OPENSUSE-SU-2021:1538-1 Security update for speex

This update for speex fixes the following issues: - CVE-2020-23903: Fixed zero division error in readsamples bsc1192580. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2021:1079-1 Security update for go1.15

This update for go1.15 fixes the following issues: - go1.15.14 released 2021-07-12 includes a security fix to the crypto/tls package, as well as bug fixes to the linker, and the net package. CVE-2021-34558 Refs bsc1175132 go1.15 release tracking bsc1188229 go47143 CVE-2021-34558 go47144 security:...

OPENSUSE-SU-2021:0807-1 Security update for libX11

This update for libX11 fixes the following issues: - CVE-2021-31535: Fixed missing request length checks in libX11 bsc1182506. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2021:0806-1 Security update for hivex

This update for hivex fixes the following issues: - CVE-2021-3504: hivex: missing bounds check within hivexopen bsc1185013 This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2021:0144-1 Security update for hawk2

This update for hawk2 fixes the following issues: hawk2 was updated to version 2.4.0+git.1611141202.2fe6369e. Security issue fixed: - Fixed another possible code execution vulnerability in the controller code bsc1179998. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:2065-1 Security update for dash

This update for dash fixes the following issues: - Fixed an issue where code was executed even if noexec '-n' was specified bsc1178978. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:1983-1 Security update for tcpdump

This update for tcpdump fixes the following issues: - CVE-2020-8037: Fixed an issue where PPP decapsulator did not allocate the right buffer size bsc1178466. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:1792-1 Security update for apache2

This update for apache2 fixes the following issues: - Enables the patch for CVE-2020-11993 and CVE-2020-9490. The patch was included but not applied in the previous update. bsc1178074 This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:1734-1 Security update for freetype2

This update for freetype2 fixes the following issues: - CVE-2020-15999: fixed a heap buffer overflow found in the handling of embedded PNG bitmaps bsc1177914. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:0803-1 Security update for rubygem-bundler

This update for rubygem-bundler fixes the following issue: - CVE-2019-3881: Fixed insecure permissions on a directory in /tmp/ that allowed malicious code execution bsc1143436. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:0622-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2019-14559: Fixed a memory leak in ArpOnFrameRcvdDpc bsc1163927. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2019:2398-1 Security update for lz4

This update for lz4 fixes the following issues: - CVE-2019-17543: Fixed a heap-based buffer overflow in LZ4write32 bsc1153936. This update was imported from the SUSE:SLE-15:Update update project...

Security update for nmap (important)

openSUSE Security Update: Security update for nmap Announcement ID: openSUSE-SU-2019:2198-1 Rating: important References: 1135350 1148742 Cross-References: CVE-2017-18594 CVE-2018-15173 Affected Products: openSUSE Leap 15.0 An update that fixes two vulnerabilities is now available. Description:...

OPENSUSE-SU-2019:2159-1 Security update for skopeo

This update for skopeo fixes the following issues: Security issues fixed: - CVE-2019-10214: Fixed missing enforcement of TLS connections bsc1144065. This update was imported from the SUSE:SLE-15:Update update project...

openSUSE Security Update : MozillaFirefox (openSUSE-2019-1782)

This update for MozillaFirefox, mozilla-nss fixes the following issues : MozillaFirefox to version ESR 60.8 : - CVE-2019-9811: Sandbox escape via installation of malicious language pack bsc1140868. - CVE-2019-11711: Script injection within domain through inner window reuse bsc1140868. -...

OPENSUSE-SU-2019:1781-1 Security update for bzip2

This update for bzip2 fixes the following issues: Security issue fixed: - CVE-2019-12900: Fixed an out-of-bounds write in decompress.c with many selectors bsc1139083. This update was imported from the SUSE:SLE-15:Update update project...

openSUSE Security Update : php7 (openSUSE-2019-1572)

This update for php7 fixes the following issues : Security issues fixed : - CVE-2019-9637: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension bsc1128892. - CVE-2019-9675: Fixed improper implementation of rename function and multiple invalid memor...

OPENSUSE-SU-2019:1561-1 Security update for vim

This update for vim fixes the following issue: Security issue fixed: - CVE-2019-12735: Fixed a potential arbitrary code execution vulnerability in getchar.c bsc1137443. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2019:1431-1 Security update for evolution

This update for evolution fixes the following issues: Security issue fixed: - CVE-2018-15587: Fixed an issue with spoofed pgp signatures by using specially crafted emails bsc1125230. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2019:1398-1 Security update for bzip2

This update for bzip2 fixes the following issues: Security issue fixed: - CVE-2016-3189: Fixed a use-after-free in bzip2recover bsc985657. This update was imported from the SUSE:SLE-15:Update update project...