openSUSE Security Update : xen (openSUSE-2020-2331)

This update for xen fixes the following issues : - CVE-2020-29480: Fixed an issue which could have allowed leak of non-sensitive data to administrator guests bsc117949 XSA-115. - CVE-2020-29481: Fixed an issue which could have allowd to new domains to inherit existing node permissions bsc1179498...

OPENSUSE-SU-2021:0106-1 Security update for php7

This update for php7 fixes the following issue: - CVE-2020-7071: Fixed an insufficient filter in parseurl that accepted URLs with invalid userinfo bsc1180706. This update was imported from the SUSE:SLE-15-SP2:Update update project...

OPENSUSE-SU-2021:0055-1 Security update for crmsh

This update for crmsh fixes the following issue: - CVE-2020-35459: Fixed a privilege escalation in hawkinvoke bsc1179999. This update was imported from the SUSE:SLE-15-SP2:Update update project...

OPENSUSE-SU-2020:2349-1 Security update for openexr

This update for openexr fixes the following issues: Security issues fixed: - CVE-2020-16587: Fixed a heap-based buffer overflow in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp bsc1179879. - CVE-2020-16588: Fixed a null pointer deference in generatePreview bsc1179879. - CVE-2020-16589:...

OPENSUSE-SU-2020:2282-1 Security update for python-urllib3

This update for python-urllib3 fixes the following issues: - CVE-2020-26137: Fixed a CRLF injection via HTTP request method bsc1177120. This update was imported from the SUSE:SLE-15-SP1:Update update project...

OPENSUSE-SU-2020:2264-1 Security update for gdm

This update for gdm fixes the following issues: - CVE-2020-16125: Fixed a privilege escalation bsc1178150. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:2249-1 Security update for curl

This update for curl fixes the following issues: - CVE-2020-8286: Fixed improper OSCP verification in the client side bsc1179593. - CVE-2020-8285: Fixed a stack overflow due to FTP wildcard bsc1179399. - CVE-2020-8284: Fixed an issue where a malicius FTP server could make curl connect to a...

OPENSUSE-SU-2020:2245-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: - CVE-2020-1971: Fixed a null pointer dereference in EDIPARTYNAME bsc1179491. This update was imported from the SUSE:SLE-15-SP1:Update update project...

OPENSUSE-SU-2020:2237-1 Security update for python-urllib3

This update for python-urllib3 fixes the following issues: - CVE-2020-26137: Fixed a CRLF injection via HTTP request method bsc1177120. This update was imported from the SUSE:SLE-15-SP1:Update update project...

Security update for python (important)

openSUSE Security Update: Security update for python Announcement ID: openSUSE-SU-2020:2211-1 Rating: important References: 1176262 Cross-References: CVE-2019-20916 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for python...

OPENSUSE-SU-2020:2185-1 Security update for python-setuptools

This update for python-setuptools fixes the following issues: - Fixed a directory traversal in downloadhttpurl bsc1176262 CVE-2019-20916 This update was imported from the SUSE:SLE-15-SP1:Update update project...

OPENSUSE-SU-2020:2184-1 Security update for python-pip

This update for python-pip fixes the following issues: - Fixed a directory traversal in downloadhttpurl bsc1176262 CVE-2019-20916 This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:2097-1 Security update for LibVNCServer

This update for LibVNCServer fixes the following issues: - CVE-2020-25708 bsc1178682, libvncserver/rfbserver.c has a divide by zero which could result in DoS This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:2051-1 Security update for perl-DBI

This update for perl-DBI fixes the following issues: - DBD::File drivers could open files from folders other than those specifically passed via the fdir attribute in the data source name DSN. bsc1176492, CVE-2014-10401, CVE-2014-10402 This update was imported from the SUSE:SLE-15:Update update...

OPENSUSE-SU-2020:1986-1 Security update for tcpdump

This update for tcpdump fixes the following issues: - CVE-2020-8037: Fixed an issue where PPP decapsulator did not allocate the right buffer size bsc1178466. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:1927-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2020-27560: Fixed potential denial of service in OptimizeLayerFrames function in MagickCore/layer.c bsc1178067. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:1918-1 Security update for openldap2

This update for openldap2 fixes the following issues: - CVE-2020-25692: Fixed an unauthenticated remote denial of service due to incorrect validation of modrdn equality rules bsc1178387. This update was imported from the SUSE:SLE-15:Update update project...

SUSE-SU-2020:3313-1 Security update for openldap2

This update for openldap2 fixes the following issues: - CVE-2020-25692: Fixed an unauthenticated remote denial of service due to incorrect validation of modrdn equality rules bsc1178387...

SUSE-SU-2020:3282-1 Security update for u-boot

This update for u-boot fixes the following issues: CVE-2019-14192 bsc1143777, CVE-2019-14193 bsc1143817, CVE-2019-14199 bsc1143824, CVE-2019-14197 bsc1143821, CVE-2019-14200 bsc1143825, CVE-2019-14201 bsc1143827, CVE-2019-14202 bsc1143828, CVE-2019-14203 bsc1143830, CVE-2019-14204 bsc1143831,...

OPENSUSE-SU-2020:1884-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2020-27560: Fixed potential denial of service in OptimizeLayerFrames function in MagickCore/layer.c bsc1178067. This update was imported from the SUSE:SLE-15:Update update project...