SUSE-SU-2021:0015-1 Security update for gimp

This update for gimp fixes the following issues: - CVE-2017-17784: Fixed an insufficient string validation for input names bsc1073624. - CVE-2017-17785: Fixed an heap-based buffer overflow in FLI import bsc1073625. - CVE-2017-17786: Fixed an out-of-bounds read in TGA bsc1073626...

SUSE-SU-2021:0014-1 Security update for gimp

This update for gimp fixes the following issues: - CVE-2017-17784: Fixed an insufficient string validation for input names bsc1073624. - CVE-2017-17785: Fixed an heap-based buffer overflow in FLI import bsc1073625. - CVE-2017-17786: Fixed an out-of-bounds read in TGA bsc1073626...

SUSE-SU-2020:3878-1 Security update for slurm_17_11

This update for slurm1711 fixes the following issues: - CVE-2020-27745: Fixed potential buffer overflows from use of unpackmem bsc1178890. - CVE-2020-27746: Fixed a potential leak of the magic cookie when sent as an argument to the xauth command bsc1178891. - Fixed %posttrans macro resupdate to...

SUSE-SU-2020:3863-1 Security update for slurm_18_08

This update for slurm1808 fixes the following issues: Security issues fixed: - CVE-2020-27745: Fixed a potential buffer overflow from use of unpackmem bsc1178890. - CVE-2020-27746: Fixed a potential leak of the magic cookie when sent as an argument to the xauth command bsc1178891...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

Important: Red Hat Security Advisory: libexif security update

An update for libexif is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

SUSE SLES15 Security Update : libX11 (SUSE-SU-2020:2474-2)

This update for libX11 fixes the following issues : CVE-2020-14363: Fix an integer overflow in initom bsc1175239. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it a...

SUSE SLES12 Security Update : libX11 (SUSE-SU-2020:2475-2)

This update for libX11 fixes the following issues : CVE-2020-14363: Fix an integer overflow in initom bsc1175239. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it a...

OPENSUSE-SU-2020:2186-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2020-25712: Fixed a heap-based buffer overflow which could have led to privilege escalation bsc1177596. - CVE-2020-14360: Fixed an out of bounds memory accesses on too short request which could lead to denial of service bsc1174908...

Debian DSA-4801-1 : brotli - security update

A buffer overflow was discovered in Brotli, a generic-purpose lossless compression suite. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4801. The text itself is copyright C Software in the Public Interest,...

OPENSUSE-SU-2020:2033-1 Security update for slurm

This update for slurm fixes the following issues: - CVE-2020-27745: PMIx - fix potential buffer overflows from use of unpackmem bsc1178890. - CVE-2020-27746: X11 forwarding - fix potential leak of the magic cookie when sent as an argument to the xauth command bsc1178891. This update was imported...

OPENSUSE-SU-2020:1962-1 Security update for kernel-firmware

This update for kernel-firmware fixes the following issue: - CVE-2020-12321: Updated the Intel Bluetooth firmware for buffer overflow security bugs bsc1178671. This update was imported from the SUSE:SLE-15-SP1:Update update project...

OPENSUSE-SU-2020:1907-1 Security update for zeromq

This update for zeromq fixes the following issues: - CVE-2020-15166: Fixed the possibility of unauthenticated clients causing a denial-of-service bsc1176116. - Fixed a heap overflow when receiving malformed ZMTP v1 packets bsc1176256 - Fixed a memory leak in client induced by malicious servers...

OPENSUSE-SU-2020:1834-1 Security update for tmux

This update for tmux fixes the following issues: - Update to version 3.1c Fix a stack overflow on colon-separated CSI parsing. boo1178263 CVE-2020-27347 - tmux 3.1b: Fix crash when allow-rename ison and an empty name is set - tmux 3.1a: Do not close stdout prematurely in control mode since it is...

Security update for tmux (moderate)

openSUSE Security Update: Security update for tmux Announcement ID: openSUSE-SU-2020:1834-1 Rating: moderate References: 1037468 1116887 1120170 1178263 Cross-References: CVE-2018-19387 CVE-2020-27347 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP2 openSUSE...

Low: Red Hat Security Advisory: cups security and bug fix update

An update for cups is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

SUSE-SU-2020:3126-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2019-14562: Fixed an overflow in DxeImageVerificationHandler bsc1175476. - CVE-2019-14559: Fixed a memory leak in ArpOnFrameRcvdDpc bsc1163927...

SUSE-SU-2020:3064-1 Security update for zeromq

This update for zeromq fixes the following issues: - Fixed a memory leak in client induced by malicious servers without CURVE/ZAP bsc1176257 - Fixed a stack overflow in PUB/XPUB subscription store bsc1176258...

SUSE-SU-2020:2988-1 Security update for gnutls

This update for gnutls fixes the following issues: - Fix heap buffer overflow in handshake with norenegotiation alert sent CVE-2020-24659 bsc1176181 - FIPS: Implement ECDH requirements from SP800-56Arev3 bsc1176086 - FIPS: Use 2048 bit prime in DH selftest bsc1176086 - FIPS: Add TLS KDF selftest...

SUSE-SU-2020:2900-1 Security update for libproxy

This update for libproxy fixes the following issues: - CVE-2020-25219: Rewrote url::recvline to be nonrecursive bsc1176410. - CVE-2020-26154: Fixed a buffer overflow when PAC is enabled bsc1177143...