Security update for yast2-smt (important)

This update fixes the following issue in yast2-smt: - Remove cron job rescheduling bsc1097560 This update is a requirement for the security update for SMT. Because of that it is tagged as security to ensure that all users, even those that only install security updates, install it. This update was...

Security update for ant (moderate)

This update for ant fixes the following issues: Security issue fixed: - CVE-2018-10886: Fixed a path traversal vulnerability in malformed zip file paths, which allowed arbitrary file writes and could potentially lead to code execution bsc1100053 This update was imported from the SUSE:SLE-15:Updat...

Security update for bind (important)

This update for bind fixes the following issues: CVE-2017-3137 bsc1033467: Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could have been exploited to cause a denial of service of a bind server performing recursion...

Security update for xen (important)

xen was updated to version 4.7.1 to fix 17 security issues. These security issues were fixed: - CVE-2016-9637: ioport array overflow allowing a malicious guest administrator can escalate their privilege to that of the host bsc1011652. - CVE-2016-9386: x86 null segments were not always treated as...

Security update for curl (important)

This update for curl fixes the following security issues: - CVE-2016-8624: invalid URL parsing with '' bsc1005646 - CVE-2016-8623: Use-after-free via shared cookies bsc1005645 - CVE-2016-8622: URL unescape heap overflow via integer truncation bsc1005643 - CVE-2016-8621: curlgetdate read out of...

Security update for bind (critical)

The nameserver bind was updated to fix a remote denial of service vulnerability, where a crafted packet could cause the nameserver to abort. CVE-2016-2776, bsc1000362 This update was imported from the SUSE:SLE-12-SP1:Update update project...

Security update for libopenssl0_9_8 (important)

This update for libopenssl098 fixes the following issues: - CVE-2016-2105: EVPEncodeUpdate overflow bsc977614 - CVE-2016-2106: EVPEncryptUpdate overflow bsc977615 - CVE-2016-2108: Memory corruption in the ASN.1 encoder bsc977617 - CVE-2016-2109: ASN.1 BIO excessive memory allocation bsc976942 -...

Security update for java-1_7_0-openjdk (important)

This update for java-170-openjdk to version 2.6.6 fixes five security issues. These security issues were fixed: - CVE-2016-0686: Ensure thread consistency bsc976340. - CVE-2016-0687: Better byte behavior bsc976340. - CVE-2016-0695: Make DSA more fair bsc976340. - CVE-2016-3425: Better buffering o...

Security update for ldb, samba, talloc, tdb, tevent (important)

This update for ldb, samba, talloc, tdb, tevent fixes the following security issues and bugs: The Samba LDB was updated to version 1.1.24: - Fix ldap \00 search expression attack dos; CVE-2015-3223; bso11325 - Fix remote read memory exploit in ldb; CVE-2015-5330; bso11599 - Move ldbunpackdata int...

Security update to MySQL 5.6.27 (important)

MySQL was updated to 5.6.27 to fix security issues and bugs. The following vulnerabilities were fixed as part of the upstream release boo951391: CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789, CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800, CVE-2015-4802, CVE-2015-4815,...

Security update for openssl (important)

openssl was updated to 1.0.1k to fix various security issues and bugs. More information can be found in the openssl advisory: http://openssl.org/news/secadv20150108.txt Following issues were fixed: CVE-2014-3570 bsc912296: Bignum squaring BNsqr may have produced incorrect results on some platform...

lighttpd to 1.4.35 (important)

lighttpd was updated to version 1.4.35, fixing bugs and security issues: CVE-2014-2323: SQL injection vulnerability in modmysqlvhost.c in lighttpd allowed remote attackers to execute arbitrary SQL commands via the host name, related to requestcheckhostname. CVE-2014-2323: Multiple directory...

update to SeaMonkey 2.19 (important)

Seamonkey was updated to version 2.19 MFSA 2013-49/CVE-2013-1682/CVE-2013-1683 Miscellaneous memory safety hazards MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686 Memory corruption found using Address Sanitizer MFSA 2013-51/CVE-2013-1687 bmo863933, bmo866823 Privileged content access and...

security update to Firefox 17.0 and other Mozilla based packages (important)

update to Firefox/Thunderbird 17.0 and Seamonkey 2.14 bnc790140 MFSA 2012-91/CVE-2012-5842/CVE-2012-5843 Miscellaneous memory safety hazards MFSA 2012-92/CVE-2012-4202 bmo758200 Buffer overflow while rendering GIF images MFSA 2012-93/CVE-2012-4201 bmo747607 evalInSanbox location context incorrect...

kernel: security and bugfix update (important)

This kernel update to 3.4.11 fixes various bugs and security issues. The changes up to 3.4.11 contain both security and bugfixes and are not explicitly listed here. Following security issues were fixed: CVE-2012-3520: Force passing credentials, otherwise local services could be fooled to assume...

rubygem-actionpack/activerecord-2_3 (important)

3 Security issues were fixed in rails 2.3 core components. 2 NULL query issues where fixed in the actionpack gem. 1 SQL injection was fixed in the activerecord gem...

java-1_6_0-openjdk: critical (critical)

This version upgrade of java-160-openjdk fixes multiple security flaws: - S7079902, CVE-2012-1711: Refine CORBA data models - S7143606, CVE-2012-1717: File.createTempFile should be improved for temporary files created by the platform. - S7143614, CVE-2012-1716: SynthLookAndFeel stability...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10120-1 Rating: important References: 1202403 1202964 1203102 Cross-References: CVE-2022-3038 CVE-2022-3039 CVE-2022-3040 CVE-2022-3041 CVE-2022-3042 CVE-2022-3043 CVE-2022-3044 CVE-2022-3045 CVE-2022-3046...

Security update for python-treq (moderate)

openSUSE Security Update: Security update for python-treq Announcement ID: openSUSE-SU-2022:10098-1 Rating: moderate References: 1195432 Cross-References: CVE-2022-23607 CVSS scores: CVE-2022-23607 NVD : 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N Affected Products: openSUSE Backports...

Security update for openvpn (important)

openSUSE Security Update: Security update for openvpn Announcement ID: openSUSE-SU-2022:1029-1 Rating: important References: 1197341 Cross-References: CVE-2022-0547 CVSS scores: CVE-2022-0547 SUSE: 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Leap 15.3 openSUSE Lea...

Security update for java-1_8_0-openjdk (important)

openSUSE Security Update: Security update for java-180-openjdk Announcement ID: openSUSE-SU-2022:0873-1 Rating: important References: 1193314 1193444 1193491 1194926 1194928 1194929 1194931 1194932 1194933 1194934 1194935 1194937 1194939 1194940 1194941 1195163 Cross-References: CVE-2022-21248...

Security update for minidlna (moderate)

openSUSE Security Update: Security update for minidlna Announcement ID: openSUSE-SU-2022:0079-1 Rating: moderate References: 1181400 1196814 Cross-References: CVE-2022-26505 CVSS scores: CVE-2022-26505 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Backports...

Security update for expat (important)

openSUSE Security Update: Security update for expat Announcement ID: openSUSE-SU-2022:0713-1 Rating: important References: 1196025 1196026 1196168 1196169 1196171 Cross-References: CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315 CVSS scores: CVE-2022-25235 NVD : 9.8...

Security update for zsh (important)

openSUSE Security Update: Security update for zsh Announcement ID: openSUSE-SU-2022:0735-1 Rating: important References: 1163882 1196435 Cross-References: CVE-2019-20044 CVE-2021-45444 CVSS scores: CVE-2019-20044 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2019-20044 SUSE: 7...

Security update for samba (important)

openSUSE Security Update: Security update for samba Announcement ID: openSUSE-SU-2021:3650-1 Rating: important References: 1014440 1192214 1192284 Cross-References: CVE-2016-2124 CVE-2020-25717 CVE-2021-23192 CVSS scores: CVE-2020-25717 SUSE: 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:1460-1 Rating: important References: 1065729 1085030 1100416 1129735 1152489 1154353 1156395 1157177 1167773 1172073 1173604 1176940 1184673 1185762 1186109 1187167 1188563 1188876 1188983 1188985...

Security update for xen (moderate)

openSUSE Security Update: Security update for xen Announcement ID: openSUSE-SU-2021:3140-1 Rating: moderate References: 1027519 1189632 Cross-References: CVE-2021-28701 CVSS scores: CVE-2021-28701 SUSE: 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 An upda...

Security update for libcroco (moderate)

openSUSE Security Update: Security update for libcroco Announcement ID: openSUSE-SU-2021:3123-1 Rating: moderate References: 1171685 Cross-References: CVE-2020-12825 CVSS scores: CVE-2020-12825 NVD : 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H CVE-2020-12825 SUSE: 2.8...

Security update for xerces-c (important)

openSUSE Security Update: Security update for xerces-c Announcement ID: openSUSE-SU-2021:2958-1 Rating: important References: 1159552 Cross-References: CVE-2018-1311 CVSS scores: CVE-2018-1311 NVD : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2018-1311 SUSE: 8.1...

Security update for c-ares (important)

openSUSE Security Update: Security update for c-ares Announcement ID: openSUSE-SU-2021:1168-1 Rating: important References: 1188881 Cross-References: CVE-2021-3672 CVSS scores: CVE-2021-3672 SUSE: 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N Affected Products: openSUSE Leap 15.2 An update tha...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:2202-1 Rating: important References: 1152489 1154353 1174978 1176447 1176771 1178134 1178612 1179610 1183712 1184259 1184436 1184631 1185195 1185570 1185589 1185675 1185701 1186155 1186286 1186463...

Security update for libxml2 (important)

openSUSE Security Update: Security update for libxml2 Announcement ID: openSUSE-SU-2021:0764-1 Rating: important References: 1185408 1185409 1185410 1185698 Cross-References: CVE-2021-3516 CVE-2021-3517 CVE-2021-3518 CVE-2021-3537 CVSS scores: CVE-2021-3516 SUSE: 5.9...

Security update for java-1_8_0-openjdk (moderate)

openSUSE Security Update: Security update for java-180-openjdk Announcement ID: openSUSE-SU-2021:0374-1 Rating: moderate References: 1181239 Cross-References: CVE-2020-14803 CVSS scores: CVE-2020-14803 NVD : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2020-14803 SUSE: 5.3...

Security update for python3 (important)

openSUSE Security Update: Security update for python3 Announcement ID: openSUSE-SU-2020:2332-1 Rating: important References: 1155094 1174091 1174571 1174701 1177211 1178009 1179193 1179630 Cross-References: CVE-2019-16935 CVE-2019-18348 CVE-2019-20907 CVE-2019-5010 CVE-2020-14422 CVE-2020-26116...

Security update for mariadb (moderate)

openSUSE Security Update: Security update for mariadb Announcement ID: openSUSE-SU-2020:2090-1 Rating: moderate References: 1175596 1177472 1178428 Cross-References: CVE-2020-14765 CVE-2020-14776 CVE-2020-14789 CVE-2020-14812 CVE-2020-15180 Affected Products: openSUSE Leap 15.2 An update that fix...

Security update for wpa_supplicant (moderate)

openSUSE Security Update: Security update for wpasupplicant Announcement ID: openSUSE-SU-2020:2059-1 Rating: moderate References: 1131644 1131868 1131870 1131871 1131872 1131874 1133640 1144443 1150934 1156920 1166933 1167331 930077 930078 930079 Cross-References: CVE-2015-4141 CVE-2015-4142...

Security update for gnutls (moderate)

openSUSE Security Update: Security update for gnutls Announcement ID: openSUSE-SU-2020:1724-1 Rating: moderate References: 1176086 1176181 1176671 Cross-References: CVE-2020-24659 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has two fixes is now available...

Security update for grub2 (important)

openSUSE Security Update: Security update for grub2 Announcement ID: openSUSE-SU-2020:1280-1 Rating: important References: 1172745 1174421 Cross-References: CVE-2020-15705 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has one errata is now available. Descriptio...

Security update for inn (moderate)

openSUSE Security Update: Security update for inn Announcement ID: openSUSE-SU-2020:1272-1 Rating: moderate References: 1172573 Cross-References: CVE-2020-8026 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for inn fixes the...

Security update for cni-plugins (moderate)

openSUSE Security Update: Security update for cni-plugins Announcement ID: openSUSE-SU-2020:1049-1 Rating: moderate References: 1172410 Cross-References: CVE-2020-10749 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

Security update for ntp (moderate)

openSUSE Security Update: Security update for ntp Announcement ID: openSUSE-SU-2020:0934-1 Rating: moderate References: 1125401 1169740 1171355 1172651 1173334 992038 Cross-References: CVE-2018-8956 CVE-2020-11868 CVE-2020-13817 CVE-2020-15025 Affected Products: openSUSE Leap 15.1 An update that...

Security update for chocolate-doom (important)

openSUSE Security Update: Security update for chocolate-doom Announcement ID: openSUSE-SU-2020:0928-1 Rating: important References: 1173595 Cross-References: CVE-2020-14983 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork (moderate)

openSUSE Security Update: Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork Announcement ID: openSUSE-SU-2020:0846-1 Rating: moderate References: 1172377 Cross-References: CVE-2020-13401 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerabilit...

Security update for gnutls (important)

openSUSE Security Update: Security update for gnutls Announcement ID: openSUSE-SU-2020:0790-1 Rating: important References: 1172461 1172506 Cross-References: CVE-2020-13777 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has one errata is now available...

Security update for rubygem-rack (moderate)

openSUSE Security Update: Security update for rubygem-rack Announcement ID: openSUSE-SU-2020:0214-1 Rating: moderate References: 1114828 1116600 1159548 Cross-References: CVE-2018-16471 CVE-2019-16782 Affected Products: openSUSE Leap 15.1 An update that solves two vulnerabilities and has one erra...

Security update for ucl (moderate)

openSUSE Security Update: Security update for ucl Announcement ID: openSUSE-SU-2020:0162-1 Rating: moderate References: 1094138 Cross-References: CVE-2018-11243 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for ucl fixes th...

Security update for dia (moderate)

openSUSE Security Update: Security update for dia Announcement ID: openSUSE-SU-2020:0021-1 Rating: moderate References: 1158194 Cross-References: CVE-2019-19451 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for dia fixes th...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2019:2537-1 Rating: important References: 1157269 Cross-References: CVE-2019-13723 CVE-2019-13724 Affected Products: openSUSE Backports SLE-15 An update that fixes two vulnerabilities is now available. Description...

Security update for libtomcrypt (moderate)

openSUSE Security Update: Security update for libtomcrypt Announcement ID: openSUSE-SU-2019:2514-1 Rating: moderate References: 1153433 Cross-References: CVE-2019-17362 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

Security update for nodejs8 (important)

openSUSE Security Update: Security update for nodejs8 Announcement ID: openSUSE-SU-2019:1907-1 Rating: important References: 1134209 1140290 Cross-References: CVE-2019-13173 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that solves one vulnerability and has one errata is now...