Security update for webkit2gtk3 (moderate)

openSUSE Security Update: Security update for webkit2gtk3 Announcement ID: openSUSE-SU-2019:0308-1 Rating: moderate References: 1119553 1119554 1119555 1119556 1119557 1119558 1124937 Cross-References: CVE-2018-4437 CVE-2018-4438 CVE-2018-4441 CVE-2018-4442 CVE-2018-4443 CVE-2018-4464 CVE-2019-62...

Security update for ncurses (important)

This update for ncurses fixes the following issue: Security issue fixed: - CVE-2018-19211: Fixed denial of service issue that was triggered by a NULL pointer dereference at function ncparseentry bsc1115929. This update was imported from the SUSE:SLE-12:Update update project...

Security update for GraphicsMagick (low)

This update for GraphicsMagick fixes the following issues: The following security fixes were fixed: - CVE-2018-10805: Fixed a memory leak in ReadYCBCRImage in coders/ycbcr.c and rgb.c, cmyk.c and gray.c boo1095812 - Fixed invalid memory reads in dcm.c boo1075821c14...

Security update for MozillaFirefox (important)

This security update for MozillaFirefox to version 60.1.0esr fixes multiple issues. Security issues fixed MFSA 2018-16, boo1098998: - CVE-2018-12359: Buffer overflow using computed size of canvas element - CVE-2018-12360: Use-after-free when using focus - CVE-2018-12361: Integer overflow in...

Security update for gpg2 (important)

This update for gpg2 fixes the following security issue: - CVE-2018-12020: GnuPG mishandled the original filename during decryption and verification actions, which allowed remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the "--status-fd 2"...

Security update for the Linux Kernel (important)

The openSUSE Leap 42.3 kernel was updated to 4.4.79 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-7542: The ip6find1stfragopt function in net/ipv6/outputcore.c in the Linux kernel allowed local users to cause a denial of service integer overflow and...

Firefox update to 31.1esr (important)

This patch contains security updates for mozilla-nss 3.16.4 - The following 1024-bit root CA certificate was restored to allow more time to develop a better transition strategy for affected sites. It was removed in NSS 3.16.3, but discussion in the mozilla.dev.security.policy forum led to the...

mozilla-nss: Update 3.12.11 update (important)

This update updates mozilla nss to 3.12.11. It blacklists the lately compromised DigiNotar Certificate Authority...

Security update for php7 (moderate)

openSUSE Security Update: Security update for php7 Announcement ID: openSUSE-SU-2021:2575-1 Rating: moderate References: 1188037 Cross-References: CVE-2021-21705 CVSS scores: CVE-2021-21705 SUSE: 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: openSUSE Leap 15.3 An update that...

Security update for clamav-database (important)

openSUSE Security Update: Security update for clamav-database Announcement ID: openSUSE-SU-2021:2242-1 Rating: important References: 1084929 Affected Products: openSUSE Leap 15.3 An update that contains security fixes can now be installed. Description: This update for clamav-database fixes the...

Security update for dash (moderate)

openSUSE Security Update: Security update for dash Announcement ID: openSUSE-SU-2020:2065-1 Rating: moderate References: 1178978 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for dash fixes the following issues: - Fixed...

Security update for MozillaThunderbird (important)

openSUSE Security Update: Security update for MozillaThunderbird Announcement ID: openSUSE-SU-2020:1392-1 Rating: important References: 1175686 Cross-References: CVE-2020-15663 CVE-2020-15664 CVE-2020-15669 Affected Products: openSUSE Leap 15.2 An update that fixes three vulnerabilities is now...

Security update for salt (critical)

openSUSE Security Update: Security update for salt Announcement ID: openSUSE-SU-2020:0564-1 Rating: critical References: 1170595 Cross-References: CVE-2020-11651 CVE-2020-11652 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description: This updat...

Security update for java-1_8_0-openjdk (important)

openSUSE Security Update: Security update for java-180-openjdk Announcement ID: openSUSE-SU-2020:0147-1 Rating: important References: 1160968 Cross-References: CVE-2020-2583 CVE-2020-2590 CVE-2020-2593 CVE-2020-2601 CVE-2020-2604 CVE-2020-2654 CVE-2020-2659 Affected Products: openSUSE Leap 15.1 A...

Security update for nodejs8 (important)

openSUSE Security Update: Security update for nodejs8 Announcement ID: openSUSE-SU-2020:0059-1 Rating: important References: 1149792 1159352 Cross-References: CVE-2019-16775 CVE-2019-16776 CVE-2019-16777 Affected Products: openSUSE Leap 15.1 An update that fixes three vulnerabilities is now...

Security update for dnsmasq (moderate)

openSUSE Security Update: Security update for dnsmasq Announcement ID: openSUSE-SU-2019:2669-1 Rating: moderate References: 1076958 1138743 1152539 1154849 1156543 Cross-References: CVE-2017-15107 CVE-2019-14834 Affected Products: openSUSE Leap 15.1 An update that solves two vulnerabilities and h...

Security update for apache2-mod_perl (moderate)

openSUSE Security Update: Security update for apache2-modperl Announcement ID: openSUSE-SU-2019:2558-1 Rating: moderate References: 1091625 1156944 Cross-References: CVE-2011-2767 Affected Products: openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 An update that solves one vulnerability an...

Security update for putty (moderate)

openSUSE Security Update: Security update for putty Announcement ID: openSUSE-SU-2019:2277-1 Rating: moderate References: 1152753 Cross-References: CVE-2019-17068 CVE-2019-17069 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description: This upda...

Security update for libmirage (moderate)

openSUSE Security Update: Security update for libmirage Announcement ID: openSUSE-SU-2019:2077-1 Rating: moderate References: 1148087 Cross-References: CVE-2019-15540 Affected Products: openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 An update that fixes one vulnerability is now available...

Security update for python-Twisted (moderate)

openSUSE Security Update: Security update for python-Twisted Announcement ID: openSUSE-SU-2019:2068-1 Rating: moderate References: 1138461 Cross-References: CVE-2019-12855 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description...

Security update for tiff (moderate)

This update for tiff fixes the following issues: Security issues fixed: - CVE-2018-12900: Fixed heap-based buffer overflow in the cpSeparateBufToContigBuf bsc1099257. - CVE-2018-18661: Fixed NULL pointer dereference in the function LZWDecode in the file tiflzw.c bsc1113672. - CVE-2018-18557: Fixe...

Security update for MozillaFirefox (important)

This update for Mozilla Firefox to version 52.7.2esr fixes security issues and bugs. Security issues fixed: - CVE-2018-5146: Specially crafted vorbis files could have been used to execute arbitrary code via an Out of bounds memory write bsc1085671, MFSA 2018-08 - CVE-2018-5147: Specially crafted...

Security update for virtualbox (important)

This update for virtualbox to version 5.1.32 fixes the following issues: The following vulnerabilities were fixed boo1076372: - CVE-2017-5715: Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacke...

Security update for chromium (important)

This update Chromium to version 60.0.3112.78 fixes security issue and bugs. The following security issues were fixed: CVE-2017-5091: Use after free in IndexedDB CVE-2017-5092: Use after free in PPAPI CVE-2017-5093: UI spoofing in Blink CVE-2017-5094: Type confusion in extensions CVE-2017-5095:...

mozilla-nss: Update to 3.12.11 (important)

The mozilla NSS libraries were updated to 3.12.11 to align with newer Mozilla seamonkey and Firefox releases. Interesting changes are: - blacklisting malicious root certificates - several bugfixes...

Security update for the Linux Kernel (important)

SUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2022:0131-1 Rating: important References: 1139944 1151927 1152489 1153275 1154353 1154355 1161907 1164565 1166780 1169514 1176242 1176447 1176536 1176544 1176545 1176546 1176548 1176558 1176559 1176774 1176940...

Security update for libdxfrw, librecad (important)

openSUSE Security Update: Security update for libdxfrw, librecad Announcement ID: openSUSE-SU-2022:0067-1 Rating: important References: 1192936 1192937 1192938 Cross-References: CVE-2021-21898 CVE-2021-21899 CVE-2021-21900 CVSS scores: CVE-2021-21898 NVD : 8.8...

Security update for java-1_8_0-openjdk (important)

openSUSE Security Update: Security update for java-180-openjdk Announcement ID: openSUSE-SU-2021:1176-1 Rating: important References: 1185056 1188564 1188565 1188566 Cross-References: CVE-2021-2161 CVE-2021-2341 CVE-2021-2369 CVE-2021-2388 CVSS scores: CVE-2021-2161 NVD : 5.9...

Security update for MozillaFirefox (important)

openSUSE Security Update: Security update for MozillaFirefox Announcement ID: openSUSE-SU-2021:2393-1 Rating: important References: 1188275 Cross-References: CVE-2021-29970 CVE-2021-29976 CVE-2021-30547 CVSS scores: CVE-2021-30547 NVD : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected...

Security update for kdeconnect-kde (important)

openSUSE Security Update: Security update for kdeconnect-kde Announcement ID: openSUSE-SU-2020:2343-1 Rating: important References: 1177672 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for kdeconnect-kde fixes the...

Security update for grub2 (important)

openSUSE Security Update: Security update for grub2 Announcement ID: openSUSE-SU-2020:1169-1 Rating: important References: 1168994 1173812 1174463 1174570 Cross-References: CVE-2020-10713 CVE-2020-14308 CVE-2020-14309 CVE-2020-14310 CVE-2020-14311 CVE-2020-15706 CVE-2020-15707 Affected Products:...

Security update for freerdp (important)

openSUSE Security Update: Security update for freerdp Announcement ID: openSUSE-SU-2020:1090-1 Rating: important References: 1169679 1169748 1171441 1171443 1171444 1171445 1171446 1171447 1171474 1173247 1173605 1174200 Cross-References: CVE-2020-11017 CVE-2020-11018 CVE-2020-11019 CVE-2020-1103...

Security update for ldns (moderate)

openSUSE Security Update: Security update for ldns Announcement ID: openSUSE-SU-2020:0438-1 Rating: moderate References: 1068709 1068711 Cross-References: CVE-2017-1000231 CVE-2017-1000232 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2019:2692-1 Rating: important References: 1158982 Cross-References: CVE-2019-13725 CVE-2019-13726 CVE-2019-13727 CVE-2019-13728 CVE-2019-13729 CVE-2019-13730 CVE-2019-13732 CVE-2019-13734 CVE-2019-13735...

Security update for libqb (moderate)

openSUSE Security Update: Security update for libqb Announcement ID: openSUSE-SU-2019:1891-1 Rating: moderate References: 1137835 Cross-References: CVE-2019-12779 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: This update for...

Security update for mumble (moderate)

openSUSE Security Update: Security update for mumble Announcement ID: openSUSE-SU-2019:1794-1 Rating: moderate References: 1123334 Cross-References: CVE-2018-20743 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 openSUSE Backports SLE-15 SUSE Package Hub for SUSE Linux Enterprise 12 An...

Security update for apache2 (important)

This update for apache2 fixes the following issues: Security issues fixed: - CVE-2018-11763: In Apache HTTP Server by sending continuous, large SETTINGS frames a client can occupy a connection, server thread and CPU time without any connection timeout coming to effect. This affects only HTTP/2...

Security update for python (moderate)

This update for python fixes the following issue: - CVE-2018-1000802: Prevent command injection in shutil module makearchive function via passage of unfiltered user input bsc1109663 This update was imported from the SUSE:SLE-15:Update update project...

Security update for hylafax+ (critical)

This update for hylafax+ fixes the following issues: Security issues fixed in 5.6.1: - CVE-2018-17141: multiple vulnerabilities affecting fax page reception in JPEG format Specially crafted input may have allowed remote execution of arbitrary code boo1109084 Additionally, this update also contain...

Security update for java-10-openjdk (important)

This update for OpenJDK 10.0.2 fixes the following security issues: - CVE-2018-2940: the libraries sub-component contained an easily exploitable vulnerability that allowed attackers to compromise Java SE or Java SE Embedded over the network, potentially gaining unauthorized read access to data...

Security update for mailman (moderate)

This update for mailman to version 2.1.27 fixes the following issues: This security issue was fixed: - CVE-2018-0618: Additional protections against injecting scripts into listinfo and error messages pages bsc1099510. These non-security issues were fixed: - The hash generated when...

Security update for shibboleth-sp (important)

This update for shibboleth-sp fixes the following issues: Security issue fixed: - CVE-2017-16852: Fix critical security checks in the Dynamic MetadataProvider plugin in Shibboleth Service bsc1068689. This update was imported from the SUSE:SLE-12-SP1:Update update project...

Security update for nodejs-electron (important)

openSUSE Security Update: Security update for nodejs-electron Announcement ID: openSUSE-SU-2022:0070-1 Rating: important References: Cross-References: CVE-2021-30625 CVE-2021-30626 CVE-2021-30627 CVE-2021-30628 CVE-2021-30630 CVE-2021-30631 CVE-2021-30632 CVE-2021-30633 CVE-2021-37981...

Security update for MozillaThunderbird (important)

openSUSE Security Update: Security update for MozillaThunderbird Announcement ID: openSUSE-SU-2022:0559-1 Rating: important References: 1195682 1196072 Cross-References: CVE-2022-0566 CVE-2022-22753 CVE-2022-22754 CVE-2022-22756 CVE-2022-22759 CVE-2022-22760 CVE-2022-22761 CVE-2022-22763...

Security update for log4j (important)

openSUSE Security Update: Security update for log4j Announcement ID: openSUSE-SU-2021:3999-1 Rating: important References: 1193611 Cross-References: CVE-2021-44228 CVSS scores: CVE-2021-44228 SUSE: 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 An update th...

Security update for openssl-1_1 (low)

openSUSE Security Update: Security update for openssl-11 Announcement ID: openSUSE-SU-2021:2966-1 Rating: low References: 1189521 Cross-References: CVE-2021-3712 CVSS scores: CVE-2021-3712 SUSE: 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Leap 15.3 An update that...

Security update for slurm (important)

openSUSE Security Update: Security update for slurm Announcement ID: openSUSE-SU-2020:0085-1 Rating: important References: 1140709 1153095 1153259 1155784 1158696 1159692 Cross-References: CVE-2019-12838 CVE-2019-19727 CVE-2019-19728 Affected Products: openSUSE Leap 15.1 An update that solves thr...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2020:0009-1 Rating: important References: 1160337 Cross-References: CVE-2019-5844 CVE-2019-5845 CVE-2019-5846 CVE-2020-6377 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes four vulnerabilitie...

Security update for nfs-utils (moderate)

openSUSE Security Update: Security update for nfs-utils Announcement ID: openSUSE-SU-2019:2435-1 Rating: moderate References: 1150733 Cross-References: CVE-2019-3689 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for nfs-uti...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2019:2313-1 Rating: important References: 1146219 1153660 Cross-References: CVE-2019-13693 CVE-2019-13694 CVE-2019-13695 CVE-2019-13696 CVE-2019-13697 Affected Products: openSUSE Backports SLE-15 An update that...