42 matches found
OSV-2021-1818 Null-dereference READ
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47847 Crash type: Null-dereference READ Crash state: NULL...
SUSE-SU-2022:1252-1 Security update for openjpeg2
This update for openjpeg2 fixes the following issues: - CVE-2018-5727: Fixed integer overflow vulnerability in theopjt1encodecblks function bsc1076314. - CVE-2018-5785: Fixed integer overflow caused by an out-of-bounds leftshift in the opjj2ksetupencoder function bsc1076967. - CVE-2018-6616: Fixe...
SUSE-SU-2021:2952-1 Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: - Update to jdk-11.0.12+7 - CVE-2021-2369: Fixed JAR file handling problem containing multiple MANIFEST.MF files. bsc1188565 - CVE-2021-2388: Fixed a flaw inside the Hotspot component performed range check elimination. bsc1188566 -...
OPENSUSE-SU-2021:2837-1 Security update for mariadb
This update for mariadb fixes the following issues: Update to version 10.2.40 bsc1189320: - fixes for the following security vulnerabilities: CVE-2021-2372 and CVE-2021-2389 In additon the follwing was changed: - Increase NOFILE limit on service configuration bsc1180014 The default 'NOFILE' setti...
OPENSUSE-SU-2021:2788-1 Security update for go1.16
This update for go1.16 fixes the following issues: Update to go1.16.7: - go47473 net/http: panic due to racy read of persistConn after handler panic CVE-2021-36221 bsc1189162 - go47348 cmd/go: 'go list -f '.Stale'' stack overflow with cyclic imports - go47332 time: Timer reset broken under heavy...
OSV-2021-692 UNKNOWN READ in qpaintengineex_lineTo
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33678 Crash type: UNKNOWN READ Crash state: qpaintengineexlineTo bool qtstrokeside QStroker::processCurrentSubpath...
SUSE-SU-2021:0122-1 Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird 78.6.1 changed: MailExtensions: browserAction, composeAction, and messageDisplayAction toolbar buttons now support label and defaultlabel properties bmo1583478 fixed: Running a quicksearch that returned no result...
SUSE-SU-2020:3021-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.4.0 ESR Fixed: Various stability, functionality, and security fixes MFSA 2020-46 bsc1177872, bsc1176756 CVE-2020-15969 Use-after-free in usersctp CVE-2020-15683 Memory safety bugs fixed in Firefox 82...
SUSE-SU-2020:2789-1 Security update for xen
This update for xen fixes the following issues: - CVE-2020-25604: Fixed a race condition when migrating timers between x86 HVM vCPU-s bsc1176343,XSA-336 - CVE-2020-25595: Fixed an issue where PCI passthrough code was reading back hardware registers bsc1176344,XSA-337 - CVE-2020-25597: Fixed an...
SUSE-SU-2020:2690-1 Security update for jasper
This update for jasper fixes the following issues: - CVE-2016-9398: Improved patch for already fixed issue bsc1010979. - CVE-2016-9399: Fix assert in calcstepsizes bsc1010980. - CVE-2016-9397: Fix assert in jpcdequantize bsc1010786. - CVE-2016-9557: Fix signed integer overflow bsc1011829. -...
SUSE-SU-2020:0928-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Mozilla Firefox 68.6.1esr MFSA 2020-11 bsc1168630 CVE-2020-6819 bmo1620818 Use-after-free while running the nsDocShell destructor CVE-2020-6820 bmo1626728 Use-after-free when handling a ReadableStream...
OPENSUSE-SU-2019:2576-1 Security update for djvulibre
This update for djvulibre fixes the following issues: Security issue fixed: - CVE-2019-18804: Fixed a null pointer dereference bsc1156188. Other issue addressed: - Fixed a crash when mmx was enabled bsc1154401 This update was imported from the SUSE:SLE-15:Update update project...
OPENSUSE-SU-2019:1077-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Mozilla Firefox was updated to 60.6.1esr / MFSA 2019-10 bsc1130262 CVE-2019-9810: IonMonkey MArraySlice has incorrect alias information CVE-2019-9813: Ionmonkey type confusion with proto mutations Mozilla Firefox was updated to 60.6.0esr ...
OPENSUSE-SU-2019:0048-1 Security update for irssi
This update for irssi fixes the following issues: - CVE-2019-5882: Use after free when hidden lines were expired from the scroll buffer boo1121396 This update to the 1.1.2 version also fixes a number of stability issues and bugs...
OPENSUSE-SU-2017:1515-1 Security update for irssi
This update to irssi 1.0.3 fixes the following vulnerabilities: - CVE-2017-9469: irssi: dcc crash with incorrect quoting bsc1043052 - CVE-2017-9468: irssi: dcc message crash without nick/host bsc1043051...
MGASA-2016-0220 Updated firefox packages fix security vulnerabilities
Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox CVE-2016-2818, CVE-2016-2819, CVE-2016-2821, CVE-2016-2822,...
SUSE-SU-2015:1853-1 Security update for xen
xen was updated to fix nine security issues. These security issues were fixed: - CVE-2015-4037: The slirpsmb function in net/slirp.c created temporary files with predictable names, which allowed local users to cause a denial of service instantiation failure by creating /tmp/qemu-smb.- files befor...
MGASA-2014-0164 Updated libzip package fixes crashes using php-zip
The libzip library has been updated to version 0.11.2, which fixes crashes that affected php-zip and possibly other users of the library...
