SUSE-SU-2021:2461-1 Security update for qemu

This update for qemu fixes the following issues: Security issues fixed: - CVE-2021-3595: Fixed slirp: invalid pointer initialization may lead to information disclosure tftp bsc1187366 - CVE-2021-3592: Fix for slirp: invalid pointer initialization may lead to information disclosure bootp bsc118736...

SUSE-SU-2021:2082-1 Security update for go1.15

This update for go1.15 fixes the following issues: - Updated go to upstream version 1.15.12 released 2021-05-06 bsc1175132. - CVE-2021-31525: Fixed stack overflow via net/http ReadRequest bsc1185790...

OPENSUSE-SU-2021:0892-1 Security update for libjpeg-turbo

This update for libjpeg-turbo fixes the following issues: - CVE-2020-17541: Fixed a stack-based buffer overflow in the 'transform' component bsc1186764. This update was imported from the SUSE:SLE-15:Update update project...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

OPENSUSE-SU-2020:1907-1 Security update for zeromq

This update for zeromq fixes the following issues: - CVE-2020-15166: Fixed the possibility of unauthenticated clients causing a denial-of-service bsc1176116. - Fixed a heap overflow when receiving malformed ZMTP v1 packets bsc1176256 - Fixed a memory leak in client induced by malicious servers...

OPENSUSE-SU-2020:1834-1 Security update for tmux

This update for tmux fixes the following issues: - Update to version 3.1c Fix a stack overflow on colon-separated CSI parsing. boo1178263 CVE-2020-27347 - tmux 3.1b: Fix crash when allow-rename ison and an empty name is set - tmux 3.1a: Do not close stdout prematurely in control mode since it is...

Security update for tmux (moderate)

openSUSE Security Update: Security update for tmux Announcement ID: openSUSE-SU-2020:1834-1 Rating: moderate References: 1037468 1116887 1120170 1178263 Cross-References: CVE-2018-19387 CVE-2020-27347 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP2 openSUSE...

SUSE-SU-2020:3064-1 Security update for zeromq

This update for zeromq fixes the following issues: - Fixed a memory leak in client induced by malicious servers without CURVE/ZAP bsc1176257 - Fixed a stack overflow in PUB/XPUB subscription store bsc1176258...

SUSE-SU-2019:0900-1 Security update for dovecot22

This update for dovecot22 fixes the following issues: Security issues fixed: - CVE-2019-7524: Fixed an improper file handling which could result in stack overflow allowing local root escalation bsc1130116. - CVE-2019-3814: Fixed a vulnerability related to SSL client certificate authentication...

SUSE-SU-2019:0876-1 Security update for dovecot23

This update for dovecot23 fixes the following issue: Security issue fixed: - CVE-2019-7524: Fixed an improper file handling which could result in stack oveflow allowing local root escalation bsc1130116...

xerces security update

CentOS Errata and Security Advisory CESA-2018:3335 An update for xerces-c is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

SUSE-SU-2017:1998-1 Security update for poppler

This update for poppler fixes the following issues: Security issues fixed: - CVE-2017-9775: Fix a stack overflow bug in pdftocairo that could have been exploited in a denial of service attack through a specially crafted PDF document. bsc1045719 - CVE-2017-9776: Fix an integer overflow bug that...

SUSE-SU-2017:1557-1 Security update for libxml2

This update for libxml2 fixes the following issues: Security issues fixed: - CVE-2017-9050: heap-based buffer overflow xmlDictAddString func bsc1039069, bsc1039661 - CVE-2017-9049: heap-based buffer overflow xmlDictComputeFastKey func bsc1039066 - CVE-2017-9048: stack overflow vulnerability...

SUSE-SU-2016:2156-1 Security update for glibc

This update for glibc fixes the following issues: - Drop old fix that could break services that start before IPv6 is up. bsc931399 - Do not copy dname field of struct dirent. CVE-2016-1234, bsc969727 - Fix memory leak in nssdnsgethostbyname4r. bsc973010 - Relocate DSOs in dependency order, fixing...

SUSE-SU-2016:1733-1 Security update for glibc

This update for glibc provides the following fixes: - Increase DTVSURPLUS limit. bsc968787 - Do not copy dname field of struct dirent. CVE-2016-1234, bsc969727 - Fix memory leak in nssdnsgethostbyname4r. bsc973010 - Fix stack overflow in nssdnsgetnetbynamer. CVE-2016-3075, bsc973164 - Fix malloc...

SUSE-SU-2016:1721-1 Security update for glibc

This update for glibc provides the following fixes: - Increase DTVSURPLUS limit. bsc968787 - Do not copy dname field of struct dirent. CVE-2016-1234, bsc969727 - Fix memory leak in nssdnsgethostbyname4r. bsc973010 - Fix stack overflow in nssdnsgetnetbynamer. CVE-2016-3075, bsc973164 - Fix malloc...