OPENSUSE-SU-2021:0974-1 Security update for roundcubemail

This update for roundcubemail fixes the following issues: Upgrade to version 1.3.16 This is a security update to the LTS version 1.3. It fixes a recently reported stored cross-site scripting XSS vulnerability via HTML or plain text messages with malicious content. References: - CVE-2020-18670:...

OPENSUSE-SU-2021:0515-1 Security update for chromium

This update for chromium fixes the following issues: Update to 89.0.4389.114 boo1184256 - CVE-2021-21194: Use after free in screen capture - CVE-2021-21195: Use after free in V8 - CVE-2021-21196: Heap buffer overflow in TabStrip - CVE-2021-21197: Heap buffer overflow in TabStrip - CVE-2021-21198:...

OPENSUSE-SU-2021:0474-1 Security update for tor

This update for tor fixes the following issues: tor was updated to 0.4.5.7 https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html Fix 2 denial of service security issues boo1183726 + Disable the dumpdesc function that we used to dump unparseable information to disk...

OPENSUSE-SU-2021:0152-1 Security update for python-autobahn

This update for python-autobahn fixes the following issue: - CVE-2020-35678: Fixed a redirect header injection boo1180570. This update was imported from the openSUSE:Leap:15.1:Update update project...

OPENSUSE-SU-2021:0122-1 Security update for vlc

This update for vlc fixes the following issues: Update to 3.0.11.1: - CVE-2020-13428: Fixed heap-based buffer overflow in the hxxxAnnexBtoxVC boo1172727 - CVE-2020-26664: Fixed heap-based buffer overflow in EbmlTypeDispatcher:send boo1180755 This update was imported from the...

OPENSUSE-SU-2020:2363-1 Security update for kdeconnect-kde

This update for kdeconnect-kde fixes the following issue: - Add fingerprinting for device verification boo1177672. This update was imported from the openSUSE:Leap:15.2:Update update project...

OPENSUSE-SU-2020:1943-1 Security update for chromium

This update for chromium fixes the following issues: Update to 86.0.4240.198 boo1178703 - CVE-2020-16013: Inappropriate implementation in V8 - CVE-2020-16017: Use after free in site isolation Update to 86.0.4240.193 boo1178630 - CVE-2020-16016: Inappropriate implementation in base. This update wa...

OPENSUSE-SU-2020:1446-1 Security update for python-Flask-Cors

This update for python-Flask-Cors fixes the following issues: - CVE-2020-25032: fix a relative directory traversal vulnerability bsc1175986. This update was imported from the openSUSE:Leap:15.2:Update update project...

OPENSUSE-SU-2020:1427-1 Security update for inn

This update for inn fixes the following issues: - change file owners in /usr/lib/news to root boo1172573 CVE-2020-8026 This update was imported from the openSUSE:Leap:15.2:Update update project...

OPENSUSE-SU-2020:1215-1 Security update for chromium

This update for chromium fixes the following issues: - Chromium updated to 84.0.4147.125 boo1175085 CVE-2020-6542: Use after free in ANGLE CVE-2020-6543: Use after free in task scheduling CVE-2020-6544: Use after free in media CVE-2020-6545: Use after free in audio CVE-2020-6546: Inappropriate...

OPENSUSE-SU-2020:1112-1 Security update for knot

This update for knot fixes the following issues: - CVE-2017-11104: Fixed an improper implementation of TSIG protocol which could have allowed an attacker with a valid key name and algorithm to bypass TSIG authentication boo1047841. This update was imported from the openSUSE:Leap:15.1:Update updat...

OPENSUSE-SU-2020:1048-1 Security update for chromium

This update for chromium fixes the following issues: - Update to 84.0.4147.89 boo1174189: Critical CVE-2020-6510: Heap buffer overflow in background fetch. High CVE-2020-6511: Side-channel information leakage in content security policy. High CVE-2020-6512: Type Confusion in V8. High CVE-2020-6513...

OPENSUSE-SU-2020:0788-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issues: - CVE-2020-12672: heap-based buffer overflow in ReadMNGImage in coders/png.c. boo1171271 This update was imported from the openSUSE:Leap:15.1:Update update project...

OPENSUSE-SU-2020:0648-1 Security update for chromium

This update for chromium fixes the following issues: Update to 81.0.4044.138 boo1171247: - CVE-2020-6831: Stack buffer overflow in SCTP - CVE-2020-6464: Type Confusion in Blink This update was imported from the openSUSE:Leap:15.1:Update update project...

OPENSUSE-SU-2020:0565-1 Security update for cacti, cacti-spine

This update for cacti, cacti-spine to version 1.2.11 fixes the following issues: This update is fixing multiple vulnerabilities and adding bug fixes. For more details consult the changes file. This update was imported from the openSUSE:Leap:15.1:Update update project...

OPENSUSE-SU-2020:0539-1 Security update for mp3gain

This update for mp3gain fixes the following issues: Update to version 1.6.2. - CVE-2019-18359: Fixed a buffer over-read was discovered in ReadMP3APETag boo1154971 This update was imported from the openSUSE:Leap:15.1:Update update project...

OPENSUSE-SU-2020:0242-1 Security update for inn

This update for inn fixes the following issues: - CVE-2019-3692: Fixed a local privilage escalation from user to 'news' bsc1154302. This update was imported from the openSUSE:Leap:15.1:Update update project...

OPENSUSE-SU-2020:0139-1 Security update for rubygem-excon

This update for rubygem-excon fixes the following issues: CVE-2019-16779 boo1159342: Fix a race condition around persistent connections, where a connection, which was interrupted, would leave data on the socket. Subsequent requests would then read this data, returning content from the previous...

OPENSUSE-SU-2020:0137-1 Security update for mumble

This update for mumble fixes the following issues: CVE-2018-20743: murmur mishandled multiple concurrent requests that were persisted in the database, which allowed remote attackers to cause a denial of service daemon hang or crash via a message flood. boo1123334 This update was imported from the...

OPENSUSE-SU-2020:0053-1 Security update for chromium

This update for chromium version 79.0.3945.117 fixes the following issues: - CVE-2020-6377: Fixed a use-after-free in audio - Various fixes from internal audits, fuzzing and other initiatives This update was imported from the openSUSE:Leap:15.1:Update update project...