1084 matches found
SUSE-SU-2020:3368-1 Security update for go1.15
This update for go1.15 fixes the following issues: - go1.15.5 released 2020-11-12 includes security fixes to the cmd/go and math/big packages. go42553 math/big: panic during recursive division of very large numbers bsc1178750 CVE-2020-28362 go42560 cmd/go: arbitrary code can be injected into cgo...
DSA-4791-1 pacemaker - security update
Bulletin has no description...
cups security and bug fix update
1:2.2.6-38 - 1775590 - rastertoepson filter crashes with paper size A6 1:2.2.6-37 - forgot to enable optimization - 1833516 1:2.2.6-36 - 1838449 - ipp/socket backends connect to turned off device for eternity contimeout is not applied - 1689207 - Add failover backend - 1833516 - DirtyCleanInterva...
openSUSE Security Update : claws-mail (openSUSE-2020-1822)
This update for claws-mail fixes the following issues : - Additional cleanup of the template handling claws-mail was updated to 3.17.8 boo1177967 - Shielded template's |program and |attachprogram so that the command-line that is executed does not allow sequencing such as with && || ;, preventing...
openSUSE Security Update : MozillaThunderbird and mozilla-nspr (openSUSE-2020-1785)
This update for MozillaThunderbird and mozilla-nspr fixes the following issues : - Mozilla Thunderbird 78.4 - new: MailExtensions: browser.tabs.sendMessage API added - new: MailExtensions: messageDisplayScripts API added - changed: Yahoo and AOL mail users using password authentication will be...
OPENSUSE-SU-2020:1752-1 Recommended update for mailman
This update for mailman to version 2.1.34 fixes the following issues: - The fix for lp1859104 can result in ValueError being thrown on attempts to subscribe to a list. This is fixed and extended to apply REFUSESECONDPENDING to unsubscription as well. lp1878458 - DMARC mitigation no longer misses ...
DSA-4777-1 freetype - security update
Bulletin has no description...
MGASA-2020-0389 Updated freetype2 packages fix security vulnerability
A heap buffer overflow has been found in freetype2 before 2.10.4. Malformed TTF files with PNG sbit glyphs can cause a heap buffer overflow in LoadSBitPng as libpng uses the original 32-bit values, which are saved in pngstruct. If the original width and/or height are greater than 65535, the...
DLA-2407-1 tomcat8 - security update
Bulletin has no description...
DLA-2400-1 activemq - security update
Bulletin has no description...
DSA-4770-1 thunderbird - security update
Bulletin has no description...
DLA-2384-1 yaws - security update
Bulletin has no description...
DSA-4765-1 modsecurity - security update
Bulletin has no description...
MGASA-2020-0366 Updated libetpan packages fix a security vulnerability
LibEtPan through 1.9.4, as used in MailCore 2 through 0.6.3 and other products, has a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server sends a "begin TLS" response, the client reads additional data e.g., from a meddler-in-the-middle attacker and evaluates it in a TLS...
SUSE-SU-2020:2628-1 Security update for shim
This update for shim fixes the following issues: - Update to the unified shim binary from SUSE Linux Enterprise 15-SP1 bsc1168994 This update addresses the 'BootHole' security issue master CVE CVE-2020-10713, by disallowing binaries signed by the previous SUSE UEFI signing key from booting. This...
SUSE-SU-2020:2605-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 realtime kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-14314: Fixed a potential negative array index in dosplit bsc1173798. - CVE-2020-14356: Fixed a null pointer dereference in cgroupv2 subsystem...
SUSE-SU-2020:2505-1 Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-19726 fixes several issues. The following security issues were fixed: - CVE-2020-14331: Fixed a buffer over-write in vgaconscroll bsc1174247. - CVE-2020-15780: Fixed a lockdown bypass via injection of malicious ACPI tables via configfs bsc1174186. -...
DLA-2347-1 libvncserver - security update
Bulletin has no description...
MGASA-2020-0333 Updated kernel packages fix security vulnerability
This provides an update to kernel 5.7 series, currently based on upstream 5.7.14 adding support for new hardware and features, and fixes at least the following security issues: An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aalabelparse fails in...