OPENSUSE-SU-2021:1557-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: - CVE-2021-30846: Fixed memory corruption issue that could lead to arbitrary code execution when processing maliciously crafted web content bsc1192063. - CVE-2021-30851: Fixed memory corruption vulnerability that could lead to arbitrary code...

OPENSUSE-SU-2021:1553-1 Security update for python-Babel

This update for python-Babel fixes the following issues: - CVE-2021-42771: Fixed relative path traversal that may lead to arbitrary locale files loading and arbitrary code execution bsc1185768. This update was imported from the SUSE:SLE-15-SP2:Update update project...

OPENSUSE-SU-2021:1474-1 Security update for tinyxml

This update for tinyxml fixes the following issues: - CVE-2021-42260: Fixed an infinite loop for inputs containing the sequence 0xEF0x00 bsc1191576 This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2021:1441-1 Security update for pcre

This update for pcre fixes the following issues: Update pcre to version 8.45: - CVE-2020-14155: Fixed integer overflow via a large number after a '?C' substring bsc1172974. - CVE-2019-20838: Fixed buffer over-read in JIT compiler bsc1172973 This update was imported from the SUSE:SLE-15:Update...

OPENSUSE-SU-2021:1439-1 Security update for transfig

This update for transfig fixes the following issues: Update to fig2dev version 3.2.8 Patchlevel 8b Aug 2021 - bsc1190618, CVE-2020-21529: stack buffer overflow in the bezierspline function in genepic.c. - bsc1190615, CVE-2020-21530: segmentation fault in the readobjects function in read.c. -...

OPENSUSE-SU-2021:1426-1 Security update for dnsmasq

This update for dnsmasq fixes the following issues: Update to version 2.86 - CVE-2021-3448: fixed outgoing port used when --server is used with an interface name. bsc1183709 - CVE-2020-14312: Set --local-service by default bsc1173646. - Open inotify socket only when used bsc1180914. This update w...

OPENSUSE-SU-2021:1418-1 Security update for python

This update for python fixes the following issues: - CVE-2021-3737: Fixed http client infinite line reading DoS after a http 100. bsc1189241 - CVE-2021-3733: Fixed ReDoS in urllib.request. bsc1189287 This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2021:1402-1 Security update for python-Pygments

This update for python-Pygments fixes the following issues: - CVE-2021-20270: Fixed an infinite loop in the SML lexer bsc1183169. This update was imported from the SUSE:SLE-15-SP1:Update update project...

OPENSUSE-SU-2021:1399-1 Security update for strongswan

This update for strongswan fixes the following issues: A feature was added: - Add authels plugin to support Marvell FC-SP encryption jscSLE-20151 Security issues fixed: - CVE-2021-41991: Fixed an integer overflow when replacing certificates in cache. bsc1191435 - CVE-2021-41990: Fixed an integer...

SUSE-SU-2021:3488-1 Security update for go1.17

This update for go1.17 fixes the following issues: Update to go1.17.2 - CVE-2021-38297: misc/wasm, cmd/link: do not let command line args overwrite global data bsc1191468...

OPENSUSE-SU-2021:1313-1 Security update for nodejs14

This update for nodejs14 fixes the following issues: - CVE-2021-3672: Fixed missing input validation on hostnames bsc1188881. - CVE-2021-22931: Fixed improper handling of untypical characters in domain names bsc1189370. - CVE-2021-22940: Use after free on close http2 on stream canceling bsc118936...

OPENSUSE-SU-2021:1294-1 Security update for libcroco

This update for libcroco fixes the following issues: - CVE-2020-12825: Fixed recursion issue in block and any productions bsc1171685. This update was imported from the SUSE:SLE-15-SP2:Update update project...

OPENSUSE-SU-2021:1261-1 Security update for openssl-1_0_0

This update for openssl-100 fixes the following issues: - CVE-2021-3712: This is an update for the incomplete fix for CVE-2021-3712. Read buffer overruns processing ASN.1 strings bsc1189521. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2021:1234-1 Security update for apache2

This update for apache2 fixes the following issues: - CVE-2021-33193: Fixed request splitting via HTTP/2 method injection and modproxy bsc1189387. This update was imported from the SUSE:SLE-15-SP2:Update update project...

OPENSUSE-SU-2021:1230-1 Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues: - CVE-2021-3498: Matroskademux: initialize track context out parameter to NULL before parsing bsc1184735. - CVE-2021-3497: Matroskademux: Fix extraction of multichannel WavPack bsc1184739. This update was imported from the...

Vulnerabilities fixed in OpenSSL

The developers of OpenSSL have fixed two vulnerabilities. The vulnerabilities allow an unauthenticated remote malicious person to remotely able to cause a denial-of-service, or potentially gain access to sensitive data, including possibly private keys currently actively in use on the system. Misu...

OPENSUSE-SU-2021:1183-1 Security update for fetchmail

This update for fetchmail fixes the following issues: - CVE-2021-36386: Fixed a missing variable initialization that can cause read from bad memory locations. bsc1188875 - Change PASSWORDLEN from 64 to 256 bsc1188034 This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2021:1167-1 Security update for haproxy

This update for haproxy fixes the following issues: - Fixes HAProxy vulnerabilities on H2 bsc1189366. This update was imported from the SUSE:SLE-15-SP1:Update update project...

OPENSUSE-SU-2021:1119-1 Security update for libvirt

This update for libvirt fixes the following issues: - CVE-2021-3631: fix SELinux label generation logic bsc1187871 This update was imported from the SUSE:SLE-15-SP2:Update update project...

OPENSUSE-SU-2021:1118-1 Security update for wireshark

This update for wireshark fixes the following issues: Update wireshark to 3.4.6. Including a fix for: - DVB-S2-BB dissector infinite loop bsc1186790. This update was imported from the SUSE:SLE-15:Update update project...