1089 matches found
SUSE-SU-2019:2254-1 Security update for nodejs10
This update for nodejs10 to version 10.16.3 fixes the following issues: Security issues fixed: - CVE-2019-9511: Fixed HTTP/2 implementations that are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service bsc1146091. -...
SUSE-SU-2019:2236-1 Security update for fontforge
This update for fontforge fixes the following security issues: fontforge was updated to 20170731, fixings lots of bugs and security issues. - CVE-2017-11568: Heap-based buffer over-read in PSCharStringToSplines bsc1050161 - CVE-2017-11569: Heap-based buffer over-read in readttfcopyrights bsc10501...
OPENSUSE-SU-2019:1964-1 Security update for tcpdump
This update for tcpdump fixes the following issues: Security issues fixed: - CVE-2019-1010220: Fixed a buffer over-read in printprefix which may expose data bsc1142439. - CVE-2017-16808: Fixed a heap-based buffer over-read related to aoeprint and lookupemem bsc1068716. This update was imported fr...
DLA-1890-1 kde4libs - security update
Bulletin has no description...
OPENSUSE-SU-2019:1908-1 Security update for evince
This update for evince fixes the following issues: - CVE-2019-1010006: Fixed a buffer overflow in backend/tiff/tiff-document.c bsc1141619. This update was imported from the SUSE:SLE-15:Update update project...
Security update for libqb (moderate)
openSUSE Security Update: Security update for libqb Announcement ID: openSUSE-SU-2019:1891-1 Rating: moderate References: 1137835 Cross-References: CVE-2019-12779 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: This update for...
SUSE-SU-2019:2081-1 Security update for nodejs10
This update for nodejs10 to version 10.16.0 fixes the following issues: Security issue fixed: - CVE-2019-13173: Fixed a potential file overwrite via hardlink in fstream.DirWriter bsc1140290. Non-security issue fixed: - Update to new upstream LTS version 10.16.0, including npm version 6.9.0 and...
SUSE-SU-2019:2011-1 Security update for spamassassin
This update for spamassassin to version 3.4.2 fixes the following issues: Security issues fixed: - CVE-2018-11781: Fixed an issue where a local user could inject code in the meta rule syntax bsc1108748. - CVE-2018-11780: Fixed a potential remote code execution vulnerability in the PDFInfo plugin...
SUSE SLES12 Security Update : xrdp (SUSE-SU-2019:1860-1)
This update for xrdp fixes the following issues : Security issues fixed : CVE-2013-1430: When successfully logging in using RDP into an xrdp session, the file /.vnc/sesman$usernamepasswd was created. Its content was the equivalent of the user's cleartext password, DES encrypted with a known key...
PT-2019-18689 · Prima Systems · Flexair
Name of the Vulnerable Software and Affected Versions: Prima Systems FlexAir versions 2.3.38 and prior Description: The issue allows for improper authentication using the MD5 hash value of the password, potentially enabling an attacker with database access to login as admin without decrypting the...
DSA-4473-1 rdesktop - security update
Bulletin has no description...
OPENSUSE-SU-2019:1606-1 Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Security issues fixed: - CVE-2019-11703: Fixed a heap-based buffer overflow in icalmemorystrdupanddequote bsc1137595. - CVE-2019-11704: Fixed a heap-based buffer overflow in parsergetnextchar bsc1137595. - CVE-2019-11705: Fixed a...
MGASA-2019-0196 Updated kernel-tmb packages fix security vulnerability
This kernel-tmb update is based on the upstream 4.14.127 and fixes at least the following security issues: Jonathan Looney discovered that it is possible to send a crafted sequence of SACKs which will fragment the RACK send map. An attacker may be able to further exploit the fragmented send map t...
OPENSUSE-SU-2019:1535-1 Security update for bubblewrap
This update for bubblewrap to version 0.3.3 fixes the following issue: Security issue fixed: - CVE-2019-12439: Fixed a temporary directory misuse as mount point which could have allowed local user to prevent others from running bubblewrap...
DSA-4458-1 cyrus-imapd - security update
Bulletin has no description...
OPENSUSE-SU-2019:1508-1 Security update for curl
This update for curl fixes the following issues: Security issue fixed: - CVE-2019-5436: Fixed a heap buffer overflow exists in tftpreceivepacket that receives data from a TFTP server bsc1135170. This update was imported from the SUSE:SLE-15:Update update project...
DSA-4453-1 openjdk-8 - security update
Bulletin has no description...
qemu-kvm security update
1.5.3-160.el76.2 - kvm-target-i386-define-md-clear-bit-rhel.patch - Resolves: bz1693216 qemu-kvm: hardware: Microarchitectural Store Buffer Data Sampling...