Security update for go1.9 (moderate)

This update for go1.9 fixes the following issues: Security issues fixed: - CVE-2018-7187: arbitrary command execution via VCS path boo1081495 Non-security changes: - Update to version 1.9.7 - fixes to the go command and compiler - minimal support to the go command for the vgo transition...

Security update for mupdf (moderate)

This update for mupdf fixes the following security issue: - CVE-2018-1000051: Prevent use after free in fzkeepkeystorable that can result in DOS / possible code execution. This attack appear to be exploitable via Victim opens a specially crafted PDF bsc1080531...

Security update for RT kernel (moderate)

openSUSE Security Update: Security update for RT kernel Announcement ID: openSUSE-SU-2021:0242-1 Rating: moderate References: 1034995 1040855 1043347 1044120 1044767 1055014 1055117 1055186 1058115 1061843 1065600 1065729 1066382 1071995 1077428 1085030 1094244 1094840 1109695 1115431 1120163...

Security update for ant (moderate)

openSUSE Security Update: Security update for ant Announcement ID: openSUSE-SU-2020:0703-1 Rating: moderate References: 1100053 1133997 1134001 Cross-References: CVE-2018-10886 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has two fixes is now available...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2020:0389-1 Rating: important References: 1167090 Cross-References: CVE-2019-20503 CVE-2020-6422 CVE-2020-6424 CVE-2020-6425 CVE-2020-6426 CVE-2020-6427 CVE-2020-6428 CVE-2020-6429 CVE-2020-6449 Affected Products:...

Security update for dhcp (moderate)

openSUSE Security Update: Security update for dhcp Announcement ID: openSUSE-SU-2019:2340-1 Rating: moderate References: 1089524 1134078 1136572 Cross-References: CVE-2019-6470 Affected Products: openSUSE Leap 15.0 An update that solves one vulnerability and has two fixes is now available...

Security update for GraphicsMagick (moderate)

openSUSE Security Update: Security update for GraphicsMagick Announcement ID: openSUSE-SU-2019:1854-1 Rating: moderate References: 1138425 Affected Products: openSUSE Backports SLE-15-SP1 An update that contains security fixes can now be installed. Description: This update for GraphicsMagick fixe...

Security update for 389-ds (important)

openSUSE Security Update: Security update for 389-ds Announcement ID: openSUSE-SU-2019:1397-1 Rating: important References: 1076530 1096368 1105606 1106699 Cross-References: CVE-2017-15134 CVE-2017-15135 CVE-2018-10850 CVE-2018-10935 CVE-2018-14624 Affected Products: openSUSE Leap 15.0 An update...

Security update for curl (moderate)

This update for curl fixes several issues: Security issues fixed: - CVE-2018-1000301: Fixed a RTSP bad headers buffer over-read could crash the curl client bsc1092098 Non security issues fixed: - If the DEFAULTSUSE cipher list is not available use the HIGH cipher alias before failing. bsc1086825...

Security update for mariadb (important)

This update for mariadb to 10.0.27 fixes the following issues: Security issue fixed: CVE-2016-6662: A malicious user with SQL and filesystem access could create a my.cnf in the datadir and, under certain circumstances, execute arbitrary code as mysql or even root user. bsc998309 release notes:...

Security update for xen (important)

openSUSE Security Update: Security update for xen Announcement ID: openSUSE-SU-2020:1608-1 Rating: important References: 1027519 1176339 1176341 1176343 1176344 1176345 1176346 1176347 1176348 1176349 1176350 Cross-References: CVE-2020-25595 CVE-2020-25596 CVE-2020-25597 CVE-2020-25598...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2020:0935-1 Rating: important References: 1058115 1065729 1071995 1085030 1148868 1152472 1152489 1153274 1154353 1154492 1155518 1155798 1156395 1157169 1158050 1158242 1158265 1158748 1158765 1159781...

Security update for freetype2 (moderate)

openSUSE Security Update: Security update for freetype2 Announcement ID: openSUSE-SU-2020:0704-1 Rating: moderate References: 1079603 1091109 Cross-References: CVE-2018-6942 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has one errata is now available...

Security update for yast2-rmt (moderate)

openSUSE Security Update: Security update for yast2-rmt Announcement ID: openSUSE-SU-2020:0320-1 Rating: moderate References: 1119835 1146403 Cross-References: CVE-2018-20105 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has one errata is now available...

Security update for ppp (important)

openSUSE Security Update: Security update for ppp Announcement ID: openSUSE-SU-2020:0286-1 Rating: important References: 1162610 Cross-References: CVE-2020-8597 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for ppp fixes th...

Security update for cacti, cacti-spine (important)

openSUSE Security Update: Security update for cacti, cacti-spine Announcement ID: openSUSE-SU-2020:0284-1 Rating: important References: 1082318 1101024 1101139 1122242 1122243 1122244 1122245 1122535 1158990 1158992 1161297 1163749 Cross-References: CVE-2009-4112 CVE-2018-20723 CVE-2018-20724...

Security update for mozilla-nspr, mozilla-nss (moderate)

openSUSE Security Update: Security update for mozilla-nspr, mozilla-nss Announcement ID: openSUSE-SU-2020:0008-1 Rating: moderate References: 1141322 1158527 1159819 Cross-References: CVE-2018-18508 CVE-2019-11745 CVE-2019-17006 Affected Products: openSUSE Leap 15.1 An update that fixes three...

Security update for cpio (moderate)

openSUSE Security Update: Security update for cpio Announcement ID: openSUSE-SU-2019:2593-1 Rating: moderate References: 1155199 Cross-References: CVE-2019-14866 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for cpio fixes...

Security update for strongswan (important)

openSUSE Security Update: Security update for strongswan Announcement ID: openSUSE-SU-2019:2594-1 Rating: important References: 1093536 1094462 1107874 1109845 Cross-References: CVE-2018-10811 CVE-2018-16151 CVE-2018-16152 CVE-2018-17540 CVE-2018-5388 Affected Products: openSUSE Leap 15.0 An upda...

Security update for cpio (moderate)

openSUSE Security Update: Security update for cpio Announcement ID: openSUSE-SU-2019:2596-1 Rating: moderate References: 1155199 Cross-References: CVE-2019-14866 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for cpio fixes...

Security update for MozillaFirefox (important)

openSUSE Security Update: Security update for MozillaFirefox Announcement ID: openSUSE-SU-2019:2260-1 Rating: important References: 1109465 1117473 1123482 1124525 1133810 1138688 1140868 1141322 1145665 1149292 1149293 1149294 1149295 1149296 1149297 1149298 1149299 1149302 1149303 1149304 11493...

Security update for python-SQLAlchemy (important)

openSUSE Security Update: Security update for python-SQLAlchemy Announcement ID: openSUSE-SU-2019:2078-1 Rating: important References: 1124593 Cross-References: CVE-2019-7164 CVE-2019-7548 Affected Products: openSUSE Backports SLE-15 An update that fixes two vulnerabilities is now available...

Security update for pacemaker (important)

openSUSE Security Update: Security update for pacemaker Announcement ID: openSUSE-SU-2019:1400-1 Rating: important References: 1117381 1131353 1131356 1131357 Cross-References: CVE-2018-16877 CVE-2018-16878 CVE-2019-3885 Affected Products: openSUSE Leap 15.0 An update that solves three...

Security update for MozillaFirefox (important)

openSUSE Security Update: Security update for MozillaFirefox Announcement ID: openSUSE-SU-2019:0202-1 Rating: important References: 1125330 Cross-References: CVE-2018-18335 CVE-2018-18356 CVE-2019-5785 Affected Products: openSUSE Leap 42.3 An update that fixes three vulnerabilities is now...

Security update for go1.11 (important)

This new package for go1.11 fixes the following issues: Security issues fixed: - CVE-2018-16873: Fixed a remote code execution in go get, when executed with the -u flag bsc1118897 - CVE-2018-16874: Fixed an arbitrary filesystem write in go get, which could lead to code execution bsc1118898 -...

Security update for Chromium (important)

This update for Chromium to version 66.0.3359.170 fixes the following issues: Security issues fixed boo1092923: - CVE-2018-6121: Privilege Escalation in extensions - CVE-2018-6122: Type confusion in V8 - CVE-2018-6120: Heap buffer overflow in PDFium - Various fixes from internal audits, fuzzing a...

Security update for opencv (important)

This update for opencv fixes the following issues: - CVE-2016-1517: Fixed a denial of service segfault via vectors involving corrupt chunks boo1033150 - CVE-2016-1516: Fixed a double free issue that allows attackers to execute arbitrary code boo1033152...

Security update for cfitsio (important)

This update for cfitsio fixes the following issues: Security issues fixed: - CVE-2018-1000166: Unsafe use of sprintf can allow a remote unauthenticated attacker to execute arbitrary code boo1088590 This update to version 3.430 also contains a number of upstream bug fixes. The following tracked...

Security update for postgresql95 (important)

This update for postgresql95 fixes the following issues: Upate to PostgreSQL 9.5.11: Security issues fixed: https://www.postgresql.org/docs/9.5/static/release-9-5-11.html CVE-2018-1053, boo1077983: Ensure that all temporary files made by pgupgrade are non-world-readable. boo1079757: Rename...

Security update for the OBS toolchain (important)

This OBS toolchain update fixes the following issues: Package 'build': - CVE-2010-4226: force use of bsdtar for VMs bnc665768 - CVE-2017-14804: Improve file name check extractbuild bsc1069904 - switch baselibs scheme for debuginfo packages from foo-debuginfo-32bit to foo-32bit-debuginfo fate32321...

Security update for the Linux Kernel (important)

====================================================================== Still left to do: - Check CVE descriptions. They need to be written in the past tense. They are processed automatically, THERE CAN BE ERRORS IN THERE! - Remove version numbers from the CVE descriptions - Check the capitalizati...

Security update for log4j (important)

openSUSE Security Update: Security update for log4j Announcement ID: openSUSE-SU-2021:4107-1 Rating: important References: 1193743 Cross-References: CVE-2021-44228 CVE-2021-45046 CVSS scores: CVE-2021-44228 NVD : 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVE-2021-44228 SUSE: 9.8...

Security update for opera (important)

openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2021:1096-1 Rating: important References: Cross-References: CVE-2021-30541 CVE-2021-30560 CVE-2021-30561 CVE-2021-30562 CVE-2021-30563 CVE-2021-30564 Affected Products: openSUSE Leap 15.2:NonFree An update that fixes...

Security update for nodejs12 (important)

openSUSE Security Update: Security update for nodejs12 Announcement ID: openSUSE-SU-2021:1059-1 Rating: important References: 1183851 1183852 1184450 1187973 1187976 1187977 Cross-References: CVE-2020-7774 CVE-2021-22918 CVE-2021-23362 CVE-2021-27290 CVE-2021-3449 CVE-2021-3450 CVSS scores:...

Security update for java-11-openjdk (important)

openSUSE Security Update: Security update for java-11-openjdk Announcement ID: openSUSE-SU-2019:2557-1 Rating: important References: 1152856 1154212 Cross-References: CVE-2019-2894 CVE-2019-2933 CVE-2019-2945 CVE-2019-2949 CVE-2019-2958 CVE-2019-2962 CVE-2019-2964 CVE-2019-2973 CVE-2019-2975...

Security update for libopenmpt (important)

openSUSE Security Update: Security update for libopenmpt Announcement ID: openSUSE-SU-2019:2306-1 Rating: important References: 1153102 Cross-References: CVE-2019-17113 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

Security update for bind (important)

openSUSE Security Update: Security update for bind Announcement ID: openSUSE-SU-2019:2265-1 Rating: important References: 1118367 1118368 1138687 Cross-References: CVE-2019-6471 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has two fixes is now available...

Security update for go1.11 (moderate)

openSUSE Security Update: Security update for go1.11 Announcement ID: openSUSE-SU-2019:2072-1 Rating: moderate References: 1141688 1146111 1146115 1146123 Cross-References: CVE-2019-14809 CVE-2019-9512 CVE-2019-9514 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that solves...

Security update for ntfs-3g_ntfsprogs (moderate)

openSUSE Security Update: Security update for ntfs-3gntfsprogs Announcement ID: openSUSE-SU-2019:1313-1 Rating: moderate References: 1130165 Cross-References: CVE-2019-9755 Affected Products: openSUSE Leap 42.3 An update that fixes one vulnerability is now available. Description: This update for...

Security update for SDL2 (moderate)

openSUSE Security Update: Security update for SDL2 Announcement ID: openSUSE-SU-2019:1261-1 Rating: moderate References: 1124799 1124800 1124802 1124803 1124805 1124806 1124824 1124825 1124826 1124827 1125099 Cross-References: CVE-2019-7572 CVE-2019-7573 CVE-2019-7574 CVE-2019-7575 CVE-2019-7576...

Security update for phpMyAdmin (important)

This update for phpMyAdmin to version 4.7.7 fixes a security issue and bugs. The following vulnerability was fixed: - By deceiving a user to click on a crafted URL, it was possible to perform harmful database operations bsc1074066, PMASA-2017-09 This update also contains all upstream improvements...

Security update for permissions (moderate)

openSUSE Security Update: Security update for permissions Announcement ID: openSUSE-SU-2022:0141-2 Rating: moderate References: 1169614 Affected Products: openSUSE Leap 15.4 An update that contains security fixes can now be installed. Description: This update for permissions fixes the following...

Security update for nodejs8 (important)

openSUSE Security Update: Security update for nodejs8 Announcement ID: openSUSE-SU-2021:2618-1 Rating: important References: 1184450 1187976 1187977 Cross-References: CVE-2020-7774 CVE-2021-23362 CVE-2021-27290 CVSS scores: CVE-2020-7774 NVD : 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2020:1586-1 Rating: important References: 1055186 1058115 1065600 1065729 1094244 1136666 1152148 1152472 1152489 1153274 1154353 1155518 1155798 1156395 1167527 1170232 1170774 1171000 1171068 1171073...

Security update for mariadb-connector-c (important)

openSUSE Security Update: Security update for mariadb-connector-c Announcement ID: openSUSE-SU-2020:0738-1 Rating: important References: 1171550 Cross-References: CVE-2020-13249 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update...

Security update for gcc9 (moderate)

openSUSE Security Update: Security update for gcc9 Announcement ID: openSUSE-SU-2020:0716-1 Rating: moderate References: 1114592 1135254 1141897 1142649 1142654 1148517 1149145 1149995 1152590 1167898 Cross-References: CVE-2019-14250 CVE-2019-15847 Affected Products: openSUSE Leap 15.1 An update...

Security update for imapfilter (moderate)

openSUSE Security Update: Security update for imapfilter Announcement ID: openSUSE-SU-2020:0673-1 Rating: moderate References: 1149931 Cross-References: CVE-2016-10937 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

Security update for MozillaThunderbird (important)

openSUSE Security Update: Security update for MozillaThunderbird Announcement ID: openSUSE-SU-2020:0544-1 Rating: important References: 1168630 1168874 Cross-References: CVE-2020-6819 CVE-2020-6820 CVE-2020-6821 CVE-2020-6822 CVE-2020-6825 Affected Products: openSUSE Leap 15.1 An update that fixe...

Security update for cloud-init (moderate)

openSUSE Security Update: Security update for cloud-init Announcement ID: openSUSE-SU-2020:0400-1 Rating: moderate References: 1162936 1162937 1163178 Cross-References: CVE-2020-8631 CVE-2020-8632 Affected Products: openSUSE Leap 15.1 An update that solves two vulnerabilities and has one errata i...

Security update for curl (important)

openSUSE Security Update: Security update for curl Announcement ID: openSUSE-SU-2019:2169-1 Rating: important References: 1149495 1149496 Cross-References: CVE-2019-5481 CVE-2019-5482 Affected Products: openSUSE Leap 15.0 An update that fixes two vulnerabilities is now available. Description: Thi...