OPENSUSE-SU-2020:1628-1 Security update for perl-DBI

This update for perl-DBI fixes the following issues: - CVE-2019-20919: Fixed a NULL profile dereference in dbiprofile bsc1176764. This update was imported from the SUSE:SLE-15-SP2:Update update project...

OPENSUSE-SU-2020:1620-1 Security update for perl-DBI

This update for perl-DBI fixes the following issues: - CVE-2019-20919: Fixed a NULL profile dereference in dbiprofile bsc1176764. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:1613-1 Security update for python-pip

This update for python-pip fixes the following issues: - CVE-2019-20916: Fixed a directory traversal in downloadhttpurl bsc1176262 This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:1591-1 Security update for bcm43xx-firmware

This update for bcm43xx-firmware fixes the following issues: - Update bluetooth firmware to address Sweyntooth and Spectra issues bsc1176631: This update was imported from the SUSE:SLE-15-SP1:Update update project...

OPENSUSE-SU-2020:1575-1 Security update for rubygem-actionpack-5_1

This update for rubygem-actionpack-51 fixes the following issues: - CVE-2020-8164: Possible Strong Parameters Bypass in ActionPack. There is a strong parameters bypass vector in ActionPack. bsc1172177 This update was imported from the SUSE:SLE-15:Update update project. This update was imported fr...

OPENSUSE-SU-2020:1568-1 Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues: - CVE-2020-17507: Fixed a buffer overflow in XBM parser bsc1176315 - Made handling of XDGRUNTIMEDIR more secure bsc1172515 This update was imported from the SUSE:SLE-15-SP1:Update update project...

OPENSUSE-SU-2020:1539-1 Security update for openldap2

This update for openldap2 fixes the following issues: - CVE-2020-8027: openldapupdatemodulespath.sh starts daemons unconditionally and uses fixed paths in /tmp bsc1175568. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:1536-1 Security update for rubygem-actionpack-5_1

This update for rubygem-actionpack-51 fixes the following issues: - CVE-2020-8164: Possible Strong Parameters Bypass in ActionPack. There is a strong parameters bypass vector in ActionPack. bsc1172177 This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:1535-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2019-14562: Fixed an overflow in DxeImageVerificationHandler bsc1175476. - Use openSUSE CA for the opensuse flavor bsc1175674 This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:1533-1 Security update for rubygem-actionpack-5_1

This update for rubygem-actionpack-51 fixes the following issues: - CVE-2020-8164: Possible Strong Parameters Bypass in ActionPack. There is a strong parameters bypass vector in ActionPack. bsc1172177 This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:1502-1 Security update for perl-DBI

This update for perl-DBI fixes the following issues: Security issues fixed: - CVE-2020-14392: Memory corruption in XS functions when Perl stack is reallocated bsc1176412. - CVE-2020-14393: Fixed a buffer overflow on an overlong DBD class name bsc1176409. This update was imported from the...

OPENSUSE-SU-2020:1494-1 Security update for curl

This update for curl fixes the following issues: - An application that performs multiple requests with libcurl's multi API and sets the 'CURLOPTCONNECTONLY' option, might in rare circumstances experience that when subsequently using the setup connect-only transfer, libcurl will pick and use the...

OPENSUSE-SU-2020:1455-1 Security update for libvirt

This update for libvirt fixes the following issues: - CVE-2020-14339: Don't leak /dev/mapper/control into QEMU. Use ioctl's to obtain the dependency tree of disks and drop use of libdevmapper. bsc1161883, bsc1174458 This update was imported from the SUSE:SLE-15-SP2:Update update project...

OPENSUSE-SU-2020:1430-1 Security update for libxml2

This update for libxml2 fixes the following issues: - CVE-2020-24977: Fixed a global-buffer-overflow in xmlEncodeEntitiesInternal bsc1176179. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:1420-1 Security update for gimp

This update for gimp fixes the following issue: - CVE-2017-17789: Fix heap buffer overflow in PSP importer bsc1073627. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:1413-1 Security update for libjpeg-turbo

This update for libjpeg-turbo fixes the following issues: - CVE-2020-13790: Fixed a heap-based buffer over-read via a malformed PPM input file bsc1172491. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:1376-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2020-14361: Fix XkbSelectEvents integer underflow bsc1174910 ZDI-CAN-11573. - CVE-2020-14362: Fix XRecordRegisterClients Integer underflow bsc1174913 ZDI-CAN-11574. This update was imported from the SUSE:SLE-15-SP2:Update update...

OPENSUSE-SU-2020:1368-1 Security update for libX11

This update for libX11 fixes the following issues: - CVE-2020-14363: Fix an integer overflow in initom bsc1175239. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:1354-1 Security update for php7

This update for php7 fixes the following issues: - CVE-2020-7068: Use of freed hash key in the pharparsezipfile function bsc1175223. - Do not install outdated README.SUSE bsc1174010. - Added tmpfiles.d for php-fpm to provide a base for a socket bsc1173786. This update was imported from the...

OPENSUSE-SU-2020:1346-1 Security update for squid

This update for squid fixes the following issues: squid was updated to version 4.13: - CVE-2020-24606: Fix livelocking in peerDigestHandleReply bsc1175671. - CVE-2020-15811: Improve Transfer-Encoding handling bsc1175665. - CVE-2020-15810: Enforce token characters for field-name bsc1175664. This...