OPENSUSE-SU-2020:0719-1 Security update for dom4j

This update for dom4j fixes the following issues: - CVE-2020-10683: Fixed an XML External Entity vulnerability in default SAX parser bsc1169760. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:0694-1 Security update for openconnect

This update for openconnect fixes the following issues: Security issue fixed: - CVE-2020-12105: Fixed the improper handling of negative return values from X509check function calls that might have allowed MITM attacks bsc1170452. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:0680-1 Security update for libvpx

This update for libvpx fixes the following issues: - CVE-2020-0034: Fixed an out-of-bounds read on truncated key frames bsc1166066. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:0648-1 Security update for chromium

This update for chromium fixes the following issues: Update to 81.0.4044.138 boo1171247: - CVE-2020-6831: Stack buffer overflow in SCTP - CVE-2020-6464: Type Confusion in Blink This update was imported from the openSUSE:Leap:15.1:Update update project...

OPENSUSE-SU-2020:0510-1 Security update for libssh

This update for libssh fixes the following issues: - CVE-2020-1730: Fixed a possible denial of service when using AES-CTR bsc1168699. This update was imported from the SUSE:SLE-15-SP1:Update update project...

Security update for bluez (moderate)

openSUSE Security Update: Security update for bluez Announcement ID: openSUSE-SU-2020:0479-1 Rating: moderate References: 1166751 Cross-References: CVE-2020-0556 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for bluez fixes...

OPENSUSE-SU-2020:0247-1 Security update for ipmitool

This update for ipmitool fixes the following security issue: - CVE-2020-5208: Fixed several buffer overflows bsc1163026. This update was imported from the SUSE:SLE-15-SP1:Update update project...

OPENSUSE-SU-2020:0084-1 Security update for Mesa

This update for Mesa fixes the following issues: Security issue fixed: - CVE-2019-5068: Fixed exploitable shared memory permissions vulnerability bsc1156015. This update was imported from the SUSE:SLE-15-SP1:Update update project...

OPENSUSE-SU-2020:0080-1 Security update for php7

This update for php7 fixes the following issues: - CVE-2019-11045: Fixed an issue with improper input validation in the filename handling of the DirectoryIterator class bsc1159923. - CVE-2019-11046: Fixed an information leak in bcshiftaddsub bsc1159924. - CVE-2019-11047, CVE-2019-11050: Fixed...

OPENSUSE-SU-2020:0059-1 Security update for nodejs8

This update for nodejs8 to version 8.17.0 fixes the following issues: Security issues fixed: - CVE-2019-16777, CVE-2019-16776, CVE-2019-16775: Updated npm to 6.13.4, fixing an arbitrary path overwrite and access via 'bin' field bsc1159352. This update was imported from the SUSE:SLE-15:Update upda...

OPENSUSE-SU-2020:0007-1 Security update for chromium

This update for chromium fixes the following issues: Chromium was updated to 79.0.3945.88: - CVE-2019-13767: Fixed a use after free in media picker boo1159498 This update was imported from the openSUSE:Leap:15.1:Update update project...

openSUSE: Security Advisory for samba (openSUSE-SU-2019:2142-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2019:2685-1 Security update for postgresql

This update for postgresql fixes the following issues: - Changed permissions, so that the directory can only be used by users in the postgres group bsc1123886. - Moved bash profile out of /var/lib to allow transactional updates bsc1100397. This update was imported from the SUSE:SLE-15:Update upda...

Security update for permissions (moderate)

openSUSE Security Update: Security update for permissions Announcement ID: openSUSE-SU-2019:2672-1 Rating: moderate References: 1093414 1150734 1157198 Cross-References: CVE-2019-3688 CVE-2019-3690 Affected Products: openSUSE Leap 15.1 An update that solves two vulnerabilities and has one errata ...

openSUSE Security Update : haproxy (openSUSE-2019-2626)

This update for haproxy to version 2.0.10 fixes the following issues : HAProxy was updated to 2.0.10 Security issues fixed : - CVE-2019-18277: Fixed a potential HTTP smuggling in messages with transfer-encoding header missing the 'chunked' bsc1154980. - Fixed an improper handling of headers which...

Security update for haproxy (important)

openSUSE Security Update: Security update for haproxy Announcement ID: openSUSE-SU-2019:2645-1 Rating: important References: 1082318 1154980 1157712 1157714 Cross-References: CVE-2019-18277 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has three fixes is now...

openSUSE Security Update : clamav (openSUSE-2019-2595)

This update for clamav fixes the following issues : Security issue fixed : - CVE-2019-12625: Fixed a ZIP bomb issue by adding detection and heuristics for zips with overlapping files bsc1144504. - CVE-2019-12900: Fixed an out-of-bounds write in decompress.c with many selectors bsc1149458...

OPENSUSE-SU-2019:2608-1 Security update for freerdp

This update for freerdp fixes the following issues: - CVE-2019-17177: Fixed multiple memory leaks in libfreerdp/codec/region.c bsc1153163. - CVE-2019-17178: Fixed a memory leak in HuffmanTreemakeFromFrequencies bsc1153164. This update was imported from the SUSE:SLE-15-SP1:Update update project...

OPENSUSE-SU-2019:2588-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2016-9798: Fixed a use-after-free in confopt bsc1013712. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2019:2573-1 Security update for cups

This update for cups fixes the following issues: - CVE-2019-8675: Fixed a stack buffer overflow in libcups's asn1gettype functionbsc1146358. - CVE-2019-8696: Fixed a stack buffer overflow in libcups's asn1getpacked function bsc1146359. This update was imported from the SUSE:SLE-15:Update update...