Security update for libpng12 (important)

The libpng12 package was updated to fix the following security issues: - CVE-2015-8126: Fixed a buffer overflow vulnerabilities in pnggetPLTE/pngsetPLTE functions bsc954980. - CVE-2015-7981: Fixed an out-of-bound read bsc952051...

Security update for bouncycastle (important)

bouncycastle was updated to version 1.53 to fix one security issue. This security issue was fixed: - CVE-2015-7940: Invalid curve attack bsc951727...

Security update for bind (important)

BIND was updated to fix a denial of service against servers performing validation on DNSSEC-signed records CVE-2015-5722, bsc944066...

Security update for Adobe Flash Player (important)

Adobe Flash Player was updated to 11.2.202.457 to fix several security issues that could lead to remote code execution. An exploit for CVE-2015-3043 was reported to exist in the wild. The following vulnerabilities were fixed: Memory corruption vulnerabilities that could lead to code execution...

update flash-player to 11.2.202.40 (important)

Adobe Flash Player was updated to 11.2.202.406 bnc895856: APSB14-21, CVE-2014-0547, CVE-2014-0548, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, CVE-2014-0553, CVE-2014-0554, CVE-2014-0555, CVE-2014-0556, CVE-2014-0557, CVE-2014-0559 More information can be found on:...

MozillaThunderbird: Update to 24.7.0 (important)

MozillaThunderbird was updated to Thunderbird 24.7.0 bnc887746 MFSA 2014-56/CVE-2014-1547/CVE-2014-1548 Miscellaneous memory safety hazards MFSA 2014-61/CVE-2014-1555 bmo1023121 Use-after-free with FireOnStateChange event MFSA 2014-62/CVE-2014-1556 bmo1028891 Exploitable WebGL crash with Cesium...

update flash-player to 11.2.202.336 (critical)

Flash Player received an out of band critical security update to fix an integer underflow vulnerability that could be exploited to execute arbitrary code on the affected system CVE-2014-0497. More information can be found on: http://helpx.adobe.com/security/products/flash-player/apsb14 -04.html...

flash-player to 11.2.202.336 (critical)

Flash Player received an out of band critical security update to fix an integer underflow vulnerability that could be exploited to execute arbitrary code on the affected system CVE-2014-0497. More information can be found on: http://helpx.adobe.com/security/products/flash-player/apsb14 -04.html...

MozillaThunderbird: update to 17.0.6 (important)

MozillaThunderbird was updated to security update Thunderbird 17.0.6 bnc819204: MFSA 2013-41/CVE-2013-0801/CVE-2013-1669 Miscellaneous memory safety hazards MFSA 2013-42/CVE-2013-1670 bmo853709 Privileged access for content level constructor MFSA 2013-46/CVE-2013-1674 bmo860971 Use-after-free wit...

NRPE metacharacter filtering omission (important)

NRPE the Nagios Remote Plug-In Executor allows the passing of $ to plugins/scripts which, if run under bash, will execute that shell command under a subprocess and pass the output as a parameter to the called script. Using this, it is possible to get called scripts, such as checkhttp, to execute...

qemu: Fix buffer overflow in console VT100 emulation (important)

qemu was fixed to add bounds checking for VT100 escape code parsing and cursor placement. Also qemu was updated on 12.2 and 11.4 to the latest stable release v1.1.1 and v0.14.1 respectively...

update for samba (critical)

Samba upgrade to version 3.6.3 fixes the following security issue: - PIDL based autogenerated code allows overwriting beyond of allocated array. Remove attackers could exploit that to execute arbitrary code as root CVE-2012-1182, bso8815, bnc752797 Please see...

krb5-appl: Fixed remote buffer overflow in ktelnetd (important)

This update of krb5 applications fixes two security issues. CVE-2011-4862: A remote code execution in the kerberized telnet daemon was fixed. This only affects the ktelnetd from the krb5-appl RPM, not the regular telnetd supplied by SUSE. CVE-2011-1526 / MITKRB5-SA-2011-005: Fixed krb5 ftpd...

rpm (CVE-2011-3378) (important)

Specially crafted rpm packages can cause memory corruption in rpm when verifying signatures CVE-2011-3378...

python311-python-multipart-0.0.32-1.1 on GA media (moderate)

python311-python-multipart-0.0.32-1.1 on GA media Announcement ID: openSUSE-SU-2026:11099-1 Rating: moderate Cross-References: CVE-2026-53537 CVE-2026-53538 CVE-2026-53540 CVSS scores: CVE-2026-53537 SUSE : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2026-53537 SUSE : 6.3...

Security update for php7 (important)

openSUSE Security Update: Security update for php7 Announcement ID: openSUSE-SU-2022:0847-1 Rating: important References: 1196252 Cross-References: CVE-2021-21708 CVSS scores: CVE-2021-21708 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-21708 SUSE: 7...

Security update for python-libxml2-python (important)

openSUSE Security Update: Security update for python-libxml2-python Announcement ID: openSUSE-SU-2022:0802-1 Rating: important References: 1196490 Cross-References: CVE-2022-23308 CVSS scores: CVE-2022-23308 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-23308 SUSE: 7...

Security update for MozillaThunderbird (important)

openSUSE Security Update: Security update for MozillaThunderbird Announcement ID: openSUSE-SU-2022:0804-1 Rating: important References: 1196809 Cross-References: CVE-2022-26485 CVE-2022-26486 CVSS scores: CVE-2022-26485 SUSE: 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-26486 SUSE: 8...

Security update for sphinx (moderate)

openSUSE Security Update: Security update for sphinx Announcement ID: openSUSE-SU-2022:0054-1 Rating: moderate References: 1157590 1195227 Cross-References: CVE-2020-29050 CVSS scores: CVE-2020-29050 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.3 An...

Security update for xerces-j2 (important)

openSUSE Security Update: Security update for xerces-j2 Announcement ID: openSUSE-SU-2022:0500-1 Rating: important References: 1195108 Cross-References: CVE-2022-23437 CVSS scores: CVE-2022-23437 NVD : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-23437 SUSE: 7.5...

Security update for python-Twisted (important)

openSUSE Security Update: Security update for python-Twisted Announcement ID: openSUSE-SU-2022:0499-1 Rating: important References: 1195667 Cross-References: CVE-2022-21712 CVSS scores: CVE-2022-21712 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2022-21712 SUSE: 7.1...

Security update for json-c (important)

openSUSE Security Update: Security update for json-c Announcement ID: openSUSE-SU-2022:0184-2 Rating: important References: 1171479 Cross-References: CVE-2020-12762 CVSS scores: CVE-2020-12762 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-12762 SUSE: 7.8...

Security update for qemu (low)

openSUSE Security Update: Security update for qemu Announcement ID: openSUSE-SU-2022:0177-1 Rating: low References: 1181361 Cross-References: CVE-2021-20196 CVSS scores: CVE-2021-20196 NVD : 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H CVE-2021-20196 SUSE: 3.2...

Security update for log4j (moderate)

openSUSE Security Update: Security update for log4j Announcement ID: openSUSE-SU-2021:4208-1 Rating: moderate References: 1194127 Cross-References: CVE-2021-44832 CVSS scores: CVE-2021-44832 SUSE: 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 An update tha...

Security update for go1.16 (moderate)

openSUSE Security Update: Security update for go1.16 Announcement ID: openSUSE-SU-2021:1539-1 Rating: moderate References: 1182345 1192377 1192378 Cross-References: CVE-2021-41771 CVE-2021-41772 CVSS scores: CVE-2021-41772 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products:...

Security update for barrier (moderate)

openSUSE Security Update: Security update for barrier Announcement ID: openSUSE-SU-2021:1498-1 Rating: moderate References: Cross-References: CVE-2021-42072 CVE-2021-42073 Affected Products: openSUSE Leap 15.2 An update that fixes two vulnerabilities is now available. Description: This update for...

Security update for rubygem-activerecord-5_1 (moderate)

openSUSE Security Update: Security update for rubygem-activerecord-51 Announcement ID: openSUSE-SU-2021:3634-1 Rating: moderate References: 1182169 Cross-References: CVE-2021-22880 CVSS scores: CVE-2021-22880 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-22880 SUSE: 5.3...

Security update for qemu (important)

openSUSE Security Update: Security update for qemu Announcement ID: openSUSE-SU-2021:1461-1 Rating: important References: 1189234 1189702 1189938 1190425 Cross-References: CVE-2021-3713 CVE-2021-3748 CVSS scores: CVE-2021-3713 SUSE: 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2021-3748...

Security update for qemu (important)

openSUSE Security Update: Security update for qemu Announcement ID: openSUSE-SU-2021:3605-1 Rating: important References: 1189234 1189702 1189938 1190425 Cross-References: CVE-2021-3713 CVE-2021-3748 CVSS scores: CVE-2021-3713 SUSE: 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2021-3748...

Security update for strongswan (important)

openSUSE Security Update: Security update for strongswan Announcement ID: openSUSE-SU-2021:3467-1 Rating: important References: 1191367 1191435 SLE-20151 Cross-References: CVE-2021-41990 CVE-2021-41991 CVSS scores: CVE-2021-41990 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-419...

Security update for htmldoc (important)

openSUSE Security Update: Security update for htmldoc Announcement ID: openSUSE-SU-2021:1266-1 Rating: important References: 1184424 Cross-References: CVE-2021-20308 CVSS scores: CVE-2021-20308 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-20308 SUSE: 3.3...

Security update for aria2 (moderate)

openSUSE Security Update: Security update for aria2 Announcement ID: openSUSE-SU-2021:1125-1 Rating: moderate References: 1189107 Cross-References: CVE-2019-3500 CVSS scores: CVE-2019-3500 NVD : 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 openSUSE...

Security update for dhcp (important)

openSUSE Security Update: Security update for dhcp Announcement ID: openSUSE-SU-2021:1841-1 Rating: important References: 1186382 Cross-References: CVE-2021-25217 CVSS scores: CVE-2021-25217 SUSE: 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 An update tha...

Security update for python-urllib3 (important)

openSUSE Security Update: Security update for python-urllib3 Announcement ID: openSUSE-SU-2021:2012-1 Rating: important References: 1187045 Cross-References: CVE-2021-33503 CVSS scores: CVE-2021-33503 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-33503 SUSE: 7.5...

Security update for java-1_8_0-openjdk (moderate)

openSUSE Security Update: Security update for java-180-openjdk Announcement ID: openSUSE-SU-2021:1989-1 Rating: moderate References: 1185055 Cross-References: CVE-2021-2163 CVSS scores: CVE-2021-2163 NVD : 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-2163 SUSE: 5.3...

Security update for wireshark (important)

openSUSE Security Update: Security update for wireshark Announcement ID: openSUSE-SU-2021:2125-1 Rating: important References: 1179930 1179931 1179932 1179933 1180102 1180232 1181598 1181599 1183353 1184110 1185128 Cross-References: CVE-2020-26418 CVE-2020-26419 CVE-2020-26420 CVE-2020-26421...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:0840-1 Rating: important References: 1186458 Cross-References: CVE-2021-21212 CVE-2021-30521 CVE-2021-30522 CVE-2021-30523 CVE-2021-30524 CVE-2021-30525 CVE-2021-30526 CVE-2021-30527 CVE-2021-30528...

Security update for libX11 (moderate)

openSUSE Security Update: Security update for libX11 Announcement ID: openSUSE-SU-2021:0807-1 Rating: moderate References: 1182506 Cross-References: CVE-2021-31535 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for libX11...

Security update for opera (important)

openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2021:0729-1 Rating: important References: Cross-References: CVE-2021-21227 CVE-2021-21228 CVE-2021-21229 CVE-2021-21230 CVE-2021-21231 CVE-2021-21232 CVE-2021-21233 CVSS scores: CVE-2021-21227 NVD : 8.8...

Security update for gsoap (important)

openSUSE Security Update: Security update for gsoap Announcement ID: openSUSE-SU-2021:0664-1 Rating: important References: 1182098 Cross-References: CVE-2020-13576 CVSS scores: CVE-2020-13576 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP2 A...

Security update for nghttp2 (important)

openSUSE Security Update: Security update for nghttp2 Announcement ID: openSUSE-SU-2021:0468-1 Rating: important References: 1172442 1181358 Cross-References: CVE-2020-11080 CVSS scores: CVE-2020-11080 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2020-11080 SUSE: 7.5...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:0393-1 Rating: important References: 1065600 1065729 1078720 1081134 1084610 1132477 1151927 1152472 1152489 1154353 1155518 1156395 1163776 1169514 1170442 1176248 1176855 1177109 1177326 1177440...

Security update for postgresql, postgresql13 (moderate)

openSUSE Security Update: Security update for postgresql, postgresql13 Announcement ID: openSUSE-SU-2021:0337-1 Rating: moderate References: 1178666 1178667 1178668 1178961 Cross-References: CVE-2020-25694 CVE-2020-25695 CVE-2020-25696 CVSS scores: CVE-2020-25694 NVD : 8.1...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:0177-1 Rating: important References: 1181137 Cross-References: CVE-2020-16044 CVE-2021-21117 CVE-2021-21118 CVE-2021-21119 CVE-2021-21120 CVE-2021-21121 CVE-2021-21122 CVE-2021-21123 CVE-2021-21124...

Security update for vlc (important)

openSUSE Security Update: Security update for vlc Announcement ID: openSUSE-SU-2021:0091-1 Rating: important References: 1133290 1172727 1180755 Cross-References: CVE-2020-13428 CVE-2020-26664 Affected Products: openSUSE Leap 15.2 An update that solves two vulnerabilities and has one errata is no...

Security update for go1.15 (moderate)

openSUSE Security Update: Security update for go1.15 Announcement ID: openSUSE-SU-2020:2139-1 Rating: moderate References: 1175132 1178750 1178752 1178753 Cross-References: CVE-2020-28362 CVE-2020-28366 CVE-2020-28367 Affected Products: openSUSE Leap 15.2 An update that solves three vulnerabiliti...

Security update for pacemaker (important)

openSUSE Security Update: Security update for pacemaker Announcement ID: openSUSE-SU-2020:1825-1 Rating: important References: 1167171 1173668 1175557 1177916 Cross-References: CVE-2020-25654 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has three fixes is now...

Security update for kleopatra (moderate)

openSUSE Security Update: Security update for kleopatra Announcement ID: openSUSE-SU-2020:1754-1 Rating: moderate References: 1177932 Cross-References: CVE-2020-24972 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: This update...

Security update for singularity (moderate)

openSUSE Security Update: Security update for singularity Announcement ID: openSUSE-SU-2020:1529-1 Rating: moderate References: 1176705 1176707 Cross-References: CVE-2020-25039 CVE-2020-25040 Affected Products: openSUSE Backports SLE-15-SP2 An update that fixes two vulnerabilities is now availabl...

Security update for libX11 (moderate)

openSUSE Security Update: Security update for libX11 Announcement ID: openSUSE-SU-2020:1370-1 Rating: moderate References: 1175239 Cross-References: CVE-2020-14363 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for libX11...