1084 matches found
OPENSUSE-SU-2020:1181-1 Security update of chromium
Chromium was updated to 84.0.4147.105 boo1174582: CVE-2020-6537: Type Confusion in V8 CVE-2020-6538: Inappropriate implementation in WebView CVE-2020-6532: Use after free in SCTP CVE-2020-6539: Use after free in CSS CVE-2020-6540: Heap buffer overflow in Skia CVE-2020-6541: Use after free in WebU...
DSA-4744-1 roundcube - security update
Bulletin has no description...
OPENSUSE-SU-2020:1178-1 Security update for go1.13
This update for go1.13 fixes the following issues: - go1.13 was updated to version 1.13.5 - CVE-2020-16845: dUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs bsc1174977. This update was imported from the SUSE:SLE-15:Update update project...
DSA-4740-1 thunderbird - security update
Bulletin has no description...
OPENSUSE-SU-2020:1100-1 Security update for singularity
This update for singularity fixes the following issues: - New version 3.6.0. This version introduces a new signature format for SIF images, and changes to the signing / verification code to address the following security problems: - CVE-2020-13845, boo1174150 In Singularity 3.x versions below...
OPENSUSE-SU-2020:1064-1 Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - Update to version 2.28.3 bsc1173998: + Enable kinetic scrolling with async scrolling. + Fix web process hangs on large GitHub pages. + Bubblewrap sandbox should not attempt to bind empty paths. + Fix threading issues in the media player. +...
SUSE-SU-2020:1990-1 Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - Update to version 2.28.3 bsc1173998: + Enable kinetic scrolling with async scrolling. + Fix web process hangs on large GitHub pages. + Bubblewrap sandbox should not attempt to bind empty paths. + Fix threading issues in the media player. +...
OPENSUSE-SU-2020:1023-1 Security update for ldb, samba
This update for ldb, samba fixes the following issues: Changes in samba: - Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; bso14364; bsc1173159 + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each;...
Security Bulletin: Smart Cloud Entry is affected by ISC BIND vulnerabilities
Summary Multiple vulnerabilitieshave been identified in ISC BIND. ISC BIND shipped with IBM SmartCloud Entry Appliance. Vulnerability Details CVEID: CVE-2017-3142 DESCRIPTION: ISC BIND could allow a remote attacker to bypass security restrictions, caused by an error when an attacker can send and...
DLA-2273-1 shiro - security update
Bulletin has no description...
OPENSUSE-SU-2020:0910-1 Security update for squid
This update for squid fixes the following issues: squid was updated to version 4.12 Security issue fixed: - CVE-2020-14059: Fixed an issue where a client could potentially deny the service of a server during TLS Handshake bsc1173304. Other issues addressed: - Reverted to slow search for new SMP s...
DSA-4711-1 coturn - security update
Bulletin has no description...
SUSE-SU-2020:1775-1 Security update for the Linux Kernel (Live Patch 0 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-120 fixes several issues. The following security issues were fixed: - CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access bsc1172437. - CVE-2018-1000199: Fixed a potential local code execution via ptrac...
SUSE-SU-2020:1758-1 Security update for the Linux Kernel (Live Patch 5 for SLE 12 SP4)
This update for the Linux Kernel 4.12.14-9519 fixes several issues. The following security issues were fixed: - CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access bsc1172437. - CVE-2019-15666: Fixed an out of bounds read xfrmpolicyunlink, whi...
SUSE-SU-2020:1656-1 Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-195 fixes several issues. The following security issues were fixed: - CVE-2019-13233: Fixed a race condition between modifyldt and a BR exception for an MPX bounds violation bsc1144502. - CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon...
OPENSUSE-SU-2020:0823-1 Security update for chromium
This update for chromium fixes the following issues: Chromium was updated to 83.0.4103.97 boo1171910,bsc1172496: CVE-2020-6463: Use after free in ANGLE boo1170107 boo1171975. CVE-2020-6465: Use after free in reader mode. Reported by Woojin Oh@pwnexpoit of STEALIEN on 2020-04-21 CVE-2020-6466: Use...
OPENSUSE-SU-2020:0800-1 Security update for java-1_8_0-openjdk
This update for java-180-openjdk to version jdk8u252 fixes the following issues: - CVE-2020-2754: Forward references to Nashorn bsc1169511 - CVE-2020-2755: Improve Nashorn matching bsc1169511 - CVE-2020-2756: Better mapping of serial ENUMs bsc1169511 - CVE-2020-2757: Less Blocking Array Queues...
SUSE-SU-2020:1511-1 Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: Java was updated to jdk-11.0.7+10 April 2020 CPU, bsc1169511. Security issues fixed: - CVE-2020-2754: Fixed an incorrect handling of regular expressions that could have resulted in denial of service bsc1169511. - CVE-2020-2755: Fixed an...
MGASA-2020-0228 Updated kernel-linus packages fix security vulnerabilities
This update is based on the upstream 5.6.14 kernel and fixes at least the following security issues: A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occurs while importing the Commercial IP Security Option CIPSO protocol's catego...