2398 matches found
OPENSUSE-SU-2021:1016-1 Security update for libqt5-qtwebengine
This update for libqt5-qtwebengine fixes the following issues: Update to version 5.15.3 CVE fixes backported in chromium updates: - CVE-2020-16044: Use after free in WebRTC - CVE-2021-21118: Heap buffer overflow in Blink - CVE-2021-21119: Use after free in Media - CVE-2021-21120: Use after free i...
SUSE-SU-2021:2208-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-33200: Enforcing incorrect limits for pointer arithmetic operations by the BPF verifier could be abused to perform out-of-bounds reads and writes in...
OPENSUSE-SU-2021:0926-1 Security update for tor
This update for tor fixes the following issues: tor 0.4.5.9 Don't allow relays to spoof RELAYEND or RELAYRESOLVED cell CVE-2021-34548, boo1187322 Detect more failure conditions from the OpenSSL RNG code boo1187323 Resist a hashtable-based CPU denial-of-service attack against relays CVE-2021-34549...
OPENSUSE-SU-2021:0915-1 Security update for live555
This update for live555 fixes the following issues: Update to 2021.05.22: - Lots of fixes and updates, including the security fix for CVE-2021-28899 boo1185874 and CVE-2019-15232 boo1146283. See the list in http://live555.com/liveMedia/public/changelog.txt...
OPENSUSE-SU-2021:0908-1 Security update for apache2
This update for apache2 fixes the following issues: - fixed CVE-2021-30641 bsc1187174: MergeSlashes regression - fixed CVE-2021-31618 bsc1186924: NULL pointer dereference on specially crafted HTTP/2 request - fixed CVE-2020-13950 bsc1187040: modproxy NULL pointer dereference - fixed CVE-2020-3545...
SUSE-SU-2021:2057-1 Security update for the Linux Kernel (Live Patch 24 for SLE 15)
This update for the Linux Kernel 4.12.14-15072 fixes several issues. The following security issues were fixed: - CVE-2021-33200: Enforcing incorrect limits for pointer arithmetic operations by the BPF verifier could be abused to perform out-of-bounds reads and writes in kernel memory bsc1186484. ...
SUSE-SU-2021:2004-1 Security update for apache2
This update for apache2 fixes the following issues: - CVE-2021-30641: Fixed MergeSlashes regression bsc1187174 - CVE-2021-31618: Fixed NULL pointer dereference on specially crafted HTTP/2 request bsc1186924 - CVE-2020-35452: Fixed Single zero byte stack overflow in modauthdigest bsc1186922 -...
SUSE-SU-2021:1938-1 Security update for python-Pillow
This update for python-Pillow fixes the following issues: - CVE-2020-35655: Fixed a buffer over-read when decoding crafted SGI RLE image files bsc1180832. - CVE-2021-25293: Fixed an out-of-bounds read in SGIRleDecode.c bsc1183102. - CVE-2021-25290: Fixed a negative-offset memcpy with an invalid...
SUSE: Security Advisory (SUSE-SU-2014:0899-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OPENSUSE-SU-2021:0840-1 Security update for chromium
This update for chromium fixes the following issues: Chromium 91.0.4472.77 boo1186458: Support Managed configuration API for Web Applications WebOTP API: cross-origin iframe support CSS custom counter styles Support JSON Modules Clipboard: read-only files support Remove webkitBeforeTextInserted &...
SUSE-SU-2021:1870-1 Security update for the Linux Kernel (Live Patch 37 for SLE 12 SP3)
This update for the Linux Kernel 4.4.180-94138 fixes several issues. The following security issues were fixed: - CVE-2020-36322: Fixed an issue inside the FUSE filesystem implementation where fusedogetattr calls makebadinode in inappropriate situations, could have caused a system crash. NOTE: the...
OpenSMTPD: Multiple vulnerabilities
Background OpenSMTPD is a lightweight but featured SMTP daemon from OpenBSD. Description Multiple vulnerabilities have been discovered in OpenSMTPD. Please review the CVE identifiers referenced below for details. Impact A remote attacker, by connecting to the SMTP listener daemon, could possibly...
SUSE-SU-2021:1733-1 Security update for the Linux Kernel (Live Patch 17 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-12266 fixes several issues. The following security issues were fixed: - CVE-2020-36322: Fixed an issue inside the FUSE filesystem implementation where fusedogetattr calls makebadinode in inappropriate situations, could have caused a system crash. NOTE: the...
SUSE-SU-2021:1715-1 Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-22 fixes several issues. The following security issues were fixed: - CVE-2020-36322: Fixed an issue inside the FUSE filesystem implementation where fusedogetattr calls makebadinode in inappropriate situations, could have caused a system crash. NOTE: the...
userspace graphics, xorg-x11, and mesa security, bug fix, and enhancement update
egl-wayland 1.1.5-3 - Add upstream patch to address rhbz1842473 1.1.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora33MassRebuild 1.1.5-1 - Update to 1.1.5 libdrm 2.4.103-1 - Update to 2.4.103 libglvnd 1.3.2-1 - Update to 1.3.2 release libinput 1.16.3-1 - libinput 1.16.3 1886648 libwacom...
OPENSUSE-SU-2021:0762-1 Security update for chromium
This update for chromium fixes the following issues: This is a rerelease with aarch64 enabled. Chromium 90.0.4430.212 boo1185908 CVE-2021-30506: Incorrect security UI in Web App Installs CVE-2021-30507: Inappropriate implementation in Offline CVE-2021-30508: Heap buffer overflow in Media Feeds...
OPENSUSE-SU-2021:0759-1 Security update for djvulibre
This update for djvulibre fixes the following issues: - CVE-2021-32490 bsc1185895: Out of bounds write in function DJVU:filterbv via crafted djvu file - CVE-2021-32491 bsc1185900: Integer overflow in function render in tools/ddjvu via crafted djvu file - CVE-2021-32492 bsc1185904: Out of bounds...
OPENSUSE-SU-2021:0753-1 Security update for exim
This update for exim fixes the following issues: exim was updated to 4.94.2: security update boo1185631 CVE-2020-28007: Link attack in Exim's log directory CVE-2020-28008: Assorted attacks in Exim's spool directory CVE-2020-28014: Arbitrary PID file creation CVE-2020-28011: Heap buffer overflow i...
SUSE-SU-2021:1596-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP4 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-36312: Fixed an issue in virt/kvm/kvmmain.c that had a kvmiobusunregisterdev memory leak upon a kmalloc failure bnc1184509. - CVE-2021-29650: Fixed...
