Security update for shadowsocks-libev (moderate)

openSUSE Security Update: Security update for shadowsocks-libev Announcement ID: openSUSE-SU-2020:0142-1 Rating: moderate References: 1158251 1158365 Cross-References: CVE-2019-5163 CVE-2019-5164 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes two vulnerabilities is now...

Security update for sarg (important)

openSUSE Security Update: Security update for sarg Announcement ID: openSUSE-SU-2020:0117-1 Rating: important References: 1156643 Cross-References: CVE-2019-18932 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for sarg fixes...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2019:2545-1 Rating: important References: 1157269 Cross-References: CVE-2019-13723 CVE-2019-13724 Affected Products: openSUSE Leap 15.0 An update that fixes two vulnerabilities is now available. Description: This...

Security update for libcryptopp (moderate)

openSUSE Security Update: Security update for libcryptopp Announcement ID: openSUSE-SU-2019:1968-1 Rating: moderate References: 1143532 Cross-References: CVE-2019-14318 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 An update that...

Security update for libzypp, zypper (important)

This update for libzypp, zypper fixes the following issues: Update libzypp to version 16.17.20: Security issues fixed: - PackageProvider: Validate delta rpms before caching bsc1091624, bsc1088705, CVE-2018-7685 - PackageProvider: Validate downloaded rpm package signatures before caching bsc109162...

Security update for GraphicsMagick (low)

This update for GraphicsMagick fixes the following security issue: - CVE-2018-16750: Prevent memory leak in the formatIPTCfromBuffer function bsc1108283. An earlier update added a change that also fixed this issues that was unknown at the time of release: - CVE-2018-16749: Added missing NULL chec...

Security update for blueman (moderate)

This update for blueman fixes the following issues: The following security issue was addressed: - Fixed the polkit authorization checks in blueman, which previously allowed any user with access to the D-Bus system bus to trigger certain network configuration logic in blueman without authenticatio...

Security update for openvpn (moderate)

This update for openvpn fixes the following issues: - CVE-2018-9336: Fix potential double-free in Interactive Service could lead to denial of service bsc1090839. This update was imported from the SUSE:SLE-15:Update update project...

Security update for openjpeg2 (moderate)

This update for openjpeg2 fixes the following security issues: - CVE-2015-1239: A double free vulnerability in the j2kreadppmv3 function allowed remote attackers to cause a denial of service crash bsc1066713 - CVE-2017-17479: A stack-based buffer overflow in the pgxtoimage function in...

Security update for lame (important)

This update for lame fixes the following issues: Lame was updated to version 3.100: Improved detection of MPEG audio data in RIFF WAVE files. sf3545112 Invalid sampling detection New switch --gain decibel, range -20.0 to +12.0, a more convenient way to apply Gain adjustment in decibels, than the...

Security update for MozillaFirefox (important)

This update for MozillaFirefox fixes the following issues: - update to Firefox 52.6esr boo1077291 MFSA 2018-01 Speculative execution side-channel attack "Spectre" MFSA 2018-03 CVE-2018-5091 bmo1423086 Use-after-free with DTMF timers CVE-2018-5095 bmo1418447 Integer overflow in Skia library during...

Security update for cacti, cacti-spine (important)

This update for cacti, cacti-spine to version 1.1.28 fixes the following issues: - CVE-2017-16641: Potential code execution vulnerability in RRDtool functions boo1067166 - CVE-2017-16660: Remote execution vulnerability in logging function boo1067164 - CVE-2017-16661: Arbitrary file read...

Security update for libwpd (important)

This update for libwpd fixes the following issues: Security issue fixed: - CVE-2017-14226: WP1StylesListener.cpp, WP5StylesListener.cpp, and WP42StylesListener.cpp in libwpd 0.10.1 mishandle iterators, which allows remote attackers to cause a denial of service heap-based buffer over-read in the...

Security update for glibc (important)

This update for glibc fixes the following issues: - CVE-2017-1000366: Fix a potential privilege escalation vulnerability that allowed unprivileged system users to manipulate the stack of setuid binaries to gain special privileges. bsc1039357 - A bug in glibc that could result in deadlocks between...

Security update for openjpeg2 (important)

This update for openjpeg2 fixes the following issues: CVE-2016-9572 CVE-2016-9573: Insuficient check in imagetopnm could lead to heap buffer overflow bsc1014543 CVE-2016-9580, CVE-2016-9581: Possible Heap buffer overflow via integer overflow and infite loop bsc1014975 CVE-2016-7445: Null pointer...

Security update for java-1_7_0-openjdk (important)

This update for java-170-openjdk fixes the following issues: - Update to 2.6.7 - OpenJDK 7u111 Security fixes - S8079718, CVE-2016-3458: IIOP Input Stream Hooking bsc989732 - S8145446, CVE-2016-3485: Perfect pipe placement Windows only bsc989734 - S8147771: Construction of static protection domai...

Security update for java-1_7_0-openjdk (important)

This update for java-170-openjdk to version 2.6.6 fixes five security issues. These security issues were fixed: - CVE-2016-0686: Ensure thread consistency bsc976340. - CVE-2016-0687: Better byte behavior bsc976340. - CVE-2016-0695: Make DSA more fair bsc976340. - CVE-2016-3425: Better buffering o...

Security update for java-1_7_0-openjdk (important)

This update for java-170-openjdk to version 2.6.6 fixes five security issues. These security issues were fixed: - CVE-2016-0686: Ensure thread consistency bsc976340. - CVE-2016-0687: Better byte behavior bsc976340. - CVE-2016-0695: Make DSA more fair bsc976340. - CVE-2016-3425: Better buffering o...

bash (important)

The command-line shell 'bash' evaluates environment variables, which allows the injection of characters and might be used to access files on the system in some circumstances CVE-2014-7169. Please note that this issue is different from a previously fixed vulnerability tracked under CVE-2014-6271 a...

govulncheck-vulndb-0.0.20241108T172500-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20241108T172500-1.1 on GA media Announcement ID: openSUSE-SU-2024:14482-1 Rating: moderate Cross-References: CVE-2024-10975 CVE-2024-45794 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all securit...

Security update for gdcm, orthanc, orthanc-gdcm, orthanc-webviewer (important)

openSUSE Security Update: Security update for gdcm, orthanc, orthanc-gdcm, orthanc-webviewer Announcement ID: openSUSE-SU-2022:10145-1 Rating: important References: Cross-References: CVE-2022-2119 CVE-2022-2120 CVSS scores: CVE-2022-2119 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H...

Security update for java-1_8_0-openj9 (important)

openSUSE Security Update: Security update for java-180-openj9 Announcement ID: openSUSE-SU-2022:0870-1 Rating: important References: 1194925 1194926 1194927 1194928 1194929 1194930 1194931 1194932 1194933 1194934 1194935 1194939 1194940 1194941 Cross-References: CVE-2022-21248 CVE-2022-21277...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:0075-1 Rating: important References: 1196641 Cross-References: CVE-2022-0789 CVE-2022-0790 CVE-2022-0791 CVE-2022-0792 CVE-2022-0793 CVE-2022-0794 CVE-2022-0795 CVE-2022-0796 CVE-2022-0797 CVE-2022-0798...

Security update for ucode-intel (important)

openSUSE Security Update: Security update for ucode-intel Announcement ID: openSUSE-SU-2022:0574-1 Rating: important References: 1192615 1195779 1195780 1195781 Cross-References: CVE-2021-0127 CVE-2021-0145 CVE-2021-0146 CVE-2021-33120 CVSS scores: CVE-2021-0127 NVD : 5.5...

Security update for log4j12 (important)

openSUSE Security Update: Security update for log4j12 Announcement ID: openSUSE-SU-2021:1612-1 Rating: important References: 1193662 Cross-References: CVE-2021-4104 CVSS scores: CVE-2021-4104 SUSE: 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 An update th...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:3876-1 Rating: important References: 1100416 1108488 1129735 1129898 1133374 1136513 1171420 1176724 1177666 1181158 1184673 1184804 1185377 1185726 1185758 1185973 1186078 1186109 1186390 1186482...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:3655-1 Rating: important References: 1065729 1085030 1152472 1152489 1156395 1172073 1173604 1176447 1176774 1176914 1178134 1180100 1181147 1184673 1185762 1186063 1186109 1187167 1188563 1189841...

Security update for go1.16 (moderate)

openSUSE Security Update: Security update for go1.16 Announcement ID: openSUSE-SU-2021:3487-1 Rating: moderate References: 1182345 1191468 Cross-References: CVE-2021-38297 CVSS scores: CVE-2021-38297 SUSE: 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: openSUSE Leap 15.3 An...

Security update for MozillaFirefox (important)

openSUSE Security Update: Security update for MozillaFirefox Announcement ID: openSUSE-SU-2021:1367-1 Rating: important References: 1188891 1189547 1190269 1190274 1190710 1191332 Cross-References: CVE-2021-29980 CVE-2021-29981 CVE-2021-29982 CVE-2021-29983 CVE-2021-29984 CVE-2021-29985...

Security update for libcryptopp (moderate)

openSUSE Security Update: Security update for libcryptopp Announcement ID: openSUSE-SU-2021:3301-1 Rating: moderate References: 1015243 Cross-References: CVE-2016-9939 CVSS scores: CVE-2016-9939 NVD : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 An update...

Security update for xen (important)

openSUSE Security Update: Security update for xen Announcement ID: openSUSE-SU-2021:1236-1 Rating: important References: 1027519 1137251 1176189 1179148 1179246 1180491 1181989 1183877 1185682 1186428 1186429 1186433 1186434 1188050 1189373 1189376 1189378 1189380 1189381 1189882 Cross-References...

Security update for nodejs10 (moderate)

openSUSE Security Update: Security update for nodejs10 Announcement ID: openSUSE-SU-2021:2953-1 Rating: moderate References: 1188881 1188917 1189369 1189370 Cross-References: CVE-2021-22930 CVE-2021-22931 CVE-2021-22939 CVE-2021-3672 CVSS scores: CVE-2021-22930 SUSE: 9.1...

Security update for nodejs12 (important)

openSUSE Security Update: Security update for nodejs12 Announcement ID: openSUSE-SU-2021:1214-1 Rating: important References: 1188881 1188917 1189368 1189369 1189370 Cross-References: CVE-2021-22930 CVE-2021-22931 CVE-2021-22939 CVE-2021-22940 CVE-2021-3672 CVSS scores: CVE-2021-22930 SUSE: 9.1...

Security update for spectre-meltdown-checker (moderate)

openSUSE Security Update: Security update for spectre-meltdown-checker Announcement ID: openSUSE-SU-2021:2861-1 Rating: moderate References: 1189477 Cross-References: CVE-2017-5753 CVSS scores: CVE-2017-5753 NVD : 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2017-5753 SUSE: 7.1...

Security update for openexr (important)

openSUSE Security Update: Security update for openexr Announcement ID: openSUSE-SU-2021:1198-1 Rating: important References: 1188457 1188458 1188459 1188460 1188461 1188462 Cross-References: CVE-2021-20298 CVE-2021-20299 CVE-2021-20300 CVE-2021-20302 CVE-2021-20303 CVE-2021-20304 CVE-2021-3476 CV...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:0758-1 Rating: important References: 1047233 1065729 1113295 1152472 1152489 1153274 1154353 1155518 1156256 1156395 1159280 1160634 1167773 1168777 1169514 1169709 1171295 1173485 1177326 1178163...

Security update for mumble (moderate)

openSUSE Security Update: Security update for mumble Announcement ID: openSUSE-SU-2021:0300-1 Rating: moderate References: 1180068 1182123 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for mumble fixes the following...

Security update for squid (critical)

openSUSE Security Update: Security update for squid Announcement ID: openSUSE-SU-2020:1346-1 Rating: critical References: 1173455 1175664 1175665 1175671 Cross-References: CVE-2020-15049 CVE-2020-15810 CVE-2020-15811 CVE-2020-24606 Affected Products: openSUSE Leap 15.1 An update that fixes four...

Security update for java-11-openjdk (important)

openSUSE Security Update: Security update for java-11-openjdk Announcement ID: openSUSE-SU-2020:1175-1 Rating: important References: 1174157 Cross-References: CVE-2020-14556 CVE-2020-14562 CVE-2020-14573 CVE-2020-14577 CVE-2020-14581 CVE-2020-14583 CVE-2020-14593 CVE-2020-14621 Affected Products:...

Security update for apache2-mod_auth_openidc (moderate)

openSUSE Security Update: Security update for apache2-modauthopenidc Announcement ID: openSUSE-SU-2020:0376-1 Rating: moderate References: 1164459 Cross-References: CVE-2019-20479 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This upda...

Security update for tigervnc (important)

openSUSE Security Update: Security update for tigervnc Announcement ID: openSUSE-SU-2020:0087-1 Rating: important References: 1159856 1159858 1159860 1160250 1160251 Cross-References: CVE-2019-15691 CVE-2019-15692 CVE-2019-15693 CVE-2019-15694 CVE-2019-15695 Affected Products: openSUSE Leap 15.1 ...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2019:2693-1 Rating: important References: 1157269 Cross-References: CVE-2019-13723 CVE-2019-13724 Affected Products: openSUSE Backports SLE-15 An update that fixes two vulnerabilities is now available. Description...

Security update for postgresql (moderate)

openSUSE Security Update: Security update for postgresql Announcement ID: openSUSE-SU-2019:2685-1 Rating: moderate References: 1100397 1123886 Affected Products: openSUSE Leap 15.1 An update that contains security fixes can now be installed. Description: This update for postgresql fixes the...

Security update for opencv (moderate)

openSUSE Security Update: Security update for opencv Announcement ID: openSUSE-SU-2019:2671-1 Rating: moderate References: 1144348 1144352 1149742 1154091 Cross-References: CVE-2019-14491 CVE-2019-14492 CVE-2019-15939 Affected Products: openSUSE Leap 15.1 An update that solves three vulnerabiliti...

Security update for freerdp (moderate)

openSUSE Security Update: Security update for freerdp Announcement ID: openSUSE-SU-2019:2608-1 Rating: moderate References: 1153163 1153164 Cross-References: CVE-2019-17177 CVE-2019-17178 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description:...

Security update for nfs-utils (moderate)

openSUSE Security Update: Security update for nfs-utils Announcement ID: openSUSE-SU-2019:2408-1 Rating: moderate References: 1150733 Cross-References: CVE-2019-3689 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for nfs-uti...

Security update for kconfig, kdelibs4 (important)

openSUSE Security Update: Security update for kconfig, kdelibs4 Announcement ID: openSUSE-SU-2019:1898-1 Rating: important References: 1144600 Cross-References: CVE-2019-14744 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: Th...

Security update for postgresql10 (moderate)

This update for brings postgresql10 version 10.5 to openSUSE Leap 42.3. FATE325659 bnc1108308 This release marks the change of the versioning scheme for PostgreSQL to a "x.y" format. This means the next minor releases of PostgreSQL will be 10.1, 10.2, ... and the next major release will be 11...

Security update for chromium (moderate)

This update for Chromium to version 69.0.3497.92 fixes the following issues: Security issues fixed boo1108114: - Function signature mismatch in WebAssembly - URL Spoofing in Omnibox The following tracked packaging issues were fixed: - the chromium package incorrectly provied swiftshader resolvabl...

Security update for libcgroup (moderate)

This update for libcgroup fixes the following issues: The following security vulnerability was fixed: - CVE-2018-14348: Fixed a permission issue with /var/log/cgred. The permissions were not restrictive enough beforehand and ignored any umask setting. boo1100365...