Security update for libpcap (important)

openSUSE Security Update: Security update for libpcap Announcement ID: openSUSE-SU-2019:2345-1 Rating: important References: 1153332 Cross-References: CVE-2018-16301 CVE-2019-15165 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description: This...

Security update for lxc (moderate)

openSUSE Security Update: Security update for lxc Announcement ID: openSUSE-SU-2019:2286-1 Rating: moderate References: 1131762 Cross-References: CVE-2019-5736 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: This update for lx...

Security update for varnish (moderate)

openSUSE Security Update: Security update for varnish Announcement ID: openSUSE-SU-2019:2184-1 Rating: moderate References: 1149382 Cross-References: CVE-2019-15892 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This...

Security update for libgcrypt (moderate)

openSUSE Security Update: Security update for libgcrypt Announcement ID: openSUSE-SU-2019:2161-1 Rating: moderate References: 1148987 Cross-References: CVE-2019-13627 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2019:1928-1 Rating: important References: 1145242 Cross-References: CVE-2019-5867 CVE-2019-5868 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes two vulnerabilities is now available...

Security update for keepalived (moderate)

This update for keepalived to version 2.0.10 fixes the following issues: Security issues fixed bsc1015141: - CVE-2018-19044: Fixed a check for pathnames with symlinks when writing data to a temporary file upon a call to PrintData or PrintStats - CVE-2018-19045: Fixed mode when creating new...

Security update for java-11-openjdk (moderate)

This java-11-openjdk update to version jdk-11+24 fixes the following issues: Security issues fixed: - CVE-2018-2940: Fix unspecified vulnerability in subcomponent Libraries bsc1101645. - CVE-2018-2952: Fix unspecified vulnerability in subcomponent Concurrency bsc1101651. - CVE-2018-2972: Fix...

Security update for python (moderate)

This update for python fixes the following issues: Security issues fixed: - CVE-2017-1000158: Fixed integer overflows in PyStringDecodeEscape that could have resulted in heap-based buffer overflow attacks and possible arbitrary code execution bsc1068664. - CVE-2018-1000030: Fixed crash inside the...

Security update for openssl (important)

This update for openssl fixes the following issues: - OpenSSL Security Advisory 07 Dec 2017 CVE-2017-3737: OpenSSL 1.0.2 starting from version 1.0.2b introduced an "error state" mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error...

Security update for perl-YAML-LibYAML (moderate)

openSUSE Security Update: Security update for perl-YAML-LibYAML Announcement ID: openSUSE-SU-2020:1093-1 Rating: moderate References: 1173703 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for perl-YAML-LibYAML fixes the...

Security update for sysstat (low)

openSUSE Security Update: Security update for sysstat Announcement ID: openSUSE-SU-2020:0736-1 Rating: low References: 1159104 Cross-References: CVE-2019-19725 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for sysstat fixes...

Security update for haproxy (important)

openSUSE Security Update: Security update for haproxy Announcement ID: openSUSE-SU-2020:0444-1 Rating: important References: 1168023 Cross-References: CVE-2020-11100 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for haproxy...

Security update for librsvg (moderate)

openSUSE Security Update: Security update for librsvg Announcement ID: openSUSE-SU-2020:0343-1 Rating: moderate References: 1162501 Cross-References: CVE-2019-20446 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for librsvg ...

Security update for ncurses (moderate)

openSUSE Security Update: Security update for ncurses Announcement ID: openSUSE-SU-2019:2551-1 Rating: moderate References: 1103320 1154036 1154037 Cross-References: CVE-2019-17594 CVE-2019-17595 Affected Products: openSUSE Leap 15.1 An update that solves two vulnerabilities and has one errata is...

Security update for ucode-intel (important)

openSUSE Security Update: Security update for ucode-intel Announcement ID: openSUSE-SU-2019:2528-1 Rating: important References: 1139073 1141035 1155988 Cross-References: CVE-2019-11135 CVE-2019-11139 Affected Products: openSUSE Leap 15.1 An update that solves two vulnerabilities and has one erra...

Security update for qemu (important)

openSUSE Security Update: Security update for qemu Announcement ID: openSUSE-SU-2019:2510-1 Rating: important References: 1079730 1098403 1111025 1117665 1119991 1143794 1144087 1145379 1145427 1145436 1145774 1146873 1149811 1152506 Cross-References: CVE-2018-12207 CVE-2018-20126 CVE-2019-11135...

Security update for python-numpy (moderate)

openSUSE Security Update: Security update for python-numpy Announcement ID: openSUSE-SU-2019:2259-1 Rating: moderate References: 1149203 Cross-References: CVE-2019-6446 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: This upda...

Security update for LibVNCServer (critical)

openSUSE Security Update: Security update for LibVNCServer Announcement ID: openSUSE-SU-2019:0196-1 Rating: critical References: 1123823 1123828 1123832 Cross-References: CVE-2018-20748 CVE-2018-20749 CVE-2018-20750 Affected Products: openSUSE Leap 15.0 An update that fixes three vulnerabilities ...

Security update for salt (moderate)

This update for salt fixes the following issues: - Crontab module fix: file attributes option missing boo1114824 - Fix gitpillar merging across multiple env repositories boo1112874 - Bugfix: unable to detect os arch when RPM is not installed boo1114197 - Fix LDAP authentication issue when a valid...

Security update for chromium (moderate)

This update for Chromium to version 69.0.3497.92 fixes the following issues: Security issues fixed boo1108114: - Function signature mismatch in WebAssembly - URL Spoofing in Omnibox The following tracked packaging issues were fixed: - the chromium package incorrectly provied swiftshader resolvabl...

Security update for okular (moderate)

This update for okular fixes the following security issue: - CVE-2018-1000801: Prevent directory traversal vulnerability in function unpackDocumentArchive could have resulted in arbitrary file creation via a specially crafted Okular archive bsc1107591...

Security update for nodejs4 (moderate)

This update for nodejs4 fixes the following issues: Security issues fixed: - CVE-2018-12115: Fixed an out-of-bounds memory write in Buffer that could be used to write to memory outside of a Buffer's memory space buffer bsc1105019 - Upgrade to OpenSSL 1.0.2p, which fixed: - CVE-2018-0732: Client...

Security update for opera (important)

openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2021:1096-1 Rating: important References: Cross-References: CVE-2021-30541 CVE-2021-30560 CVE-2021-30561 CVE-2021-30562 CVE-2021-30563 CVE-2021-30564 Affected Products: openSUSE Leap 15.2:NonFree An update that fixes...

Security update for nodejs14 (important)

openSUSE Security Update: Security update for nodejs14 Announcement ID: openSUSE-SU-2021:1060-1 Rating: important References: 1184450 1187973 1187976 1187977 Cross-References: CVE-2020-7774 CVE-2021-22918 CVE-2021-23362 CVE-2021-27290 CVSS scores: CVE-2020-7774 NVD : 7.3...

Security update for jetty-minimal (important)

openSUSE Security Update: Security update for jetty-minimal Announcement ID: openSUSE-SU-2021:2005-1 Rating: important References: 1184366 1184367 1184368 1187117 Cross-References: CVE-2021-28163 CVE-2021-28164 CVE-2021-28165 CVE-2021-28169 CVSS scores: CVE-2021-28163 NVD : 2.7...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:1975-1 Rating: important References: 1043990 1047233 1055117 1065729 1087082 1113295 1133021 1152457 1152472 1152489 1153274 1154353 1155518 1156256 1156395 1159280 1160634 1164648 1167260 1167574...

Security update for bcm43xx-firmware (moderate)

openSUSE Security Update: Security update for bcm43xx-firmware Announcement ID: openSUSE-SU-2020:1560-1 Rating: moderate References: 1169094 1176631 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for bcm43xx-firmware fix...

Security update for kubernetes (important)

openSUSE Security Update: Security update for kubernetes Announcement ID: openSUSE-SU-2020:0554-1 Rating: important References: 1039663 1042383 1042387 1057277 1059207 1061027 1065972 1069469 1084765 1084766 1085009 1086185 1086412 1095131 1095154 1096773 1097473 1100838 1101010 1104598 1104821...

Security update for ucode-intel (important)

openSUSE Security Update: Security update for ucode-intel Announcement ID: openSUSE-SU-2019:2631-1 Rating: important References: 1157004 Affected Products: openSUSE Leap 15.1 An update that contains security fixes can now be installed. Description: This update for ucode-intel fixes the following...

Security update for ucode-intel (important)

openSUSE Security Update: Security update for ucode-intel Announcement ID: openSUSE-SU-2019:2509-1 Rating: important References: 1139073 1141035 1155988 Cross-References: CVE-2019-11135 CVE-2019-11139 Affected Products: openSUSE Leap 15.1 An update that solves two vulnerabilities and has one erra...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2019:2228-1 Rating: important References: 1151229 Cross-References: CVE-2019-13685 CVE-2019-13686 CVE-2019-13687 CVE-2019-13688 Affected Products: openSUSE Backports SLE-15 An update that fixes four vulnerabilitie...

Security update for hostinfo, supportutils (important)

openSUSE Security Update: Security update for hostinfo, supportutils Announcement ID: openSUSE-SU-2019:1351-1 Rating: important References: 1054979 1099498 1115245 1117751 1117776 1118460 1118462 1118463 1125623 1125666 Cross-References: CVE-2018-19636 CVE-2018-19637 CVE-2018-19638 CVE-2018-19639...

Security update for libjpeg-turbo (moderate)

openSUSE Security Update: Security update for libjpeg-turbo Announcement ID: openSUSE-SU-2019:1343-1 Rating: moderate References: 1096209 1098155 1128712 Cross-References: CVE-2018-1152 CVE-2018-11813 CVE-2018-14498 Affected Products: openSUSE Leap 42.3 An update that fixes three vulnerabilities ...

Security update for webkit2gtk3 (moderate)

openSUSE Security Update: Security update for webkit2gtk3 Announcement ID: openSUSE-SU-2019:1316-1 Rating: moderate References: 1126768 Cross-References: CVE-2019-8375 Affected Products: openSUSE Leap 42.3 An update that fixes one vulnerability is now available. Description: This update for...

Security update for samba (important)

openSUSE Security Update: Security update for samba Announcement ID: openSUSE-SU-2019:1180-1 Rating: important References: 1114407 1124223 1125410 1126377 1131060 1131686 Cross-References: CVE-2019-3880 Affected Products: openSUSE Leap 15.0 An update that solves one vulnerability and has 5 fixes ...

Security update for libu2f-host (low)

openSUSE Security Update: Security update for libu2f-host Announcement ID: openSUSE-SU-2019:0199-1 Rating: low References: 1124781 Cross-References: CVE-2018-20340 Affected Products: openSUSE Leap 42.3 An update that fixes one vulnerability is now available. Description: This update for libu2f-ho...

Security update for avahi (moderate)

openSUSE Security Update: Security update for avahi Announcement ID: openSUSE-SU-2019:0197-1 Rating: moderate References: 1120281 Cross-References: CVE-2018-1000845 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for avahi...

Security update for pspp, spread-sheet-widget (moderate)

openSUSE Security Update: Security update for pspp, spread-sheet-widget Announcement ID: openSUSE-SU-2019:0198-1 Rating: moderate References: 1120061 Cross-References: CVE-2018-20230 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This...

Security update for netatalk (important)

This update for netatalk fixes the following issues: Security issue fixed: - CVE-2018-1160 Fixed a missing bounds check in the handling of the DSI OPEN SESSION request, which allowed an unauthenticated to overwrite memory with data of their choice leading for arbitrary code execution with root...

Security update for openssl-1_1 (moderate)

This update for openssl-11 to 1.1.0i fixes the following issues: These security issues were fixed: - CVE-2018-0732: During key agreement in a TLS handshake using a DHE based ciphersuite a malicious server could have sent a very large prime value to the client. This caused the client to spend an...

Security update to ucode-intel (important)

ucode-intel was updated to the 20180807 release. For the listed CPU chipsets this fixes CVE-2018-3640 Spectre v3a and is part of the mitigations for CVE-2018-3639 Spectre v4 and CVE-2018-3646 L1 Terminal fault. bsc1104134 bsc1087082 bsc1087083 bsc1089343 Processor Identifier Version Products Mode...

Security update for MozillaThunderbird (important)

This update for MozillaThunderbird to version 52.6 fixes several issues. These security issues were fixed: - CVE-2018-5095: Integer overflow in Skia library during edge builder allocation bsc1077291. - CVE-2018-5096: Use-after-free while editing form elements bsc1077291. - CVE-2018-5097:...

Security update for logback (important)

openSUSE Security Update: Security update for logback Announcement ID: openSUSE-SU-2021:1613-1 Rating: important References: 1193795 Cross-References: CVE-2021-44228 CVSS scores: CVE-2021-44228 NVD : 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVE-2021-44228 SUSE: 9.8...

Security update for spamassassin (important)

openSUSE Security Update: Security update for spamassassin Announcement ID: openSUSE-SU-2020:0446-1 Rating: important References: 1118987 1162197 1162200 862963 Cross-References: CVE-2018-11805 CVE-2020-1930 CVE-2020-1931 Affected Products: openSUSE Leap 15.1 An update that solves three...

Security update for sysstat (moderate)

openSUSE Security Update: Security update for sysstat Announcement ID: openSUSE-SU-2019:2397-1 Rating: moderate References: 1150114 Cross-References: CVE-2019-16167 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for sysstat...

Security update for libreoffice (moderate)

openSUSE Security Update: Security update for libreoffice Announcement ID: openSUSE-SU-2019:2183-1 Rating: moderate References: 1133534 1141861 1141862 1146098 1146105 1146107 1149943 1149944 Cross-References: CVE-2019-9848 CVE-2019-9849 CVE-2019-9850 CVE-2019-9851 CVE-2019-9852 CVE-2019-9854...

Recommended update for opera (important)

openSUSE Security Update: Recommended update for opera Announcement ID: openSUSE-SU-2019:2107-1 Rating: important References: Affected Products: openSUSE Leap 15.1:NonFree openSUSE Leap 15.0:NonFree An update that contains security fixes can now be installed. Description:This update for opera fix...

Security update for bzip2 (low)

openSUSE Security Update: Security update for bzip2 Announcement ID: openSUSE-SU-2019:1398-1 Rating: low References: 985657 Cross-References: CVE-2016-3189 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for bzip2 fixes the...

Security update for audiofile (low)

openSUSE Security Update: Security update for audiofile Announcement ID: openSUSE-SU-2019:1260-1 Rating: low References: 1100523 Cross-References: CVE-2018-13440 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for audiofile...

Security update for tryton (moderate)

This update for tryton to version 4.2.19 fixes the following issues boo1107771: Security issue fixed: - CVE-2018-19443: Fixed an information leakage by attemping to initiate an unencrypted connection, which would fail eventually, but might leak session information of the user boo1117105 This upda...