Security update for python (moderate)

openSUSE Security Update: Security update for python Announcement ID: openSUSE-SU-2021:1418-1 Rating: moderate References: 1189241 1189287 Cross-References: CVE-2021-3733 CVE-2021-3737 CVSS scores: CVE-2021-3733 SUSE: 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-3737 SUSE: 6.5...

Security update for rpm (important)

openSUSE Security Update: Security update for rpm Announcement ID: openSUSE-SU-2021:1366-1 Rating: important References: 1179416 1183543 1183545 1183632 1183659 1185299 1187670 1188548 Cross-References: CVE-2021-20266 CVE-2021-20271 CVE-2021-3421 CVSS scores: CVE-2021-20266 NVD : 4.9...

Security update for nextcloud (important)

openSUSE Security Update: Security update for nextcloud Announcement ID: openSUSE-SU-2021:1253-1 Rating: important References: 1190291 Cross-References: CVE-2021-32766 CVE-2021-32800 CVE-2021-32801 CVE-2021-32802 CVSS scores: CVE-2021-32800 NVD : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N...

Security update for apache2 (important)

openSUSE Security Update: Security update for apache2 Announcement ID: openSUSE-SU-2021:1234-1 Rating: important References: 1189387 Cross-References: CVE-2021-33193 CVSS scores: CVE-2021-33193 SUSE: 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Leap 15.2 An update...

Security update for balsa (moderate)

openSUSE Security Update: Security update for balsa Announcement ID: openSUSE-SU-2021:1094-1 Rating: moderate References: 1172460 Cross-References: CVE-2020-13645 CVSS scores: CVE-2020-13645 NVD : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2020-13645 SUSE: 6.5...

Security update for caribou (important)

openSUSE Security Update: Security update for caribou Announcement ID: openSUSE-SU-2021:1071-1 Rating: important References: 1186617 1187112 Cross-References: CVE-2021-3567 CVSS scores: CVE-2021-3567 SUSE: 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 An...

Security update for xstream (important)

openSUSE Security Update: Security update for xstream Announcement ID: openSUSE-SU-2021:0832-1 Rating: important References: 1184372 1184373 1184374 1184375 1184376 1184377 1184378 1184379 1184380 1184796 1184797 Cross-References: CVE-2021-21341 CVE-2021-21342 CVE-2021-21343 CVE-2021-21344...

Security update for MozillaFirefox (important)

openSUSE Security Update: Security update for MozillaFirefox Announcement ID: openSUSE-SU-2021:0621-1 Rating: important References: 1184960 Cross-References: CVE-2021-23961 CVE-2021-23994 CVE-2021-23995 CVE-2021-23998 CVE-2021-23999 CVE-2021-24002 CVE-2021-29945 CVE-2021-29946 CVSS scores:...

Security update for ruby2.5 (important)

openSUSE Security Update: Security update for ruby2.5 Announcement ID: openSUSE-SU-2021:0471-1 Rating: important References: 1177125 1177222 Cross-References: CVE-2020-25613 CVSS scores: CVE-2020-25613 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2020-25613 SUSE: 6.3...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:0075-1 Rating: important References: 1040855 1044120 1044767 1055117 1065729 1094840 1109695 1112178 1115431 1129770 1138374 1139944 1144912 1152457 1163727 1164780 1168952 1171078 1172145 1172538...

Security update for webkit2gtk3 (important)

openSUSE Security Update: Security update for webkit2gtk3 Announcement ID: openSUSE-SU-2020:2304-1 Rating: important References: 1171531 1177087 1179122 1179451 Cross-References: CVE-2020-13543 CVE-2020-13584 CVE-2020-9948 CVE-2020-9951 CVE-2020-9983 Affected Products: openSUSE Leap 15.1 An updat...

Security update for apache-commons-httpclient (important)

openSUSE Security Update: Security update for apache-commons-httpclient Announcement ID: openSUSE-SU-2020:1875-1 Rating: important References: 1178171 945190 Cross-References: CVE-2014-3577 CVE-2015-5262 Affected Products: openSUSE Leap 15.2 An update that fixes two vulnerabilities is now...

Security update for wireshark (moderate)

openSUSE Security Update: Security update for wireshark Announcement ID: openSUSE-SU-2020:1878-1 Rating: moderate References: 1175204 1176908 1176909 1176910 Cross-References: CVE-2020-17498 CVE-2020-25862 CVE-2020-25863 CVE-2020-25866 Affected Products: openSUSE Leap 15.1 An update that fixes fo...

Security update for salt (critical)

openSUSE Security Update: Security update for salt Announcement ID: openSUSE-SU-2020:1868-1 Rating: critical References: 1159670 1175987 1176024 1176294 1176397 1177867 1178319 1178361 1178362 1178485 Cross-References: CVE-2020-16846 CVE-2020-17490 CVE-2020-25592 Affected Products: openSUSE Leap...

Security update for freetype2 (important)

openSUSE Security Update: Security update for freetype2 Announcement ID: openSUSE-SU-2020:1744-1 Rating: important References: 1177914 Cross-References: CVE-2020-15999 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for...

Security update for kleopatra (moderate)

openSUSE Security Update: Security update for kleopatra Announcement ID: openSUSE-SU-2020:1723-1 Rating: moderate References: 1177932 Cross-References: CVE-2020-24972 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

Security update for brotli (moderate)

openSUSE Security Update: Security update for brotli Announcement ID: openSUSE-SU-2020:1578-1 Rating: moderate References: 1175825 Cross-References: CVE-2020-8927 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for brotli fix...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2020:1032-1 Rating: important References: 1173107 1173187 1173188 1173251 1173254 1173292 Cross-References: CVE-2020-6509 Affected Products: openSUSE Backports SLE-15-SP2 An update that solves one vulnerability an...

Security update for xorg-x11-server (important)

openSUSE Security Update: Security update for xorg-x11-server Announcement ID: openSUSE-SU-2020:1302-1 Rating: important References: 1174633 1174635 1174638 Cross-References: CVE-2020-14345 CVE-2020-14346 CVE-2020-14347 Affected Products: openSUSE Leap 15.2 An update that fixes three...

Security update for openexr (moderate)

openSUSE Security Update: Security update for openexr Announcement ID: openSUSE-SU-2020:1015-1 Rating: moderate References: 1173466 1173467 1173469 Cross-References: CVE-2020-15304 CVE-2020-15305 CVE-2020-15306 Affected Products: openSUSE Leap 15.2 An update that fixes three vulnerabilities is no...

Security update for LibVNCServer (important)

openSUSE Security Update: Security update for LibVNCServer Announcement ID: openSUSE-SU-2020:0978-1 Rating: important References: 1173477 Cross-References: CVE-2017-18922 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for...

Security update for xmlgraphics-batik (moderate)

openSUSE Security Update: Security update for xmlgraphics-batik Announcement ID: openSUSE-SU-2020:0851-1 Rating: moderate References: 1172961 Cross-References: CVE-2019-17566 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update fo...

Security update for xawtv (moderate)

openSUSE Security Update: Security update for xawtv Announcement ID: openSUSE-SU-2020:0784-1 Rating: moderate References: 1171655 Cross-References: CVE-2020-13696 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for xawtv fixe...

Security update for axel (moderate)

openSUSE Security Update: Security update for axel Announcement ID: openSUSE-SU-2020:0778-1 Rating: moderate References: 1172159 Cross-References: CVE-2020-13614 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for axel fixes...

Security update for exim (moderate)

openSUSE Security Update: Security update for exim Announcement ID: openSUSE-SU-2020:0491-1 Rating: moderate References: 1154183 1160726 Cross-References: CVE-2020-8015 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has one errata is now available. Description:...

Security update for phpMyAdmin (important)

openSUSE Security Update: Security update for phpMyAdmin Announcement ID: openSUSE-SU-2020:0056-1 Rating: important References: 1150914 1157614 1160456 Cross-References: CVE-2019-12922 CVE-2019-18622 CVE-2020-5504 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 An update that fix...

Security update for trousers (moderate)

openSUSE Security Update: Security update for trousers Announcement ID: openSUSE-SU-2020:0015-1 Rating: moderate References: 1157651 Cross-References: CVE-2019-18898 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for trouser...

Security update for shibboleth-sp (moderate)

openSUSE Security Update: Security update for shibboleth-sp Announcement ID: openSUSE-SU-2020:0020-1 Rating: moderate References: 1157471 Cross-References: CVE-2019-19191 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

Security update for samba (important)

openSUSE Security Update: Security update for samba Announcement ID: openSUSE-SU-2019:2700-1 Rating: important References: 1158108 1158109 Cross-References: CVE-2019-14861 CVE-2019-14870 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description:...

Security update for go1.12 (moderate)

openSUSE Security Update: Security update for go1.12 Announcement ID: openSUSE-SU-2019:2522-1 Rating: moderate References: 1141689 1152082 1154402 Cross-References: CVE-2019-16276 CVE-2019-17596 Affected Products: openSUSE Leap 15.1 An update that solves two vulnerabilities and has one errata is...

Security update for gpg2 (important)

openSUSE Security Update: Security update for gpg2 Announcement ID: openSUSE-SU-2019:1917-1 Rating: important References: 1124847 1141093 Cross-References: CVE-2019-13050 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that solves one vulnerability and has one errata is now...

Security update for containerd, docker and go (important)

This update for containerd, docker and go fixes the following issues: containerd and docker: - Add backport for building containerd bsc1102522, bsc1113313 - Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce. bsc1102522 - Enable seccomp support fate325877 - Update to container...

Security update for php5-smarty3 (moderate)

This update for php5-smarty3 fixes the following issues: - CVE-2018-16381: Prevent traversal vulnerability due to insufficient template code sanitization that allowed attackers controlling the executed template code to bypass the trusted directory security restriction and read arbitrary files...

Security update for polkit (moderate)

This update for polkit fixes the following issues: Security issue fixed: - CVE-2018-1116: Fix uid comparison lacking in polkitbackendinteractiveauthoritycheckauthorization bsc1099031. This update was imported from the SUSE:SLE-15:Update update project...

Security update for libopenmpt (moderate)

This update for libopenmpt to version 0.3.9 fixes the following issues: These security issues were fixed: - CVE-2018-11710: Prevent write near address 0 in out-of-memory situations when reading AMS files bsc1095644 - CVE-2018-10017: Preven out-of-bounds memory read with IT/ITP/MO3 files containin...

Security update for gdk-pixbuf (moderate)

This update for gdk-pixbuf fixes the following security issue: - CVE-2017-1000422: Prevent several integer overflow in the gifgetlzw function resulting in memory corruption and potential code execution bsc1074462. This update was imported from the SUSE:SLE-12-SP2:Update update project...

Security update for nodejs6 (moderate)

This update for nodejs6 to version 6.14.3 fixes the following issues: The following security vulnerability was addressed: - Fixed a denial of service DoS vulnerability in Buffer.fill, which could hang when being called CVE-2018-7167, bsc1097375. The following other changes were made: - Use absolu...

Security update for enigmail (moderate)

This update for enigmail fixes vulnerabilities that allowed spoofing of e-mail signatures: - CVE-2018-12019: signature spoofing via specially crafted OpenPGP user IDs boo1097525 - CVE-2018-12020: signature spoofing via diagnostic output of the original file name in GnuPG verbose mode boo1096745...

Security update for hdf5 (important)

This update for hdf5 fixes the following issues: - fix security issues arbitary code execution: CVE-2016-4330: H5TARRAY Code Execution boo1011201 CVE-2016-4331: H5ZNBIT Code Execution boo1011204 CVE-2016-4332: Shareable Message Type Code Execution boo1011205 CVE-2016-4333: Array index bounds issu...

Security update for qemu (important)

This update for qemu fixes the following issues: A new feature was added: - Support EPYC vCPU type bsc1052825 fate324038 Also a mitigation for a security problem has been applied: - CVE-2017-5715: QEMU was updated to allow passing through new MSR and CPUID flags from the host VM to the CPU, to...

Security update for clamav (important)

This update for clamav fixes the following security issue: - CVE-2012-6706: Fixed an arbitrary memory write in VMSFDELTA filter in libclamunrar bsc1045490 This update was imported from the SUSE:SLE-12:Update update project...

Security update for Mozilla Firefox (important)

Mozilla Firefox was updated to Firefox 52.1.0esr. The following vulnerabilities were fixed bsc1035082: - CVE-2017-5443: Out-of-bounds write during BinHex decoding - CVE-2017-5429: Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and Firefox ESR 52.1 - CVE-2017-5464: Memory corruption wit...

Security update for compat-openssl098 (important)

This update for compat-openssl098 fixes the following issues: OpenSSL Security Advisory 22 Sep 2016 bsc999665 Severity: High OCSP Status Request extension unbounded memory growth CVE-2016-6304 bsc999666 Severity: Low Pointer arithmetic undefined behaviour CVE-2016-2177 bsc982575 Constant time fla...

Security update for Mozilla Thunderbird (important)

This update contains Mozilla Thunderbird 45.2. boo983549 It fixes security issues mostly affecting the e-mail program when used in a browser context, such as viewing a web page or HTMl formatted e-mail. The following vulnerabilities were fixed: - CVE-2016-2818, CVE-2016-2815: Memory safety bugs...

Security update for the Linux Kernel (important)

The openSUSE 13.2 kernel was updated to receive various security and bugfixes. Following security bugs were fixed: - CVE-2016-0728: A reference leak in keyring handling with joinsessionkeyring could lead to local attackers gain root privileges. bsc962075. - CVE-2015-7550: A local user could have...

Security update for the MozillaFirefox, mozilla-nss and mozilla-nspr (important)

This update to MozillaFirefox fixes several security issues and bugs. Mozilla Firefox was updated to 44.0. Mozilla NSS was updated to 3.21 Mozilla NSPR was updated to 4.11. The following vulnerabilities were fixed: CVE-2016-1930/CVE-2016-1931: Miscellaneous memory safety hazards boo963633...

Security update for java-1_7_0-openjdk (important)

OpenJDK was updated to 2.5.5 - OpenJdk 7u79 to fix security issues and bugs: The following vulnerabilities were fixed: CVE-2015-0458: Deployment: unauthenticated remote attackers could execute arbitrary code via multiple protocols. CVE-2015-0459: 2D: unauthenticated remote attackers could execute...

Security update for Linux Kernel (important)

The Linux kernel was updated to fix bugs and security issues: Following security issues were fixed: - CVE-2015-1421: Use-after-free vulnerability in the sctpassocupdate function in net/sctp/associola.c in the Linux kernel allowed remote attackers to cause a denial of service slab corruption and...

bash (critical)

bash was updated to fix command injection via environment variables. CVE-2014-6271,CVE-2014-7169 Also a hardening patch was applied that only imports functions over BASHFUNC prefixed environment variables. Also fixed: CVE-2014-7186, CVE-2014-7187: bad handling of HERE documents and for loop issue...

MozillaFirefox: Update to Mozilla Firefox 31 (important)

MozillaFirefox was updated to version 31 to fix various security issues and bugs: MFSA 2014-56/CVE-2014-1547/CVE-2014-1548 Miscellaneous memory safety hazards MFSA 2014-57/CVE-2014-1549 bmo1020205 Buffer overflow during Web Audio buffering for playback MFSA 2014-58/CVE-2014-1550 bmo1020411...