Security update for fence-agents (low)

openSUSE Security Update: Security update for fence-agents Announcement ID: openSUSE-SU-2019:1719-1 Rating: low References: 1049852 1137314 Cross-References: CVE-2019-10153 Affected Products: openSUSE Leap 15.0 An update that solves one vulnerability and has one errata is now available...

Security update for ovmf (moderate)

openSUSE Security Update: Security update for ovmf Announcement ID: openSUSE-SU-2019:1139-1 Rating: moderate References: 1128503 Cross-References: CVE-2018-12181 Affected Products: openSUSE Leap 42.3 An update that fixes one vulnerability is now available. Description: This update for ovmf fixes...

Security update for pdns (moderate)

This update for pdns fixes the following issues: Security issues fixed: - CVE-2018-10851: Fixed denial of service via crafted zone record or crafted answer bsc1114157...

Security update for libnettle (moderate)

This update for libnettle fixes the following issues: Security issues fixed: - CVE-2018-16869: Fixed a leaky data conversion exposing a manager oracle bsc1118086 This update was imported from the SUSE:SLE-15:Update update project...

Security update for enigmail (moderate)

This update for enigmail to version 2.0.6 fixes the following issues: Security issues fixed: - Replies to a partially encrypted message may have revealed protected information: no longer display PGP/MIME message part followed by unencrypted data boo1094781 - Signature could be spoofed via...

Security update for qemu (important)

This update for qemu fixes the following issues: This update has the next round of Spectre v2 related patches, which now integrate with corresponding changes in libvirt. CVE-2017-5715 bsc1068032 The January 2018 release of qemu initially addressed the Spectre v2 vulnerability for KVM guests by...

Security update for apache2 (important)

openSUSE Security Update: Security update for apache2 Announcement ID: openSUSE-SU-2022:0091-1 Rating: important References: 1193942 1193943 1197552 SLE-22733 SLE-22849 Cross-References: CVE-2021-44224 CVE-2021-44790 CVE-2022-1096 CVSS scores: CVE-2021-44224 NVD : 8.2...

Security update for SUSE Manager Client Tools (moderate)

openSUSE Security Update: Security update for SUSE Manager Client Tools Announcement ID: openSUSE-SU-2021:2675-1 Rating: moderate References: 1175478 1186242 1186508 1186581 1186650 1188846 SLE-18254 Cross-References: CVE-2021-27962 CVE-2021-28146 CVE-2021-28147 CVE-2021-28148 CVE-2021-29622 CVSS...

Security update for mysql-connector-java (moderate)

openSUSE Security Update: Security update for mysql-connector-java Announcement ID: openSUSE-SU-2021:1126-1 Rating: moderate References: 1173600 Cross-References: CVE-2020-2875 CVE-2020-2933 CVE-2020-2934 CVSS scores: CVE-2020-2875 NVD : 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N...

Security update for gstreamer-plugins-base (important)

openSUSE Security Update: Security update for gstreamer-plugins-base Announcement ID: openSUSE-SU-2020:0678-1 Rating: important References: 1133375 Cross-References: CVE-2019-9928 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This upda...

Security update for ceph (moderate)

openSUSE Security Update: Security update for ceph Announcement ID: openSUSE-SU-2020:0187-1 Rating: moderate References: 1161074 1161312 Cross-References: CVE-2020-1699 CVE-2020-1700 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description: This...

Recommended update for openafs (moderate)

openSUSE Security Update: Recommended update for openafs Announcement ID: openSUSE-SU-2019:2607-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 An update that contains security fixes can now be installed. Description: This update for openafs fixes the following issues: Update...

Security update for gcc7 (moderate)

openSUSE Security Update: Security update for gcc7 Announcement ID: openSUSE-SU-2019:2365-1 Rating: moderate References: 1071995 1141897 1142649 1148517 1149145 Cross-References: CVE-2019-14250 CVE-2019-15847 Affected Products: openSUSE Leap 15.0 An update that solves two vulnerabilities and has...

Security update for sudo (important)

openSUSE Security Update: Security update for sudo Announcement ID: openSUSE-SU-2019:2316-1 Rating: important References: 1153674 Cross-References: CVE-2019-14287 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for sudo fixes...

Security update for u-boot (moderate)

openSUSE Security Update: Security update for u-boot Announcement ID: openSUSE-SU-2019:2235-1 Rating: moderate References: 1144656 1144675 Cross-References: CVE-2019-13104 CVE-2019-13106 Affected Products: openSUSE Leap 15.0 An update that fixes two vulnerabilities is now available. Description:...

Security update for nmap (important)

openSUSE Security Update: Security update for nmap Announcement ID: openSUSE-SU-2019:2200-1 Rating: important References: 1135350 1148742 Cross-References: CVE-2017-18594 CVE-2018-15173 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description:...

Security update for lua53 (moderate)

openSUSE Security Update: Security update for lua53 Announcement ID: openSUSE-SU-2019:0175-1 Rating: moderate References: 1123043 Cross-References: CVE-2019-6706 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for lua53 fixes...

Security update for tiff (moderate)

This update for tiff fixes the following issues: Security issues fixed: - CVE-2018-19210: Fixed NULL pointer dereference in the TIFFWriteDirectorySec function bsc1115717. - CVE-2017-12944: Fixed denial of service issue in the TIFFReadDirEntryArray function bsc1054594. - CVE-2016-10094: Fixed...

Security update for tcpdump (moderate)

This update for tcpdump fixes the following security issue: - CVE-2018-19519: Fixed a stack-based buffer over-read in the printprefix function bsc1117267 This update was imported from the SUSE:SLE-12:Update update project...

Security update for pdns (moderate)

This update for pdns fixes the following issues: Security issues fixed: - CVE-2018-10851: Fixed denial of service via crafted zone record or crafted answer bsc1114157. - CVE-2018-14626: Fixed packet cache pollution via crafted query bsc1114169. This update was imported from the...

Security update for chromium (moderate)

This update for Chromium to version 69.0.3497.92 fixes the following issues: Security issues fixed boo1108114: - Function signature mismatch in WebAssembly - URL Spoofing in Omnibox The following tracked packaging issues were fixed: - the chromium package incorrectly provied swiftshader resolvabl...

Security update for glibc (moderate)

This update for glibc fixes the following security issues: - CVE-2017-18269: An SSE2-optimized memmove implementation for i386 did not correctly perform the overlapping memory check if the source memory range spaned the middle of the address space, resulting in corrupt data being produced by the...

Security update for chromium (important)

This update for Chromium to version 66.0.3359.117 fixes the following issues: Security issues fixed boo1090000: - CVE-2018-6085: Use after free in Disk Cache - CVE-2018-6086: Use after free in Disk Cache - CVE-2018-6087: Use after free in WebAssembly - CVE-2018-6088: Use after free in PDFium -...

Security update for xen (important)

This update for xen to version 4.7.4 bsc1027519 fixes several issues. This new feature was added: - Support migration of HVM domains larger than 1 TB These security issues were fixed: - bsc1068187: Failure to recognize errors in the Populate on Demand PoD code allowed for DoS XSA-246 - bsc1068191...

Security update for xen (important)

This update for xen fixes several issues. These security issues were fixed: - CVE-2017-12135: Unbounded recursion in grant table code allowed a malicious guest to crash the host or potentially escalate privileges/leak information XSA-226, bsc1051787. - CVE-2017-12137: Incorrectly-aligned updates ...

Security update for git (important)

This update for git fixes the following security issues: - CVE-2017-1000117: A malicious third-party could have caused a git client to execute arbitrary commands via crafted "ssh://..." URLs, including submodules boo1052481...

Security update for pdns-recursor (moderate)

openSUSE Security Update: Security update for pdns-recursor Announcement ID: openSUSE-SU-2020:0698-1 Rating: moderate References: 1171553 Cross-References: CVE-2020-10030 CVE-2020-10995 CVE-2020-12244 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 SUSE Package Hub for SUSE...

Security update for lxc (moderate)

openSUSE Security Update: Security update for lxc Announcement ID: openSUSE-SU-2019:2245-1 Rating: moderate References: 1131762 Cross-References: CVE-2019-5736 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for lxc fixes the...

Security update for nmap (important)

openSUSE Security Update: Security update for nmap Announcement ID: openSUSE-SU-2019:2198-1 Rating: important References: 1135350 1148742 Cross-References: CVE-2017-18594 CVE-2018-15173 Affected Products: openSUSE Leap 15.0 An update that fixes two vulnerabilities is now available. Description:...

Security update for kernel-firmware (moderate)

openSUSE Security Update: Security update for kernel-firmware Announcement ID: openSUSE-SU-2019:1770-1 Rating: moderate References: 1136334 1136498 1139383 Cross-References: CVE-2019-9836 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that solves one vulnerability and has two...

Security update for xerces-c (low)

openSUSE Security Update: Security update for xerces-c Announcement ID: openSUSE-SU-2019:1283-1 Rating: low References: 1083630 Cross-References: CVE-2017-12627 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for xerces-c fix...

Security update for dovecot23 (moderate)

openSUSE Security Update: Security update for dovecot23 Announcement ID: openSUSE-SU-2019:1212-1 Rating: moderate References: 1130116 Cross-References: CVE-2019-7524 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for dovecot...

Security update for libcomps (moderate)

openSUSE Security Update: Security update for libcomps Announcement ID: openSUSE-SU-2019:0323-1 Rating: moderate References: 1122841 Cross-References: CVE-2019-3817 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for libcomps...

Security update for openssh (important)

openSUSE Security Update: Security update for openssh Announcement ID: openSUSE-SU-2019:0093-1 Rating: important References: 1121571 1121816 1121818 1121821 Cross-References: CVE-2018-20685 CVE-2019-6109 CVE-2019-6110 CVE-2019-6111 Affected Products: openSUSE Leap 42.3 An update that fixes four...

Security update for fuse (moderate)

This update for fuse fixes the following issues: - CVE-2018-10906: fusermount was vulnerable to a restriction bypass when SELinux is active. This allowed non-root users to mount a FUSE file system with the 'allowother' mount option regardless of whether 'userallowother' is set in the fuse...

Security update for ImageMagick (moderate)

This update for ImageMagick fixes the following issues: The following security vulnerabilities were fixed: - CVE-2018-16329: Prevent NULL pointer dereference in the GetMagickProperty function leading to DoS bsc1106858 - CVE-2018-16323: ReadXBMImage left data uninitialized when processing an XBM...

Security update for the Linux Kernel (important)

The openSUSE Leap 42.3 kernel was updated to 4.4.103 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-1000405: A bug in the THP CoW support could be used by local attackers to corrupt memory of other processes and cause them to crash bnc1069496. -...

Security update for spice (important)

This update for spice fixes the following security issues: - CVE-2017-7506: Fixed an out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak bsc1046779. This update was imported from the...

Security update for python-rpyc (moderate)

openSUSE Security Update: Security update for python-rpyc Announcement ID: openSUSE-SU-2020:0763-1 Rating: moderate References: 1152987 Cross-References: CVE-2019-16328 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: This upda...

Security update for autoyast2 (moderate)

openSUSE Security Update: Security update for autoyast2 Announcement ID: openSUSE-SU-2020:0676-1 Rating: moderate References: 1109310 1133045 1140711 1164105 1168123 1168281 1170082 Cross-References: CVE-2019-18905 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and...

Security update for python-PyYAML (important)

openSUSE Security Update: Security update for python-PyYAML Announcement ID: openSUSE-SU-2020:0507-1 Rating: important References: 1165439 Cross-References: CVE-2020-1747 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

Security update for arc (moderate)

openSUSE Security Update: Security update for arc Announcement ID: openSUSE-SU-2020:0103-1 Rating: moderate References: 1121032 Cross-References: CVE-2015-9275 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 An update that fixes one vulnerability is n...

Security update for libredwg (moderate)

openSUSE Security Update: Security update for libredwg Announcement ID: openSUSE-SU-2020:0095-1 Rating: moderate References: 1129868 1129869 1129870 1129873 1129874 1129875 1129876 1129878 1129879 1129881 1154080 1159824 1159825 1159826 1159827 1159828 1159831 1159832 Cross-References:...

Security update for cups (important)

openSUSE Security Update: Security update for cups Announcement ID: openSUSE-SU-2019:2575-1 Rating: important References: 1146358 1146359 Cross-References: CVE-2019-8675 CVE-2019-8696 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description: Thi...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2019:2426-1 Rating: important References: 1155643 Cross-References: CVE-2019-13720 CVE-2019-13721 Affected Products: openSUSE Backports SLE-15 An update that fixes two vulnerabilities is now available. Description...

Security update for schismtracker (important)

openSUSE Security Update: Security update for schismtracker Announcement ID: openSUSE-SU-2019:1994-1 Rating: important References: 1144261 1144266 Cross-References: CVE-2019-14523 CVE-2019-14524 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that fixes two vulnerabilities is n...

Security update for libtasn1 (moderate)

openSUSE Security Update: Security update for libtasn1 Announcement ID: openSUSE-SU-2019:1498-1 Rating: moderate References: 1105435 Cross-References: CVE-2018-1000654 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: Th...

Security update for qemu (important)

openSUSE Security Update: Security update for qemu Announcement ID: openSUSE-SU-2019:1274-1 Rating: important References: 1118900 1125721 1126455 1129622 1130675 1131955 Cross-References: CVE-2018-20815 CVE-2019-3812 CVE-2019-8934 CVE-2019-9824 Affected Products: openSUSE Leap 42.3 An update that...

Security update for bash (important)

openSUSE Security Update: Security update for bash Announcement ID: openSUSE-SU-2019:1178-1 Rating: important References: 1130324 Cross-References: CVE-2019-9924 Affected Products: openSUSE Leap 42.3 An update that fixes one vulnerability is now available. Description: This update for bash fixes...

Security update for freerdp (important)

openSUSE Security Update: Security update for freerdp Announcement ID: openSUSE-SU-2019:0096-1 Rating: important References: 1085416 1087240 1104918 1116708 1117963 1117964 1117965 1117966 1117967 1120507 Cross-References: CVE-2018-0886 CVE-2018-1000852 CVE-2018-8784 CVE-2018-8785 CVE-2018-8786...