Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2020:1499-1 Rating: important References: 1175757 1176306 1176450 Cross-References: CVE-2020-15959 CVE-2020-6558 CVE-2020-6559 CVE-2020-6560 CVE-2020-6561 CVE-2020-6562 CVE-2020-6563 CVE-2020-6564 CVE-2020-6565...

Security update for lilypond (moderate)

openSUSE Security Update: Security update for lilypond Announcement ID: openSUSE-SU-2020:1453-1 Rating: moderate References: 1174949 Cross-References: CVE-2020-17353 Affected Products: openSUSE Leap 15.2 openSUSE Backports SLE-15-SP2 An update that fixes one vulnerability is now available...

Security update for librepo (important)

openSUSE Security Update: Security update for librepo Announcement ID: openSUSE-SU-2020:1428-1 Rating: important References: 1175475 Cross-References: CVE-2020-14352 Affected Products: openSUSE Backports SLE-15-SP2 An update that fixes one vulnerability is now available. Description: This update...

Security update for libX11 (moderate)

openSUSE Security Update: Security update for libX11 Announcement ID: openSUSE-SU-2020:1370-1 Rating: moderate References: 1175239 Cross-References: CVE-2020-14363 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for libX11...

Security update for xen (important)

openSUSE Security Update: Security update for xen Announcement ID: openSUSE-SU-2020:1190-1 Rating: important References: 1172356 1174543 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for xen fixes the following issues: ...

Security update for perl-YAML-LibYAML (moderate)

openSUSE Security Update: Security update for perl-YAML-LibYAML Announcement ID: openSUSE-SU-2020:1089-1 Rating: moderate References: 1173703 Affected Products: openSUSE Leap 15.1 An update that contains security fixes can now be installed. Description: This update for perl-YAML-LibYAML fixes the...

Security update for libraw (moderate)

openSUSE Security Update: Security update for libraw Announcement ID: openSUSE-SU-2020:1088-1 Rating: moderate References: 1173674 Cross-References: CVE-2020-15503 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for libraw...

Security update for xmlgraphics-batik (moderate)

openSUSE Security Update: Security update for xmlgraphics-batik Announcement ID: openSUSE-SU-2020:1043-1 Rating: moderate References: 1172961 Cross-References: CVE-2019-17566 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: Thi...

Security update for graphviz (moderate)

openSUSE Security Update: Security update for graphviz Announcement ID: openSUSE-SU-2020:0906-1 Rating: moderate References: 1132091 Cross-References: CVE-2019-11023 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for graphvi...

Security update for libntlm (moderate)

openSUSE Security Update: Security update for libntlm Announcement ID: openSUSE-SU-2020:0806-1 Rating: moderate References: 1153669 Cross-References: CVE-2019-17455 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for libntlm...

Security update for aubio (moderate)

openSUSE Security Update: Security update for aubio Announcement ID: openSUSE-SU-2019:1852-1 Rating: moderate References: 1137823 1142433 1142435 1142436 Cross-References: CVE-2018-19802 CVE-2019-1010222 CVE-2019-1010223 CVE-2019-1010224 Affected Products: openSUSE Backports SLE-15 An update that...

Security update for deluge (important)

This update for deluge fixes two security issues: - CVE-2017-9031: A remote attacker may have used a directory traversal vulnerability in the web interface bsc1039815 - CVE-2017-7178: A remote attacher could have exploited a CSRF vulnerability to trick a logged-in user to perform actions in the...

Security update for ruby2.2, ruby2.3 (important)

This update for ruby2.2, ruby2.3 fixes the following issues: Security issues fixed: - CVE-2016-2339: heap overflow vulnerability in the Fiddle::Function.new"initialize" boo1018808 - CVE-2015-7551: Unsafe tainted string usage in Fiddle and DL boo959495 Detailed ChangeLog: -...

Security update for Chromium (important)

This update to Chromium 57.0.2987.133 fixes the following issues boo1031677: - CVE-2017-5055: Use after free in printing - CVE-2017-5054: Heap buffer overflow in V8 - CVE-2017-5052: Bad cast in Blink - CVE-2017-5056: Use after free in Blink - CVE-2017-5053: Out of bounds memory access in V8 The...

Security update for mbedtls (important)

This update to mbedtls 1.3.19 fixes security issues and bugs. The following vulnerability was fixed: CVE-2017-2784: A remote user could have used a specially crafted certificate to cause mbedtls to free a buffer allocated on the stack when verifying the validity of public key with a secp224k1...

Security update for flash-player (important)

This update to Adobe Flash Player 11.2.202.644 fixes the following security issues: - type confusion vulnerabilities that could lead to code execution CVE-2016-7860, CVE-2016-7861, CVE-2016-7865 - use-after-free vulnerabilities that could lead to code execution CVE-2016-7857, CVE-2016-7858,...

Security update for systemd (important)

This update for systemd fixes the following security issue: - CVE-2016-7796: A zero-length message received over systemd's notification socket could make managerdispatchnotifyfd return an error and, as a side effect, disable the notification handler completely. As the notification socket is...

Security update for Chromium (important)

Chromium was updated to 53.0.2785.101 to fix a number of security issues and bugs. The following vulnerabilities were fixed: boo996648 - CVE-2016-5147: Universal XSS in Blink. - CVE-2016-5148: Universal XSS in Blink. - CVE-2016-5149: Script injection in extensions. - CVE-2016-5150: Use after free...

Security update for GraphicsMagick (important)

GraphicsMagick was updated to fix 37 security issues. These security issues were fixed: - CVE-2014-9810: SEGV in dpx file handler bsc983803. - CVE-2014-9811: Crash in xwd file handler bsc984032. - CVE-2014-9813: Crash on corrupted viff file bsc984035. - CVE-2014-9814: NULL pointer dereference in...

Security update for Chromium (important)

Chromium was updated to 51.0.2704.63 to fix the following vulnerabilities boo981886: - CVE-2016-1672: Cross-origin bypass in extension bindings - CVE-2016-1673: Cross-origin bypass in Blink - CVE-2016-1674: Cross-origin bypass in extensions - CVE-2016-1675: Cross-origin bypass in Blink -...

Security update update for MozillaFirefox, mozilla-nss (important)

This update to Mozilla Firefox 46.0 fixes several security issues and bugs boo977333. The following vulnerabilities were fixed: - CVE-2016-2804: Miscellaneous memory safety hazards - MFSA 2016-39 boo977373 - CVE-2016-2806: Miscellaneous memory safety hazards - MFSA 2016-39 boo977375 -...

Security update for cgit (important)

This update for cgit fixes a buffer overflow issue that had the potential to be abused for remote execution of arbitrary code CVE-2016-2315, CVE-2016-2324, bsc971328...

Security update to Chromium 48.0.2564.116 (critical)

This update contains Chromium 48.0.2564.116 ans fixes the following security flaw: - CVE-2016-1629: Same-origin bypass in Blink and Sandbox escape in Chrome. boo967376...

Security update for glibc (critical)

This update for glibc fixes the following security issues: fix stack overflow in the glibc libresolv DNS resolver function getaddrinfo, known as CVE-2015-7547. It is a client side networked/remote vulnerability...

Security update for bind (important)

This update for bind fixes the following issues: - CVE-2015-8704: Specific APL data allowed remote attacker to trigger a crash in certain configurations bsc962189...

Security update for flash-player (important)

This update for flash-player fixes the following issues: - Security update to 11.2.202.559 boo960317: APSB16-01, CVE-2015-8459, CVE-2015-8460, CVE-2015-8634, CVE-2015-8635, CVE-2015-8636, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8644,...

Security update for seamonkey (important)

seamonkey was updated to fix 25 security issues. These security issues were fixed: - CVE-2015-4520: Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allowed remote attackers to bypass CORS preflight protection mechanisms by leveraging 1 duplicate cache-key generation or 2 retrieval of...

Security update for bind (important)

BIND was updated to fix a denial of service against servers performing validation on DNSSEC-signed records CVE-2015-5722, bsc944066...

Security update for flash-player (critical)

Security update to 11.2.202.508 bsc941239: APSB15-19: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125, CVE-2015-5127, CVE-2015-5128, CVE-2015-5129, CVE-2015-5130, CVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5541, CVE-2015-5544, CVE-2015-5545,...

Security update for flash-player (critical)

Security update to 11.2.202.508 bsc941239: APSB15-19: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125, CVE-2015-5127, CVE-2015-5128, CVE-2015-5129, CVE-2015-5130, CVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5541, CVE-2015-5544, CVE-2015-5545,...

Security update for xen (important)

Xen was updated to 4.4.2 to fix multiple vulnerabilities and non-security bugs. The following vulnerabilities were fixed: CVE-2015-4103: Potential unintended writes to host MSI message data field via qemu XSA-128 boo931625 CVE-2015-4104: PCI MSI mask bits inadvertently exposed to guests XSA-129...

Security update for MozillaThunderbird (important)

MozillaThunderbird was updated to version 31.5.0 to fix four security issues. These security issues were fixed: - CVE-2015-0836: Miscellaneous memory safety hazards - CVE-2015-0831: Use-after-free in IndexedDB - CVE-2015-0827: Out-of-bounds read and write while rendering SVG content -...

Security update for flash-player (critical)

flash-player was updated to version 11.2.202.442 to fix 18 security issues. These security issues were fixed: - Use-after-free vulnerabilities that could lead to code execution CVE-2015-0313, CVE-2015-0315, CVE-2015-0320, CVE-2015-0322. - Memory corruption vulnerabilities that could lead to code...

Security update for clamav (important)

clamav was updated to version 0.98.5 to fix two security issues. These security issues were fixed: - Segmentation fault when processing certain files CVE-2013-6497. - Heap-based buffer overflow when scanning crypted PE files CVE-2014-9050. The following non-security issues were fixed: - Support f...

update flash-player to 11.2.202.40 (important)

Adobe Flash Player was updated to 11.2.202.406 bnc895856: APSB14-21, CVE-2014-0547, CVE-2014-0548, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, CVE-2014-0553, CVE-2014-0554, CVE-2014-0555, CVE-2014-0556, CVE-2014-0557, CVE-2014-0559 More information can be found on:...

ppc64-diag: fix for tmp races and information disclosure (important)

ppc64-diag was updated to fix tmp race issues CVE-2014-4038 and a file disclosure problem in snapshot tarball generation CVE-2014-4039...

gnutls: Fixed possible memory corruption (important)

gnutls was patched to fix security vulnerability that could be used to disrupt service or potentially allow remote code execution. - Memory corruption during connect CVE-2014-3466 - NULL pointer dereference in gnutlsx509dnoidname CVE-2014-3465...

chromium: update to 31.0.1650.57 (important)

Chromium was updated to 31.0.1650.57: Stable channel update: - Security Fixes: CVE-2013-6632: Multiple memory corruption issues. - Update to Chromium 31.0.1650.48 Stable Channel update: - Security fixes: CVE-2013-6621: Use after free related to speech input elements.. CVE-2013-6622: Use after fre...

chromium: update to 31.0.1650.57 (important)

Chromium was updated to 31.0.1650.57: Stable channel update: - Security Fixes: CVE-2013-6632: Multiple memory corruption issues. - Update to Chromium 31.0.1650.48 bnc850430 Stable Channel update: - Security fixes: CVE-2013-6621: Use after free related to speech input elements.. CVE-2013-6622: Use...

chromium: 31.0.1650.57 version update (important)

Security and bugfix update to Chromium 31.0.1650.57 - Update to Chromium 31.0.1650.57: - Security Fixes: CVE-2013-6632: Multiple memory corruption issues. - Update to Chromium 31.0.1650.48 Stable Channel update: - Security fixes: CVE-2013-6621: Use after free related to speech input elements...

Mozilla updates 10/2013 (important)

Update NSPR to 4.10.1 Update Thunderbird to 24.1.0 incl. enigmail 1.6 Update Firefox to 24.1.0esr Changes in MozillaFirefox: requires NSS 3.15.2 or above MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592 Miscellaneous memory safety hazards MFSA 2013-94/CVE-2013-5593 bmo868327 Spoofing...

MozillaThunderbird: update to 17.0.6 (important)

MozillaThunderbird was updated to security update Thunderbird 17.0.6 bnc819204: MFSA 2013-41/CVE-2013-0801/CVE-2013-1669 Miscellaneous memory safety hazards MFSA 2013-42/CVE-2013-1670 bmo853709 Privileged access for content level constructor MFSA 2013-46/CVE-2013-1674 bmo860971 Use-after-free wit...

NRPE metacharacter filtering omission (important)

NRPE the Nagios Remote Plug-In Executor allows the passing of $ to plugins/scripts which, if run under bash, will execute that shell command under a subprocess and pass the output as a parameter to the called script. Using this, it is possible to get called scripts, such as checkhttp, to execute...

bind: Fixed a remote denial of service (important)

A remote denial of service in the bind nameserver via zero length rdata fields was fixed...

apache2: fixed various security bugs (important)

This update of apache2 fixes regressions and several security problems: bnc728876, fix graceful reload bnc741243, CVE-2012-0031: Fixed a scoreboard corruption shared mem segment by child causes crash of privileged parent invalid free during shutdown. bnc743743, CVE-2012-0053: Fixed an issue in...

tomcat6: Fix multiple weaknesses in HTTP DIGESTS (important)

This update fixes a regression in parameter passing in urldecoding of parameters that contain spaces. In addition, multiple weaknesses in HTTP DIGESTS are fixed CVE-2011-1184. CVE-2011-5062: The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0....

krb5-appl: Fixed remote buffer overflow in ktelnetd (important)

This update of krb5 applications fixes two security issues. CVE-2011-4862: A remote code execution in the kerberized telnet daemon was fixed. This only affects the ktelnetd from the krb5-appl RPM, not the regular telnetd supplied by SUSE. CVE-2011-1526 / MITKRB5-SA-2011-005: Fixed krb5 ftpd...

Security update for python-M2Crypto (important)

openSUSE Security Update: Security update for python-M2Crypto Announcement ID: openSUSE-SU-2022:2562-1 Rating: important References: 1178829 Cross-References: CVE-2020-25657 CVSS scores: CVE-2020-25657 NVD : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2020-25657 SUSE: 7.5...

Security update for python-Django (important)

openSUSE Security Update: Security update for python-Django Announcement ID: openSUSE-SU-2022:10103-1 Rating: important References: 1201923 Cross-References: CVE-2022-36359 CVSS scores: CVE-2022-36359 NVD : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-36359 SUSE: 7.3...

Security update for dbus-broker (moderate)

openSUSE Security Update: Security update for dbus-broker Announcement ID: openSUSE-SU-2022:10030-1 Rating: moderate References: 1200332 1200333 Cross-References: CVE-2022-31212 CVE-2022-31213 CVSS scores: CVE-2022-31212 SUSE: 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L CVE-2022-31213 SUSE:...