OPENSUSE-SU-2021:0122-1 Security update for vlc

This update for vlc fixes the following issues: Update to 3.0.11.1: - CVE-2020-13428: Fixed heap-based buffer overflow in the hxxxAnnexBtoxVC boo1172727 - CVE-2020-26664: Fixed heap-based buffer overflow in EbmlTypeDispatcher:send boo1180755 This update was imported from the...

OPENSUSE-SU-2020:2363-1 Security update for kdeconnect-kde

This update for kdeconnect-kde fixes the following issue: - Add fingerprinting for device verification boo1177672. This update was imported from the openSUSE:Leap:15.2:Update update project...

OPENSUSE-SU-2020:1943-1 Security update for chromium

This update for chromium fixes the following issues: Update to 86.0.4240.198 boo1178703 - CVE-2020-16013: Inappropriate implementation in V8 - CVE-2020-16017: Use after free in site isolation Update to 86.0.4240.193 boo1178630 - CVE-2020-16016: Inappropriate implementation in base. This update wa...

OPENSUSE-SU-2020:1446-1 Security update for python-Flask-Cors

This update for python-Flask-Cors fixes the following issues: - CVE-2020-25032: fix a relative directory traversal vulnerability bsc1175986. This update was imported from the openSUSE:Leap:15.2:Update update project...

OPENSUSE-SU-2020:1427-1 Security update for inn

This update for inn fixes the following issues: - change file owners in /usr/lib/news to root boo1172573 CVE-2020-8026 This update was imported from the openSUSE:Leap:15.2:Update update project...

OPENSUSE-SU-2020:1215-1 Security update for chromium

This update for chromium fixes the following issues: - Chromium updated to 84.0.4147.125 boo1175085 CVE-2020-6542: Use after free in ANGLE CVE-2020-6543: Use after free in task scheduling CVE-2020-6544: Use after free in media CVE-2020-6545: Use after free in audio CVE-2020-6546: Inappropriate...

OPENSUSE-SU-2020:1112-1 Security update for knot

This update for knot fixes the following issues: - CVE-2017-11104: Fixed an improper implementation of TSIG protocol which could have allowed an attacker with a valid key name and algorithm to bypass TSIG authentication boo1047841. This update was imported from the openSUSE:Leap:15.1:Update updat...

OPENSUSE-SU-2020:1048-1 Security update for chromium

This update for chromium fixes the following issues: - Update to 84.0.4147.89 boo1174189: Critical CVE-2020-6510: Heap buffer overflow in background fetch. High CVE-2020-6511: Side-channel information leakage in content security policy. High CVE-2020-6512: Type Confusion in V8. High CVE-2020-6513...

OPENSUSE-SU-2020:0788-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issues: - CVE-2020-12672: heap-based buffer overflow in ReadMNGImage in coders/png.c. boo1171271 This update was imported from the openSUSE:Leap:15.1:Update update project...

OPENSUSE-SU-2020:0648-1 Security update for chromium

This update for chromium fixes the following issues: Update to 81.0.4044.138 boo1171247: - CVE-2020-6831: Stack buffer overflow in SCTP - CVE-2020-6464: Type Confusion in Blink This update was imported from the openSUSE:Leap:15.1:Update update project...

OPENSUSE-SU-2020:0565-1 Security update for cacti, cacti-spine

This update for cacti, cacti-spine to version 1.2.11 fixes the following issues: This update is fixing multiple vulnerabilities and adding bug fixes. For more details consult the changes file. This update was imported from the openSUSE:Leap:15.1:Update update project...

OPENSUSE-SU-2020:0539-1 Security update for mp3gain

This update for mp3gain fixes the following issues: Update to version 1.6.2. - CVE-2019-18359: Fixed a buffer over-read was discovered in ReadMP3APETag boo1154971 This update was imported from the openSUSE:Leap:15.1:Update update project...

OPENSUSE-SU-2020:0242-1 Security update for inn

This update for inn fixes the following issues: - CVE-2019-3692: Fixed a local privilage escalation from user to 'news' bsc1154302. This update was imported from the openSUSE:Leap:15.1:Update update project...

OPENSUSE-SU-2020:0139-1 Security update for rubygem-excon

This update for rubygem-excon fixes the following issues: CVE-2019-16779 boo1159342: Fix a race condition around persistent connections, where a connection, which was interrupted, would leave data on the socket. Subsequent requests would then read this data, returning content from the previous...

OPENSUSE-SU-2020:0137-1 Security update for mumble

This update for mumble fixes the following issues: CVE-2018-20743: murmur mishandled multiple concurrent requests that were persisted in the database, which allowed remote attackers to cause a denial of service daemon hang or crash via a message flood. boo1123334 This update was imported from the...

OPENSUSE-SU-2020:0053-1 Security update for chromium

This update for chromium version 79.0.3945.117 fixes the following issues: - CVE-2020-6377: Fixed a use-after-free in audio - Various fixes from internal audits, fuzzing and other initiatives This update was imported from the openSUSE:Leap:15.1:Update update project...

OPENSUSE-SU-2020:0007-1 Security update for chromium

This update for chromium fixes the following issues: Chromium was updated to 79.0.3945.88: - CVE-2019-13767: Fixed a use after free in media picker boo1159498 This update was imported from the openSUSE:Leap:15.1:Update update project...

OPENSUSE-SU-2019:2426-1 Security update for chromium

This update for chromium fixes the following issues: Chromium was updated to 78.0.3904.87 boo1155643: CVE-2019-13721: Use-after-free in PDFium CVE-2019-13720: Use-after-free in audio This update was imported from the openSUSE:Leap:15.0:Update update project...

OPENSUSE-SU-2019:2321-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issues: - CVE-2019-16709: Fixed a memory leak in coders/dps.c boo1151782. This update was imported from the openSUSE:Leap:15.0:Update update project...

Security update for python-numpy (moderate)

openSUSE Security Update: Security update for python-numpy Announcement ID: openSUSE-SU-2019:2259-1 Rating: moderate References: 1149203 Cross-References: CVE-2019-6446 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: This upda...