Security update for ceph (important)

openSUSE Security Update: Security update for ceph Announcement ID: openSUSE-SU-2020:0494-1 Rating: important References: 1166403 1166484 Cross-References: CVE-2020-1759 CVE-2020-1760 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description: Thi...

Security update for cups (important)

openSUSE Security Update: Security update for cups Announcement ID: openSUSE-SU-2019:2573-1 Rating: important References: 1146358 1146359 Cross-References: CVE-2019-8675 CVE-2019-8696 Affected Products: openSUSE Leap 15.0 An update that fixes two vulnerabilities is now available. Description: Thi...

Security update for SDL_image (moderate)

openSUSE Security Update: Security update for SDLimage Announcement ID: openSUSE-SU-2019:2109-1 Rating: moderate References: 1124827 1140421 1141844 1143763 1143764 1143766 1143768 Cross-References: CVE-2019-13616 CVE-2019-5052 CVE-2019-5057 CVE-2019-5058 CVE-2019-5059 CVE-2019-5060 CVE-2019-7635...

Security update for LibreOffice (moderate)

openSUSE Security Update: Security update for LibreOffice Announcement ID: openSUSE-SU-2019:1929-1 Rating: moderate References: 1089811 1116451 1121874 1123131 1123455 1124062 1124869 1127760 1127857 1128845 1135189 1135228 Cross-References: CVE-2018-16858 Affected Products: openSUSE Leap 15.1...

Security update for znc (important)

openSUSE Security Update: Security update for znc Announcement ID: openSUSE-SU-2019:1859-1 Rating: important References: 1130360 1138572 Cross-References: CVE-2019-12816 CVE-2019-9917 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes two vulnerabilities is now available...

Security update for curl (important)

openSUSE Security Update: Security update for curl Announcement ID: openSUSE-SU-2019:0173-1 Rating: important References: 1123371 1123377 1123378 Cross-References: CVE-2018-16890 CVE-2019-3822 CVE-2019-3823 Affected Products: openSUSE Leap 42.3 An update that fixes three vulnerabilities is now...

Security update for clamav (moderate)

This update for clamav fixes the following issues: clamav was updated to version 0.100.2. Following security issues were fixed: - CVE-2018-15378: Vulnerability in ClamAV's MEW unpacking feature that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an...

Security update for curl (moderate)

This update for curl to version 7.60.0 fixes the following issues: These security issues were fixed: - CVE-2018-1000300: Prevent heap-based buffer overflow when closing down an FTP connection with very long server command replies bsc1092094. - CVE-2018-1000301: Prevent buffer over-read that could...

Security update for php7 (important)

This update for php7 fixes the following issues: - CVE-2016-10397: parseurl can be bypassed to return fake host. bsc1047454 - CVE-2017-11142: Remoteattackers could cause a CPU consumption denial of service attack by injectinglong form variables, related to main/phpvariables. bsc1048100 -...

Security update for clamav (moderate)

openSUSE Security Update: Security update for clamav Announcement ID: openSUSE-SU-2019:2595-1 Rating: moderate References: 1144504 1149458 1151839 Cross-References: CVE-2019-12625 CVE-2019-12900 Affected Products: openSUSE Leap 15.1 An update that solves two vulnerabilities and has one errata is...

Security update for libssh2_org (moderate)

openSUSE Security Update: Security update for libssh2org Announcement ID: openSUSE-SU-2019:2483-1 Rating: moderate References: 1154862 Cross-References: CVE-2019-17498 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

Security update for samba (important)

openSUSE Security Update: Security update for samba Announcement ID: openSUSE-SU-2019:2442-1 Rating: important References: 1144902 1148539 1152143 1154289 1154598 Cross-References: CVE-2019-10218 CVE-2019-14833 CVE-2019-14847 Affected Products: openSUSE Leap 15.1 An update that solves three...

Security update for SDL2 (moderate)

openSUSE Security Update: Security update for SDL2 Announcement ID: openSUSE-SU-2019:2226-1 Rating: moderate References: 1141844 1142031 Cross-References: CVE-2019-13616 CVE-2019-13626 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description: Th...

Security update for util-linux and shadow (moderate)

openSUSE Security Update: Security update for util-linux and shadow Announcement ID: openSUSE-SU-2019:2121-1 Rating: moderate References: 1081947 1082293 1085196 1106214 1121197 1122417 1125886 1127701 1135534 1135708 1141113 353876 Affected Products: openSUSE Leap 15.1 An update that contains...

Security update for python-Django (moderate)

openSUSE Security Update: Security update for python-Django Announcement ID: openSUSE-SU-2019:1872-1 Rating: moderate References: 1136468 1139945 1142880 1142882 1142883 1142885 Cross-References: CVE-2019-11358 CVE-2019-12308 CVE-2019-12781 CVE-2019-14232 CVE-2019-14233 CVE-2019-14234...

Security update for python-Twisted (moderate)

openSUSE Security Update: Security update for python-Twisted Announcement ID: openSUSE-SU-2019:1760-1 Rating: moderate References: 1137825 Cross-References: CVE-2019-12387 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description...

Security update for sqlite3 (moderate)

openSUSE Security Update: Security update for sqlite3 Announcement ID: openSUSE-SU-2019:1222-1 Rating: moderate References: 1119687 1131576 Cross-References: CVE-2018-20346 CVE-2018-20506 Affected Products: openSUSE Leap 42.3 An update that fixes two vulnerabilities is now available. Description:...

Security update for ffmpeg-4 (low)

openSUSE Security Update: Security update for ffmpeg-4 Announcement ID: openSUSE-SU-2019:1066-1 Rating: low References: 1092241 1100348 1105869 Cross-References: CVE-2018-13300 CVE-2018-15822 Affected Products: openSUSE Backports SLE-15 An update that solves two vulnerabilities and has one errata...

Security update for bluez (moderate)

This update for bluez fixes the following issues: Security issues fixed: - CVE-2016-9800: Fixed a buffer overflow in pincodereplydump function bsc1013721 - CVE-2016-9801: Fixed a buffer overflow in setextctrl function bsc1013732 This update was imported from the SUSE:SLE-15:Update update project...

Security update for python-bleach (important)

openSUSE Security Update: Security update for python-bleach Announcement ID: openSUSE-SU-2020:0308-1 Rating: important References: 1165303 Cross-References: CVE-2020-6802 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

Security update for python3 (moderate)

openSUSE Security Update: Security update for python3 Announcement ID: openSUSE-SU-2020:0274-1 Rating: moderate References: 1162224 1162367 1162423 1162825 Cross-References: CVE-2019-9674 CVE-2020-8492 Affected Products: openSUSE Leap 15.1 An update that solves two vulnerabilities and has two fix...

Security update for clamav (moderate)

openSUSE Security Update: Security update for clamav Announcement ID: openSUSE-SU-2019:2597-1 Rating: moderate References: 1144504 1149458 1151839 Cross-References: CVE-2019-12625 CVE-2019-12900 Affected Products: openSUSE Leap 15.0 An update that solves two vulnerabilities and has one errata is...

Security update for kernel-firmware (moderate)

openSUSE Security Update: Security update for kernel-firmware Announcement ID: openSUSE-SU-2019:1770-1 Rating: moderate References: 1136334 1136498 1139383 Cross-References: CVE-2019-9836 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that solves one vulnerability and has two...

Security update for webkit2gtk3 (important)

openSUSE Security Update: Security update for webkit2gtk3 Announcement ID: openSUSE-SU-2019:1766-1 Rating: important References: 1133291 1135715 Cross-References: CVE-2019-6237 CVE-2019-8571 CVE-2019-8583 CVE-2019-8584 CVE-2019-8586 CVE-2019-8587 CVE-2019-8594 CVE-2019-8595 CVE-2019-8596...

Security update for gnutls (moderate)

This update for gnutls fixes the following issues: Security issues fixed: - Improved mitigations against Lucky 13 class of attacks - CVE-2018-10846: "Just in Time" PRIME + PROBE cache-based side channel attack can lead to plaintext recovery bsc1105460 - CVE-2018-10845: HMAC-SHA-384 vulnerable to...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:1142-1 Rating: important References: 1065729 1085224 1094840 1113295 1153274 1154353 1156395 1179243 1183871 1184114 1184350 1184631 1185377 1185902 1186194 1186264 1186482 1187476 1188101 1188405...

Security update for autoyast2 (moderate)

openSUSE Security Update: Security update for autoyast2 Announcement ID: openSUSE-SU-2020:0676-1 Rating: moderate References: 1109310 1133045 1140711 1164105 1168123 1168281 1170082 Cross-References: CVE-2019-18905 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and...

Security update for zypper, libzypp and libsolv (moderate)

openSUSE Security Update: Security update for zypper, libzypp and libsolv Announcement ID: openSUSE-SU-2019:1927-1 Rating: moderate References: 1047962 1049826 1053177 1065022 1099019 1102261 1110542 1111319 1112911 1113296 1114908 1115341 1116840 1118758 1119373 1119820 1119873 1120263 1120463...

Security update for fence-agents (low)

openSUSE Security Update: Security update for fence-agents Announcement ID: openSUSE-SU-2019:1719-1 Rating: low References: 1049852 1137314 Cross-References: CVE-2019-10153 Affected Products: openSUSE Leap 15.0 An update that solves one vulnerability and has one errata is now available...

Security update for perl-Email-Address (important)

openSUSE Security Update: Security update for perl-Email-Address Announcement ID: openSUSE-SU-2019:1114-1 Rating: important References: 1098368 Cross-References: CVE-2018-12558 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 An update that fixes one vulnerabilit...

Security update for libssh2_org (moderate)

openSUSE Security Update: Security update for libssh2org Announcement ID: openSUSE-SU-2019:1075-1 Rating: moderate References: 1091236 1128471 1128472 1128474 1128476 1128480 1128481 1128490 1128492 1128493 Cross-References: CVE-2019-3855 CVE-2019-3856 CVE-2019-3857 CVE-2019-3858 CVE-2019-3859...

Security update for libnettle (moderate)

This update for libnettle fixes the following issues: Security issues fixed: - CVE-2018-16869: Fixed a leaky data conversion exposing a manager oracle bsc1118086 This update was imported from the SUSE:SLE-15:Update update project...

Security update for perl (moderate)

This update for perl fixes the following issues: Secuirty issues fixed: - CVE-2018-18311: Fixed integer overflow with oversize environment bsc1114674. - CVE-2018-18312: Fixed heap-buffer-overflow write / regnode overrun bsc1114675. - CVE-2018-18313: Fixed heap-buffer-overflow read if regex contai...

Security update for glibc (moderate)

This update for glibc fixes the following security issues: - CVE-2017-18269: An SSE2-optimized memmove implementation for i386 did not correctly perform the overlapping memory check if the source memory range spaned the middle of the address space, resulting in corrupt data being produced by the...

Security update for the Linux Kernel (critical)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2022:0366-1 Rating: critical References: 1071995 1124431 1167162 1169514 1172073 1179599 1184804 1185377 1186207 1186222 1187167 1189305 1189841 1190358 1190428 1191229 1191241 1191384 1191731 1192032...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:2415-1 Rating: important References: 1188062 1188116 Cross-References: CVE-2021-22555 CVE-2021-33909 CVSS scores: CVE-2021-22555 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-22555...

Security update for u-boot (moderate)

openSUSE Security Update: Security update for u-boot Announcement ID: openSUSE-SU-2019:2235-1 Rating: moderate References: 1144656 1144675 Cross-References: CVE-2019-13104 CVE-2019-13106 Affected Products: openSUSE Leap 15.0 An update that fixes two vulnerabilities is now available. Description:...

Security update for nmap (important)

openSUSE Security Update: Security update for nmap Announcement ID: openSUSE-SU-2019:2200-1 Rating: important References: 1135350 1148742 Cross-References: CVE-2017-18594 CVE-2018-15173 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description:...

Security update for nmap (important)

openSUSE Security Update: Security update for nmap Announcement ID: openSUSE-SU-2019:2198-1 Rating: important References: 1135350 1148742 Cross-References: CVE-2017-18594 CVE-2018-15173 Affected Products: openSUSE Leap 15.0 An update that fixes two vulnerabilities is now available. Description:...

Security update for libtasn1 (moderate)

openSUSE Security Update: Security update for libtasn1 Announcement ID: openSUSE-SU-2019:1498-1 Rating: moderate References: 1105435 Cross-References: CVE-2018-1000654 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: Th...

Security update for xerces-c (low)

openSUSE Security Update: Security update for xerces-c Announcement ID: openSUSE-SU-2019:1283-1 Rating: low References: 1083630 Cross-References: CVE-2017-12627 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for xerces-c fix...

Security update for dovecot23 (moderate)

openSUSE Security Update: Security update for dovecot23 Announcement ID: openSUSE-SU-2019:1212-1 Rating: moderate References: 1130116 Cross-References: CVE-2019-7524 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for dovecot...

Security update for pdns (moderate)

This update for pdns fixes the following issues: Security issues fixed: - CVE-2018-10851: Fixed denial of service via crafted zone record or crafted answer bsc1114157...

Security update for kernel-firmware (moderate)

This update for kernel-firmware fixes the following issues: This security issue was fixed: - CVE-2017-5715: Prevent unauthorized disclosure of information to an attacker with local user access caused by speculative execution and indirect branch prediction bsc1095735 This update was imported from...

Security update for chromium (important)

This update for Chromium to version 66.0.3359.117 fixes the following issues: Security issues fixed boo1090000: - CVE-2018-6085: Use after free in Disk Cache - CVE-2018-6086: Use after free in Disk Cache - CVE-2018-6087: Use after free in WebAssembly - CVE-2018-6088: Use after free in PDFium -...

Security update for qemu (important)

This update for qemu fixes the following issues: This update has the next round of Spectre v2 related patches, which now integrate with corresponding changes in libvirt. CVE-2017-5715 bsc1068032 The January 2018 release of qemu initially addressed the Spectre v2 vulnerability for KVM guests by...

Security update for dnsmasq (important)

This update for dnsmasq fixes the following security issues: - CVE-2017-14491: 2 byte heap based overflow. bsc1060354 - CVE-2017-14492: heap based overflow. bsc1060355 - CVE-2017-14493: stack based overflow. bsc1060360 - CVE-2017-14494: DHCP - info leak. bsc1060361 - CVE-2017-14495: DNS - OOM DoS...

Security update for pdns-recursor (moderate)

openSUSE Security Update: Security update for pdns-recursor Announcement ID: openSUSE-SU-2020:0698-1 Rating: moderate References: 1171553 Cross-References: CVE-2020-10030 CVE-2020-10995 CVE-2020-12244 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 SUSE Package Hub for SUSE...

Security update for sudo (important)

openSUSE Security Update: Security update for sudo Announcement ID: openSUSE-SU-2019:2316-1 Rating: important References: 1153674 Cross-References: CVE-2019-14287 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for sudo fixes...

Security update for bubblewrap (important)

openSUSE Security Update: Security update for bubblewrap Announcement ID: openSUSE-SU-2019:1721-1 Rating: important References: 1136958 Cross-References: CVE-2019-12439 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for...