8804 matches found
Security update for log4j (moderate)
openSUSE Security Update: Security update for log4j Announcement ID: openSUSE-SU-2021:4208-1 Rating: moderate References: 1194127 Cross-References: CVE-2021-44832 CVSS scores: CVE-2021-44832 SUSE: 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 An update tha...
Security update for go1.16 (moderate)
openSUSE Security Update: Security update for go1.16 Announcement ID: openSUSE-SU-2021:3834-1 Rating: moderate References: 1182345 1192377 1192378 Cross-References: CVE-2021-41771 CVE-2021-41772 CVSS scores: CVE-2021-41772 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products:...
Security update for qemu (important)
openSUSE Security Update: Security update for qemu Announcement ID: openSUSE-SU-2021:3605-1 Rating: important References: 1189234 1189702 1189938 1190425 Cross-References: CVE-2021-3713 CVE-2021-3748 CVSS scores: CVE-2021-3713 SUSE: 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2021-3748...
Security update for php7-pear (important)
openSUSE Security Update: Security update for php7-pear Announcement ID: openSUSE-SU-2021:3018-1 Rating: important References: 1189591 Cross-References: CVE-2020-36193 CVSS scores: CVE-2020-36193 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2020-36193 SUSE: 7.5...
Security update for tor (moderate)
openSUSE Security Update: Security update for tor Announcement ID: openSUSE-SU-2021:1192-1 Rating: moderate References: 1189489 Cross-References: CVE-2021-38385 Affected Products: openSUSE Backports SLE-15-SP3 An update that fixes one vulnerability is now available. Description: This update for t...
Security update for cacti, cacti-spine (moderate)
openSUSE Security Update: Security update for cacti, cacti-spine Announcement ID: openSUSE-SU-2021:1190-1 Rating: moderate References: 1188188 Cross-References: CVE-2020-14424 Affected Products: openSUSE Leap 15.2 openSUSE Backports SLE-15-SP3 SUSE Package Hub for SUSE Linux Enterprise 12 An upda...
Security update for dhcp (important)
openSUSE Security Update: Security update for dhcp Announcement ID: openSUSE-SU-2021:1841-1 Rating: important References: 1186382 Cross-References: CVE-2021-25217 CVSS scores: CVE-2021-25217 SUSE: 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 An update tha...
Security update for MozillaThunderbird (important)
openSUSE Security Update: Security update for MozillaThunderbird Announcement ID: openSUSE-SU-2021:2003-1 Rating: important References: 1186696 Cross-References: CVE-2021-29964 CVE-2021-29967 Affected Products: openSUSE Leap 15.3 An update that fixes two vulnerabilities is now available...
Security update for spice (important)
openSUSE Security Update: Security update for spice Announcement ID: openSUSE-SU-2021:0874-1 Rating: important References: 1181686 Cross-References: CVE-2021-20201 CVSS scores: CVE-2021-20201 NVD : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-20201 SUSE: 6.8...
Security update for libjpeg-turbo (moderate)
openSUSE Security Update: Security update for libjpeg-turbo Announcement ID: openSUSE-SU-2021:0892-1 Rating: moderate References: 1186764 Cross-References: CVE-2020-17541 CVSS scores: CVE-2020-17541 NVD : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 An...
Security update for vlc (moderate)
openSUSE Security Update: Security update for vlc Announcement ID: openSUSE-SU-2021:0691-1 Rating: moderate References: 1181918 Cross-References: CVE-2020-26664 CVSS scores: CVE-2020-26664 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 An update that...
Security update for gsoap (important)
openSUSE Security Update: Security update for gsoap Announcement ID: openSUSE-SU-2021:0632-1 Rating: important References: 1182098 Cross-References: CVE-2020-13576 CVSS scores: CVE-2020-13576 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 An update th...
Security update for ldb (important)
openSUSE Security Update: Security update for ldb Announcement ID: openSUSE-SU-2021:0469-1 Rating: important References: 1183572 1183574 Cross-References: CVE-2020-27840 CVE-2021-20277 CVSS scores: CVE-2020-27840 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-20277 SUSE: 7.1...
Security update for gdk-pixbuf (moderate)
openSUSE Security Update: Security update for gdk-pixbuf Announcement ID: openSUSE-SU-2021:0150-1 Rating: moderate References: 1174307 1180393 Cross-References: CVE-2020-29385 Affected Products: openSUSE Leap 15.2 An update that solves one vulnerability and has one errata is now available...
Security update for cobbler (moderate)
openSUSE Security Update: Security update for cobbler Announcement ID: openSUSE-SU-2021:0058-1 Rating: moderate References: 1020376 1029276 1048183 1074594 1075014 1081714 1081739 1090205 1097733 1101670 1104189 1104190 1104287 1105440 1105442 1113747 1128754 1128926 1130658 1134588 1149075 11518...
Security update for groovy (moderate)
openSUSE Security Update: Security update for groovy Announcement ID: openSUSE-SU-2020:2367-1 Rating: moderate References: 1179729 Cross-References: CVE-2020-17521 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for groovy...
Security update for gdm (important)
openSUSE Security Update: Security update for gdm Announcement ID: openSUSE-SU-2020:2264-1 Rating: important References: 1178150 Cross-References: CVE-2020-16125 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for gdm fixes t...
Security update for openssl-1_1 (important)
openSUSE Security Update: Security update for openssl-11 Announcement ID: openSUSE-SU-2020:2245-1 Rating: important References: 1179491 Cross-References: CVE-2020-1971 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...
Security update for xen (important)
openSUSE Security Update: Security update for xen Announcement ID: openSUSE-SU-2020:2192-1 Rating: important References: 1177409 1177412 1177413 1177414 1178591 1178963 Cross-References: CVE-2020-27670 CVE-2020-27671 CVE-2020-27672 CVE-2020-27674 CVE-2020-28368 Affected Products: openSUSE Leap 15...
Security update for pdns (moderate)
openSUSE Security Update: Security update for pdns Announcement ID: openSUSE-SU-2020:1556-1 Rating: moderate References: 1156196 1176312 1176535 Cross-References: CVE-2020-17482 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP2 openSUSE Backports SLE-15-SP1 SU...
Security update for xorg-x11-server (important)
openSUSE Security Update: Security update for xorg-x11-server Announcement ID: openSUSE-SU-2020:1376-1 Rating: important References: 1174910 1174913 Cross-References: CVE-2020-14361 CVE-2020-14362 Affected Products: openSUSE Leap 15.2 An update that fixes two vulnerabilities is now available...
Security update for libX11 (moderate)
openSUSE Security Update: Security update for libX11 Announcement ID: openSUSE-SU-2020:1370-1 Rating: moderate References: 1175239 Cross-References: CVE-2020-14363 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for libX11...
Security update for xen (important)
openSUSE Security Update: Security update for xen Announcement ID: openSUSE-SU-2020:1190-1 Rating: important References: 1172356 1174543 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for xen fixes the following issues: ...
Security update for redis (moderate)
openSUSE Security Update: Security update for redis Announcement ID: openSUSE-SU-2020:1035-1 Rating: moderate References: 1173018 Cross-References: CVE-2020-14147 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 SUSE Package Hub for SUSE Linux Enterprise 12 An update that fixes...
Security update for google-compute-engine (important)
openSUSE Security Update: Security update for google-compute-engine Announcement ID: openSUSE-SU-2020:1014-1 Rating: important References: 1169978 1173258 Cross-References: CVE-2020-8903 CVE-2020-8907 CVE-2020-8933 Affected Products: openSUSE Leap 15.2 An update that fixes three vulnerabilities i...
Security update for python-markdown2 (moderate)
openSUSE Security Update: Security update for python-markdown2 Announcement ID: openSUSE-SU-2020:0656-1 Rating: moderate References: 1171379 Cross-References: CVE-2020-11888 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: This...
Security update for postgresql96 (moderate)
openSUSE Security Update: Security update for postgresql96 Announcement ID: openSUSE-SU-2019:1668-1 Rating: moderate References: 1134689 Cross-References: CVE-2019-10130 Affected Products: openSUSE Leap 42.3 An update that fixes one vulnerability is now available. Description: This update for...
Security update for libraw (moderate)
This update for libraw fixes the following issues: The following security vulnerabilities were addressed: - CVE-2018-5804: Fixed a type confusion error within the identify function that could trigger a division by zero, leading to a denial of service Dos. boo1097975 - CVE-2018-5805: Fixed a...
Security update for nextcloud (moderate)
This update for nextcloud fixes security issues and bugs. Security issues fixed: - CVE-2018-3780: Stored XSS in autocomplete suggestions for file comments boo1114817 This update also contains all bug fixes and improvements in the 13.0.8 version, including: - Password expiration time changed from...
Security update for exempi (low)
This update for exempi fixes the following security issue: - CVE-2017-18236: The ASFSupport::ReadHeaderObject function allowed remote attackers to cause a denial of service infinite loop via a crafted .asf file bsc1085589 - CVE-2017-18233: Prevent integer overflow in the Chunk class that allowed...
Security update for shadow (important)
This update for shadow fixes the following issues: - CVE-2016-6252: Incorrect integer handling could results in local privilege escalation bsc1099310 This update was imported from the SUSE:SLE-12-SP2:Update update project...
Security update for emacs (important)
This update for emacs fixes one issues. This security issue was fixed: - CVE-2017-14482: Remote code execution via mails with "Content-Type: text/enriched" bsc1058425 This update was imported from the SUSE:SLE-12:Update update project...
Security update for postgresql96 (important)
This update for postgresql96 fixes the following issues: CVE-2017-7547: Further restrict visibility of pgusermappings.umoptions, to protect passwords stored as user mapping options. bsc1051685 CVE-2017-7546: Disallow empty passwords in all password-based authentication methods. bsc1051684...
Security update for exim (important)
This update for exim fixes the following issues: - CVE-2017-1000369: Fixed a memory leak in exim commandline handling, which could be used to exhaust memory and make "stack crash" attacks likely. boo1044692...
Security update for tigervnc (important)
This update for tigervnc fixes the following issues: This security issue was fixed: - CVE-2016-10207: Prevent crash caused by failed TLS connection bnc1023012 This non-security issue was fixed: Fix random client disconnections boo1022432...
Security update for spice (important)
This security update for spice fixes the following issues: CVE-2016-9577: A buffer overflow in the spice server could have potentially been used by unauthenticated attackers to execute arbitrary code. bsc1023078 CVE-2016-9578: Unauthenticated attackers could have caused a denial of service via a...
Security update for ghostscript (important)
This update for ghostscript fixes the following issues: - CVE-2016-8602: Fixes a NULL dereference in .sethalftone5 boo1004237. - CVE-2013-5653, CVE-2016-7978, CVE-2016-7979: Fix multiple -dsafer related CVE's boo1001951...
Security update for Chromium (important)
Chromium was updated to 53.0.2785.101 to fix a number of security issues and bugs. The following vulnerabilities were fixed: boo996648 - CVE-2016-5147: Universal XSS in Blink. - CVE-2016-5148: Universal XSS in Blink. - CVE-2016-5149: Script injection in extensions. - CVE-2016-5150: Use after free...
Security update for vlc (important)
This update for vlc to version 2.1.6 fixes the following issues: These CVE were fixed: - CVE-2016-5108: Reject invalid QuickTime IMA files boo984382. - CVE-2016-3941: Heap overflow in processing wav files boo973354. These security issues without were fixed: - Fix heap overflow in decomp stream...
Security update for mercurial (important)
mercurial was updated to fix three security issues. These security issues were fixed: - CVE-2016-3069: Arbitrary code execution when converting Git repos bsc973176. - CVE-2016-3068: Arbitrary code execution with Git subrepos bsc973177. - CVE-2016-3630: Remote code execution in binary delta decodi...
Security update for Firefox (important)
This update for MozillaFirefox, mozilla-nspr, mozilla-nss fixes the following issues: MozillaFirefox was updated to Firefox 45.0 boo969894 requires NSPR 4.12 / NSS 3.21.1 Instant browser tab sharing through Hello Synced Tabs button in button bar Tabs synced via Firefox Accounts from other devices...
Security update for glibc (critical)
This update for glibc fixes the following security issues: fix stack overflow in the glibc libresolv DNS resolver function getaddrinfo, known as CVE-2015-7547. It is a client side networked/remote vulnerability...
Security update for Chromium (important)
Chromium was updated to 48.0.2564.82 to fix security issues and bugs. The following vulnerabilities were fixed: - CVE-2016-1612: Bad cast in V8 boo963184 - CVE-2016-1613: Use-after-free in PDFium boo963185 - CVE-2016-1614: Information leak in Blink boo963186 - CVE-2016-1615: Origin confusion in...
Security update for bind (important)
This update for bind fixes the following issues: - CVE-2015-8704: Specific APL data allowed remote attacker to trigger a crash in certain configurations bsc962189...
Security update for xen (important)
xen was updated to fix 12 security issues. These security issues were fixed: - CVE-2015-7972: Populate-on-demand balloon size inaccuracy can crash guests bsc951845. - CVE-2015-7969: Leak of main per-domain vcpu pointer array DoS bsc950703. - CVE-2015-7969: Leak of per-domain profiling-related vcp...
Security update for flash-player (critical)
flash-player was updated to version 11.2.202.442 to fix 18 security issues. These security issues were fixed: - Use-after-free vulnerabilities that could lead to code execution CVE-2015-0313, CVE-2015-0315, CVE-2015-0320, CVE-2015-0322. - Memory corruption vulnerabilities that could lead to code...
curl (important)
libcurl was updated to fix security issues: CVE-2014-3613: Cookies for hosts specified by numeric IP could be assigned or used for other numeric IP hosts if portions of the numerics were the same. CVE-2014-3620: libcurl allowed cookies to be set for toplevel domains, making them to broad...
chromium: update to 31.0.1650.57 (important)
Chromium was updated to 31.0.1650.57: Stable channel update: - Security Fixes: CVE-2013-6632: Multiple memory corruption issues. - Update to Chromium 31.0.1650.48 Stable Channel update: - Security fixes: CVE-2013-6621: Use after free related to speech input elements.. CVE-2013-6622: Use after fre...
update for perl (important)
Perl was updated to fix 3 security issues: - fix rehash denial of service compute time bnc804415 CVE-2013-1667 - improve CGI crlf escaping bnc789994 CVE-2012-5526 - sanitize input in Maketext.pm to avoid code injection bnc797060 CVE-2012-6329 In openSUSE 12.1 also the following non-security bug w...
Mozilla: February 2013 update round (Firefox 19) (important)
MozillaFirefox was updated to Firefox 19.0 bnc804248 MozillaThunderbird was updated to Thunderbird 17.0.3 bnc804248 seamonkey was updated to SeaMonkey 2.16 bnc804248 xulrunner was updated to 17.0.3esr bnc804248 chmsee was updated to version 2.0. Changes in MozillaFirefox 19.0: MFSA...