memory-access vulnerability, see http://www.securityfocus.com/archive/1/537205 Package suse32_libtiff-10.0nb4 has a heap-overflow vulnerability, see http://www.securityfocus.com/archive/1/537208 Package suse32_libtiff-10.0nb4 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8781 Package suse32_libtiff-10.0nb4 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8782 Package suse32_libtiff-10.0nb4 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8783 Package suse32_libtiff-10.0nb4 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2016/dsa-3467 Package suse32_libtiff-10.0nb4 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1547 Package suse32_libtiff-10.0nb4 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3186 Package suse32_libxml2-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4008 Package suse32_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4494 Package suse32_libxml2-10.0nb2 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2011-1944.html Package suse32_libxml2-10.0nb2 has a remote-system-access vulnerability, see http://secunia.com/advisories/47572/ Package suse32_libxml2-10.0nb2 has a remote-system-access vulnerability, see http://secunia.com/advisories/47647/ Package suse32_libxml2-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_libxml2-10.0nb2 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2011-3102.html Package suse32_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2012-2807.html Package suse32_libxml2-10.0nb2 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5134 Package suse32_libxml2-10.0nb2 has a multiple-vulnerabilities vulnerability, see http://support.novell.com/security/cve/CVE-2013-1969.html Package suse32_libxml2-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0191.html Package suse32_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0191.html Package suse32_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3660 Package suse32_libxml2-10.0nb2 has a out-of-bounds-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7942 Package suse32_libxml2-10.0nb2 has a out-of-bounds-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7941 Package suse32_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8035 Package suse32_libxml2-10.0nb2 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2015/dsa-3430 Package suse32_libxml2-10.0nb2 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8806 Package suse32_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html Package suse32_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html Package suse32_locale-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_locale-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_locale-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_openmotif-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_openmotif-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_openmotif-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_openssl-10.0nb5 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0590 Package suse32_openssl-10.0nb5 has a signature-spoofing vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0591 Package suse32_openssl-10.0nb5 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0789 Package suse32_openssl-10.0nb5 has a remote-denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1377 Package suse32_openssl-10.0nb5 has a remote-denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1378 Package suse32_openssl-10.0nb5 has a remote-denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1379 Package suse32_openssl-10.0nb5 has a signature-spoofing vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5077 Package suse32_openssl-10.0nb5 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1386 Package suse32_openssl-10.0nb5 has a session-hijack vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00009.html Package suse32_openssl-10.0nb5 has a man-in-the-middle-attack vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00000.html Package suse32_openssl-10.0nb5 has a unknown-impact vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html Package suse32_openssl-10.0nb5 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_openssl-10.0nb5 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2939 Package suse32_openssl-10.0nb5 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3864 Package suse32_openssl-10.0nb5 has a remote-security-bypass vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4180 Package suse32_openssl-10.0nb5 has a sensitive-information-disclosure vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0014 Package suse32_openssl-10.0nb5 has a sensitive-information-disclosure vulnerability, see http://support.novell.com/security/cve/CVE-2011-1945.html Package suse32_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2011-3207.html Package suse32_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2011-3210.html Package suse32_openssl-10.0nb5 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2006-7250.html Package suse32_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2012-1165.html Package suse32_openssl-10.0nb5 has a man-in-the-middle-attack vulnerability, see http://support.novell.com/security/cve/CVE-2012-0884.html Package suse32_openssl-10.0nb5 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/52292/ Package suse32_openssl-10.0nb5 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-6449.html Package suse32_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-6450.html Package suse32_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-4353.html Package suse32_openssl-10.0nb5 has a sensitive-information-disclosure vulnerability, see http://support.novell.com/security/cve/CVE-2014-0076.html Package suse32_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2010-5298.html Package suse32_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0198.html Package suse32_openssl-10.0nb5 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-0195.html Package suse32_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0221.html Package suse32_openssl-10.0nb5 has a man-in-the-middle-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-0224.html Package suse32_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-3470.html Package suse32_openssl-10.0nb5 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20140806.txt Package suse32_openssl-10.0nb5 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20141015.txt Package suse32_openssl-10.0nb5 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20150611.txt Package suse32_openssl-10.0nb5 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv/20151203.txt Package suse32_openssl-10.0nb5 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv/20151203.txt Package suse32_resmgr-10.0nb1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_slang-10.0nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_slang-10.0nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_slang-10.0nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_x11-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_x11-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_x11-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_x11-10.0nb4 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-2062.html Package suse32_x11-10.0nb4 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-1981.html Package suse32_x11-10.0nb4 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-1997.html Package suse32_x11-10.0nb4 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-2004.html Package suse32_x11-10.0nb4 has a privilege-escalation vulnerability, see http://support.novell.com/security/cve/CVE-2013-6462.html Package suse32_x11-10.0nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-6425.html Package suse32_x11-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-0209.html Package suse32_x11-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-0210.html Package suse32_x11-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-0211.html Package suse_alsa-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_alsa-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_alsa-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_aspell-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_aspell-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_aspell-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_base-10.0nb8 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_base-10.0nb8 has a privilege-escalation vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3856 Package suse_base-10.0nb8 has a arbitrary-code-execution vulnerability, see https://hermes.opensuse.org/messages/7712778 Package suse_base-10.0nb8 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2011-1071.html Package suse_base-10.0nb8 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1659 Package suse_base-10.0nb8 has a remote-system-access vulnerability, see http://lists.opensuse.org/opensuse-updates/2011-07/msg00041.html Package suse_base-10.0nb8 has a information-disclosure vulnerability, see http://secunia.com/advisories/47432/ Package suse_base-10.0nb8 has a local-system-compromise vulnerability, see http://secunia.com/advisories/47409/ Package suse_base-10.0nb8 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_base-10.0nb8 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_base-10.0nb8 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-4043.html Package suse_base-10.0nb8 has a directory-traversal vulnerability, see http://support.novell.com/security/cve/CVE-2014-0475.html Package suse_base-10.0nb8 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-5119.html Package suse_base-10.0nb8 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-6040.html Package suse_base-10.0nb8 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html Package suse_base-10.0nb8 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0235 Package suse_base-10.0nb8 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2015-02/msg00089.html Package suse_base-10.0nb8 has a invalid-file-descriptor-reuse vulnerability, see http://www.openwall.com/lists/oss-security/2015/01/28/20 Package suse_base-10.0nb8 has a buffer-overrun vulnerability, see http://www.openwall.com/lists/oss-security/2015/02/04/1 Package suse_base-10.0nb8 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-1781 Package suse_base-10.0nb8 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2327 Package suse_base-10.0nb8 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2328 Package suse_base-10.0nb8 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8380 Package suse_base-10.0nb8 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8382 Package suse_base-10.0nb8 has a uninitialized-memory-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8390 Package suse_base-10.0nb8 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8383 Package suse_base-10.0nb8 has a integer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8394 Package suse_base-10.0nb8 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8381 Package suse_base-10.0nb8 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8392 Package suse_base-10.0nb8 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8386 Package suse_base-10.0nb8 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8385 Package suse_base-10.0nb8 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8388 Package suse_base-10.0nb8 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8384 Package suse_base-10.0nb8 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8389 Package suse_base-10.0nb8 has a sensitive-information-disclosure vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8393 Package suse_base-10.0nb8 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8391 Package suse_base-10.0nb8 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8395 Package suse_base-10.0nb8 has a security-bypass vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8777 Package suse_base-10.0nb8 has a stack-overflow vulnerability, see https://sourceware.org/bugzilla/show_bug.cgi?id=17905 Package suse_base-10.0nb8 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2016/dsa-3481 Package suse_base-10.0nb8 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html Package suse_base-10.0nb8 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-06/msg00030.html Package suse_base-10.0nb8 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-5417 Package suse_base-10.0nb8 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8804 Package suse_compat-10.0nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_compat-10.0nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_compat-10.0nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_expat-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_expat-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_expat-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_expat-10.0nb2 has a denial-of-service vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4472 Package suse_fontconfig-10.0nb7 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_fontconfig-10.0nb7 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_fontconfig-10.0nb7 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_fontconfig-10.0nb7 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5384 Package suse_freetype2-10.0nb5 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0946 Package suse_freetype2-10.0nb5 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_freetype2-10.0nb5 has a buffer-overflow vulnerability, see http://secunia.com/advisories/44008/ Package suse_freetype2-10.0nb5 has a arbitrary-code-execution vulnerability, see http://secunia.com/advisories/41958/ Package suse_freetype2-10.0nb5 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2011-0226.html Package suse_freetype2-10.0nb5 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3256 Package suse_freetype2-10.0nb5 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3439 Package suse_freetype2-10.0nb5 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_freetype2-10.0nb5 has a local-system-compromise vulnerability, see http://secunia.com/advisories/48805/ Package suse_freetype2-10.0nb5 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2012-5668.html Package suse_freetype2-10.0nb5 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2012-5669.html Package suse_freetype2-10.0nb5 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_glx-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_glx-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_glx-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_gtk2-10.0nb4 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1194 Package suse_gtk2-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_gtk2-10.0nb4 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2011-03/msg00019.html Package suse_gtk2-10.0nb4 has a local-security-bypass vulnerability, see http://secunia.com/advisories/43933/ Package suse_gtk2-10.0nb4 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4352 Package suse_gtk2-10.0nb4 has a denial-of-service vulnerability, see http://secunia.com/advisories/45308/ Package suse_gtk2-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_gtk2-10.0nb4 has a remote-system-access vulnerability, see http://secunia.com/advisories/49983/ Package suse_gtk2-10.0nb4 has a multiple-vulnerabilities vulnerability, see https://secunia.com/advisories/51170/ Package suse_gtk2-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_gtk2-10.0nb4 has a arbitrary-code-execution vulnerability, see http://lists.opensuse.org/opensuse-updates/2014-12/msg00062.html Package suse_krb5-10.0 has a unknown-impact vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html Package suse_krb5-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_krb5-10.0 has a remote-spoofing vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1323 Package suse_krb5-10.0 has a privilege-escalation vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1324 Package suse_krb5-10.0 has a remote-security-bypass vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4020 Package suse_krb5-10.0 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html Package suse_krb5-10.0 has a arbitrary-code-execution vulnerability, see http://secunia.com/advisories/44027/ Package suse_krb5-10.0 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/46546/ Package suse_krb5-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_krb5-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_krb5-10.0 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-4341.html Package suse_krb5-10.0 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-4342.html Package suse_krb5-10.0 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-4343.html Package suse_krb5-10.0 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-4344.html Package suse_krb5-10.0 has a denial-of-service vulnerability, see http://www.secunia.com/advisories/62976 Package suse_libcups-10.0nb4 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1182 Package suse_libcups-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_libcups-10.0nb4 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/40165/ Package suse_libcups-10.0nb4 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/41706/ Package suse_libcups-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_libcups-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_libcups-10.0nb4 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-3537.html Package suse_libcups-10.0nb4 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5029.html Package suse_libcups-10.0nb4 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5030.html Package suse_libcups-10.0nb4 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5031.html Package suse_libidn-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_libjpeg-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_libjpeg-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_libjpeg-10.0nb2 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2012-2806.html Package suse_libjpeg-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_libpng-10.0nb4 has a information-disclosure vulnerability, see http://secunia.com/advisories/35346/ Package suse_libpng-10.0nb4 has a unknown-impact vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html Package suse_libpng-10.0nb4 has a remote-system-access vulnerability, see http://secunia.com/advisories/40302/ Package suse_libpng-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_libpng-10.0nb4 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-updates/2011-08/msg00026.html Package suse_libpng-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_libpng-10.0nb4 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3026 Package suse_libpng-10.0nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2011-3045.html Package suse_libpng-10.0nb4 has a local-system-compromise vulnerability, see http://support.novell.com/security/cve/CVE-2011-3048.html Package suse_libpng-10.0nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2012-3425.html Package suse_libpng-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_libpng-10.0nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-6954.html Package suse_libpng-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2013-7354.html Package suse_libpng-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2013-7353.html Package suse_libsigc++2-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_libsigc++2-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_libsigc++2-10.0 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_libtiff-10.0nb4 has a denial-of-service vulnerability, see http://secunia.com/advisories/40422/ Package suse_libtiff-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_libtiff-10.0nb4 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5022 Package suse_libtiff-10.0nb4 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3087 Package suse_libtiff-10.0nb4 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0192 Package suse_libtiff-10.0nb4 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1167 Package suse_libtiff-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_libtiff-10.0nb4 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1173 Package suse_libtiff-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2012-2088.html Package suse_libtiff-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2012-2113.html Package suse_libtiff-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2012-3401.html Package suse_libtiff-10.0nb4 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4447 Package suse_libtiff-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2013-1960.html Package suse_libtiff-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2013-1961.html Package suse_libtiff-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_libtiff-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2013-6369.html Package suse_libtiff-10.0nb4 has a multiple-vulnerabilities vulnerability, see http://advisories.mageia.org/MGASA-2015-0112.html Package suse_libtiff-10.0nb4 has a arbitrary-memory-access vulnerability, see http://www.securityfocus.com/archive/1/537205 Package suse_libtiff-10.0nb4 has a heap-overflow vulnerability, see http://www.securityfocus.com/archive/1/537208 Package suse_libtiff-10.0nb4 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8781 Package suse_libtiff-10.0nb4 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8782 Package suse_libtiff-10.0nb4 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8783 Package suse_libtiff-10.0nb4 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2016/dsa-3467 Package suse_libtiff-10.0nb4 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1547 Package suse_libtiff-10.0nb4 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3186 Package suse_libxml2-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4008 Package suse_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4494 Package suse_libxml2-10.0nb2 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2011-1944.html Package suse_libxml2-10.0nb2 has a remote-system-access vulnerability, see http://secunia.com/advisories/47572/ Package suse_libxml2-10.0nb2 has a remote-system-access vulnerability, see http://secunia.com/advisories/47647/ Package suse_libxml2-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_libxml2-10.0nb2 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2011-3102.html Package suse_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2012-2807.html Package suse_libxml2-10.0nb2 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5134 Package suse_libxml2-10.0nb2 has a multiple-vulnerabilities vulnerability, see http://support.novell.com/security/cve/CVE-2013-1969.html Package suse_libxml2-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0191.html Package suse_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0191.html Package suse_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3660 Package suse_libxml2-10.0nb2 has a out-of-bounds-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7942 Package suse_libxml2-10.0nb2 has a out-of-bounds-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7941 Package suse_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8035 Package suse_libxml2-10.0nb2 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2015/dsa-3430 Package suse_libxml2-10.0nb2 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8806 Package suse_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html Package suse_libxml2-10.0nb2 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html Package suse_locale-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_locale-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_locale-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_openmotif-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_openmotif-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_openmotif-10.0nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_openssl-10.0nb5 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0590 Package suse_openssl-10.0nb5 has a signature-spoofing vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0591 Package suse_openssl-10.0nb5 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0789 Package suse_openssl-10.0nb5 has a remote-denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1377 Package suse_openssl-10.0nb5 has a remote-denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1378 Package suse_openssl-10.0nb5 has a remote-denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1379 Package suse_openssl-10.0nb5 has a signature-spoofing vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5077 Package suse_openssl-10.0nb5 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1386 Package suse_openssl-10.0nb5 has a session-hijack vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00009.html Package suse_openssl-10.0nb5 has a man-in-the-middle-attack vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00000.html Package suse_openssl-10.0nb5 has a unknown-impact vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html Package suse_openssl-10.0nb5 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_openssl-10.0nb5 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2939 Package suse_openssl-10.0nb5 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3864 Package suse_openssl-10.0nb5 has a remote-security-bypass vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4180 Package suse_openssl-10.0nb5 has a sensitive-information-disclosure vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0014 Package suse_openssl-10.0nb5 has a sensitive-information-disclosure vulnerability, see http://support.novell.com/security/cve/CVE-2011-1945.html Package suse_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2011-3207.html Package suse_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2011-3210.html Package suse_openssl-10.0nb5 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2006-7250.html Package suse_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2012-1165.html Package suse_openssl-10.0nb5 has a man-in-the-middle-attack vulnerability, see http://support.novell.com/security/cve/CVE-2012-0884.html Package suse_openssl-10.0nb5 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/52292/ Package suse_openssl-10.0nb5 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-6449.html Package suse_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-6450.html Package suse_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-4353.html Package suse_openssl-10.0nb5 has a sensitive-information-disclosure vulnerability, see http://support.novell.com/security/cve/CVE-2014-0076.html Package suse_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2010-5298.html Package suse_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0198.html Package suse_openssl-10.0nb5 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-0195.html Package suse_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0221.html Package suse_openssl-10.0nb5 has a man-in-the-middle-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-0224.html Package suse_openssl-10.0nb5 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-3470.html Package suse_openssl-10.0nb5 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20140806.txt Package suse_openssl-10.0nb5 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20141015.txt Package suse_openssl-10.0nb5 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20150611.txt Package suse_openssl-10.0nb5 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv/20151203.txt Package suse_openssl-10.0nb5 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv/20151203.txt Package suse_resmgr-10.0nb1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_slang-10.0nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_slang-10.0nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_slang-10.0nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_x11-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_x11-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_x11-10.0nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_x11-10.0nb4 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-2062.html Package suse_x11-10.0nb4 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-1981.html Package suse_x11-10.0nb4 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-1997.html Package suse_x11-10.0nb4 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-2004.html Package suse_x11-10.0nb4 has a privilege-escalation vulnerability, see http://support.novell.com/security/cve/CVE-2013-6462.html Package suse_x11-10.0nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-6425.html Package suse_x11-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-0209.html Package suse_x11-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-0210.html Package suse_x11-10.0nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-0211.html Package suse32_alsa-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_aspell-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_base-12.1nb7 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_base-12.1nb7 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-4043.html Package suse32_base-12.1nb7 has a directory-traversal vulnerability, see http://support.novell.com/security/cve/CVE-2014-0475.html Package suse32_base-12.1nb7 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-5119.html Package suse32_base-12.1nb7 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-6040.html Package suse32_base-12.1nb7 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html Package suse32_base-12.1nb7 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0235 Package suse32_base-12.1nb7 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2015-02/msg00089.html Package suse32_base-12.1nb7 has a invalid-file-descriptor-reuse vulnerability, see http://www.openwall.com/lists/oss-security/2015/01/28/20 Package suse32_base-12.1nb7 has a buffer-overrun vulnerability, see http://www.openwall.com/lists/oss-security/2015/02/04/1 Package suse32_base-12.1nb7 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-1781 Package suse32_base-12.1nb7 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2327 Package suse32_base-12.1nb7 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2328 Package suse32_base-12.1nb7 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8380 Package suse32_base-12.1nb7 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8382 Package suse32_base-12.1nb7 has a uninitialized-memory-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8390 Package suse32_base-12.1nb7 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8383 Package suse32_base-12.1nb7 has a integer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8394 Package suse32_base-12.1nb7 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8381 Package suse32_base-12.1nb7 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8392 Package suse32_base-12.1nb7 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8386 Package suse32_base-12.1nb7 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8385 Package suse32_base-12.1nb7 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8388 Package suse32_base-12.1nb7 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8384 Package suse32_base-12.1nb7 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8389 Package suse32_base-12.1nb7 has a sensitive-information-disclosure vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8393 Package suse32_base-12.1nb7 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8391 Package suse32_base-12.1nb7 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8395 Package suse32_base-12.1nb7 has a security-bypass vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8777 Package suse32_base-12.1nb7 has a stack-overflow vulnerability, see https://sourceware.org/bugzilla/show_bug.cgi?id=17905 Package suse32_base-12.1nb7 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2016/dsa-3481 Package suse32_base-12.1nb7 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html Package suse32_base-12.1nb7 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-06/msg00030.html Package suse32_base-12.1nb7 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-5417 Package suse32_base-12.1nb7 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8804 Package suse32_compat-12.1nb1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_expat-12.1nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_expat-12.1nb2 has a denial-of-service vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4472 Package suse32_fontconfig-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_fontconfig-12.1 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5384 Package suse32_freetype2-12.1nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_glx-12.1nb1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_gtk2-12.1nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_gtk2-12.1nb4 has a arbitrary-code-execution vulnerability, see http://lists.opensuse.org/opensuse-updates/2014-12/msg00062.html Package suse32_krb5-12.1nb1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_krb5-12.1nb1 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-4341.html Package suse32_krb5-12.1nb1 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-4342.html Package suse32_krb5-12.1nb1 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-4343.html Package suse32_krb5-12.1nb1 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-4344.html Package suse32_krb5-12.1nb1 has a denial-of-service vulnerability, see http://www.secunia.com/advisories/62976 Package suse32_libcups-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_libcups-12.1 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-3537.html Package suse32_libcups-12.1 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5029.html Package suse32_libcups-12.1 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5030.html Package suse32_libcups-12.1 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5031.html Package suse32_libcurl-12.1nb1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_libcurl-12.1nb1 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-2174.html Package suse32_libcurl-12.1nb1 has a privilege-escalation vulnerability, see http://support.novell.com/security/cve/CVE-2014-0138.html Package suse32_libcurl-12.1nb1 has a ssl-certificate-spoofing vulnerability, see http://support.novell.com/security/cve/CVE-2014-0139.html Package suse32_libcurl-12.1nb1 has a weak-ssl-authentication vulnerability, see https://curl.haxx.se/docs/adv_20160803A.html Package suse32_libcurl-12.1nb1 has a weak-ssl-authentication vulnerability, see https://curl.haxx.se/docs/adv_20160803B.html Package suse32_libcurl-12.1nb1 has a use-after-free vulnerability, see https://curl.haxx.se/docs/adv_20160803C.html Package suse32_libdrm-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_libjpeg-12.1nb1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_libpng-12.1nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_libpng-12.1nb3 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-6954.html Package suse32_libpng-12.1nb3 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2013-7354.html Package suse32_libpng-12.1nb3 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2013-7353.html Package suse32_libsigc++2-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_libtiff-12.1nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_libtiff-12.1nb3 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2013-6369.html Package suse32_libtiff-12.1nb3 has a multiple-vulnerabilities vulnerability, see http://advisories.mageia.org/MGASA-2015-0112.html Package suse32_libtiff-12.1nb3 has a multiple-vulnerabilities vulnerability, see http://advisories.mageia.org/MGASA-2015-0112.html Package suse32_libtiff-12.1nb3 has a arbitrary-memory-access vulnerability, see http://www.securityfocus.com/archive/1/537205 Package suse32_libtiff-12.1nb3 has a heap-overflow vulnerability, see http://www.securityfocus.com/archive/1/537208 Package suse32_libtiff-12.1nb3 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8781 Package suse32_libtiff-12.1nb3 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8782 Package suse32_libtiff-12.1nb3 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8783 Package suse32_libtiff-12.1nb3 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2016/dsa-3467 Package suse32_libtiff-12.1nb3 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1547 Package suse32_libtiff-12.1nb3 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3186 Package suse32_libxml2-12.1nb6 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_libxml2-12.1nb6 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0191.html Package suse32_libxml2-12.1nb6 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0191.html Package suse32_libxml2-12.1nb6 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3660 Package suse32_libxml2-12.1nb6 has a out-of-bounds-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7942 Package suse32_libxml2-12.1nb6 has a out-of-bounds-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7941 Package suse32_libxml2-12.1nb6 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8035 Package suse32_libxml2-12.1nb6 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2015/dsa-3430 Package suse32_libxml2-12.1nb6 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8806 Package suse32_libxml2-12.1nb6 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html Package suse32_libxml2-12.1nb6 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html Package suse32_locale-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_openmotif-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_openssl-12.1nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_openssl-12.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-6449.html Package suse32_openssl-12.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-6450.html Package suse32_openssl-12.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-4353.html Package suse32_openssl-12.1nb4 has a sensitive-information-disclosure vulnerability, see http://support.novell.com/security/cve/CVE-2014-0076.html Package suse32_openssl-12.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2010-5298.html Package suse32_openssl-12.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0198.html Package suse32_openssl-12.1nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-0195.html Package suse32_openssl-12.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0221.html Package suse32_openssl-12.1nb4 has a man-in-the-middle-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-0224.html Package suse32_openssl-12.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-3470.html Package suse32_openssl-12.1nb4 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20140806.txt Package suse32_openssl-12.1nb4 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20141015.txt Package suse32_openssl-12.1nb4 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20150319.txt Package suse32_openssl-12.1nb4 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20150611.txt Package suse32_openssl-12.1nb4 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv/20151203.txt Package suse32_openssl-12.1nb4 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv/20151203.txt Package suse32_qt4-12.1nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_qt4-12.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-4549.html Package suse32_qt4-12.1nb4 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html Package suse32_qt4-12.1nb4 has a multiple-vulnerabilities vulnerability, see http://lists.qt-project.org/pipermail/announce/2015-April/000067.html Package suse32_slang-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_sqlite3-12.1 has a multiple-vulnerabilities vulnerability, see http://lcamtuf.blogspot.dk/2015/04/finding-bugs-in-sqlite-easy-way.html Package suse32_sqlite3-12.1 has a data-leak vulnerability, see https://www.korelogic.com/Resources/Advisories/KL-001-2016-003.txt Package suse32_x11-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse32_x11-12.1 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-2062.html Package suse32_x11-12.1 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-1981.html Package suse32_x11-12.1 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-1997.html Package suse32_x11-12.1 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-2004.html Package suse32_x11-12.1 has a privilege-escalation vulnerability, see http://support.novell.com/security/cve/CVE-2013-6462.html Package suse32_x11-12.1 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-6425.html Package suse32_x11-12.1 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-0209.html Package suse32_x11-12.1 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-0210.html Package suse32_x11-12.1 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-0211.html Package suse_alsa-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_aspell-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_base-12.1nb7 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_base-12.1nb7 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-4043.html Package suse_base-12.1nb7 has a directory-traversal vulnerability, see http://support.novell.com/security/cve/CVE-2014-0475.html Package suse_base-12.1nb7 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-5119.html Package suse_base-12.1nb7 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-6040.html Package suse_base-12.1nb7 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html Package suse_base-12.1nb7 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0235 Package suse_base-12.1nb7 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2015-02/msg00089.html Package suse_base-12.1nb7 has a invalid-file-descriptor-reuse vulnerability, see http://www.openwall.com/lists/oss-security/2015/01/28/20 Package suse_base-12.1nb7 has a buffer-overrun vulnerability, see http://www.openwall.com/lists/oss-security/2015/02/04/1 Package suse_base-12.1nb7 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-1781 Package suse_base-12.1nb7 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2327 Package suse_base-12.1nb7 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2328 Package suse_base-12.1nb7 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8380 Package suse_base-12.1nb7 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8382 Package suse_base-12.1nb7 has a uninitialized-memory-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8390 Package suse_base-12.1nb7 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8383 Package suse_base-12.1nb7 has a integer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8394 Package suse_base-12.1nb7 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8381 Package suse_base-12.1nb7 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8392 Package suse_base-12.1nb7 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8386 Package suse_base-12.1nb7 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8385 Package suse_base-12.1nb7 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8388 Package suse_base-12.1nb7 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8384 Package suse_base-12.1nb7 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8389 Package suse_base-12.1nb7 has a sensitive-information-disclosure vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8393 Package suse_base-12.1nb7 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8391 Package suse_base-12.1nb7 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8395 Package suse_base-12.1nb7 has a security-bypass vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8777 Package suse_base-12.1nb7 has a stack-overflow vulnerability, see https://sourceware.org/bugzilla/show_bug.cgi?id=17905 Package suse_base-12.1nb7 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2016/dsa-3481 Package suse_base-12.1nb7 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html Package suse_base-12.1nb7 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-06/msg00030.html Package suse_base-12.1nb7 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-5417 Package suse_base-12.1nb7 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8804 Package suse_compat-12.1nb1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_expat-12.1nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_expat-12.1nb2 has a denial-of-service vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4472 Package suse_fontconfig-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_fontconfig-12.1 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5384 Package suse_freetype2-12.1nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_glx-12.1nb1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_gtk2-12.1nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_gtk2-12.1nb4 has a arbitrary-code-execution vulnerability, see http://lists.opensuse.org/opensuse-updates/2014-12/msg00062.html Package suse_krb5-12.1nb1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_krb5-12.1nb1 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-4341.html Package suse_krb5-12.1nb1 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-4342.html Package suse_krb5-12.1nb1 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-4343.html Package suse_krb5-12.1nb1 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-4344.html Package suse_krb5-12.1nb1 has a denial-of-service vulnerability, see http://www.secunia.com/advisories/62976 Package suse_libcups-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_libcups-12.1 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-3537.html Package suse_libcups-12.1 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5029.html Package suse_libcups-12.1 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5030.html Package suse_libcups-12.1 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5031.html Package suse_libcurl-12.1nb1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_libcurl-12.1nb1 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-2174.html Package suse_libcurl-12.1nb1 has a privilege-escalation vulnerability, see http://support.novell.com/security/cve/CVE-2014-0138.html Package suse_libcurl-12.1nb1 has a ssl-certificate-spoofing vulnerability, see http://support.novell.com/security/cve/CVE-2014-0139.html Package suse_libcurl-12.1nb1 has a weak-ssl-authentication vulnerability, see https://curl.haxx.se/docs/adv_20160803A.html Package suse_libcurl-12.1nb1 has a weak-ssl-authentication vulnerability, see https://curl.haxx.se/docs/adv_20160803B.html Package suse_libcurl-12.1nb1 has a use-after-free vulnerability, see https://curl.haxx.se/docs/adv_20160803C.html Package suse_libdrm-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_libjpeg-12.1nb1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_libpng-12.1nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_libpng-12.1nb3 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-6954.html Package suse_libpng-12.1nb3 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2013-7354.html Package suse_libpng-12.1nb3 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2013-7353.html Package suse_libsigc++2-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_libtiff-12.1nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_libtiff-12.1nb3 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2013-6369.html Package suse_libtiff-12.1nb3 has a multiple-vulnerabilities vulnerability, see http://advisories.mageia.org/MGASA-2015-0112.html Package suse_libtiff-12.1nb3 has a multiple-vulnerabilities vulnerability, see http://advisories.mageia.org/MGASA-2015-0112.html Package suse_libtiff-12.1nb3 has a arbitrary-memory-access vulnerability, see http://www.securityfocus.com/archive/1/537205 Package suse_libtiff-12.1nb3 has a heap-overflow vulnerability, see http://www.securityfocus.com/archive/1/537208 Package suse_libtiff-12.1nb3 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8781 Package suse_libtiff-12.1nb3 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8782 Package suse_libtiff-12.1nb3 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8783 Package suse_libtiff-12.1nb3 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2016/dsa-3467 Package suse_libtiff-12.1nb3 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1547 Package suse_libtiff-12.1nb3 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3186 Package suse_libxml2-12.1nb6 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_libxml2-12.1nb6 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0191.html Package suse_libxml2-12.1nb6 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0191.html Package suse_libxml2-12.1nb6 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3660 Package suse_libxml2-12.1nb6 has a out-of-bounds-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7942 Package suse_libxml2-12.1nb6 has a out-of-bounds-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7941 Package suse_libxml2-12.1nb6 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8035 Package suse_libxml2-12.1nb6 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2015/dsa-3430 Package suse_libxml2-12.1nb6 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8806 Package suse_libxml2-12.1nb6 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html Package suse_libxml2-12.1nb6 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html Package suse_locale-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_openmotif-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_openssl-12.1nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_openssl-12.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-6449.html Package suse_openssl-12.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-6450.html Package suse_openssl-12.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-4353.html Package suse_openssl-12.1nb4 has a sensitive-information-disclosure vulnerability, see http://support.novell.com/security/cve/CVE-2014-0076.html Package suse_openssl-12.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2010-5298.html Package suse_openssl-12.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0198.html Package suse_openssl-12.1nb4 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-0195.html Package suse_openssl-12.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0221.html Package suse_openssl-12.1nb4 has a man-in-the-middle-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-0224.html Package suse_openssl-12.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-3470.html Package suse_openssl-12.1nb4 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20140806.txt Package suse_openssl-12.1nb4 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20141015.txt Package suse_openssl-12.1nb4 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20150319.txt Package suse_openssl-12.1nb4 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20150611.txt Package suse_openssl-12.1nb4 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv/20151203.txt Package suse_openssl-12.1nb4 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv/20151203.txt Package suse_qt4-12.1nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_qt4-12.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-4549.html Package suse_qt4-12.1nb4 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html Package suse_qt4-12.1nb4 has a multiple-vulnerabilities vulnerability, see http://lists.qt-project.org/pipermail/announce/2015-April/000067.html Package suse_slang-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_sqlite3-12.1 has a multiple-vulnerabilities vulnerability, see http://lcamtuf.blogspot.dk/2015/04/finding-bugs-in-sqlite-easy-way.html Package suse_sqlite3-12.1 has a data-leak vulnerability, see https://www.korelogic.com/Resources/Advisories/KL-001-2016-003.txt Package suse_x11-12.1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse_x11-12.1 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-2062.html Package suse_x11-12.1 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-1981.html Package suse_x11-12.1 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-1997.html Package suse_x11-12.1 has a remote-system-access vulnerability, see http://support.novell.com/security/cve/CVE-2013-2004.html Package suse_x11-12.1 has a privilege-escalation vulnerability, see http://support.novell.com/security/cve/CVE-2013-6462.html Package suse_x11-12.1 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2013-6425.html Package suse_x11-12.1 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-0209.html Package suse_x11-12.1 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-0210.html Package suse_x11-12.1 has a arbitrary-code-execution vulnerability, see http://support.novell.com/security/cve/CVE-2014-0211.html Package suse32_base-13.1nb13 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-1781 Package suse32_base-13.1nb13 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2327 Package suse32_base-13.1nb13 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2328 Package suse32_base-13.1nb13 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8380 Package suse32_base-13.1nb13 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8382 Package suse32_base-13.1nb13 has a uninitialized-memory-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8390 Package suse32_base-13.1nb13 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8383 Package suse32_base-13.1nb13 has a integer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8394 Package suse32_base-13.1nb13 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8381 Package suse32_base-13.1nb13 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8392 Package suse32_base-13.1nb13 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8386 Package suse32_base-13.1nb13 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8385 Package suse32_base-13.1nb13 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8388 Package suse32_base-13.1nb13 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8384 Package suse32_base-13.1nb13 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8389 Package suse32_base-13.1nb13 has a sensitive-information-disclosure vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8393 Package suse32_base-13.1nb13 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8391 Package suse32_base-13.1nb13 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8395 Package suse32_base-13.1nb13 has a stack-overflow vulnerability, see https://sourceware.org/bugzilla/show_bug.cgi?id=17905 Package suse32_base-13.1nb13 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html Package suse32_base-13.1nb13 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-06/msg00030.html Package suse32_base-13.1nb13 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-5417 Package suse32_base-13.1nb13 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8804 Package suse32_expat-13.1 has a denial-of-service vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4472 Package suse32_fontconfig-13.1nb1 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5384 Package suse32_krb5-13.1nb4 has a denial-of-service vulnerability, see http://www.secunia.com/advisories/62976 Package suse32_libcups-13.1nb1 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-3537.html Package suse32_libcups-13.1nb1 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5029.html Package suse32_libcups-13.1nb1 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5030.html Package suse32_libcups-13.1nb1 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5031.html Package suse32_libcurl-13.1nb7 has a weak-ssl-authentication vulnerability, see https://curl.haxx.se/docs/adv_20160803A.html Package suse32_libcurl-13.1nb7 has a weak-ssl-authentication vulnerability, see https://curl.haxx.se/docs/adv_20160803B.html Package suse32_libcurl-13.1nb7 has a use-after-free vulnerability, see https://curl.haxx.se/docs/adv_20160803C.html Package suse32_libdbus-13.1nb7 has a denial-of-service vulnerability, see https://bugs.freedesktop.org/show_bug.cgi?id=85105 Package suse32_libsndfile-13.1nb3 has a stack-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7585 Package suse32_libsndfile-13.1nb3 has a stack-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7586 Package suse32_libsndfile-13.1nb3 has a stack-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7741 Package suse32_libsndfile-13.1nb3 has a stack-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7742 Package suse32_libsndfile-13.1nb3 has a buffer-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8365 Package suse32_libsndfile-13.1nb3 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8362 Package suse32_libsndfile-13.1nb3 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8363 Package suse32_libsndfile-13.1nb3 has a buffer-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8361 Package suse32_libsndfile-13.1nb3 has a out-of-bounds-read vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8365 Package suse32_libsndfile-13.1nb3 has a buffer-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8361 Package suse32_libsndfile-13.1nb3 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8362 Package suse32_libsndfile-13.1nb3 has a out-of-bounds-read vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8363 Package suse32_libtiff-13.1nb3 has a multiple-vulnerabilities vulnerability, see http://advisories.mageia.org/MGASA-2015-0112.html Package suse32_libtiff-13.1nb3 has a multiple-vulnerabilities vulnerability, see http://advisories.mageia.org/MGASA-2015-0112.html Package suse32_libtiff-13.1nb3 has a multiple-vulnerabilities vulnerability, see http://advisories.mageia.org/MGASA-2015-0112.html Package suse32_libtiff-13.1nb3 has a arbitrary-memory-access vulnerability, see http://www.securityfocus.com/archive/1/537205 Package suse32_libtiff-13.1nb3 has a heap-overflow vulnerability, see http://www.securityfocus.com/archive/1/537208 Package suse32_libtiff-13.1nb3 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8781 Package suse32_libtiff-13.1nb3 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8782 Package suse32_libtiff-13.1nb3 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8783 Package suse32_libtiff-13.1nb3 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2016/dsa-3467 Package suse32_libtiff-13.1nb3 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1547 Package suse32_libtiff-13.1nb3 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3186 Package suse32_libxml2-13.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0191.html Package suse32_libxml2-13.1nb4 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3660 Package suse32_libxml2-13.1nb4 has a out-of-bounds-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7942 Package suse32_libxml2-13.1nb4 has a out-of-bounds-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7941 Package suse32_libxml2-13.1nb4 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8035 Package suse32_libxml2-13.1nb4 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2015/dsa-3430 Package suse32_libxml2-13.1nb4 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8806 Package suse32_libxml2-13.1nb4 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html Package suse32_libxml2-13.1nb4 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html Package suse32_mozilla-nspr-13.1nb5 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1951 Package suse32_openssl-13.1nb14 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20150319.txt Package suse32_openssl-13.1nb14 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20150319.txt Package suse32_openssl-13.1nb14 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20150611.txt Package suse32_openssl-13.1nb14 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv/20151203.txt Package suse32_openssl-13.1nb14 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv/20151203.txt Package suse32_qt4-13.1nb4 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html Package suse32_qt4-13.1nb4 has a multiple-vulnerabilities vulnerability, see http://lists.qt-project.org/pipermail/announce/2015-April/000067.html Package suse32_sqlite3-13.1 has a multiple-vulnerabilities vulnerability, see http://lcamtuf.blogspot.dk/2015/04/finding-bugs-in-sqlite-easy-way.html Package suse32_sqlite3-13.1 has a data-leak vulnerability, see https://www.korelogic.com/Resources/Advisories/KL-001-2016-003.txt Package suse_base-13.1nb13 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-1781 Package suse_base-13.1nb13 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2327 Package suse_base-13.1nb13 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2328 Package suse_base-13.1nb13 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8380 Package suse_base-13.1nb13 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8382 Package suse_base-13.1nb13 has a uninitialized-memory-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8390 Package suse_base-13.1nb13 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8383 Package suse_base-13.1nb13 has a integer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8394 Package suse_base-13.1nb13 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8381 Package suse_base-13.1nb13 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8392 Package suse_base-13.1nb13 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8386 Package suse_base-13.1nb13 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8385 Package suse_base-13.1nb13 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8388 Package suse_base-13.1nb13 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8384 Package suse_base-13.1nb13 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8389 Package suse_base-13.1nb13 has a sensitive-information-disclosure vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8393 Package suse_base-13.1nb13 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8391 Package suse_base-13.1nb13 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8395 Package suse_base-13.1nb13 has a stack-overflow vulnerability, see https://sourceware.org/bugzilla/show_bug.cgi?id=17905 Package suse_base-13.1nb13 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html Package suse_base-13.1nb13 has a multiple-vulnerabilities vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-06/msg00030.html Package suse_base-13.1nb13 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-5417 Package suse_base-13.1nb13 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8804 Package suse_expat-13.1 has a denial-of-service vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4472 Package suse_fontconfig-13.1nb1 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5384 Package suse_krb5-13.1nb4 has a denial-of-service vulnerability, see http://www.secunia.com/advisories/62976 Package suse_libcups-13.1nb1 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-3537.html Package suse_libcups-13.1nb1 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5029.html Package suse_libcups-13.1nb1 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5030.html Package suse_libcups-13.1nb1 has a symlink-attack vulnerability, see http://support.novell.com/security/cve/CVE-2014-5031.html Package suse_libcurl-13.1nb7 has a weak-ssl-authentication vulnerability, see https://curl.haxx.se/docs/adv_20160803A.html Package suse_libcurl-13.1nb7 has a weak-ssl-authentication vulnerability, see https://curl.haxx.se/docs/adv_20160803B.html Package suse_libcurl-13.1nb7 has a use-after-free vulnerability, see https://curl.haxx.se/docs/adv_20160803C.html Package suse_libdbus-13.1nb7 has a denial-of-service vulnerability, see https://bugs.freedesktop.org/show_bug.cgi?id=85105 Package suse_libsndfile-13.1nb3 has a stack-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7585 Package suse_libsndfile-13.1nb3 has a stack-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7586 Package suse_libsndfile-13.1nb3 has a stack-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7741 Package suse_libsndfile-13.1nb3 has a stack-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7742 Package suse_libsndfile-13.1nb3 has a buffer-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8365 Package suse_libsndfile-13.1nb3 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8362 Package suse_libsndfile-13.1nb3 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8363 Package suse_libsndfile-13.1nb3 has a buffer-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8361 Package suse_libsndfile-13.1nb3 has a out-of-bounds-read vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8365 Package suse_libsndfile-13.1nb3 has a buffer-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8361 Package suse_libsndfile-13.1nb3 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8362 Package suse_libsndfile-13.1nb3 has a out-of-bounds-read vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8363 Package suse_libtiff-13.1nb3 has a multiple-vulnerabilities vulnerability, see http://advisories.mageia.org/MGASA-2015-0112.html Package suse_libtiff-13.1nb3 has a multiple-vulnerabilities vulnerability, see http://advisories.mageia.org/MGASA-2015-0112.html Package suse_libtiff-13.1nb3 has a multiple-vulnerabilities vulnerability, see http://advisories.mageia.org/MGASA-2015-0112.html Package suse_libtiff-13.1nb3 has a arbitrary-memory-access vulnerability, see http://www.securityfocus.com/archive/1/537205 Package suse_libtiff-13.1nb3 has a heap-overflow vulnerability, see http://www.securityfocus.com/archive/1/537208 Package suse_libtiff-13.1nb3 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8781 Package suse_libtiff-13.1nb3 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8782 Package suse_libtiff-13.1nb3 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8783 Package suse_libtiff-13.1nb3 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2016/dsa-3467 Package suse_libtiff-13.1nb3 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1547 Package suse_libtiff-13.1nb3 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3186 Package suse_libxml2-13.1nb4 has a denial-of-service vulnerability, see http://support.novell.com/security/cve/CVE-2014-0191.html Package suse_libxml2-13.1nb4 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3660 Package suse_libxml2-13.1nb4 has a out-of-bounds-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7942 Package suse_libxml2-13.1nb4 has a out-of-bounds-read vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7941 Package suse_libxml2-13.1nb4 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8035 Package suse_libxml2-13.1nb4 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2015/dsa-3430 Package suse_libxml2-13.1nb4 has a heap-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8806 Package suse_libxml2-13.1nb4 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html Package suse_libxml2-13.1nb4 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html Package suse_mozilla-nspr-13.1nb5 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1951 Package suse_openssl-13.1nb14 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20150319.txt Package suse_openssl-13.1nb14 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20150319.txt Package suse_openssl-13.1nb14 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv_20150611.txt Package suse_openssl-13.1nb14 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv/20151203.txt Package suse_openssl-13.1nb14 has a multiple-vulnerabilities vulnerability, see https://www.openssl.org/news/secadv/20151203.txt Package suse_qt4-13.1nb4 has a denial-of-service vulnerability, see http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html Package suse_qt4-13.1nb4 has a multiple-vulnerabilities vulnerability, see http://lists.qt-project.org/pipermail/announce/2015-April/000067.html Package suse_sqlite3-13.1 has a multiple-vulnerabilities vulnerability, see http://lcamtuf.blogspot.dk/2015/04/finding-bugs-in-sqlite-easy-way.html Package suse_sqlite3-13.1 has a data-leak vulnerability, see https://www.korelogic.com/Resources/Advisories/KL-001-2016-003.txt Package fuse-2.9.3 has a denial-of-service vulnerability, see http://secunia.com/advisories/42961/ Package fuse-2.9.3 has a privilege-escalation vulnerability, see https://www.debian.org/security/2015/dsa-3266 Package fuse-2.9.3 has a arbitrary-file-overwrite vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-3202 Package fuse-encfs-1.2.0.2nb5 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/41158/ Package fuse-ntfs-3g-2015.3.14 has a privilege-escalation vulnerability, see https://www.debian.org/security/2015/dsa-3268 Package libntfs-2015.3.14 has a privilege-escalation vulnerability, see https://www.debian.org/security/2015/dsa-3268 Package openafs-1.6.17nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0159 Package openafs-1.6.17nb2 has a information-disclosure vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9772 Package openafs-1.7.11nb1 has a sensitive-information-exposure vulnerability, see http://www.openafs.org/pages/security/OPENAFS-SA-2013-004.txt Package openafs-1.7.11nb1 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0159 Package openafs-1.7.11nb1 has a information-leak vulnerability, see https://www.openafs.org/pages/security/OPENAFS-SA-2015-007.txt Package squashfs-4.3nb2 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-4646 Package magento-1.9.2.2nb1 has a multiple-vulnerabilities vulnerability, see http://blog.checkpoint.com/2015/04/20/analyzing-magento-vulnerability/ Package magento-1.9.2.2nb1 has a input-validation vulnerability, see http://www.vulnerability-lab.com/get_content.php?id=1570 Package magento-1.9.2.2nb1 has a cross-site-request-forgeries vulnerability, see http://www.vulnerability-lab.com/get_content.php?id=1643 Package magento-1.9.2.2nb1 has a input-validation vulnerability, see http://www.vulnerability-lab.com/get_content.php?id=1636 Package magento-1.9.2.2nb1 has a validation-bypass vulnerability, see http://www.vulnerability-lab.com/get_content.php?id=1203 Package magento-1.9.2.2nb1 has a man-in-the-middle vulnerability, see https://cxsecurity.com/issue/WLB-2016010129 Package magento-1.9.2.2nb1 has a weak-authentication vulnerability, see https://magento.com/security/patches/supee-7405 Package magento-1.9.2.2nb1 has a php-object-injection vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4010 Package magento-1.9.2.2nb1 has a multiple-vulnerabilities vulnerability, see http://www.defensecode.com/advisories/DC-2017-04-003_Magento_Arbitrary_File_Upload.pdf Package crossfire-server-1.11.0nb25 has a privilege-escalation vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4908 Package flightgear-2.8.0nb35 has a buffer-overflow vulnerability, see http://secunia.com/advisories/48780/ Package flightgear-2.8.0nb35 has a arbitrary-file-overwrite vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9956 Package gnuchess-6.2.3 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8972 Package ioquake3-1.36nb2 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2764 Package ioquake3-1.36nb2 has a arbitrary-file-overwrite vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3345 Package ioquake3-1.36nb2 has a arbitrary-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6903 Package simgear-2.8.0nb35 has a denial-of-service vulnerability, see http://secunia.com/advisories/44434/ Package ufoai-2.2.1nb18 has a remote-system-access vulnerability, see http://secunia.com/advisories/40321/ Package gpsdrive-1.31nb25 has a privilege-escalation vulnerability, see http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496436 Package mapserver-5.6.8nb29 has a arbitrary-sql-injection vulnerability, see http://secunia.com/advisories/56155/ Package mapserver-5.6.8nb29 has a stack-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5522 Package GraphicsMagick-1.3.25nb2 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7996 Package GraphicsMagick-1.3.25nb2 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7997 Package GraphicsMagick-1.3.25nb2 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7800 Package GraphicsMagick-1.3.25nb2 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-8682 Package GraphicsMagick-1.3.25nb2 has a unspecified vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-8683 Package GraphicsMagick-1.3.25nb2 has a unspecified vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-8684 Package GraphicsMagick-1.3.25nb2 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9830 Package GraphicsMagick-1.3.25nb2 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6335 Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7941 Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7942 Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7943 Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8343 Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8344 Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8345 Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8346 Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8347 Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8348 Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8349 Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8350 Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8351 Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8352 Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8353 Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8354 Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8355 Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8356 Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8357 Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8765 Package ImageMagick-7.0.5.6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8830 Package ImageMagick6-6.9.7.9nb1 has a out-of-bounds-write vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5509 Package ImageMagick6-6.9.7.9nb1 has a unspecified vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5506 Package ImageMagick6-6.9.7.9nb1 has a unspecified vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10144 Package ImageMagick6-6.9.7.9nb1 has a unspecified vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10145 Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8343 Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8344 Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8345 Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8346 Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8347 Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8348 Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8349 Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8350 Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8351 Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8352 Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8353 Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8354 Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8355 Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8356 Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8357 Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8765 Package ImageMagick6-6.9.7.9nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8830 Package autotrace-0.31.1nb36 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7392 Package blender-2.77anb6 has a multiple-vulnerabilities vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5105 Package cairo-1.14.8 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9082 Package darktable-2.0.7nb5 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2126 Package dcraw-9.27.0 has a denial-of-service vulnerability, see http://www.ocert.org/advisories/ocert-2015-006.html Package djvulibre-tools-3.5.27 has a insecure-temp-file vulnerability, see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775193 Package exiv2-0.25 has a heap-overflow vulnerability, see http://dev.exiv2.org/issues/960 Package exiv2-0.25 has a buffer-overflow vulnerability, see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=781123 Package freetype-1.5 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10244 Package freetype2-2.8 has a out-of-bounds-write vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7857 Package freetype2-2.8 has a out-of-bounds-write vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7858 Package freetype2-2.8 has a out-of-bounds-write vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7864 Package freetype2-2.8 has a out-of-bounds-write vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8105 Package freetype2-2.8 has a out-of-bounds-write vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8287 Package gdk-pixbuf2-2.36.6 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6311 Package gdk-pixbuf2-2.36.6 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6312 Package gdk-pixbuf2-2.36.6 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6313 Package gdk-pixbuf2-2.36.6 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6314 Package giflib-util-5.1.4 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3977 Package gimp-ufraw-0.22nb4 has a denial-of-service vulnerability, see http://www.ocert.org/advisories/ocert-2015-006.html Package graphite2-1.3.7 has a out-of-bounds-write vulnerability, see https://www.mozilla.org/en-US/security/advisories/mfsa2017-10/ Package jasper-2.0.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5498 Package jasper-2.0.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5499 Package jasper-2.0.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5500 Package jasper-2.0.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5501 Package jasper-2.0.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5502 Package jasper-2.0.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5503 Package jasper-2.0.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5504 Package jasper-2.0.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5505 Package jasper-2.0.12 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6850 Package jasper-2.0.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6851 Package jbig2dec-0.13 has a integer-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9601 Package jbig2dec-0.13 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7885 Package jbig2dec-0.13 has a out-of-bounds-write vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7975 Package jbig2dec-0.13 has a out-of-bounds-write vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7976 Package jpeg-9b has a multiple-vulnerabilities vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-3616 Package kdegraphics-3.5.10nb46 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0945 Package kdegraphics-3.5.10nb46 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1709 Package kdegraphics-3.5.10nb46 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4035 Package kdegraphics-3.5.10nb46 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4035 Package lib3ds-1.2.0nb7 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0280 Package libbpg-0.9.2 has a out-of-bounds-write vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8710 Package libkdcraw-15.08.3nb4 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2126 Package libkdcraw-0.1.9nb28 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2126 Package libraw-0.13.8 has a remote-system-access vulnerability, see http://secunia.com/advisories/53547/ Package libraw-0.13.8 has a denial-of-service vulnerability, see http://www.ocert.org/advisories/ocert-2015-006.html Package libwmf-0.2.8.4nb16 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2016-9011 Package opencv-3.2.0 has a arbitrary-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1516 Package opencv-3.2.0 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1517 Package opencv-2.4.11nb6 has a arbitrary-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1516 Package opencv-2.4.11nb6 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1517 Package openjpeg-2.1.2 has a null-pointer-bug vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9114 Package openjpeg-2.1.2 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9117 Package openjpeg-2.1.2 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9115 Package openjpeg-2.1.2 has a buffer-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9118 Package openjpeg-2.1.2 has a null-pointer-bug vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9113 Package openjpeg-2.1.2 has a null-pointer-bug vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9116 Package openjpeg-2.1.2 has a floating-point-exception vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9112 Package potrace-1.14 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7263 Package potrace-1.14 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7263 Package sane-backends-1.0.25nb4 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6318 Package shotwell-0.22.0nb12 has a man-in-the-middle vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1000033 Package tiff-4.0.7nb11 has a arbitrary-memory-access vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-7554 Package tiff-4.0.7nb11 has a remote-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-8331 Package tiff-4.0.7nb11 has a buffer-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10095 Package tiff-4.0.7nb11 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2016-10269 Package chicken-4.11.0 has a buffer-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6830 Package chicken-4.11.0 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6831 Package chicken-4.11.0 has a buffer-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-6949 Package chicken-4.11.0 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9954 Package gcc3-3.3.6 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package gcc3-c++-3.3.6 has a denial-of-service vulnerability, see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=61601 Package gcc3-c++-3.3.6 has a memory-corruption vulnerability, see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=61582 Package gcc34-3.4.6nb8 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package gcc34-3.4.6nb8 has a denial-of-service vulnerability, see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=61601 Package gcc34-3.4.6nb8 has a memory-corruption vulnerability, see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=61582 Package gcc44-4.4.7nb7 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package gcc44-4.4.7nb7 has a denial-of-service vulnerability, see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=61601 Package gcc44-4.4.7nb7 has a memory-corruption vulnerability, see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=61582 Package gcc48-4.8.5 has a insufficiently-random-numbers vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5276 Package gcc48-libs-4.8.5nb1 has a insufficiently-random-numbers vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5276 Package guile-1.8.8nb8 has a insecure-file-permissions vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-8605 Package openjdk7-1.7.80nb7 has a multiple-vulnerabilities vulnerability, see http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html#AppendixJAVA Package openjdk7-1.7.80nb7 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package oracle-jdk8-8.0.121 has a multiple-vulnerabilities vulnerability, see http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA Package oracle-jre8-8.0.121 has a multiple-vulnerabilities vulnerability, see http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA Package ruby21-2.1.10 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package ruby21-base-2.1.10 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package sun-jdk6-6.0.45nb2 has a arbitrary-code-execution vulnerability, see http://secunia.com/advisories/45173/ Package sun-jdk6-6.0.45nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package sun-jdk6-6.0.45nb2 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/53846/ Package sun-jdk6-6.0.45nb2 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/55315/ Package sun-jdk6-6.0.45nb2 has a unspecified vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5772 Package sun-jdk6-6.0.45nb2 has a unspecified vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802 Package sun-jdk6-6.0.45nb2 has a multiple-vulnerabilities vulnerability, see http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html#AppendixJAVA Package sun-jdk6-6.0.45nb2 has a multiple-vulnerabilities vulnerability, see http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixJAVA Package sun-jdk6-6.0.45nb2 has a multiple-vulnerabilities vulnerability, see http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html#AppendixJAVA Package sun-jdk7-7.0.80nb1 has a multiple-vulnerabilities vulnerability, see http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html#AppendixJAVA Package sun-jdk7-7.0.80nb1 has a multiple-vulnerabilities vulnerability, see http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html#AppendixJAVA Package sun-jdk7-7.0.80nb1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package sun-jre6-6.0.45nb1 has a arbitrary-code-execution vulnerability, see http://secunia.com/advisories/45173/ Package sun-jre6-6.0.45nb1 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package sun-jre6-6.0.45nb1 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/53846/ Package sun-jre6-6.0.45nb1 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/55315/ Package sun-jre6-6.0.45nb1 has a unspecified vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5772 Package sun-jre6-6.0.45nb1 has a unspecified vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802 Package sun-jre6-6.0.45nb1 has a multiple-vulnerabilities vulnerability, see http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html#AppendixJAVA Package sun-jre6-6.0.45nb1 has a multiple-vulnerabilities vulnerability, see http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixJAVA Package sun-jre6-6.0.45nb1 has a multiple-vulnerabilities vulnerability, see http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html#AppendixJAVA Package sun-jre7-7.0.80 has a multiple-vulnerabilities vulnerability, see http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html#AppendixJAVA Package sun-jre7-7.0.80 has a multiple-vulnerabilities vulnerability, see http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html#AppendixJAVA Package sun-jre7-7.0.80 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package claws-mail-3.14.1nb1 has a buffer-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8708 Package cyrus-imapd-2.2.13p1nb15 has a remote-data-manipulation vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1926 Package cyrus-imapd-2.2.13p1nb15 has a buffer-overflow vulnerability, see http://secunia.com/advisories/45938/ Package cyrus-imapd-2.2.13p1nb15 has a security-bypass vulnerability, see http://secunia.com/advisories/46093/ Package cyrus-imapd-2.3.18nb22 has a unspecified vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8077 Package cyrus-imapd-2.3.18nb22 has a sensitive-information-disclosure vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8076 Package cyrus-imapd-2.3.18nb22 has a unspecified vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8078 Package cyrus-imapd-2.4.18nb1 has a unspecified vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8077 Package cyrus-imapd-2.4.18nb1 has a unspecified vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8078 Package deliver-2.1.14nb3 has a insecure-lock-files vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0439 Package deliver-2.1.14nb3 has a insecure-lock-files vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1123 Package dovecot-1.2.17nb24 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package evolution-data-server-2.32.3nb46 has a remote-information-exposure vulnerability, see http://secunia.com/advisories/45941/ Package exim-3.36nb17 has a privilege-escalation vulnerability, see http://secunia.com/advisories/40019/ Package exim-3.36nb17 has a privilege-escalation vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4345 Package exim-3.36nb17 has a local-privilege-escalation vulnerability, see http://secunia.com/advisories/43101/ Package exim-3.36nb17 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1407 Package exim-3.36nb17 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1764 Package exim-3.36nb17 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5671 Package exim-3.36nb17 has a input-validation vulnerability, see https://lists.exim.org/lurker/message/20140722.152452.d6c019e8.en.html Package exim-3.36nb17 has a privilege-escalation vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1531 Package exim-3.36nb17 has a information-leak vulnerability, see https://exim.org/static/doc/CVE-2016-9963.txt Package imp-4.3.11nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package imp-4.3.11nb2 has a cross-site-scripting vulnerability, see http://lists.horde.org/archives/announce/2015/001089.html Package ingo-1.2.6nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package libytnef-1.5 has a null-dereference vulnerability, see http://www.securityfocus.com/archive/1/540133 Package mailman-2.1.20 has a cross-site-request-forgery vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6893 Package p5-Email-Address-1.908nb1 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7686 Package sqwebmail-5.5.3nb7 has a cross-site-scripting vulnerability, see http://secunia.com/advisories/15119/ Package thunderbird24-24.8.1nb5 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package thunderbird31-31.7.0nb6 has a multiple-vulnerabilities vulnerability, see https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/#firefoxesr31.8 Package thunderbird31-31.7.0nb6 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package turba-2.3.6nb7 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package wmmail-0.64nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package R-3.3.3nb1 has a buffer-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-8714 Package gnumeric-1.8.4nb44 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6836 Package gnumeric-1.10.17nb27 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6836 Package suse-10.0nb5 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse-10.0nb5 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse-10.0nb5 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package suse-12.1nb2 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package bsdiff-4.3 has a arbitrary-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9862 Package calibre-1.48.0nb26 has a information-disclosure vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10187 Package dpkg-1.18.23nb1 has a directory-traversal vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8283 Package kdeutils-3.5.10nb37 has a directory-traversal vulnerability, see http://secunia.com/advisories/45378/ Package koffice-1.6.3nb77 has a arbitrary-code-execution vulnerability, see http://secunia.com/advisories/40966/ Package koffice-1.6.3nb77 has a buffer-overflow vulnerability, see http://secunia.com/advisories/50199/ Package libreoffice5-bin-5.1.0 has a memory-corruption vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0794 Package libreoffice5-bin-5.1.0 has a memory-corruption vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0795 Package php56-orangehrm-2.7 has a multiple-vulnerabilities vulnerability, see http://www.securityfocus.com/archive/1/535245 Package ruby23-bundler-1.14.6 has a code-injection vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7954 Package udfclient-0.8 has a buffer-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8305 Package adobe-flash-plugin-11.2.202.644nb1 has a multiple-vulnerabilities vulnerability, see https://helpx.adobe.com/security/products/flash-player/apsb16-39.html Package adobe-flash-plugin-11.2.202.644nb1 has a multiple-vulnerabilities vulnerability, see https://helpx.adobe.com/security/products/flash-player/apsb17-02.html Package avidemux-2.5.4nb34 has a multiple-vulnerabilities vulnerability, see http://advisories.mageia.org/MGASA-2015-0233.html Package ffmpeg010-20150312.0.10.16nb5 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-5361 Package ffmpeg1-1.2.12nb7 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5479 Package ffmpeg1-1.2.12nb7 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6881 Package ffmpeg1-1.2.12nb7 has a multiple-vulnerabilities vulnerability, see http://www.openwall.com/lists/oss-security/2016/10/08/1 Package ffmpeg2-2.8.11nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6671 Package ffmpeg2-2.8.11nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6881 Package ffmpeg2-2.8.11nb1 has a multiple-vulnerabilities vulnerability, see http://www.openwall.com/lists/oss-security/2016/10/08/1 Package ffmpeg2-2.8.11nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-8595 Package gnash-0.8.10nb52 has a remote-system-access vulnerability, see http://secunia.com/advisories/47183/ Package gst-plugins0.10-bad-0.10.23nb6 has a arbitrary-code-execution vulnerability, see https://www.debian.org/security/2015/dsa-3225 Package gst-plugins0.10-good-0.10.31nb4 has a multiple-vulnerabilities vulnerability, see https://www.debian.org/security/2016/dsa-3724 Package libquicktime-1.2.4nb13 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2399 Package ming-0.4.5nb6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2016-9266 Package ming-0.4.5nb6 has a unspecified vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2016-9265 Package ming-0.4.5nb6 has a out-of-bounds-read vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2016-9264 Package ming-0.4.5nb6 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7578 Package pitivi-0.15.2nb10 has a arbitrary-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0855 Package vlc-2.2.4nb6 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/62720 Package vlc-2.0.9nb32 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/62720 Package vlc-2.0.9nb32 has a cross-site-scripting vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9743 Package vlc-2.0.9nb32 has a arbitrary-code-execution vulnerability, see http://www.ocert.org/advisories/ocert-2015-009.html Package vlc-2.0.9nb32 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3941 Package vlc-2.0.9nb32 has a arbitrary-code-execution vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5108 Package win32-codecs-071007 has a arbitrary-code-execution vulnerability, see http://secunia.com/advisories/40936/ Package win32-codecs-071007 has a remote-system-access vulnerability, see http://secunia.com/advisories/40934/ Package Radicale-1.1.1nb2 has a brute-force-attack vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8342 Package apollo-1.4 has a clickjacking vulnerability, see http://activemq.apache.org/security-advisories.data/CVE-2016-0734-announcement.txt Package apollo-1.4 has a cross-sites-scripting vulnerability, see http://activemq.apache.org/security-advisories.data/CVE-2016-0782-announcement.txt Package apollo-1.4 has a arbitrary-code-execution vulnerability, see http://activemq.apache.org/security-advisories.data/CVE-2015-5254-announcement.txt Package argus-3.7nb3 has a stack-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8333 Package argus-3.7nb3 has a stack-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8335 Package avahi-0.6.32nb6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-6519 Package cacti-0.8.8hnb3 has a remote-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-3659 Package cacti-0.8.8hnb3 has a sql-injection vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3659 Package cacti-0.8.8hnb3 has a sql-injection vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3172 Package cacti-0.8.8hnb3 has a security-bypass vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2313 Package cacti-spine-0.8.8hnb1 has a cross-site-scripting vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5588 Package cacti-spine-0.8.8hnb1 has a sql-injection vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5589 Package cacti-spine-0.8.8hnb1 has a cross-site-scripting vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2326 Package cacti-spine-0.8.8hnb1 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2328 Package cacti-spine-0.8.8hnb1 has a sql-injection vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2708 Package cacti-spine-0.8.8hnb1 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2709 Package chrony-1.31.1nb4 has a validation-bypass vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1567 Package citrix_ica-10.6.115659nb2 has a arbitrary-code-execution vulnerability, see http://secunia.com/advisories/40808/ Package corkscrew-2.0 has a buffer-overflow vulnerability, see http://people.freebsd.org/~niels/issues/corkscrew-20100821.txt Package echoping-6.0.2nb9 has a remote-system-access vulnerability, see http://secunia.com/advisories/42619/ Package ettercap-0.6.bnb34 has a remote-system-access vulnerability, see http://secunia.com/advisories/51731/ Package ettercap-0.6.bnb34 has a multiple-vulnerabilities vulnerability, see https://www.obrela.com/home/security-labs/advisories/osi-advisory-osi-1402/ Package ettercap-0.6.bnb34 has a out-of-bounds-read vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6430 Package ettercap-0.6.bnb34 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8366 Package ettercap-NG-0.7.3nb14 has a remote-system-access vulnerability, see http://secunia.com/advisories/51731/ Package ettercap-NG-0.7.3nb14 has a out-of-bounds-read vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6430 Package ettercap-NG-0.7.3nb14 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8366 Package freeradius-1.1.8nb14 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4966 Package freeradius-1.1.8nb14 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3547 Package freeradius-1.1.8nb14 has a denial-of-service vulnerability, see http://secunia.com/advisories/56956/ Package freeradius-1.1.8nb14 has a invalid-crl-checks vulnerability, see http://www.ocert.org/advisories/ocert-2015-008.html Package freerdp-1.0.2nb22 has a unknown vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0791 Package freerdp-1.0.2nb22 has a null-pointer-bug vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4118 Package freerdp-1.0.2nb22 has a null-pointer-bug vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4119 Package gnugk-2.2.0nb7 has a unknown vulnerability, see http://secunia.com/advisories/50343/ Package hesiod-3.0.2 has a weak-suid-check vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10151 Package hesiod-3.0.2 has a privilege-elevation vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2016-10152 Package icinga-base-1.9.4nb8 has a buffer-overflow vulnerability, see https://www.icinga.org/2014/02/11/bugfix-releases-1-10-3-1-9-5-1-8-6/ Package icinga-base-1.9.4nb8 has a buffer-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2386 Package icinga-base-1.9.4nb8 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1878 Package icinga-base-1.9.4nb8 has a cross-site-scripting vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7107 Package icinga-base-1.9.4nb8 has a stack-overflow vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2386 Package libgdata-0.6.6nb21 has a man-in-the-middle-attack vulnerability, see http://secunia.com/advisories/48315/ Package libupnp-1.6.19 has a remote-security-bypass vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6255 Package libupnp-1.6.19 has a remote-code-execution vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8863 Package libupnp-1.6.19 has a arbitrary-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-8863 Package mDNSResponder-258.14nb2 has a denial-of-service vulnerability, see https://www.kb.cert.org/vuls/id/143335 Package nagios-base-4.0.8nb9 has a remote-code-execution vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9565 Package nagios-base-4.0.8nb9 has a privilege-escalation vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9566 Package nagios-base-4.0.8nb9 has a cross-site-scripting vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2016-6209 Package net6-1.3.14nb3 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/46605/ Package ntop-4.1.0nb27 has a cross-site-scripting vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4165 Package ntopng-2.4nb8 has a cross-site-request-forgery vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5473 Package openslp-1.2.1nb9 has a null-dereference vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2016-4912 Package pppd-2.4.3nb2 has a privilege-escalation vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3158 Package pppd-2.4.3nb2 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-3310 Package quagga-1.0.20160315nb1 has a denial-of-service vulnerability, see http://secunia.com/advisories/49401/ Package quagga-1.0.20160315nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4049 Package quagga-1.0.20160315nb1 has a buffer-overflow vulnerability, see https://lists.quagga.net/pipermail/quagga-users/2016-October/014478.html Package quagga-1.0.20160315nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5495 Package rtmpdump-2.4nb3 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8270 Package rtmpdump-2.4nb3 has a arbitrary-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8271 Package rtmpdump-2.4nb3 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8272 Package samba-3.6.25nb4 has a privilege-escalation vulnerability, see https://www.samba.org/samba/security/CVE-2015-5299.html Package samba-3.6.25nb4 has a man-in-the-middle vulnerability, see https://www.samba.org/samba/security/CVE-2015-5296.html Package samba-3.6.25nb4 has a symlink-attack vulnerability, see https://www.samba.org/samba/security/CVE-2015-5252.html Package samba-3.6.25nb4 has a security-bypass vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-7560 Package samba-3.6.25nb4 has a man-in-the-middle-attack vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2118 Package samba-3.6.25nb4 has a man-in-the-middle-attack vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2110 Package samba-3.6.25nb4 has a denial-of-service vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-5370 Package samba-3.6.25nb4 has a man-in-the-middle-attack vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2113 Package samba-3.6.25nb4 has a man-in-the-middle-attack vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2114 Package samba-3.6.25nb4 has a man-in-the-middle-attack vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2115 Package samba-3.6.25nb4 has a sensitive-information-disclosure vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2111 Package samba-3.6.25nb4 has a man-in-the-middle-attack vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2112 Package samba-3.6.25nb4 has a information-disclosure vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-2619 Package slurm-0.3.3nb2 has a remote-information-modification vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10030 Package tcpreplay-3.4.4 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6160 Package tcpreplay-3.4.4 has a buffer-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6429 Package tigervnc-1.7.1nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-8241 Package tigervnc-1.7.1nb1 has a memory-corruption vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7392 Package tigervnc-1.7.1nb1 has a arbitrary-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7393 Package tigervnc-1.7.1nb1 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7394 Package tigervnc-1.7.1nb1 has a integer-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7395 Package tigervnc-1.7.1nb1 has a memory-corruption vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7396 Package tsclient-0.132nb80 has a remote-system-access vulnerability, see http://secunia.com/advisories/43120/ Package userppp-001107nb2 has a privilege-escalation vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1215 Package vino-2.32.2nb26 has a information-disclosure vulnerability, see http://secunia.com/advisories/50527/ Package vino-2.32.2nb26 has a denial-of-service vulnerability, see http://secunia.com/advisories/54995/ Package vino-2.32.2nb26 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5745 Package wget-1.19.1nb1 has a http-header-injection vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-6508 Package slurm-2.6.4nb9 has a remote-information-modification vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10030 Package acroread7-7.0.9nb4 has a remote-user-shell vulnerability, see http://www.securityfocus.com/bid/22753 Package acroread7-7.0.9nb4 has a remote-stack-smash vulnerability, see http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=657 Package acroread7-7.0.9nb4 has a remote-user-shell vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5663 Package acroread7-7.0.9nb4 has a remote-user-shell vulnerability, see http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=655 Package acroread7-7.0.9nb4 has a multiple-unspecified vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0655 Package acroread7-7.0.9nb4 has a remote-printing vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0667 Package acroread7-7.0.9nb4 has a remote-user-shell vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0726 Package acroread7-7.0.9nb4 has a temporary-files-race vulnerability, see http://support.novell.com/techcenter/psdb/d8c48c63359fc807624182696d3d149c.html Package acroread7-7.0.9nb4 has a arbitrary-code-execution vulnerability, see http://www.adobe.com/go/kb403079 Package acroread7-7.0.9nb4 has a arbitrary-file-reading vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1199 Package acroread7-7.0.9nb4 has a arbitrary-code-execution vulnerability, see http://www.adobe.com/support/security/bulletins/apsb08-15.html Package acroread7-7.0.9nb4 has a arbitrary-code-execution vulnerability, see http://www.adobe.com/support/security/advisories/apsa09-01.html Package acroread7-7.0.9nb4 has a arbitrary-code-execution vulnerability, see http://www.adobe.com/support/security/bulletins/apsb09-06.html Package acroread7-7.0.9nb4 has a arbitrary-code-execution vulnerability, see http://www.adobe.com/support/security/bulletins/apsb09-07.html Package acroread7-7.0.9nb4 has a arbitrary-code-execution vulnerability, see http://www.adobe.com/support/security/bulletins/apsb09-15.html Package acroread7-7.0.9nb4 has a arbitrary-code-execution vulnerability, see http://www.adobe.com/support/security/advisories/apsa09-07.html Package acroread7-7.0.9nb4 has a multiple-vulnerabilities vulnerability, see http://www.adobe.com/support/security/bulletins/apsb10-02.html Package acroread7-7.0.9nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package acroread8-8.1.7nb4 has a arbitrary-code-execution vulnerability, see http://www.adobe.com/support/security/advisories/apsa09-07.html Package acroread8-8.1.7nb4 has a multiple-vulnerabilities vulnerability, see http://www.adobe.com/support/security/bulletins/apsb10-02.html Package acroread8-8.1.7nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package acroread8-8.1.7nb4 has a remote-system-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2862 Package acroread8-8.1.7nb4 has a arbitrary-code-execution vulnerability, see http://secunia.com/advisories/42095/ Package acroread9-9.5.5nb3 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/50290/ Package acroread9-9.5.5nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package cups-1.5.4nb16 has a symlink-attack vulnerability, see http://www.cups.org/str.php?L4450 Package cups-1.5.4nb16 has a symlink-attack vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5029 Package cups-1.5.4nb16 has a symlink-attack vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5030 Package cups-1.5.4nb16 has a sensitive-information-disclosure vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5031 Package cups-1.5.4nb16 has a symlink-attack vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3537 Package cups-1.5.4nb16 has a symlink-attack vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5029 Package cups-1.5.4nb16 has a symlink-attack vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5030 Package cups-1.5.4nb16 has a sensitive-information-disclosure vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5031 Package cups-1.5.4nb16 has a buffer-overflow vulnerability, see https://www.cups.org/str.php?L4551 Package cups-1.5.4nb16 has a privilege-escalation vulnerability, see http://www.cups.org/str.php?L4609 Package foomatic-filters-3.0.2nb13 has a command-injection vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2697 Package foomatic-filters-4.0.17nb9 has a input-validation vulnerability, see https://www.debian.org/security/2015/dsa-3419 Package foomatic-filters-4.0.17nb9 has a remote-code-execution vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8560 Package ghostscript-agpl-9.21 has a use-after-free vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6196 Package ghostscript-agpl-9.21 has a use-after-free vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10217 Package ghostscript-agpl-9.21 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10218 Package ghostscript-agpl-9.21 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10219 Package ghostscript-agpl-9.21 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10220 Package ghostscript-agpl-9.21 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5951 Package ghostscript-agpl-9.21 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10317 Package ghostscript-agpl-9.21 has a out-of-bounds-write vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7948 Package ghostscript-agpl-9.21 has a remote-code-execution vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8291 Package ghostscript-gpl-9.06nb12 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10317 Package ghostscript-gpl-9.06nb12 has a out-of-bounds-write vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7948 Package ghostscript-gpl-9.06nb12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-8602 Package ghostscript-gpl-9.06nb12 has a remote-code-execution vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8291 Package podofo-0.9.5 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6840 Package podofo-0.9.5 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6841 Package podofo-0.9.5 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6842 Package podofo-0.9.5 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6843 Package podofo-0.9.5 has a buffer-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6844 Package podofo-0.9.5 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6845 Package podofo-0.9.5 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6846 Package podofo-0.9.5 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6847 Package podofo-0.9.5 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6848 Package podofo-0.9.5 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6849 Package podofo-0.9.5 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7378 Package podofo-0.9.5 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7379 Package podofo-0.9.5 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7380 Package podofo-0.9.5 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7381 Package podofo-0.9.5 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7382 Package podofo-0.9.5 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7383 Package podofo-0.9.5 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7994 Package podofo-0.9.5 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-8053 Package podofo-0.9.5 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-8054 Package podofo-0.9.5 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8787 Package podofo-0.9.5 has a heap-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8378 Package podofo-0.9.5 has a null-dereference vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7994 Package podofo-0.9.5 has a infinite-loop vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8054 Package podofo-0.9.5 has a infinite-loop vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8053 Package poppler-0.16.7nb8 has a multiple-vulnerabilities vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1788 Package poppler-0.16.7nb8 has a multiple-vulnerabilities vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1789 Package poppler-0.16.7nb8 has a multiple-vulnerabilities vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1790 Package poppler-0.16.7nb8 has a denial-of-service vulnerability, see http://secunia.com/advisories/56268/ Package poppler-0.16.7nb8 has a denial-of-service vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8868 Package base-1.4.3.1nb12 has a sql-injection vulnerability, see http://www.securityfocus.com/bid/51874/discuss Package clamav-0.99.2nb2 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1405 Package cryptopp-5.6.2nb3 has a sensitive-information-exposure vulnerability, see http://www.mail-archive.com/cryptopp-users@xxxxxxxxxxxxxxxx/msg07835.html Package cryptopp-5.6.2nb3 has a sensitive-information-disclosure vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7420 Package cryptopp-5.6.2nb3 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9939 Package dropbear-2013.62 has a command-injection vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3116 Package dropbear-2013.62 has a arbitrary-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7406 Package dropbear-2013.62 has a arbitrary-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7407 Package dropbear-2013.62 has a arbitrary-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7408 Package dropbear-2013.62 has a sensitive-information-disclosure vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7409 Package fwbuilder-5.1.0.3599nb2 has a privilege-escalation vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4956 Package gnutls-3.5.9 has a out-of-bounds-write vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7869 Package libprelude-0.9.24.1nb14 has a privilege-escalation vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3736 Package libtomcrypt-1.17nb2 has a signature-forgery vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6129 Package mbedtls-2.2.1nb1 has a remote-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-2784 Package mbedtls-1.3.17 has a remote-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-2784 Package mcrypt-2.6.8nb3 has a arbitrary-code-execution vulnerability, see http://secunia.com/advisories/50507/ Package openvas-server-2.0.0nb11 has a local-privilege-escalation vulnerability, see http://secunia.com/advisories/45836/ Package openvas-server-2.0.0nb11 has a remote-system-access vulnerability, see http://secunia.com/advisories/49128/ Package policykit-0.9nb20 has a integer-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-4625 Package policykit-0.9nb20 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-3218 Package policykit-0.9nb20 has a privilege-escalation vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-3255 Package policykit-0.9nb20 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-3256 Package prelude-manager-0.9.15nb10 has a sensitive-information-exposure vulnerability, see http://secunia.com/advisories/34987/ Package py27-gnupg-0.3.2nb2 has a arbitrary-command-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7323 Package py27-gnupg-0.3.2nb2 has a arbitrary-command-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1927 Package py27-gnupg-0.3.2nb2 has a arbitrary-command-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1928 Package py27-gnupg-0.3.2nb2 has a arbitrary-command-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1929 Package py27-prewikka-0.9.17.1nb1 has a sensitive-information-exposure vulnerability, see http://secunia.com/advisories/34928/ Package yara-3.4.0 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10210 Package yara-3.4.0 has a use-after-free vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10211 Package yara-3.4.0 has a out-of-bounds-read vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5923 Package yara-3.4.0 has a use-after-free vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5924 Package zoneminder-1.28.1nb12 has a authentication-bypass vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10140 Package zoneminder-1.28.1nb12 has a multiple-vulnerabilities vulnerability, see http://www.securityfocus.com/archive/1/540089 Package zoneminder-1.28.1nb12 has a multiple-vulnerabilities vulnerability, see http://www.securityfocus.com/archive/1/540093 Package zoneminder-1.28.1nb12 has a cross-site-scripting vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7203 Package bash-2.05.2.13 has a privilege-elevation vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7543 Package bash-2.05.2.13 has a security-bypass vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9401 Package bash-2.05.2.13 has a privilege-elevation vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-5932 Package lshell-0.9.16 has a arbitrary-command-execution vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2016-6903 Package ansible-1.9.4nb2 has a insecure-temp-files vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-3096 Package ansible-1.9.4nb2 has a arbitrary-file-access vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3096 Package grub2-2.00nb5 has a authentication-bypass vulnerability, see http://hmarco.org/bugs/CVE-2015-8370-Grub2-authentication-bypass.html Package kdirstat-2.4.4nb31 has a arbitrary-command-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2527 Package kdirstat-2.4.4nb31 has a arbitrary-command-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2528 Package libvirt-1.2.9nb16 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3445 Package libvirt-1.2.9nb16 has a denial-of-service vulnerability, see http://secunia.com/advisories/53440/ Package libvirt-1.2.9nb16 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/54169/ Package libvirt-1.2.9nb16 has a privilege-edescalation vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4153 Package libvirt-1.2.9nb16 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4154 Package libvirt-1.2.9nb16 has a denial-of-service vulnerability, see http://secunia.com/advisories/54400/ Package libvirt-1.2.9nb16 has a denial-of-service vulnerability, see http://secunia.com/advisories/55202/ Package libvirt-1.2.9nb16 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/54786/ Package libvirt-1.2.9nb16 has a denial-of-service vulnerability, see http://secunia.com/advisories/56245/ Package libvirt-1.2.9nb16 has a denial-of-service vulnerability, see http://secunia.com/advisories/56186/ Package libvirt-1.2.9nb16 has a denial-of-service vulnerability, see http://secunia.com/advisories/56321/ Package libvirt-1.2.9nb16 has a sensitive-information-disclosure vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7823 Package libvirt-1.2.9nb16 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8131 Package libvirt-1.2.9nb16 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8135 Package libvirt-1.2.9nb16 has a denial-of-service vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8136 Package libvirt-1.2.9nb16 has a security-bypass vulnerability, see http://security.libvirt.org/2015/0001.html Package libvirt-1.2.9nb16 has a arbitrary-file-access vulnerability, see http://security.libvirt.org/2015/0004.html Package libvirt-1.2.9nb16 has a denial-of-service vulnerability, see http://www.openwall.com/lists/oss-security/2016/05/24/5 Package libvirt-1.2.9nb16 has a authentication-bypass vulnerability, see http://security.libvirt.org/2016/0001.html Package ruby23-mcollective-2.1.1 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2788 Package munin-server-1.3.2nb10 has a arbitrary-file-overwrite vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6188 Package nautilus-2.32.2.1nb25 has a denial-of-service vulnerability, see http://seclists.org/bugtraq/2015/Dec/11 Package open-vm-tools-10.1.5nb1 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/43798/ Package ruby21-puppet-3.8.7 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package ruby21-chef-12.0.3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package sysinfo-3.5.1 has a local-privilege-escalation vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6516 Package xenkernel42-4.2.5nb15 has a denial-of-service vulnerability, see http://xenbits.xen.org/xsa/advisory-150.html Package xenkernel42-4.2.5nb15 has a denial-of-service vulnerability, see http://xenbits.xen.org/xsa/advisory-153.html Package xenkernel42-4.2.5nb15 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package xenkernel42-4.2.5nb15 has a information-leak vulnerability, see http://xenbits.xen.org/xsa/advisory-200.html Package xenkernel42-4.2.5nb15 has a denial-of-service vulnerability, see http://xenbits.xen.org/xsa/advisory-202.html Package xenkernel42-4.2.5nb15 has a privilege-elevation vulnerability, see http://xenbits.xen.org/xsa/advisory-204.html Package xenkernel42-4.2.5nb15 has a privilege-elevation vulnerability, see http://xenbits.xen.org/xsa/advisory-192.html Package xenkernel42-4.2.5nb15 has a denial-of-service vulnerability, see http://xenbits.xen.org/xsa/advisory-193.html Package xenkernel42-4.2.5nb15 has a arbitrary-code-execution vulnerability, see http://xenbits.xen.org/xsa/advisory-195.html Package xenkernel42-4.2.5nb15 has a privilege-elevation vulnerability, see http://xenbits.xen.org/xsa/advisory-197.html Package xenkernel42-4.2.5nb15 has a privilege-elevation vulnerability, see http://xenbits.xen.org/xsa/advisory-191.html Package xentools42-4.2.5nb21 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package xentools42-4.2.5nb21 has a arbitrary-file-overwrite vulnerability, see http://xenbits.xen.org/xsa/advisory-198.html Package xentools46-4.6.5nb2 has a denial-of-service vulnerability, see http://xenbits.xen.org/xsa/advisory-175.html Package xentools46-4.6.5nb2 has a denial-of-service vulnerability, see http://xenbits.xen.org/xsa/advisory-184.html Package xfsprogs-2.7.3nb3 has a information-disclosure vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2150 Package jansson-2.7 has a denial-of-service vulnerability, see http://secunia.com/advisories/56777/ Package jansson-2.7 has a stack-overflow vulnerability, see https://github.com/akheron/jansson/issues/282 Package libplist-1.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5209 Package libplist-1.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5545 Package libplist-1.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5834 Package libplist-1.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5835 Package libplist-1.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5836 Package libplist-1.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6435 Package libplist-1.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6436 Package libplist-1.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6437 Package libplist-1.12 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6438 Package libplist-1.12 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6439 Package libplist-1.12 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6440 Package libplist-1.12 has a heap-overflow vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7982 Package libxml2-2.9.4nb2 has a null-dereference vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5969 Package libxslt-1.1.29nb1 has a insufficiently-random-numbers vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2015-9019 Package p5-Data-FormValidator-4.86 has a sensitive-information-exposure vulnerability, see http://secunia.com/advisories/44832/ Package p5-XML-Twig-3.52 has a xml-external-entity vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9180 Package py27-docx-0.8.5 has a xml-external-entity vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-5851 Package py27-openpyxl-2.1.2 has a xml-external-entity vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5992 Package raptor-1.4.21nb14 has a sensitive-information-exposure vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0037 Package yaml-cpp-0.5.3 has a memory-corruption vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-5950 Package kronolith-2.3.6nb3 has a cross-site-scripting vulnerability, see http://secunia.com/advisories/51233/ Package kronolith-2.3.6nb3 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package libical-1.0nb3 has a multiple-vulnerabilities vulnerability, see http://www.openwall.com/lists/oss-security/2016/06/25/4 Package libical-1.0nb3 has a heap-buffer-overflow vulnerability, see http://www.securityfocus.com/bid/94948/info Package SOGo-2.3.20nb2 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6188 Package SOGo-2.3.20nb2 has a code-injection vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6191 Package amaya-11.3.1nb35 has a system-access vulnerability, see http://secunia.com/advisories/32848/ Package amaya-11.3.1nb35 has a arbitrary-code-execution vulnerability, see http://secunia.com/advisories/34531/ Package ap24-auth-mellon-0.12.0nb5 has a cross-site-session-transfer vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6807 Package apache-tomcat-5.5.35 has a cross-site-request-forgery vulnerability, see http://secunia.com/advisories/39261/ Package apache-tomcat-5.5.35 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package apache-tomcat-5.5.35 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/51138/ Package apache-tomcat-5.5.35 has a access-bypass vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5388 Package apache-tomcat-5.5.35 has a access-bypass vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5388 Package apache-tomcat-5.5.35 has a directory-traversal vulnerability, see http://www.defensecode.com/advisories/DC-2017-03-001_DefenseCode_ThunderScan_SAST_Apache_Tomcat_Security_Advisory.pdf Package apache-tomcat-6.0.45 has a access-bypass vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5388 Package apache-tomcat-6.0.45 has a access-bypass vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5388 Package apache-tomcat-6.0.45 has a information-leak vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8745 Package apache-tomcat-6.0.45 has a denial-of-service vulnerability, see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851304 Package apache-tomcat-6.0.45 has a remote-code-execution vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-8735 Package apache-tomcat-6.0.45 has a information-disclosure vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5647 Package apache-tomcat-6.0.45 has a directory-traversal vulnerability, see http://www.defensecode.com/advisories/DC-2017-03-001_DefenseCode_ThunderScan_SAST_Apache_Tomcat_Security_Advisory.pdf Package apache-tomcat-7.0.77 has a access-bypass vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5388 Package apache-tomcat-7.0.77 has a access-bypass vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5388 Package apache-tomcat-7.0.77 has a denial-of-service vulnerability, see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851304 Package apache-tomcat-7.0.77 has a directory-traversal vulnerability, see http://www.defensecode.com/advisories/DC-2017-03-001_DefenseCode_ThunderScan_SAST_Apache_Tomcat_Security_Advisory.pdf Package apache-tomcat-8.0.43 has a directory-traversal vulnerability, see http://www.defensecode.com/advisories/DC-2017-03-001_DefenseCode_ThunderScan_SAST_Apache_Tomcat_Security_Advisory.pdf Package apache-tomcat-8.5.13 has a directory-traversal vulnerability, see http://www.defensecode.com/advisories/DC-2017-03-001_DefenseCode_ThunderScan_SAST_Apache_Tomcat_Security_Advisory.pdf Package asp2php-0.77.3 has a remote-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1261 Package c-icap-0.4.4 has a denial-of-service vulnerability, see http://www.gentoo.org/security/en/glsa/glsa-201409-07.xml Package firefox10-10.0.12nb28 has a multiple-vulnerabilities vulnerability, see http://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html Package firefox10-10.0.12nb28 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package firefox17-17.0.11nb19 has a multiple-vulnerabilities vulnerability, see http://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html#firefox24.1 Package firefox17-17.0.11nb19 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package firefox24-24.8.1nb18 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package firefox31-31.8.0nb14 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package firefox36-3.6.28nb29 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package firefox36-3.6.28nb29 has a multiple-vulnerabilities vulnerability, see https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/ Package gallery-1.5.10nb9 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package gallery-1.5.10nb9 has a cross-site-scripting vulnerability, see http://secunia.com/advisories/53664/ Package gallery-1.5.10nb9 has a unknown vulnerability, see http://secunia.com/advisories/53964/ Package gallery-2.3.2nb1 has a cross-site-scripting vulnerability, see http://secunia.com/advisories/53664/ Package gallery-2.3.2nb1 has a unknown vulnerability, see http://secunia.com/advisories/53964/ Package ganglia-webfrontend-3.7.2nb1 has a cross-site-scripting vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0275 Package ganglia-webfrontend-3.7.2nb1 has a cross-site-scripting vulnerability, see http://secunia.com/advisories/52673/ Package ganglia-webfrontend-3.7.2nb1 has a cross-site-scripting vulnerability, see http://secunia.com/advisories/55854/ Package hiawatha-0.1nb5 has a multiple-vulnerabilities vulnerability, see http://www.hiawatha-webserver.org/changelog Package horde-3.3.13nb4 has a cross-site-scripting vulnerability, see http://secunia.com/advisories/51233/ Package horde-3.3.13nb4 has reached end-of-life (eol), see http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Package horde-3.3.13nb4 has a remote-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1691 Package horde-3.3.13nb4 has a cross-site-scripting vulnerability, see http://lists.horde.org/archives/announce/2015/001088.html Package horde-3.3.13nb4 has a cross-site-scripting vulnerability, see http://lists.horde.org/archives/announce/2016/001140.html Package icedtea-web-1.5.2nb9 has a security-bypass vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-5234 Package icedtea-web-1.5.2nb9 has a security-bypass vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-5235 Package jetty-7.6.8.20121106nb1 has a remote-security-bypass vulnerability, see http://secunia.com/advisories/55861/ Package jetty-7.6.8.20121106nb1 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0254 Package jetty-9.2.14.20151106 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0254 Package mini_httpd-1.21nb1 has a escape-sequence-injection vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-4490 Package moodle-3.2.2nb1 has a information-disclosure vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7919 Package moodle-3.2.2nb1 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9186 Package moodle-3.2.2nb1 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9187 Package moodle-3.2.2nb1 has a cross-site-scripting vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9188 Package moodle-3.2.2nb1 has a cross-site-scripting vulnerability, see http://www.daimacn.com/post/12.html Package opera-12.16 has a sensitive-information-exposure vulnerability, see http://secunia.com/advisories/47128/ Package opera-12.16 has a multiple-vulnerabilities vulnerability, see http://www.opera.com/docs/changelogs/unified/2600/ Package opera-12.16 has a unknown-impact vulnerability, see http://www.opera.com/docs/changelogs/unified/2800/ Package php56-concrete5-5.7.5.6nb1 has a http-header-injection vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-7725 Package php56-concrete5-5.7.5.6nb1 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8082 Package php56-http-2.6.0nb1 has a arbitrary-code-execution vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5873 Package php56-ja-wordpress-4.5.3 has a directory-traversal vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7169 Package php56-ja-wordpress-4.5.3 has a cross-site-scripting vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7168 Package php56-ja-wordpress-4.5.3 has a multiple-vulnerabilities vulnerability, see https://codex.wordpress.org/Version_4.7.1 Package php56-ja-wordpress-4.5.3 has a multiple-vulnerabilities vulnerability, see https://codex.wordpress.org/Version_4.7.2 Package php56-ja-wordpress-4.5.3 has a multiple-vulnerabilities vulnerability, see https://codex.wordpress.org/Version_4.7.3 Package php56-ja-wordpress-4.5.3 has a security-bypass vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8295 Package php56-piwigo-2.7.4 has a cross-site-scripting vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9751 Package php56-piwigo-2.7.4 has a multiple-vulnerabilities vulnerability, see http://piwigo.org/releases/2.8.5 Package php56-piwigo-2.7.4 has a cross-site-scripting vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5608 Package privoxy-3.0.23nb2 has a denial-of-service vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1982 Package privoxy-3.0.23nb2 has a denial-of-service vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1983 Package py27-django-cms-3.4.3 has a validation-bypass vulnerability, see http://www.vulnerability-lab.com/get_content.php?id=1821 Package py27-django-1.4.22 has a sensitive-information-exposure vulnerability, see http://secunia.com/advisories/54197/ Package py27-django-1.4.22 has a multiple-vulnerabilities vulnerability, see http://secunia.com/advisories/60181/ Package py27-django-1.4.22 has a cross-site-scripting vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2241 Package py27-django-1.4.22 has a spoofing-attack vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2512 Package py27-django-1.4.22 has a cross-site-request-forgeries vulnerability, see https://www.djangoproject.com/weblog/2016/sep/26/security-releases/ Package py27-django-1.4.22 has a multiple-vulnerabilities vulnerability, see https://www.djangoproject.com/weblog/2016/nov/01/security-releases/ Package py27-moin-1.9.7nb3 has a remote-information-exposure vulnerability, see http://secunia.com/advisories/32686/ Package py27-moin-1.9.7nb3 has a multiple-vulnerabilities vulnerability, see https://www.curesec.com/blog/article/blog/MoinMoin-198-XSS-175.html Package squidGuard-1.4nb12 has a remote-security-bypass vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3826 Package squidGuard-1.4nb12 has a cross-site-scripting vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8936 Package thttpd-2.26 has a escape-sequence-injection vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-4491 Package varnish-3.0.6nb2 has a http-header-injection vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8852 Package webkit-gtk-2.12.4nb6 has a multiple-vulnerabilities vulnerability, see https://webkitgtk.org/security/WSA-2017-0002.html Package webkit-gtk-2.12.4nb6 has a multiple-vulnerabilities vulnerability, see https://webkitgtk.org/security/WSA-2017-0001.html Package webkit24-gtk-2.4.11nb9 has a multiple-vulnerabilities vulnerability, see http://webkitgtk.org/security/WSA-2015-0002.html Package webkit24-gtk-2.4.11nb9 has a multiple-vulnerabilities vulnerability, see http://webkitgtk.org/security/WSA-2016-0001.html Package webkit24-gtk-2.4.11nb9 has a multiple-vulnerabilities vulnerability, see http://webkitgtk.org/security/WSA-2016-0002.html Package webkit24-gtk-2.4.11nb9 has a multiple-vulnerabilities vulnerability, see http://webkitgtk.org/security/WSA-2016-0003.html Package webkit24-gtk-2.4.11nb9 has a multiple-vulnerabilities vulnerability, see http://webkitgtk.org/security/WSA-2016-0004.html Package webkit24-gtk-2.4.11nb9 has a multiple-vulnerabilities vulnerability, see http://webkitgtk.org/security/WSA-2016-0005.html Package webkit24-gtk-2.4.11nb9 has a multiple-vulnerabilities vulnerability, see https://webkitgtk.org/security/WSA-2017-0002.html Package webkit24-gtk-2.4.11nb9 has a multiple-vulnerabilities vulnerability, see https://webkitgtk.org/security/WSA-2017-0001.html Package webkit24-gtk-2.4.11nb9 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9643 Package webkit24-gtk3-2.4.11nb8 has a multiple-vulnerabilities vulnerability, see http://webkitgtk.org/security/WSA-2015-0002.html Package webkit24-gtk3-2.4.11nb8 has a multiple-vulnerabilities vulnerability, see http://webkitgtk.org/security/WSA-2016-0001.html Package webkit24-gtk3-2.4.11nb8 has a multiple-vulnerabilities vulnerability, see http://webkitgtk.org/security/WSA-2016-0002.html Package webkit24-gtk3-2.4.11nb8 has a multiple-vulnerabilities vulnerability, see http://webkitgtk.org/security/WSA-2016-0003.html Package webkit24-gtk3-2.4.11nb8 has a multiple-vulnerabilities vulnerability, see http://webkitgtk.org/security/WSA-2016-0004.html Package webkit24-gtk3-2.4.11nb8 has a multiple-vulnerabilities vulnerability, see http://webkitgtk.org/security/WSA-2016-0005.html Package webkit24-gtk3-2.4.11nb8 has a multiple-vulnerabilities vulnerability, see https://webkitgtk.org/security/WSA-2017-0002.html Package webkit24-gtk3-2.4.11nb8 has a multiple-vulnerabilities vulnerability, see https://webkitgtk.org/security/WSA-2017-0001.html Package webkit24-gtk3-2.4.11nb8 has a denial-of-service vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9643 Package websvn-2.2.1nb2 has a cross-site-scripting vulnerability, see http://secunia.com/advisories/47288/ Package websvn-2.2.1nb2 has a symlink-attack vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6892 Package websvn-2.2.1nb2 has a cross-site-scripting vulnerability, see https://marc.info/?l=full-disclosure&m=145614987429774&w=2 Package websvn-2.2.1nb2 has a cross-site-scripting vulnerability, see http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2511 Package websvn-2.2.1nb2 has a cross-site-scripting vulnerability, see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1236 Package wordpress-4.7.3nb1 has a security-bypass vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2017-8295
- Next by Date: Meeting at BSDCan
- Next by thread: Meeting at BSDCan
- Index(es):