Security update for xawtv (moderate)

openSUSE Security Update: Security update for xawtv Announcement ID: openSUSE-SU-2020:0787-1 Rating: moderate References: 1171655 Cross-References: CVE-2020-13696 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: This update for...

Security update for axel (moderate)

openSUSE Security Update: Security update for axel Announcement ID: openSUSE-SU-2020:0785-1 Rating: moderate References: 1172159 Cross-References: CVE-2020-13614 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: This update for...

Security update for texlive-filesystem (moderate)

openSUSE Security Update: Security update for texlive-filesystem Announcement ID: openSUSE-SU-2020:0368-1 Rating: moderate References: 1150556 1155381 1158910 1159740 Affected Products: openSUSE Leap 15.1 An update that contains security fixes can now be installed. Description: This update for...

Security update for GraphicsMagick (important)

This update for GraphicsMagick fixes the following issues: Security issue fixed: - Disable PS, PS2, PS3 and PDF coders by default, remove gs calls from delegates.mgk boo1105592...

Security update for libtirpc (important)

This update for libtirpc fixes the following issues: Security issue fixed: - bsc968175: Fix remote crash of RPC services. Bug fixes: - bsc1072183: Send RPC getport call as specified via parameter. This update was imported from the SUSE:SLE-12-SP2:Update update project...

Security update for phpMyAdmin (important)

This update for phpMyAdmin to version 4.7.7 fixes a security issue and bugs. The following vulnerability was fixed: - By deceiving a user to click on a crafted URL, it was possible to perform harmful database operations bsc1074066, PMASA-2017-09 This update also contains all upstream improvements...

Security update for chromium (important)

This update to Chromium 58.0.3029.81 fixes the following security issues bsc1035103: - CVE-2017-5057: Type confusion in PDFium - CVE-2017-5058: Heap use after free in Print Preview - CVE-2017-5059: Type confusion in Blink - CVE-2017-5060: URL spoofing in Omnibox - CVE-2017-5061: URL spoofing in...

Security update for the Linux Kernel (important)

The openSUSE 42.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2016-9756: KVM: x86: drop error recovery in emjmpfar and emretfar bsc1013038. The following non-security bugs were fixed: - scsi: megaraidsas: fix macro MEGASASISLOGICAL to...

Security update for roundcubemail (important)

This update for roundcubemail fixes the following issues: - A maliciously crafted email could cause untrusted code to be executed cross site scripting using $lt;area href=javascript:... boo982003, CVE-2016-5103 - Avoid HTML styles that could cause potential click jacking boo1001856 - A maliciousl...

Security update for Chromium (important)

This update to Chromium 55.0.2883.75 fixes the following vulnerabilities: - CVE-2016-9651: Private property access in V8 - CVE-2016-5208: Universal XSS in Blink - CVE-2016-5207: Universal XSS in Blink - CVE-2016-5206: Same-origin bypass in PDFium - CVE-2016-5205: Universal XSS in Blink -...

Security update for mariadb (important)

mariadb was updated to version 10.0.25 to fix 25 security issues. These security issues were fixed: - CVE-2016-0505: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to Options bsc980904. - CVE-2016-0546: Unspecified vulnerability...

Security update for ntp (important)

ntp was updated to version 4.2.8p8 to fix five security issues. These security issues were fixed: - CVE-2016-4953: Bad authentication demobilizes ephemeral associations bsc982065. - CVE-2016-4954: Processing spoofed server packets bsc982066. - CVE-2016-4955: Autokey association reset bsc982067. -...

Security update for java-1_8_0-openjdk (important)

This update for java-180-openjdk fixes the following security issues - April 2016 Oracle CPU bsc976340: - CVE-2016-0686: Unspecified vulnerability allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to Serialization. - CVE-2016-0687: Unspecified...

Security update for java-1_7_0-openjdk (important)

The OpenJDK Java java-170-openjdk was updated to 2.6.5 to fix the following issues: Update to 2.6.5 - OpenJDK 7u99 bsc972468 Security fixes - S8152335, CVE-2016-0636: Improve MethodHandle consistency Import of OpenJDK 7 u99 build 0 - S6425769, PR2858: Allow specifying an address to bind JMX remot...

Security update for openssl (important)

This update for openssl fixes various security issues: Security issues fixed: - CVE-2016-0800 aka the "DROWN" attack bsc968046: OpenSSL was vulnerable to a cross-protocol attack that could lead to decryption of TLS sessions by using a server supporting SSLv2 and EXPORT cipher suites as a...

Security update for Mozilla Thunderbird (important)

Mozilla Thunderbird was updated to 38.5.0 to fix multiple security issues. The following vulnerabilities were fixed: boo959277 CVE-2015-7201: Miscellaneous memory safety hazards CVE-2015-7210: Use-after-free in WebRTC when datachannel is used after being destroyed CVE-2015-7212: Integer overflow...

Security update for MozillaFirefox (important)

update to Firefox 40.0 bnc940806 Added protection against unwanted software downloads Suggested Tiles show sites of interest, based on categories from your recent browsing history Hello allows adding a link to conversations to provide context on what the conversation will be about New style for...

Security update for libpng16 (important)

libpng was updated to fix some security issues: CVE-2014-9495 bnc912076: Heap-buffer overflow pngcombinerow with very wide interlaced images CVE-2015-0973 bnc912929: overflow in pngreadIDATdata libpng is now also build with -DPNGSAFELIMITSSUPPORTED...

Mozilla Firefox and others: Update to 20.0/17.0.5 releases (important)

The Mozilla suite received security and bugfix updates: Firefox was updated to version 20.0. Thunderbird was updated to version 17.0.5. Seamonkey was updated to version 2.17 mozilla-nss was updated to version 3.14.3. mozilla-nspr was updated to version 4.9.6. mozilla-nspr was updated to version...

xen to fix various denial of service issues (important)

XEN was updated to fix various denial of service issues. - bnc789945 - CVE-2012-5510: xen: Grant table version switch list corruption vulnerability XSA-26 - bnc789944 - CVE-2012-5511: xen: Several HVM operations do not validate the range of their inputs XSA-27 - bnc789940 - CVE-2012-5512: xen:...

libxml2: fixed buffer overflow during decoding entities (important)

A Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 allowed remote attackers to cause a denial of service or possibly execute arbitrary code via crafted entities in an XML document...

acroread (important)

Acrobat Reader was updated to version 9.4.7 to fix security issues CVE-2011-2462, CVE-2011-4369...

Security update for opera (important)

openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2022:10118-1 Rating: important References: Cross-References: CVE-2022-3075 Affected Products: openSUSE Leap 15.4:NonFree An update that fixes one vulnerability is now available. Description: This update for opera fix...

Security update for freeciv (important)

openSUSE Security Update: Security update for freeciv Announcement ID: openSUSE-SU-2022:10096-1 Rating: important References: 1202548 Cross-References: CVE-2022-6083 Affected Products: openSUSE Backports SLE-15-SP3 An update that fixes one vulnerability is now available. Description: This update...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10073-1 Rating: important References: 1201679 Cross-References: CVE-2022-2163 CVE-2022-2477 CVE-2022-2478 CVE-2022-2479 CVE-2022-2480 CVE-2022-2481 Affected Products: openSUSE Backports SLE-15-SP3 openSUSE...

Security update for zlib (important)

openSUSE Security Update: Security update for zlib Announcement ID: openSUSE-SU-2022:1061-1 Rating: important References: 1197459 Cross-References: CVE-2018-25032 CVSS scores: CVE-2018-25032 SUSE: 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap...

Security update for tiff (important)

openSUSE Security Update: Security update for tiff Announcement ID: openSUSE-SU-2022:0480-1 Rating: important References: 1071031 1154365 1182808 1182809 1182811 1182812 1190312 1194539 Cross-References: CVE-2017-17095 CVE-2019-17546 CVE-2020-19131 CVE-2020-35521 CVE-2020-35522 CVE-2020-35523...

Security update for xen (important)

openSUSE Security Update: Security update for xen Announcement ID: openSUSE-SU-2022:0333-1 Rating: important References: 1194576 1194581 1194588 Cross-References: CVE-2022-23033 CVE-2022-23034 CVE-2022-23035 CVSS scores: CVE-2022-23034 SUSE: 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L...

Security update for rust1.55 (moderate)

openSUSE Security Update: Security update for rust1.55 Announcement ID: openSUSE-SU-2022:0171-1 Rating: moderate References: 1194767 Cross-References: CVE-2022-21658 CVSS scores: CVE-2022-21658 SUSE: 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: openSUSE Leap 15.3 An update...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:0014-1 Rating: important References: 1194055 1194182 1194331 Cross-References: CVE-2022-0096 CVE-2022-0097 CVE-2022-0098 CVE-2022-0099 CVE-2022-0100 CVE-2022-0101 CVE-2022-0102 CVE-2022-0103 CVE-2022-0104...

Security update for nextcloud (important)

openSUSE Security Update: Security update for nextcloud Announcement ID: openSUSE-SU-2021:1602-1 Rating: important References: 1192028 1192030 1192031 Cross-References: CVE-2021-41177 CVE-2021-41178 CVE-2021-41179 CVSS scores: CVE-2021-41177 NVD : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H...

Security update for tomcat (moderate)

openSUSE Security Update: Security update for tomcat Announcement ID: openSUSE-SU-2021:1490-1 Rating: moderate References: 1188278 1188279 1190558 Cross-References: CVE-2021-30640 CVE-2021-33037 CVE-2021-41079 CVSS scores: CVE-2021-30640 NVD : 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N...

Security update for opera (important)

openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2021:1433-1 Rating: important References: Cross-References: CVE-2021-37974 CVE-2021-37975 CVE-2021-37976 CVE-2021-37977 CVE-2021-37978 CVE-2021-37979 CVE-2021-37980 Affected Products: openSUSE Leap 15.2:NonFree An...

Security update for python-Pygments (important)

openSUSE Security Update: Security update for python-Pygments Announcement ID: openSUSE-SU-2021:1402-1 Rating: important References: 1183169 Cross-References: CVE-2021-20270 CVSS scores: CVE-2021-20270 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-20270 SUSE: 7.5...

Security update for fail2ban (important)

openSUSE Security Update: Security update for fail2ban Announcement ID: openSUSE-SU-2021:1274-1 Rating: important References: 1145181 1146856 1180738 1188610 Cross-References: CVE-2021-32749 CVSS scores: CVE-2021-32749 NVD : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products:...

Security update for xerces-c (important)

openSUSE Security Update: Security update for xerces-c Announcement ID: openSUSE-SU-2021:1231-1 Rating: important References: 1159552 Cross-References: CVE-2018-1311 CVSS scores: CVE-2018-1311 NVD : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2018-1311 SUSE: 8.1...

Security update for sssd (important)

openSUSE Security Update: Security update for sssd Announcement ID: openSUSE-SU-2021:2941-1 Rating: important References: 1183735 1187120 1189492 Cross-References: CVE-2021-3621 CVSS scores: CVE-2021-3621 SUSE: 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3...

Security update for go1.15 (moderate)

openSUSE Security Update: Security update for go1.15 Announcement ID: openSUSE-SU-2021:2787-1 Rating: moderate References: 1175132 1188906 1189162 Cross-References: CVE-2021-36221 Affected Products: openSUSE Leap 15.3 An update that solves one vulnerability and has two fixes is now available...

Security update for 389-ds (moderate)

openSUSE Security Update: Security update for 389-ds Announcement ID: openSUSE-SU-2021:2801-1 Rating: moderate References: 1188151 1188455 Cross-References: CVE-2021-3652 CVSS scores: CVE-2021-3652 SUSE: 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N Affected Products: openSUSE Leap 15.3 An...

Security update for jdom2 (important)

openSUSE Security Update: Security update for jdom2 Announcement ID: openSUSE-SU-2021:2293-1 Rating: important References: 1187446 Cross-References: CVE-2021-33813 CVSS scores: CVE-2021-33813 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-33813 SUSE: 7.5...

Security update for libqt5-qtwebengine (important)

openSUSE Security Update: Security update for libqt5-qtwebengine Announcement ID: openSUSE-SU-2021:1016-1 Rating: important References: 1130395 1158516 1163744 1163766 1182233 Cross-References: CVE-2020-16044 CVE-2021-21118 CVE-2021-21119 CVE-2021-21120 CVE-2021-21121 CVE-2021-21122 CVE-2021-2112...

Security update for xstream (important)

openSUSE Security Update: Security update for xstream Announcement ID: openSUSE-SU-2021:0911-1 Rating: important References: 1186651 Cross-References: CVE-2021-29505 CVSS scores: CVE-2021-29505 NVD : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-29505 SUSE: 8.1...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:0579-1 Rating: important References: 1047233 1065729 1113295 1152489 1154353 1155518 1156395 1167574 1175995 1178181 1181507 1183405 1184074 1184120 1184194 1184211 1184388 1184391 1184393 1184485...

Security update for kernel-firmware (important)

openSUSE Security Update: Security update for kernel-firmware Announcement ID: openSUSE-SU-2021:0407-1 Rating: important References: 1181720 1181735 1181736 1181738 Cross-References: CVE-2020-12362 CVE-2020-12363 CVE-2020-12364 CVE-2020-12373 CVSS scores: CVE-2020-12362 NVD : 7.8...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:0392-1 Rating: important References: 1182233 1182358 1182775 Cross-References: CVE-2020-27844 CVE-2021-21149 CVE-2021-21150 CVE-2021-21151 CVE-2021-21152 CVE-2021-21153 CVE-2021-21154 CVE-2021-21155...

Security update for nodejs12 (important)

openSUSE Security Update: Security update for nodejs12 Announcement ID: openSUSE-SU-2021:0357-1 Rating: important References: 1182333 1182619 1182620 Cross-References: CVE-2021-22883 CVE-2021-22884 CVE-2021-23840 CVSS scores: CVE-2021-22883 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H...

Security update for nodejs10 (moderate)

openSUSE Security Update: Security update for nodejs10 Announcement ID: openSUSE-SU-2021:0082-1 Rating: moderate References: 1179491 1180553 1180554 Cross-References: CVE-2020-1971 CVE-2020-8265 CVE-2020-8287 Affected Products: openSUSE Leap 15.1 An update that fixes three vulnerabilities is now...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:0060-1 Rating: important References: 1040855 1044120 1044767 1055117 1065729 1094840 1109695 1115431 1138374 1139944 1149032 1152457 1152472 1152489 1155518 1156315 1156395 1158775 1161099 1163727...

Security update for webkit2gtk3 (important)

openSUSE Security Update: Security update for webkit2gtk3 Announcement ID: openSUSE-SU-2020:2310-1 Rating: important References: 1171531 1177087 1179122 1179451 Cross-References: CVE-2020-13543 CVE-2020-13584 CVE-2020-9948 CVE-2020-9951 CVE-2020-9983 Affected Products: openSUSE Leap 15.2 An updat...

Security update for curl (moderate)

openSUSE Security Update: Security update for curl Announcement ID: openSUSE-SU-2020:2249-1 Rating: moderate References: 1179398 1179399 1179593 Cross-References: CVE-2020-8284 CVE-2020-8285 CVE-2020-8286 Affected Products: openSUSE Leap 15.1 An update that fixes three vulnerabilities is now...