Approved changes feed: RSS · Atom

cpe:2.3:a:opensuse:zypper:11.0:*:*:*:*:*:*:*

part: a version: 11.0 update: *

VendorOpensuse (3380e48e-e718-5685-8ad0-092ef58910e5)
ProductZypper (01e570dd-2c06-5804-ac12-ef34f1c4d0ff)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/ubuntu/zypper purl2cpe 2026-06-01 10:15:36.589067
pkg:gem/zypper purl2cpe 2026-06-01 10:15:36.589069
pkg:github/opensuse/rubygem-zypper/ purl2cpe 2026-06-01 10:15:36.589071
pkg:github/opensuse/zypper purl2cpe 2026-06-01 10:15:36.589072
pkg:rpm/fedora/zypper purl2cpe 2026-06-01 10:15:36.589073
pkg:rpm/opensuse/zypper purl2cpe 2026-06-01 10:15:36.589075
pkg:sourceforge/pkgzypper purl2cpe 2026-06-01 10:15:36.589076

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-3187 vulnerable 2026-06-03 14:28:52.360744 Details available
zypp-refresh-patches in zypper in SUSE openSUSE 10.2, 10.3, and 11.0 does not ask the user before accepting repository keys, which allows remote repositories to cause a denial of service (package data corruption) via a spoofed key.
Published: 2008-07-21T16:00:00.000Z
Updated: 2024-08-07T09:28:41.927Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.