Security update for SDL2_image (moderate)

This update for SDL2image fixes the following issues: Security issues fixed: - CVE-2018-3839: Fixed an exploitable code execution vulnerability that existed in the XCF image rendering functionality of the Simple DirectMedia Layer bsc1089087. - CVE-2018-3977: Fixed a possible code execution via...

Security update for binutils (moderate)

This update for binutils to 2.31 fixes the following issues: These security issues were fixed: - CVE-2017-15996: readelf allowed remote attackers to cause a denial of service excessive memory allocation or possibly have unspecified other impact via a crafted ELF file that triggered a buffer...

Security update for obs-service-tar_scm (important)

openSUSE Security Update: Security update for obs-service-tarscm Announcement ID: openSUSE-SU-2019:0329-1 Rating: important References: 1076410 1082696 1105361 1107507 1107944 Cross-References: CVE-2018-12473 CVE-2018-12474 CVE-2018-12476 Affected Products: openSUSE Backports SLE-15 An update tha...

Security update for java-11-openjdk (important)

openSUSE Security Update: Security update for java-11-openjdk Announcement ID: openSUSE-SU-2019:0161-1 Rating: important References: 1120431 1122293 1122299 Cross-References: CVE-2018-11212 CVE-2019-2422 CVE-2019-2426 Affected Products: openSUSE Leap 15.0 An update that fixes three vulnerabilitie...

Security update for libmirage (moderate)

openSUSE Security Update: Security update for libmirage Announcement ID: openSUSE-SU-2019:2033-1 Rating: moderate References: 1148087 Cross-References: CVE-2019-15540 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

Security update for zabbix (moderate)

openSUSE Security Update: Security update for zabbix Announcement ID: openSUSE-SU-2022:0036-1 Rating: moderate References: 1144018 1174253 1181400 1183014 1194681 Cross-References: CVE-2020-15803 CVE-2021-27927 CVE-2022-23134 CVSS scores: CVE-2020-15803 NVD : 6.1...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2019:0065-1 Rating: important References: 1024718 1046299 1050242 1050244 1051510 1055121 1055186 1058115 1060463 1065729 1078248 1079935 1082387 1083647 1086282 1086283 1086423 1087978 1088386 1090888...

Security update for SDL2_image (moderate)

This update for SDL2image fixes the following issues: Security issues fixed: - CVE-2018-3839: Fixed an exploitable code execution vulnerability that existed in the XCF image rendering functionality of the Simple DirectMedia Layer bsc1089087. - CVE-2018-3977: Fixed a possible code execution via...

Security update for GraphicsMagick (moderate)

This update for GraphicsMagick fixes the following issues: Security issue fixed: - CVE-2018-18544: Fixed memory leak in the function WriteMSLImage of coders/msl.c bsc1113064. Non-security issues fixed: - asanbuild: build ASAN included - debugbuild: build more suitable for debugging This update wa...

Security update for chromium (important)

This update contains Chromium 70.0.3538.102 and fixes security issues and bugs. Vulnerabilities fixed in 70.0.3538.102: - CVE-2018-17478: Out of bounds memory access in V8 boo1115537 Vulnerabilities fixed in 70.0.3538.67 bsc1112111: - CVE-2018-17462: Sandbox escape in AppCache - CVE-2018-17463:...

Security update for squid (important)

This update for squid fixes the following issues: Security issues fixed: - CVE-2018-19131: Fixed Cross-Site-Scripting vulnerability in the TLS error handling bsc1113668. - CVE-2018-19132: Fixed small memory leak in processing of SNMP packets bsc1113669. Non-security issues fixed: - Create runtime...

Security update for GraphicsMagick (moderate)

This update for GraphicsMagick fixes the following issues: Security issue fixed: - CVE-2018-18544: Fixed memory leak in the function WriteMSLImage of coders/msl.c bsc1113064. Non-security issues fixed: - asanbuild: build ASAN included - debugbuild: build more suitable for debugging...

Security update for tiff (moderate)

This update for tiff fixes the following issues: - CVE-2018-17100: There is a int32 overflow in multiplyms in tools/ppm2tiff.c, which can cause a denial of service crash or possibly have unspecified other impact via a crafted image file. bsc1108637 - CVE-2018-17101: There are two out-of-bounds...

Security update for squid (important)

This update for squid fixes the following issues: Security issues fixed: - CVE-2018-19131: Fixed Cross-Site-Scripting vulnerability in the TLS error handling bsc1113668. - CVE-2018-19132: Fixed small memory leak in processing of SNMP packets bsc1113669. Non-security issues fixed: - Create runtime...

Security update for webkit2gtk3 (important)

openSUSE Security Update: Security update for webkit2gtk3 Announcement ID: openSUSE-SU-2021:2598-1 Rating: important References: 1188697 Cross-References: CVE-2021-21775 CVE-2021-21779 CVE-2021-30663 CVE-2021-30665 CVE-2021-30689 CVE-2021-30720 CVE-2021-30734 CVE-2021-30744 CVE-2021-30749...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2019:2156-1 Rating: important References: 1150425 Cross-References: CVE-2019-13659 CVE-2019-13660 CVE-2019-13661 CVE-2019-13662 CVE-2019-13663 CVE-2019-13664 CVE-2019-13665 CVE-2019-13666 CVE-2019-13667...

Security update for libpng16 (low)

openSUSE Security Update: Security update for libpng16 Announcement ID: openSUSE-SU-2019:1530-1 Rating: low References: 1100687 1121624 1124211 Cross-References: CVE-2018-13785 CVE-2019-7317 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that solves two vulnerabilities and has...

Security update for GraphicsMagick (moderate)

This update for GraphicsMagick fixes the following issues: Security issue fixed: - CVE-2018-18544: Fixed memory leak in the function WriteMSLImage of coders/msl.c bsc1113064. Non-security issues fixed: - asanbuild: build ASAN included - debugbuild: build more suitable for debugging...

Security update for neovim (important)

openSUSE Security Update: Security update for neovim Announcement ID: openSUSE-SU-2019:1997-1 Rating: important References: 1137443 Cross-References: CVE-2019-12735 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: This update f...

Security update for openssl-1_1 (moderate)

openSUSE Security Update: Security update for openssl-11 Announcement ID: openSUSE-SU-2019:0152-1 Rating: moderate References: 1117951 1118913 Cross-References: CVE-2018-0737 Affected Products: openSUSE Leap 15.0 An update that solves one vulnerability and has one errata is now available...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2019:2155-1 Rating: important References: 1150425 Cross-References: CVE-2019-13659 CVE-2019-13660 CVE-2019-13661 CVE-2019-13662 CVE-2019-13663 CVE-2019-13664 CVE-2019-13665 CVE-2019-13666 CVE-2019-13667...

Security update for ImageMagick (moderate)

This update for ImageMagick fixes the following issues: These security issues were fixed: - CVE-2017-13758: Prevent heap-based buffer overflow in the TracePoint function bsc1056277. - CVE-2017-10928: Prevent heap-based buffer over-read in the GetNextToken function that allowed remote attackers to...

Security update for lame (important)

This update for lame fixes the following issues: Lame was updated to version 3.100: Improved detection of MPEG audio data in RIFF WAVE files. sf3545112 Invalid sampling detection New switch --gain decibel, range -20.0 to +12.0, a more convenient way to apply Gain adjustment in decibels, than the...

Security update for java-1_7_0-openjdk (critical)

java-170-openjdk was updated to version 7u95 to fix 9 security issues. bsc962743 - CVE-2015-4871: Rebinding of the receiver of a DirectMethodHandle may allow a protected method to be accessed - CVE-2015-7575: Further reduce use of MD5 SLOTH bsc960996 - CVE-2015-8126: Vulnerability in the AWT...

Security update for ghostscript (important)

This update for ghostscript to version 9.25 fixes the following issues: These security issues were fixed: - CVE-2018-17183: Remote attackers were be able to supply crafted PostScript to potentially overwrite or replace error handlers to inject code bsc1109105 - CVE-2018-15909: Prevent type...

Security update for MozillaFirefox (important)

openSUSE Security Update: Security update for MozillaFirefox Announcement ID: openSUSE-SU-2021:3745-1 Rating: important References: 1192250 Cross-References: CVE-2021-38503 CVE-2021-38504 CVE-2021-38505 CVE-2021-38506 CVE-2021-38507 CVE-2021-38508 CVE-2021-38509 CVE-2021-38510 Affected Products:...

Security update for rmt-server (important)

openSUSE Security Update: Security update for rmt-server Announcement ID: openSUSE-SU-2019:1527-1 Rating: important References: 1107806 1117722 1118745 1125770 1128858 1129271 1129392 1132160 1132690 1134190 1134428 1135222 Cross-References: CVE-2019-11068 CVE-2019-5419 Affected Products: openSUS...

Security update for docker (moderate)

openSUSE Security Update: Security update for docker Announcement ID: openSUSE-SU-2019:0189-1 Rating: moderate References: 1001161 1112980 1115464 1118897 1118898 1118899 1118990 1121412 Cross-References: CVE-2018-16873 CVE-2018-16874 CVE-2018-16875 Affected Products: openSUSE Leap 15.0 An update...

Security update for libwpd (important)

This update for libwpd fixes the following issues: Security issue fixed: - CVE-2018-19208: Fixed illegal address access inside libwpd at function WP6ContentListener:defineTable bsc1115713. This update was imported from the SUSE:SLE-12:Update update project...

Security update for gnome-shell (moderate)

openSUSE Security Update: Security update for gnome-shell Announcement ID: openSUSE-SU-2019:1529-1 Rating: moderate References: 1124493 Cross-References: CVE-2019-3820 Affected Products: openSUSE Leap 42.3 An update that fixes one vulnerability is now available. Description: This update for...

Security update for java-1_7_0-openjdk (important)

openSUSE Security Update: Security update for java-170-openjdk Announcement ID: openSUSE-SU-2019:0042-1 Rating: important References: 1101644 1101645 1101651 1101656 1112142 1112143 1112144 1112146 1112147 1112152 1112153 Cross-References: CVE-2018-13785 CVE-2018-16435 CVE-2018-2938 CVE-2018-2940...

Security update for pam_pkcs11 (moderate)

This update for pampkcs11 provides the following fixes: Security issues fixed bsc1105012: - Fixed a logic bug in pampkcs11.c, leading to an authentication replay vulnerability - Fixed a stack-based buffer overflow in opensshmapper.c - Make sure memory is properly cleaned before invoking free Othe...

Security update for chromium (important)

This update for Chromium to version 70.0.3538.110 fixes the following security issue: - CVE-2018-17479: Use-after-free in GPU boo1116608...

Recommended update for xen (important)

openSUSE Security Update: Recommended update for xen Announcement ID: openSUSE-SU-2019:1199-1 Rating: important References: 1026236 1027519 1114988 1126140 1126141 1126192 1126195 1126196 1126197 1126198 1126201 1126325 1127400 1127620 Cross-References: CVE-2018-19967 Affected Products: openSUSE...

Security update for LibVNCServer (important)

openSUSE Security Update: Security update for LibVNCServer Announcement ID: openSUSE-SU-2019:0045-1 Rating: important References: 1120114 1120115 1120116 1120117 1120118 1120119 1120120 1120121 1120122 Cross-References: CVE-2018-15126 CVE-2018-15127 CVE-2018-20019 CVE-2018-20020 CVE-2018-20021...

Security update for libwpd (important)

This update for libwpd fixes the following issues: Security issue fixed: - CVE-2018-19208: illegal address access inside libwpd at function WP6ContentListener:defineTable bsc1115713. This update was imported from the SUSE:SLE-15:Update update project...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2019:2308-1 Rating: important References: 1051510 1054914 1055117 1061840 1065600 1065729 1071995 1082555 1104967 1109158 1111666 1113722 1114279 1119086 1123034 1127988 1131304 1137069 1137865 1137959...

Security update for libmirage (moderate)

openSUSE Security Update: Security update for libmirage Announcement ID: openSUSE-SU-2019:2040-1 Rating: moderate References: 1148087 Cross-References: CVE-2019-15540 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for...

Security update for gvfs (important)

openSUSE Security Update: Security update for gvfs Announcement ID: openSUSE-SU-2019:1697-1 Rating: important References: 1125433 1136981 1136986 1136992 1137930 Cross-References: CVE-2019-12447 CVE-2019-12448 CVE-2019-12449 CVE-2019-12795 Affected Products: openSUSE Leap 15.1 An update that solv...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2019:0274-1 Rating: important References: 1012382 1020413 1031492 1042286 1050549 1078355 1086095 1086652 1099810 1103097 1105428 1106061 1106929 1116345 1117108 1117645 1117744 1120017 1120758 1120902...

Recommended update for putty (moderate)

openSUSE Security Update: Recommended update for putty Announcement ID: openSUSE-SU-2019:2017-1 Rating: moderate References: 1144547 1144548 Affected Products: openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 An update that contains security fixes can now be installed. Description: This...

Security update for openssl (moderate)

openSUSE Security Update: Security update for openssl Announcement ID: openSUSE-SU-2019:1373-1 Rating: moderate References: 1131291 Affected Products: openSUSE Leap 42.3 An update that contains security fixes can now be installed. Description: This update for openssl fixes the following issues: -...

Security update for subversion (moderate)

openSUSE Security Update: Security update for subversion Announcement ID: openSUSE-SU-2019:0153-1 Rating: moderate References: 1122842 Cross-References: CVE-2018-11803 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for...

Security update for chromium (important)

This update for Chromium to version 70.0.3538.110 fixes the following security issue: - CVE-2018-17479: Use-after-free in GPU boo1116608...

Security update for php5 (moderate)

openSUSE Security Update: Security update for php5 Announcement ID: openSUSE-SU-2019:0276-1 Rating: moderate References: 1123354 Cross-References: CVE-2019-6977 Affected Products: openSUSE Leap 42.3 An update that fixes one vulnerability is now available. Description: This update for php5 fixes t...

Security update for systemd (important)

openSUSE Security Update: Security update for systemd Announcement ID: openSUSE-SU-2019:1450-1 Rating: important References: 1080919 1121563 1125352 1126056 1127557 1128657 1130230 1132348 1132400 1132721 955942 Cross-References: CVE-2018-6954 CVE-2019-3842 CVE-2019-6454 Affected Products: openSU...

Security update for gthumb (important)

openSUSE Security Update: Security update for gthumb Announcement ID: openSUSE-SU-2019:0022-1 Rating: important References: 1113749 Cross-References: CVE-2018-18718 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 An update that fixes one vulnerability is now...

Security update for MozillaThunderbird (important)

This update for Mozilla Thunderbird to version 60.2.1 fixes multiple issues. Multiple security issues were fixed in the Mozilla platform as advised in MFSA 2018-25. In general, these flaws cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but are...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2019:1571-1 Rating: important References: 1012382 1050242 1051510 1053043 1056787 1058115 1061840 1064802 1065600 1065729 1066129 1068546 1071995 1075020 1082387 1083647 1085535 1093389 1099658 1103992...

Security update for netpbm (moderate)

openSUSE Security Update: Security update for netpbm Announcement ID: openSUSE-SU-2019:1200-1 Rating: moderate References: 1086777 Cross-References: CVE-2018-8975 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for netpbm fix...