Security update for docker-runc (moderate)

openSUSE Security Update: Security update for docker-runc Announcement ID: openSUSE-SU-2020:0219-1 Rating: moderate References: 1160452 Cross-References: CVE-2019-19921 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

Security update for nginx (moderate)

openSUSE Security Update: Security update for nginx Announcement ID: openSUSE-SU-2020:0204-1 Rating: moderate References: 1160682 Cross-References: CVE-2019-20372 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for nginx fixe...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2019:2427-1 Rating: important References: 1155643 Cross-References: CVE-2019-13720 CVE-2019-13721 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes two vulnerabilities is now available...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2019:2229-1 Rating: important References: 1151229 Cross-References: CVE-2019-13685 CVE-2019-13686 CVE-2019-13687 CVE-2019-13688 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes four...

Security update for libsass (moderate)

openSUSE Security Update: Security update for libsass Announcement ID: openSUSE-SU-2019:1791-1 Rating: moderate References: 1096894 1118301 1118346 1118348 1118349 1118351 1119789 1121943 1121944 1121945 1133200 1133201 Cross-References: CVE-2018-11499 CVE-2018-19797 CVE-2018-19827 CVE-2018-19837...

Security update for webkit2gtk3 (moderate)

openSUSE Security Update: Security update for webkit2gtk3 Announcement ID: openSUSE-SU-2019:0308-1 Rating: moderate References: 1119553 1119554 1119555 1119556 1119557 1119558 1124937 Cross-References: CVE-2018-4437 CVE-2018-4438 CVE-2018-4441 CVE-2018-4442 CVE-2018-4443 CVE-2018-4464 CVE-2019-62...

Security update for jhead (moderate)

This update for jhead fixes the following security issues: - CVE-2016-3822: jhead remote attackers to execute arbitrary code or cause a denial of service out-of-bounds access via crafted EXIF data bsc1108480. - CVE-2018-16554: The ProcessGpsInfo function may have allowed a remote attacker to caus...

Security update for chromium (important)

This update for Chromium to version 69.0.3497.81 fixes multiple issues. Security issues fixed boo1107235: - CVE-2018-16065: Out of bounds write in V8 - CVE-2018-16066:Out of bounds read in Blink - CVE-2018-16067: Out of bounds read in WebAudio - CVE-2018-16068: Out of bounds write in Mojo -...

Security update for libcdio (low)

This update for libcdio fixes the following issues: The following security vulnerabilities were addressed: - CVE-2017-18199: Fixed a NULL pointer dereference in reallocsymlink in rock.c bsc1082821 - CVE-2017-18201: Fixed a double free vulnerability in getcdtextgeneric in cdiogeneric.c bsc1082877 ...

Security update for mailman (moderate)

This update for mailman to version 2.1.27 fixes the following issues: This security issue was fixed: - CVE-2018-0618: Additional protections against injecting scripts into listinfo and error messages pages bsc1099510. These non-security issues were fixed: - The hash generated when...

Security update for MozillaFirefox (important)

This security update for MozillaFirefox to version 60.1.0esr fixes multiple issues. Security issues fixed MFSA 2018-16, boo1098998: - CVE-2018-12359: Buffer overflow using computed size of canvas element - CVE-2018-12360: Use-after-free when using focus - CVE-2018-12361: Integer overflow in...

Security update for opencv (important)

This update for opencv fixes the following issues: Security issues fixed: - CVE-2016-1516: OpenCV had a double free issue that allowed attackers to execute arbitrary code. boo1033152 - CVE-2017-14136: OpenCV had an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading ...

Security update for chromium (important)

This update for chromium to 64.0.3282.119 fixes several issues. These security issues were fixed: - CVE-2018-6031: Use after free in PDFium boo1077571 - CVE-2018-6032: Same origin bypass in Shared Worker boo1077571 - CVE-2018-6033: Race when opening downloaded files boo1077571 - CVE-2018-6034:...

Security update for chromium (important)

This update to Chromium 63.0.3239.108 fixes the following issues: - CVE-2017-15429: UXSS in V8 bsc1072976 - Various fuzzing fixes...

glibc (critical)

CVE-2015-0235: A vulnerability was found and fixed in the GNU C Library, specifically in the function gethostbyname, that could lead to a local or remote buffer overflow. bsc913646...

Firefox update to 31.1esr (important)

This patch contains security updates for mozilla-nss 3.16.4 - The following 1024-bit root CA certificate was restored to allow more time to develop a better transition strategy for affected sites. It was removed in NSS 3.16.3, but discussion in the mozilla.dev.security.policy forum led to the...

Security update for the Linux Kernel (important)

SUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2022:0131-1 Rating: important References: 1139944 1151927 1152489 1153275 1154353 1154355 1161907 1164565 1166780 1169514 1176242 1176447 1176536 1176544 1176545 1176546 1176548 1176558 1176559 1176774 1176940...

Security update for MozillaThunderbird (important)

openSUSE Security Update: Security update for MozillaThunderbird Announcement ID: openSUSE-SU-2022:0559-1 Rating: important References: 1195682 1196072 Cross-References: CVE-2022-0566 CVE-2022-22753 CVE-2022-22754 CVE-2022-22756 CVE-2022-22759 CVE-2022-22760 CVE-2022-22761 CVE-2022-22763...

Security update for icu.691 (important)

openSUSE Security Update: Security update for icu.691 Announcement ID: openSUSE-SU-2021:4063-1 Rating: important References: 1158955 1159131 1161007 1162882 1167603 1182252 1182645 SLE-17893 Affected Products: openSUSE Leap 15.3 An update that contains security fixes and contains one feature can...

Security update for opera (important)

openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2020:1713-1 Rating: important References: Cross-References: CVE-2020-15959 CVE-2020-15960 CVE-2020-15961 CVE-2020-15962 CVE-2020-15963 CVE-2020-15964 CVE-2020-15965 CVE-2020-15966 CVE-2020-6556 CVE-2020-6573...

Security update for grafana (moderate)

openSUSE Security Update: Security update for grafana Announcement ID: openSUSE-SU-2020:1611-1 Rating: moderate References: 1044444 1044933 1115960 1170557 Cross-References: CVE-2018-19039 CVE-2019-15043 CVE-2020-12245 CVE-2020-13379 Affected Products: openSUSE Backports SLE-15-SP1 An update that...

Security update for bcm43xx-firmware (moderate)

openSUSE Security Update: Security update for bcm43xx-firmware Announcement ID: openSUSE-SU-2020:1591-1 Rating: moderate References: 1176631 Affected Products: openSUSE Leap 15.1 An update that contains security fixes can now be installed. Description: This update for bcm43xx-firmware fixes the...

Security update for wicked (important)

openSUSE Security Update: Security update for wicked Announcement ID: openSUSE-SU-2020:0165-1 Rating: important References: 1160903 1160905 Cross-References: CVE-2019-18902 CVE-2020-7216 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description:...

Security update for log4j (important)

openSUSE Security Update: Security update for log4j Announcement ID: openSUSE-SU-2020:0051-1 Rating: important References: 1159646 Cross-References: CVE-2019-17571 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for log4j fix...

Security update for php7-imagick (moderate)

openSUSE Security Update: Security update for php7-imagick Announcement ID: openSUSE-SU-2020:0014-1 Rating: moderate References: 1135418 Cross-References: CVE-2019-11037 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 SUSE Package Hub for SUSE Linux Enterprise 12 An update tha...

Security update for slurm (moderate)

openSUSE Security Update: Security update for slurm Announcement ID: openSUSE-SU-2019:2536-1 Rating: moderate References: 1140709 1153095 1153245 Cross-References: CVE-2019-12838 Affected Products: openSUSE Leap 15.0 An update that solves one vulnerability and has two fixes is now available...

Security update for rsyslog (moderate)

openSUSE Security Update: Security update for rsyslog Announcement ID: openSUSE-SU-2019:2501-1 Rating: moderate References: 1141063 1153451 1153459 Cross-References: CVE-2019-17041 CVE-2019-17042 Affected Products: openSUSE Leap 15.1 An update that solves two vulnerabilities and has one errata is...

Security update for xen (important)

openSUSE Security Update: Security update for xen Announcement ID: openSUSE-SU-2019:2506-1 Rating: important References: 1152497 1154448 1154456 1154458 1154461 1155945 Cross-References: CVE-2018-12207 CVE-2019-11135 CVE-2019-18420 CVE-2019-18421 CVE-2019-18424 CVE-2019-18425 Affected Products:...

Security update for rsyslog (moderate)

openSUSE Security Update: Security update for rsyslog Announcement ID: openSUSE-SU-2019:2500-1 Rating: moderate References: 1141063 1153451 1153459 Cross-References: CVE-2019-17041 CVE-2019-17042 Affected Products: openSUSE Leap 15.0 An update that solves two vulnerabilities and has one errata is...

Security update for djvulibre (moderate)

openSUSE Security Update: Security update for djvulibre Announcement ID: openSUSE-SU-2019:2219-1 Rating: moderate References: 1146569 1146571 1146572 1146702 Cross-References: CVE-2019-15142 CVE-2019-15143 CVE-2019-15144 CVE-2019-15145 Affected Products: openSUSE Leap 15.1 An update that fixes fo...

Security update for wavpack (low)

openSUSE Security Update: Security update for wavpack Announcement ID: openSUSE-SU-2019:2067-1 Rating: low References: 1133384 1141334 Cross-References: CVE-2019-1010319 CVE-2019-11498 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that fixes two vulnerabilities is now...

Security update for teeworlds (moderate)

openSUSE Security Update: Security update for teeworlds Announcement ID: openSUSE-SU-2019:1793-1 Rating: moderate References: 1112910 1131729 Cross-References: CVE-2018-18541 CVE-2019-10877 CVE-2019-10878 CVE-2019-10879 Affected Products: openSUSE Leap 15.1 An update that fixes four vulnerabiliti...

Security update for python-azure-agent (important)

openSUSE Security Update: Security update for python-azure-agent Announcement ID: openSUSE-SU-2019:1106-1 Rating: important References: 1127838 Cross-References: CVE-2019-0804 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update f...

Security update for dom4j (moderate)

This update for dom4j fixes the following issues: - CVE-2018-1000632: Prevent XML injection that could have resulted in an attacker tampering with XML documents bsc1105443. This update was imported from the SUSE:SLE-15:Update update project. This update was imported from the...

Security update for GraphicsMagick (low)

This update for GraphicsMagick fixes the following security issue: - CVE-2018-16323: ReadXBMImage left data uninitialized when processing an XBM file that has a negative pixel value. If the affected code was used as a library loaded into a process that includes sensitive information, that...

Security update for GraphicsMagick (low)

This update for GraphicsMagick fixes the following issues: The following security fixes were fixed: - CVE-2018-10805: Fixed a memory leak in ReadYCBCRImage in coders/ycbcr.c and rgb.c, cmyk.c and gray.c boo1095812 - Fixed invalid memory reads in dcm.c boo1075821c14...

Security update for glibc (important)

This update for glibc fixes the following issues: Security issues fixed: - CVE-2017-8804: Fix memory leak after deserialization failure in xdrbytes, xdrstring bsc1037930 - CVE-2017-12132: Reduce EDNS payload size to 1200 bytes bsc1051791 - CVE-2018-6485,CVE-2018-6551: Fix integer overflows in...

Security update for mysql-community-server (important)

mysql-community-server was updated to 5.6.34 to fix the following issues: Changes http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html...

update for bash (important)

This update for bash completely disables the importing of shell functions from the environment and thereby remove the exposure of the parser from untrusted/harmful environment...

Opera - security update to 12.11 (important)

Opera 12.11 is a recommended upgrade offering security and stability enhancements: -fixed an issue where HTTP response heap buffer overflow could allow execution of arbitrary code; -fixed an issue where error pages could be used to guess local file paths; see our advisory -fixed several issues...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2022:0768-1 Rating: important References: 1185973 1191580 1194516 1195536 1195543 1195612 1195840 1195897 1195908 1195949 1195987 1196079 1196155 1196584 1196612 Cross-References: CVE-2021-44879...

Security update for php7 (moderate)

openSUSE Security Update: Security update for php7 Announcement ID: openSUSE-SU-2021:2575-1 Rating: moderate References: 1188037 Cross-References: CVE-2021-21705 CVSS scores: CVE-2021-21705 SUSE: 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: openSUSE Leap 15.3 An update that...

Security update for nodejs10 (important)

openSUSE Security Update: Security update for nodejs10 Announcement ID: openSUSE-SU-2021:1061-1 Rating: important References: 1183155 1183851 1183852 1184450 1187973 1187976 1187977 Cross-References: CVE-2020-7774 CVE-2021-22918 CVE-2021-23362 CVE-2021-27290 CVE-2021-3449 CVE-2021-3450 CVSS score...

Security update for libdwarf (low)

openSUSE Security Update: Security update for libdwarf Announcement ID: openSUSE-SU-2021:0619-1 Rating: low References: 1185057 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for libdwarf fixes the following issues: -...

Security update for irssi (moderate)

openSUSE Security Update: Security update for irssi Announcement ID: openSUSE-SU-2021:0587-1 Rating: moderate References: 1184848 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for irssi fixes the following issues: irssi...

Security update for bind (moderate)

openSUSE Security Update: Security update for bind Announcement ID: openSUSE-SU-2020:1701-1 Rating: moderate References: 1100369 1109160 1118367 1118368 1128220 1156205 1157051 1161168 1170667 1170713 1171313 1171740 1172958 1173307 1173311 1173983 1175443 1176092 1176674 906079 Cross-References:...

Security update for crmsh (moderate)

openSUSE Security Update: Security update for crmsh Announcement ID: openSUSE-SU-2020:1678-1 Rating: moderate References: 1163581 1176569 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for crmsh fixes the following issue...

Security update for roundcubemail (moderate)

openSUSE Security Update: Security update for roundcubemail Announcement ID: openSUSE-SU-2020:1516-1 Rating: moderate References: 1115718 1115719 1146286 1171040 1171148 1171149 1173792 1175135 Cross-References: CVE-2019-10740 CVE-2020-12625 CVE-2020-12640 CVE-2020-12641 CVE-2020-15562...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2020:1325-1 Rating: important References: 1065600 1065729 1071995 1083548 1085030 1085308 1087082 1111666 1112178 1113956 1133021 1144333 1152148 1163524 1165629 1166965 1169790 1170232 1171688 1172073...

Security update for MozillaThunderbird (important)

openSUSE Security Update: Security update for MozillaThunderbird Announcement ID: openSUSE-SU-2020:0643-1 Rating: important References: 1171186 Cross-References: CVE-2020-12387 CVE-2020-12392 CVE-2020-12393 CVE-2020-12395 CVE-2020-12397 CVE-2020-6831 Affected Products: openSUSE Leap 15.1 An updat...