Security update for xmltooling (moderate)

openSUSE Security Update: Security update for xmltooling Announcement ID: openSUSE-SU-2019:1276-1 Rating: moderate References: 1129537 Cross-References: CVE-2019-9628 Affected Products: openSUSE Leap 42.3 An update that fixes one vulnerability is now available. Description: This update for...

Security update for openssl (moderate)

openSUSE Security Update: Security update for openssl Announcement ID: openSUSE-SU-2019:1175-1 Rating: moderate References: 1100078 1113975 1117951 1127080 Cross-References: CVE-2019-1559 Affected Products: openSUSE Leap 42.3 An update that solves one vulnerability and has three fixes is now...

Security update for tryton (moderate)

This update for tryton to version 4.2.19 fixes the following issues boo1107771: Security issue fixed: - CVE-2018-19443: Fixed an information leakage by attemping to initiate an unencrypted connection, which would fail eventually, but might leak session information of the user boo1117105 This upda...

Security update for keepalived (moderate)

This update for keepalived to version 2.0.10 fixes the following issues: Security issues fixed bsc1015141: - CVE-2018-19044: Fixed a check for pathnames with symlinks when writing data to a temporary file upon a call to PrintData or PrintStats - CVE-2018-19045: Fixed mode when creating new...

Recommended update for php7 (moderate)

This update for php7 fixes the following issues: Security issue fixed: - CVE-2018-19518: Fixed imapopen script injection flaw bsc1117107. This update was imported from the SUSE:SLE-12:Update update project...

Security update for axis (moderate)

This update for axis fixes the following security issue: - CVE-2018-8032: Prevent cross-site scripting XSS attack in the default servlet/services bsc1103658. This update was imported from the SUSE:SLE-12:Update update project...

Security update for php7 (moderate)

This update for php7 fixes the following issues: This security issue was fixed: - CVE-2018-17082: The Apache2 component in PHP allowed XSS via the body of a "Transfer-Encoding: chunked" request, because the bucket brigade was mishandled in the phphandler function bsc1108753 This non-security issu...

Security update for the Linux Kernel (important)

The openSUSE Leap 15.0 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-10853: A flaw was found in KVM in which certain instructions such as sgdt/sidt call segmentedwritestd doesn't propagate access correctly. As such, during userspac...

Security update for MozillaThunderbird (important)

This update for MozillaThunderbird to version 52.6 fixes several issues. These security issues were fixed: - CVE-2018-5095: Integer overflow in Skia library during edge builder allocation bsc1077291. - CVE-2018-5096: Use-after-free while editing form elements bsc1077291. - CVE-2018-5097:...

Security update for opera (important)

openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2021:1096-1 Rating: important References: Cross-References: CVE-2021-30541 CVE-2021-30560 CVE-2021-30561 CVE-2021-30562 CVE-2021-30563 CVE-2021-30564 Affected Products: openSUSE Leap 15.2:NonFree An update that fixes...

Security update for otrs (moderate)

openSUSE Security Update: Security update for otrs Announcement ID: openSUSE-SU-2020:1888-1 Rating: moderate References: 1178434 Cross-References: CVE-2020-11022 CVE-2020-11023 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP2 openSUSE Backports SLE-15-SP1 An...

Security update for xen (important)

openSUSE Security Update: Security update for xen Announcement ID: openSUSE-SU-2020:1608-1 Rating: important References: 1027519 1176339 1176341 1176343 1176344 1176345 1176346 1176347 1176348 1176349 1176350 Cross-References: CVE-2020-25595 CVE-2020-25596 CVE-2020-25597 CVE-2020-25598...

Security update for crawl (moderate)

openSUSE Security Update: Security update for crawl Announcement ID: openSUSE-SU-2020:0549-1 Rating: moderate References: 1169381 Cross-References: CVE-2020-11722 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available...

Security update for tomcat (important)

openSUSE Security Update: Security update for tomcat Announcement ID: openSUSE-SU-2020:0038-1 Rating: important References: 1139924 1159723 1159729 Cross-References: CVE-2019-10072 CVE-2019-12418 CVE-2019-17563 Affected Products: openSUSE Leap 15.1 An update that fixes three vulnerabilities is no...

Security update for python3 (moderate)

openSUSE Security Update: Security update for python3 Announcement ID: openSUSE-SU-2019:2438-1 Rating: moderate References: 1149121 1149792 1149955 1151490 1153238 Cross-References: CVE-2019-16056 CVE-2019-16935 Affected Products: openSUSE Leap 15.1 An update that solves two vulnerabilities and h...

Security update for lz4 (moderate)

openSUSE Security Update: Security update for lz4 Announcement ID: openSUSE-SU-2019:2398-1 Rating: moderate References: 1153936 Cross-References: CVE-2019-17543 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for lz4 fixes th...

Security update for sysstat (moderate)

openSUSE Security Update: Security update for sysstat Announcement ID: openSUSE-SU-2019:2395-1 Rating: moderate References: 1150114 Cross-References: CVE-2019-16167 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for sysstat...

Security update for openldap2 (moderate)

openSUSE Security Update: Security update for openldap2 Announcement ID: openSUSE-SU-2019:2176-1 Rating: moderate References: 1073313 1111388 1114845 1143194 1143273 Cross-References: CVE-2017-17740 CVE-2019-13057 CVE-2019-13565 Affected Products: openSUSE Leap 15.0 An update that solves three...

Security update for libsass (moderate)

openSUSE Security Update: Security update for libsass Announcement ID: openSUSE-SU-2019:1883-1 Rating: moderate References: 1096894 1118301 1118346 1118348 1118349 1118351 1119789 1121943 1121944 1121945 1133200 1133201 Cross-References: CVE-2018-11499 CVE-2018-19797 CVE-2018-19827 CVE-2018-19837...

Security update for ntfs-3g_ntfsprogs (moderate)

openSUSE Security Update: Security update for ntfs-3gntfsprogs Announcement ID: openSUSE-SU-2019:1314-1 Rating: moderate References: 1130165 Cross-References: CVE-2019-9755 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for...

Security update for nodejs6 (moderate)

openSUSE Security Update: Security update for nodejs6 Announcement ID: openSUSE-SU-2019:1173-1 Rating: moderate References: 1127080 1127532 1127533 Cross-References: CVE-2019-1559 CVE-2019-5737 CVE-2019-5739 Affected Products: openSUSE Leap 42.3 An update that fixes three vulnerabilities is now...

Security update for MozillaThunderbird (important)

openSUSE Security Update: Security update for MozillaThunderbird Announcement ID: openSUSE-SU-2019:1152-1 Rating: important References: 1129821 1130262 Cross-References: CVE-2019-9810 CVE-2019-9813 Affected Products: openSUSE Leap 42.3 An update that fixes two vulnerabilities is now available...

Security update for ovmf (moderate)

This update for ovmf fixes the following issues: Security issues fixed: - CVE-2018-3613: Fixed AuthVariable Timestamp zeroing issue on APPENDWRITE bsc1115916. - CVE-2017-5731: Fixed privilege escalation via processing of malformed files in TianoCompress.c bsc1115917. - CVE-2017-5732: Fixed...

Security update for salt (important)

This update for salt fixes the following issues: Security issues fixed: - CVE-2018-15750: Fixed directory traversal vulnerability in salt-api bsc1113698. - CVE-2018-15751: Fixed remote authentication bypass in salt-apinetapi that allows to execute arbitrary commands bsc1113699. Non-security issue...

Security update for nodejs4 (moderate)

This update for nodejs4 fixes the following issues: Security issues fixed: - CVE-2018-12115: Fixed an out-of-bounds memory write in Buffer that could be used to write to memory outside of a Buffer's memory space buffer bsc1105019 - Upgrade to OpenSSL 1.0.2p, which fixed: - CVE-2018-0732: Client...

Security update for libsoup (moderate)

This update for libsoup fixes the following issues: Security issue fixed: - CVE-2018-12910: Fix crash when handling empty hostnames bsc1100097. - CVE-2017-2885: Fix chunk decoding buffer overrun that could be exploited against either clients or servers bsc1052916. Bug fixes: - bsc1086036:...

Security update for libqt5-qtbase (important)

openSUSE Security Update: Security update for libqt5-qtbase Announcement ID: openSUSE-SU-2022:0841-1 Rating: important References: 1195386 1196501 Cross-References: CVE-2022-23853 CVE-2022-25255 CVSS scores: CVE-2022-23853 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-23853 SUSE...

Security update for php7 (important)

openSUSE Security Update: Security update for php7 Announcement ID: openSUSE-SU-2021:2637-1 Rating: important References: 1188035 1188037 Cross-References: CVE-2021-21704 CVE-2021-21705 CVSS scores: CVE-2021-21704 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-21705 SUSE: 5.3...

Security update for ucode-intel (important)

openSUSE Security Update: Security update for ucode-intel Announcement ID: openSUSE-SU-2021:0876-1 Rating: important References: 1179833 1179836 1179837 1179839 Cross-References: CVE-2020-24489 CVE-2020-24511 CVE-2020-24512 CVE-2020-24513 CVSS scores: CVE-2020-24489 SUSE: 8.8...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2020:0801-1 Rating: important References: 1051510 1058115 1065729 1071995 1082555 1083647 1089895 1090036 1103990 1103991 1103992 1104745 1109837 1111666 1112178 1112374 1113956 1114279 1124278 1127354...

Security update for qemu (important)

openSUSE Security Update: Security update for qemu Announcement ID: openSUSE-SU-2020:0468-1 Rating: important References: 1123156 1154790 1161066 1162729 1163018 1165776 1166240 1166379 Cross-References: CVE-2019-15034 CVE-2019-20382 CVE-2019-6778 CVE-2020-1711 CVE-2020-7039 CVE-2020-8608 Affecte...

Security update for openssl-1_1 (moderate)

openSUSE Security Update: Security update for openssl-11 Announcement ID: openSUSE-SU-2020:0062-1 Rating: moderate References: 1155346 1157775 1158101 1158809 Cross-References: CVE-2019-1551 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has three fixes is now...

Security update for xen (important)

openSUSE Security Update: Security update for xen Announcement ID: openSUSE-SU-2019:2506-1 Rating: important References: 1152497 1154448 1154456 1154458 1154461 1155945 Cross-References: CVE-2018-12207 CVE-2019-11135 CVE-2019-18420 CVE-2019-18421 CVE-2019-18424 CVE-2019-18425 Affected Products:...

Security update for binutils (moderate)

openSUSE Security Update: Security update for binutils Announcement ID: openSUSE-SU-2019:2432-1 Rating: moderate References: 1109412 1109413 1109414 1111996 1112534 1112535 1113247 1113252 1113255 1116827 1118644 1118830 1118831 1120640 1121034 1121035 1121056 1133131 1133232 1141913 1142772...

Security update for dhcp (moderate)

openSUSE Security Update: Security update for dhcp Announcement ID: openSUSE-SU-2019:2341-1 Rating: moderate References: 1089524 1134078 1136572 Cross-References: CVE-2019-6470 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has two fixes is now available...

Security update for jasper (moderate)

openSUSE Security Update: Security update for jasper Announcement ID: openSUSE-SU-2019:2279-1 Rating: moderate References: 1117507 1117508 Cross-References: CVE-2018-19540 CVE-2018-19541 Affected Products: openSUSE Leap 15.0 An update that fixes two vulnerabilities is now available. Description:...

Security update for libreoffice (moderate)

openSUSE Security Update: Security update for libreoffice Announcement ID: openSUSE-SU-2019:2183-1 Rating: moderate References: 1133534 1141861 1141862 1146098 1146105 1146107 1149943 1149944 Cross-References: CVE-2019-9848 CVE-2019-9849 CVE-2019-9850 CVE-2019-9851 CVE-2019-9852 CVE-2019-9854...

Security update for SDL_image (moderate)

openSUSE Security Update: Security update for SDLimage Announcement ID: openSUSE-SU-2019:2071-1 Rating: moderate References: 1124827 1140421 1141844 1143763 1143764 1143766 1143768 Cross-References: CVE-2019-13616 CVE-2019-5052 CVE-2019-5057 CVE-2019-5058 CVE-2019-5059 CVE-2019-5060 CVE-2019-7635...

Security update for ImageMagick (moderate)

openSUSE Security Update: Security update for ImageMagick Announcement ID: openSUSE-SU-2019:1795-1 Rating: moderate References: 1138425 1138464 Cross-References: CVE-2019-11597 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that solves one vulnerability and has one errata is n...

Security update for ceph (important)

openSUSE Security Update: Security update for ceph Announcement ID: openSUSE-SU-2019:0306-1 Rating: important References: 1111177 1113246 1114710 1121567 Cross-References: CVE-2018-14662 CVE-2018-16846 CVE-2018-16889 Affected Products: openSUSE Leap 42.3 An update that solves three vulnerabilitie...

Security update for webkit2gtk3 (important)

openSUSE Security Update: Security update for webkit2gtk3 Announcement ID: openSUSE-SU-2019:0309-1 Rating: important References: 1124937 Cross-References: CVE-2019-6212 CVE-2019-6215 CVE-2019-6216 CVE-2019-6217 CVE-2019-6226 CVE-2019-6227 CVE-2019-6229 CVE-2019-6233 CVE-2019-6234 Affected Product...

Security update for ovmf (moderate)

This update for ovmf fixes the following issues: Security issues fixed: - CVE-2018-0739: Update openssl to 1.0.2o to limit ASN.1 constructed types recursive definition depth bsc1094289. This update was imported from the SUSE:SLE-15:Update update project...

Security update for Mozilla Thunderbird (important)

This update for Mozilla Thunderbird to version 52.8 fixes the following issues: Security issues fixed MFSA 2018-13, boo1092548: - CVE-2018-5183: Backport critical security fixes in Skia - CVE-2018-5154: Use-after-free with SVG animations and clip paths - CVE-2018-5155: Use-after-free with SVG...

Security update for chromium (important)

This update to Chromium 63.0.3239.108 fixes the following issues: - CVE-2017-15429: UXSS in V8 bsc1072976 - Various fuzzing fixes...

Security update for xen (important)

This update for xen fixes several issues. These security issues were fixed: - CVE-2017-2620: In CIRRUSBLTMODEMEMSYSSRC mode the bitblit copy routine cirrusbitbltcputovideo failed to check the memory region, allowing for an out-of-bounds write that allows for privilege escalation bsc1024834. -...

Security update for java-1_8_0-openj9 (important)

openSUSE Security Update: Security update for java-180-openj9 Announcement ID: openSUSE-SU-2020:1893-1 Rating: important References: 1174157 1177943 Cross-References: CVE-2020-14556 CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581 CVE-2020-14583 CVE-2020-14593 CVE-2020-14621...

Security update for python3 (moderate)

openSUSE Security Update: Security update for python3 Announcement ID: openSUSE-SU-2020:1265-1 Rating: moderate References: 1174091 Cross-References: CVE-2019-20907 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for python3...

Security update for freeradius-server (important)

openSUSE Security Update: Security update for freeradius-server Announcement ID: openSUSE-SU-2020:0542-1 Rating: important References: 1132549 1132664 Cross-References: CVE-2019-11234 CVE-2019-11235 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available...

Security update for strongswan (moderate)

openSUSE Security Update: Security update for strongswan Announcement ID: openSUSE-SU-2020:0403-1 Rating: moderate References: 1079548 Cross-References: CVE-2018-6459 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

Security update for docker-runc (moderate)

openSUSE Security Update: Security update for docker-runc Announcement ID: openSUSE-SU-2019:2434-1 Rating: moderate References: 1152308 Cross-References: CVE-2019-16884 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...