Security update for systemd (moderate)

openSUSE Security Update: Security update for systemd Announcement ID: openSUSE-SU-2019:0097-1 Rating: moderate References: 1005023 1076696 1101591 1114981 1115518 1119971 1120323 Cross-References: CVE-2018-16864 CVE-2018-16865 CVE-2018-16866 Affected Products: openSUSE Leap 42.3 An update that...

Security update for go1.11 (important)

This new package for go1.11 fixes the following issues: Security issues fixed: - CVE-2018-16873: Fixed a remote code execution in go get, when executed with the -u flag bsc1118897 - CVE-2018-16874: Fixed an arbitrary filesystem write in go get, which could lead to code execution bsc1118898 -...

Security update for libssh (important)

This update for libssh fixes the following security issue: - CVE-2018-10933: Fixed a server mode authentication bypass boo1108020. This update was imported from the SUSE:SLE-12:Update update project...

Security update for Chromium (important)

This update for Chromium to version 66.0.3359.170 fixes the following issues: Security issues fixed boo1092923: - CVE-2018-6121: Privilege Escalation in extensions - CVE-2018-6122: Type confusion in V8 - CVE-2018-6120: Heap buffer overflow in PDFium - Various fixes from internal audits, fuzzing a...

Security update for cfitsio (important)

This update for cfitsio fixes the following issues: Security issues fixed: - CVE-2018-1000166: Unsafe use of sprintf can allow a remote unauthenticated attacker to execute arbitrary code boo1088590 This update to version 3.430 also contains a number of upstream bug fixes. The following tracked...

Security update for gdk-pixbuf (important)

This update for gdk-pixbuf fixes the following issues: - CVE-2017-2862: JPEG gdkpixbufjpegimageloadincrement Code Execution Vulnerability bsc1048289 - CVE-2017-2870: tiffimageparse Code Execution Vulnerability bsc1048544 - CVE-2017-6313: A dangerous integer underflow in io-icns.c bsc1027024 -...

Security update for log4j (important)

openSUSE Security Update: Security update for log4j Announcement ID: openSUSE-SU-2021:4107-1 Rating: important References: 1193743 Cross-References: CVE-2021-44228 CVE-2021-45046 CVSS scores: CVE-2021-44228 NVD : 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVE-2021-44228 SUSE: 9.8...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2020:0006-1 Rating: important References: 1160337 Cross-References: CVE-2019-5844 CVE-2019-5845 CVE-2019-5846 CVE-2020-6377 Affected Products: openSUSE Leap 15.1 An update that fixes four vulnerabilities is now...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2020:0007-1 Rating: important References: 1159498 Cross-References: CVE-2019-13767 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: This update...

Security update for calamares (moderate)

openSUSE Security Update: Security update for calamares Announcement ID: openSUSE-SU-2019:2628-1 Rating: moderate References: 1140256 1152377 Cross-References: CVE-2019-13178 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that solves one vulnerability and has one errata is now...

Security update for gdb (moderate)

openSUSE Security Update: Security update for gdb Announcement ID: openSUSE-SU-2019:2494-1 Rating: moderate References: 1115034 1142772 1145692 Cross-References: CVE-2019-1010180 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has two fixes is now available...

Security update for GraphicsMagick (moderate)

openSUSE Security Update: Security update for GraphicsMagick Announcement ID: openSUSE-SU-2019:2321-1 Rating: moderate References: 1151782 Cross-References: CVE-2019-16709 Affected Products: openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 An update that fixes one vulnerability is now...

Security update for go1.11 (moderate)

openSUSE Security Update: Security update for go1.11 Announcement ID: openSUSE-SU-2019:2072-1 Rating: moderate References: 1141688 1146111 1146115 1146123 Cross-References: CVE-2019-14809 CVE-2019-9512 CVE-2019-9514 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that solves...

Security update for vlc (important)

openSUSE Security Update: Security update for vlc Announcement ID: openSUSE-SU-2019:1840-1 Rating: important References: 1118586 1138354 1138933 1141522 1142161 1143547 1143549 Cross-References: CVE-2018-19857 CVE-2019-12874 CVE-2019-13602 CVE-2019-13962 CVE-2019-5439 CVE-2019-5459 CVE-2019-5460...

Security update for ovmf (moderate)

openSUSE Security Update: Security update for ovmf Announcement ID: openSUSE-SU-2019:1352-1 Rating: moderate References: 1131361 Cross-References: CVE-2019-0161 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for ovmf fixes t...

Security update for openssl-1_1 (moderate)

openSUSE Security Update: Security update for openssl-11 Announcement ID: openSUSE-SU-2019:1147-1 Rating: moderate References: 1116833 1125494 1128189 Cross-References: CVE-2019-1543 Affected Products: openSUSE Leap 15.0 An update that solves one vulnerability and has two fixes is now available...

Security update for systemd (important)

openSUSE Security Update: Security update for systemd Announcement ID: openSUSE-SU-2019:0098-1 Rating: important References: 1005023 1045723 1076696 1080919 1093753 1101591 1111498 1114933 1117063 1119971 1120323 Cross-References: CVE-2018-16864 CVE-2018-16865 CVE-2018-16866 CVE-2018-6954 Affecte...

Security update for prosody (moderate)

This update for prosody to version 0.10.2 fixes the following issues: This security issue was fixed: - CVE-2018-10847: Prevent insufficient validation of client-provided parameters during XMPP stream restarts. Authenticated users may have overriden the realm associated with their session,...

Security update for the OBS toolchain (important)

This OBS toolchain update fixes the following issues: Package 'build': - CVE-2010-4226: force use of bsdtar for VMs bnc665768 - CVE-2017-14804: Improve file name check extractbuild bsc1069904 - switch baselibs scheme for debuginfo packages from foo-debuginfo-32bit to foo-32bit-debuginfo fate32321...

Security update for the Linux Kernel (important)

====================================================================== Still left to do: - Check CVE descriptions. They need to be written in the past tense. They are processed automatically, THERE CAN BE ERRORS IN THERE! - Remove version numbers from the CVE descriptions - Check the capitalizati...

Security update for nodejs12 (important)

openSUSE Security Update: Security update for nodejs12 Announcement ID: openSUSE-SU-2021:1059-1 Rating: important References: 1183851 1183852 1184450 1187973 1187976 1187977 Cross-References: CVE-2020-7774 CVE-2021-22918 CVE-2021-23362 CVE-2021-27290 CVE-2021-3449 CVE-2021-3450 CVSS scores:...

Security update for samba (important)

openSUSE Security Update: Security update for samba Announcement ID: openSUSE-SU-2020:1526-1 Rating: important References: 1176579 Cross-References: CVE-2020-1472 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for samba fixe...

Security update for mailman (moderate)

openSUSE Security Update: Security update for mailman Announcement ID: openSUSE-SU-2020:0661-1 Rating: moderate References: 1171363 682920 Cross-References: CVE-2020-12108 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has one errata is now available. Descriptio...

Security update for git (moderate)

openSUSE Security Update: Security update for git Announcement ID: openSUSE-SU-2020:0598-1 Rating: moderate References: 1063412 1095218 1095219 1110949 1112230 1114225 1132350 1149792 1156651 1158785 1158787 1158788 1158789 1158790 1158791 1158792 1158793 1158795 1167890 1168930 1169605 1169786...

Security update for cacti, cacti-spine (important)

openSUSE Security Update: Security update for cacti, cacti-spine Announcement ID: openSUSE-SU-2020:0284-1 Rating: important References: 1082318 1101024 1101139 1122242 1122243 1122244 1122245 1122535 1158990 1158992 1161297 1163749 Cross-References: CVE-2009-4112 CVE-2018-20723 CVE-2018-20724...

Security update for ncurses (moderate)

openSUSE Security Update: Security update for ncurses Announcement ID: openSUSE-SU-2019:2550-1 Rating: moderate References: 1103320 1154036 1154037 Cross-References: CVE-2019-17594 CVE-2019-17595 Affected Products: openSUSE Leap 15.0 An update that solves two vulnerabilities and has one errata is...

Security update for jasper (moderate)

openSUSE Security Update: Security update for jasper Announcement ID: openSUSE-SU-2019:1315-1 Rating: moderate References: 1010783 1117505 1117511 Cross-References: CVE-2016-9396 CVE-2018-19539 CVE-2018-19542 Affected Products: openSUSE Leap 15.0 An update that fixes three vulnerabilities is now...

Security update for docker-runc (important)

openSUSE Security Update: Security update for docker-runc Announcement ID: openSUSE-SU-2019:0201-1 Rating: important References: 1121967 Cross-References: CVE-2019-5736 Affected Products: openSUSE Leap 42.3 An update that fixes one vulnerability is now available. Description: This update for...

Security update for polkit (moderate)

openSUSE Security Update: Security update for polkit Announcement ID: openSUSE-SU-2019:0010-1 Rating: moderate References: 1118277 Cross-References: CVE-2018-19788 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for polkit...

Security update for xen (important)

This update for xen fixes the following security issues: - CVE-2018-3646: Systems with microprocessors utilizing speculative execution and address translations may have allowed unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS...

Security update for prosody (moderate)

This update for prosody fixes the following issues: This security issue was fixed: - CVE-2018-10847: Prevent insufficient validation of client-provided parameters during XMPP stream restarts. Authenticated users may have overriden the realm associated with their session, potentially bypassing...

Recommended update for seamonkey (low)

openSUSE Security Update: Recommended update for seamonkey Announcement ID: openSUSE-SU-2021:1129-1 Rating: low References: Affected Products: openSUSE Backports SLE-15-SP3 An update that contains security fixes can now be installed. Description: This update ships seamonkey to openSUSE Leap 15.3...

Security update for nodejs8 (important)

openSUSE Security Update: Security update for nodejs8 Announcement ID: openSUSE-SU-2021:2618-1 Rating: important References: 1184450 1187976 1187977 Cross-References: CVE-2020-7774 CVE-2021-23362 CVE-2021-27290 CVSS scores: CVE-2020-7774 NVD : 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:2409-1 Rating: important References: 1152489 1182470 1185486 1187927 1187972 1187980 1188062 1188116 Cross-References: CVE-2021-22555 CVE-2021-33909 CVSS scores: CVE-2021-22555 NVD : 7.8...

Security update for gcc9 (moderate)

openSUSE Security Update: Security update for gcc9 Announcement ID: openSUSE-SU-2020:0716-1 Rating: moderate References: 1114592 1135254 1141897 1142649 1142654 1148517 1149145 1149995 1152590 1167898 Cross-References: CVE-2019-14250 CVE-2019-15847 Affected Products: openSUSE Leap 15.1 An update...

Security update for gnuhealth (moderate)

openSUSE Security Update: Security update for gnuhealth Announcement ID: openSUSE-SU-2020:0490-1 Rating: moderate References: 1167126 1167128 Affected Products: openSUSE Leap 15.1 An update that contains security fixes can now be installed. Description: This update for gnuhealth fixes the followi...

Security update for yast2-rmt (moderate)

openSUSE Security Update: Security update for yast2-rmt Announcement ID: openSUSE-SU-2020:0320-1 Rating: moderate References: 1119835 1146403 Cross-References: CVE-2018-20105 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has one errata is now available...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2019:2507-1 Rating: important References: 1048942 1051510 1082635 1090631 1096254 1111666 1117665 1119461 1119465 1123034 1135966 1135967 1138190 1139073 1140090 1143706 1144903 1149119 1150466 1152665...

Security update for lz4 (moderate)

openSUSE Security Update: Security update for lz4 Announcement ID: openSUSE-SU-2019:2399-1 Rating: moderate References: 1153936 Cross-References: CVE-2019-17543 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for lz4 fixes th...

Security update for ibus (important)

openSUSE Security Update: Security update for ibus Announcement ID: openSUSE-SU-2019:2174-1 Rating: important References: 1150011 Cross-References: CVE-2019-14822 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for ibus fixes...

Security update for ceph (moderate)

openSUSE Security Update: Security update for ceph Announcement ID: openSUSE-SU-2019:1284-1 Rating: moderate References: 1084645 1086613 1096748 1099162 1101262 1111177 1114567 1114710 Cross-References: CVE-2018-10861 CVE-2018-1128 CVE-2018-1129 CVE-2018-14662 CVE-2018-16846 Affected Products:...

Security update for libqt5-qtvirtualkeyboard (moderate)

openSUSE Security Update: Security update for libqt5-qtvirtualkeyboard Announcement ID: openSUSE-SU-2019:1259-1 Rating: moderate References: 1118593 Cross-References: CVE-2018-19865 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description:This...

Security update for libqt5-qtvirtualkeyboard (moderate)

openSUSE Security Update: Security update for libqt5-qtvirtualkeyboard Announcement ID: openSUSE-SU-2019:1263-1 Rating: moderate References: 1118593 Cross-References: CVE-2018-19865 Affected Products: openSUSE Backports SLE-15 An update that fixes one vulnerability is now available. Description:...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2019:0205-1 Rating: important References: 1123641 1124936 Cross-References: CVE-2019-5754 CVE-2019-5755 CVE-2019-5756 CVE-2019-5757 CVE-2019-5758 CVE-2019-5759 CVE-2019-5760 CVE-2019-5761 CVE-2019-5762 CVE-2019-57...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2019:0204-1 Rating: important References: 1123641 1124936 Cross-References: CVE-2019-5754 CVE-2019-5755 CVE-2019-5756 CVE-2019-5757 CVE-2019-5758 CVE-2019-5759 CVE-2019-5760 CVE-2019-5761 CVE-2019-5762 CVE-2019-57...

Security update for GraphicsMagick (moderate)

openSUSE Security Update: Security update for GraphicsMagick Announcement ID: openSUSE-SU-2019:1-1 Rating: moderate References: 1119790 1119822 Cross-References: CVE-2018-20184 CVE-2018-20189 Affected Products: openSUSE Leap 15.0 An update that fixes two vulnerabilities is now available...

Security update for ImageMagick (moderate)

This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2018-18024: Fixed an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. bsc1111069 -...

Security update for flash-player (critical)

flash-player was updated to fix one security issue. This security issue was fixed: - CVE-2015-5119: Unspecified vulnerability allowing remote attackers to take over the system bsc937339...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2020:1153-1 Rating: important References: 1051510 1065729 1071995 1085030 1111666 1112178 1113956 1114279 1120163 1144333 1148868 1150660 1151927 1152107 1152624 1158983 1159058 1161016 1162002 1162063...

Security update for ucode-intel (important)

openSUSE Security Update: Security update for ucode-intel Announcement ID: openSUSE-SU-2019:2504-1 Rating: important References: 1139073 1141035 1155988 Cross-References: CVE-2019-11135 CVE-2019-11139 Affected Products: openSUSE Leap 15.0 An update that solves two vulnerabilities and has one erra...