DLA-2497-1 thunderbird - security update

Bulletin has no description...

OPENSUSE-SU-2020:2158-1 Security update for neomutt

This update for neomutt fixes the following issues: Update neomutt to 20201120. Address boo1179035, CVE-2020-28896. Security - imap: close connection on all failures Features - alias: add function to Alias/Query dialogs - config: add validators for imap,smtp,popauthenticators - config: warn when...

OPENSUSE-SU-2020:2057-1 Security update for ceph

This update for ceph fixes the following issues: - CVE-2020-25660: Bring back CEPHXV2 authorizer challenges bsc1177843. - Major batch refactor of ceph-volume that addresses a couple of issues bsc1151612, bsc1158257 - Documented Prometheus' security model bsc1169134 - monclient: Fixed an issue whe...

OPENSUSE-SU-2020:2010-1 Security update for chromium

This update for chromium fixes the following issues: - Update to 87.0.4280.66 boo1178923 - Wayland support by default - CVE-2020-16018: Use after free in payments. - CVE-2020-16019: Inappropriate implementation in filesystem. - CVE-2020-16020: Inappropriate implementation in cryptohome. -...

SUSE-SU-2020:3500-1 Security update for mariadb

This update for mariadb and mariadb-connector-c fixes the following issues: - Update mariadb to 10.2.36 GA bsc1177472, bsc1178428 fixing for the following security vulnerabilities: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776, CVE-2020-14789 CVE-2020-15180 - Update mariadb-connector-c to 3.1.11...

SUSE-SU-2020:3368-1 Security update for go1.15

This update for go1.15 fixes the following issues: - go1.15.5 released 2020-11-12 includes security fixes to the cmd/go and math/big packages. go42553 math/big: panic during recursive division of very large numbers bsc1178750 CVE-2020-28362 go42560 cmd/go: arbitrary code can be injected into cgo...

DSA-4791-1 pacemaker - security update

Bulletin has no description...

cups security and bug fix update

1:2.2.6-38 - 1775590 - rastertoepson filter crashes with paper size A6 1:2.2.6-37 - forgot to enable optimization - 1833516 1:2.2.6-36 - 1838449 - ipp/socket backends connect to turned off device for eternity contimeout is not applied - 1689207 - Add failover backend - 1833516 - DirtyCleanInterva...

openSUSE Security Update : claws-mail (openSUSE-2020-1822)

This update for claws-mail fixes the following issues : - Additional cleanup of the template handling claws-mail was updated to 3.17.8 boo1177967 - Shielded template's |program and |attachprogram so that the command-line that is executed does not allow sequencing such as with && || ;, preventing...

openSUSE Security Update : MozillaThunderbird and mozilla-nspr (openSUSE-2020-1785)

This update for MozillaThunderbird and mozilla-nspr fixes the following issues : - Mozilla Thunderbird 78.4 - new: MailExtensions: browser.tabs.sendMessage API added - new: MailExtensions: messageDisplayScripts API added - changed: Yahoo and AOL mail users using password authentication will be...

OPENSUSE-SU-2020:1752-1 Recommended update for mailman

This update for mailman to version 2.1.34 fixes the following issues: - The fix for lp1859104 can result in ValueError being thrown on attempts to subscribe to a list. This is fixed and extended to apply REFUSESECONDPENDING to unsubscription as well. lp1878458 - DMARC mitigation no longer misses ...

DSA-4777-1 freetype - security update

Bulletin has no description...

MGASA-2020-0389 Updated freetype2 packages fix security vulnerability

A heap buffer overflow has been found in freetype2 before 2.10.4. Malformed TTF files with PNG sbit glyphs can cause a heap buffer overflow in LoadSBitPng as libpng uses the original 32-bit values, which are saved in pngstruct. If the original width and/or height are greater than 65535, the...

DLA-2407-1 tomcat8 - security update

Bulletin has no description...

DLA-2400-1 activemq - security update

Bulletin has no description...

DSA-4770-1 thunderbird - security update

Bulletin has no description...

DLA-2384-1 yaws - security update

Bulletin has no description...

DSA-4765-1 modsecurity - security update

Bulletin has no description...

MGASA-2020-0366 Updated libetpan packages fix a security vulnerability

LibEtPan through 1.9.4, as used in MailCore 2 through 0.6.3 and other products, has a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server sends a "begin TLS" response, the client reads additional data e.g., from a meddler-in-the-middle attacker and evaluates it in a TLS...

SUSE-SU-2020:2628-1 Security update for shim

This update for shim fixes the following issues: - Update to the unified shim binary from SUSE Linux Enterprise 15-SP1 bsc1168994 This update addresses the 'BootHole' security issue master CVE CVE-2020-10713, by disallowing binaries signed by the previous SUSE UEFI signing key from booting. This...