Security update for python-pip (important)

openSUSE Security Update: Security update for python-pip Announcement ID: openSUSE-SU-2020:2184-1 Rating: important References: 1176262 Cross-References: CVE-2019-20916 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

Security update for ceph (moderate)

openSUSE Security Update: Security update for ceph Announcement ID: openSUSE-SU-2020:2057-1 Rating: moderate References: 1151612 1158257 1169134 1170487 1174591 1175061 1175240 1175781 1177843 Cross-References: CVE-2020-25660 Affected Products: openSUSE Leap 15.1 An update that solves one...

Security update for c-ares (moderate)

openSUSE Security Update: Security update for c-ares Announcement ID: openSUSE-SU-2020:2045-1 Rating: moderate References: 1178882 Cross-References: CVE-2020-8277 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for c-ares fix...

Security update for opera (important)

openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2020:1952-1 Rating: important References: Cross-References: CVE-2020-15999 CVE-2020-16000 CVE-2020-16001 CVE-2020-16002 CVE-2020-16003 CVE-2020-16004 CVE-2020-16005 CVE-2020-16006 CVE-2020-16007 CVE-2020-16008...

Security update for openldap2 (moderate)

openSUSE Security Update: Security update for openldap2 Announcement ID: openSUSE-SU-2020:1459-1 Rating: moderate References: 1174154 Cross-References: CVE-2020-15719 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for...

Security update for ark (moderate)

openSUSE Security Update: Security update for ark Announcement ID: openSUSE-SU-2020:1183-2 Rating: moderate References: 1174773 Cross-References: CVE-2020-16116 Affected Products: openSUSE Backports SLE-15-SP2 An update that fixes one vulnerability is now available. Description: This update for a...

Security update for postgresql10 (important)

openSUSE Security Update: Security update for postgresql10 Announcement ID: openSUSE-SU-2020:1312-1 Rating: important References: 1175193 1175194 Cross-References: CVE-2020-14349 CVE-2020-14350 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available...

Security update for shadow (important)

This update for shadow fixes the following issues: - CVE-2016-6252: Incorrect integer handling could results in local privilege escalation bsc1099310 This update was imported from the SUSE:SLE-12-SP2:Update update project...

Security update for patch (important)

This update for patch fixes the following issues: Security issues fixed: - CVE-2018-1000156: Malicious patch files cause ed to execute arbitrary commands bsc1088420. - CVE-2018-6951: Fixed NULL pointer dereference in the intuitdifftype function in pch.c bsc1080918. - CVE-2016-10713: Fixed...

Security update for Chromium (important)

This update to Chromium 58.0.3029.96 fixes one security issue: - CVE-2017-5068: race condition in WebRTC bsc1037594...

Security update for pidgin (important)

This update for pidgin to version 2.12.0 fixes the following issues: This security issue was fixed: - CVE-2017-2640: Out of bounds memory read in purplemarkupunescapeentity boo1028835. These non-security issues were fixed: + libpurple: - Fix the use of uninitialised memory if running...

Security update for lxc (important)

This update for lxc fixes the following issue: - CVE-2016-8649: guest escape via ptrace of lxc-attach boo1010933...

Security update for bind (important)

This update for bind fixes the following issues: - A defect in BIND's handling of responses containing a DNAME answer had the potential to trigger assertion errors in the server remotely, thereby facilitating a denial-of-service attack. CVE-2016-8864, bsc1007829...

Security update for chromium (important)

Chromium was updated to 53.0.2785.113 to fix a number of security issues and bugs. The following vulnerabilities were fixed: - CVE-2016-5170: Use after free in Blink - CVE-2016-5171: Use after free in Blink - CVE-2016-5172: Arbitrary Memory Read in v8 - CVE-2016-5173: Extension resource access -...

Security update for GraphicsMagick (important)

This update for GraphicsMagick fixes the following issues: - security update: CVE-2016-5118 boo982178 + GraphicsMagick-CVE-2016-5118.patch...

Security update for rubygem-actionpack-3_2 (important)

This update for rubygem-actionpack-32 fixes the following issues: - CVE-2016-2097: rubygem-actionview: Possible Information Leak Vulnerability in Action View. boo968850 - CVE-2016-2098: rubygem-actionpack: Possible remote code execution vulnerability in Action Pack boo968849...

Security update for Mozilla Firefox (important)

This update fixes the following security related issues by updating packages to a more recent version: Update of NSPR to 4.11 Update of NSS to 3.21 Update of Firefox to 44.0 MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 Miscellaneous memory safety hazards MFSA 2016-02/CVE-2016-1933 bmo1231761 Out of...

Security update for Chromium (important)

Chromium was updated to 48.0.2564.82 to fix security issues and bugs. The following vulnerabilities were fixed: - CVE-2016-1612: Bad cast in V8 boo963184 - CVE-2016-1613: Use-after-free in PDFium boo963185 - CVE-2016-1614: Information leak in Blink boo963186 - CVE-2016-1615: Origin confusion in...

Security update for ffmpeg (important)

This update to ffmpeg 2.8.5 fixes the following issues: CVE-2016-1897: Cross-origin issue in URL processing concat - local file disclosure boo961937 CVE-2016-1898: Cross-origin issue in URL processing subfile - local file disclosure boo961937...

Security update for grub2 (important)

This update for grub2 fixes the following issue: Changes in grub2: - CVE-2015-8370: Fix for overflow in grubpasswordget and grubuserget functions bnc956631...

Security update for Chromium (important)

Chromium was updated to 47.0.2525.106 to fix security issues. Vulnerabilities were fixed under the following collective identifier: CVE-2015-6792: Fixes from internal audits and fuzzing. boo959458...

Security update for xen (important)

xen was updated to fix 12 security issues. These security issues were fixed: - CVE-2015-7972: Populate-on-demand balloon size inaccuracy can crash guests bsc951845. - CVE-2015-7969: Leak of main per-domain vcpu pointer array DoS bsc950703. - CVE-2015-7969: Leak of per-domain profiling-related vcp...

Security update for bouncycastle (important)

bouncycastle was updated to version 1.53 to fix one security issue. This security issue was fixed: - CVE-2015-7940: Invalid curve attack bsc951727...

xen: security and bugfix update (important)

XEN was updated to fix various bugs and security issues. Security issues fixed: - bnc897657 - CVE-2014-7188: XSA-108 Improper MSR range used for x2APIC emulation - bnc895802 - CVE-2014-7156: XSA-106: Missing privilege level checks in x86 emulation of software interrupts - bnc895799 - CVE-2014-715...

NSS update to avoid signature forgery (critical)

NSS is vulnerable to a variant of a signature forgery attack previously published by Daniel Bleichenbacher. This is due to lenient parsing of ASN.1 values involved in a signature and could lead to the forging of RSA certificates...

gnutls (critical)

The gnutls library was updated to fix SSL certificate validation. Remote man-in-the-middle attackers were able to make the verification believe that a SSL certificate is valid even though it was not. Also the TLS-CBC timing attack vulnerability was fixed...

flash-player to 11.2.202.327 (important)

Adobe Flash Player was updated to 11.2.202.327: bnc850220 APSB13-26, CVE-2013-5329, CVE-2013-5330...

regular updates for Mozilla applications (FF/TB) (important)

update to Firefox 22.0 and Thunderbird 17.0.7 including the following security fixes MFSA 2013-49 Miscellaneous memory safety hazards MFSA 2013-50 Memory corruption found using Address Sanitizer MFSA 2013-51 Privileged content access and execution via XBL MFSA 2013-52 Arbitrary code execution...

kernel (critical)

The openSUSE 12.1 kernel was updated to fix a critical security issue and also some reiserfs bugs. CVE-2013-2850: Incorrect strncpy usage in the network listening part of the iscsi target driver could have been used by remote attackers to crash the kernel or execute code. This required the iscsi...

update for perl (important)

Perl was updated to fix 3 security issues: - fix rehash denial of service compute time bnc804415 CVE-2013-1667 - improve CGI crlf escaping bnc789994 CVE-2012-5526 - sanitize input in Maketext.pm to avoid code injection bnc797060 CVE-2012-6329...

qemu: Fix buffer overflow in console VT100 emulation (important)

qemu was fixed to add bounds checking for VT100 escape code parsing and cursor placement. Also qemu was updated on 12.2 and 11.4 to the latest stable release v1.1.1 and v0.14.1 respectively...

Seamonkey update (critical)

Seamonkey was upgraded to version 2.5 in order to fix the following security problems: MFSA 2011-47/CVE-2011-3648 bmo690225 Potential XSS against sites using Shift-JIS MFSA 2011-48/CVE-2011-3651/CVE-2011-3652/CVE-2011-3654 Miscellaneous memory safety hazards MFSA 2011-49/CVE-2011-3650 bmo674776...

xen: Fixed a security bug and various other bugs (important)

Security / Collective Update for Xen Xen: - bnc702025 - VUL-0: xen: VT-d PCI passthrough MSI trap injection CVE-2011-1898 - bnc703924 - update block-npiv scripts to support BFA HBA - bnc689954 - L3: Live migrations fail when guest crashes: domaincrashsync called from entry.S - bnc693472 - Bridge...

icinga2-2.14.6-1.1 on GA media (moderate)

icinga2-2.14.6-1.1 on GA media Announcement ID: openSUSE-SU-2025:15180-1 Rating: moderate Cross-References: CVE-2025-48057 CVSS scores: CVE-2025-48057 SUSE : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2025-48057 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L...

Security update for pyenv (moderate)

openSUSE Security Update: Security update for pyenv Announcement ID: openSUSE-SU-2022:10183-1 Rating: moderate References: 1201582 Cross-References: CVE-2022-35861 CVSS scores: CVE-2022-35861 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP4 A...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10177-1 Rating: important References: 1204732 1204819 Cross-References: CVE-2022-3652 CVE-2022-3653 CVE-2022-3654 CVE-2022-3655 CVE-2022-3656 CVE-2022-3657 CVE-2022-3658 CVE-2022-3659 CVE-2022-3660...

Security update for connman (critical)

openSUSE Security Update: Security update for connman Announcement ID: openSUSE-SU-2022:10076-1 Rating: critical References: 1200189 1200190 Cross-References: CVE-2022-32292 CVE-2022-32293 Affected Products: openSUSE Backports SLE-15-SP4 An update that fixes two vulnerabilities is now available...

Security update for yaml-cpp (moderate)

openSUSE Security Update: Security update for yaml-cpp Announcement ID: openSUSE-SU-2022:1073-1 Rating: moderate References: 1121227 1121230 1122004 1122021 Cross-References: CVE-2018-20573 CVE-2018-20574 CVE-2019-6285 CVE-2019-6292 CVSS scores: CVE-2018-20573 NVD : 6.5...

Security update for libreoffice (moderate)

openSUSE Security Update: Security update for libreoffice Announcement ID: openSUSE-SU-2022:0886-1 Rating: moderate References: 1196456 SLE-18214 Cross-References: CVE-2021-25636 CVSS scores: CVE-2021-25636 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2021-25636 SUSE: 6.3...

Security update for php7 (important)

openSUSE Security Update: Security update for php7 Announcement ID: openSUSE-SU-2022:0847-1 Rating: important References: 1196252 Cross-References: CVE-2021-21708 CVSS scores: CVE-2021-21708 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-21708 SUSE: 7...

Security update for tcpdump (moderate)

openSUSE Security Update: Security update for tcpdump Announcement ID: openSUSE-SU-2022:0774-1 Rating: moderate References: 1195825 Cross-References: CVE-2018-16301 CVSS scores: CVE-2018-16301 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 An update...

Security update for python-Twisted (important)

openSUSE Security Update: Security update for python-Twisted Announcement ID: openSUSE-SU-2022:0499-1 Rating: important References: 1195667 Cross-References: CVE-2022-21712 CVSS scores: CVE-2022-21712 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2022-21712 SUSE: 7.1...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:0042-1 Rating: important References: 1195986 Cross-References: CVE-2022-0603 CVE-2022-0604 CVE-2022-0605 CVE-2022-0606 CVE-2022-0607 CVE-2022-0608 CVE-2022-0609 CVE-2022-0610 Affected Products: openSUSE...

Security update for netcdf (important)

openSUSE Security Update: Security update for netcdf Announcement ID: openSUSE-SU-2021:3804-1 Rating: important References: 1191856 Cross-References: CVE-2019-20005 CVE-2019-20006 CVE-2019-20007 CVE-2019-20198 CVE-2019-20199 CVE-2019-20200 CVE-2019-20201 CVE-2019-20202 CVE-2021-26220 CVE-2021-262...

Security update for libqt5-qtsvg (moderate)

openSUSE Security Update: Security update for libqt5-qtsvg Announcement ID: openSUSE-SU-2021:3354-1 Rating: moderate References: 1184783 Cross-References: CVE-2021-3481 CVSS scores: CVE-2021-3481 SUSE: 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L Affected Products: openSUSE Leap 15.3 An updat...

Security update for ghostscript (critical)

openSUSE Security Update: Security update for ghostscript Announcement ID: openSUSE-SU-2021:1273-1 Rating: critical References: 1184123 1190381 Cross-References: CVE-2021-3781 CVSS scores: CVE-2021-3781 SUSE: 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 A...

Security update for MozillaThunderbird (important)

openSUSE Security Update: Security update for MozillaThunderbird Announcement ID: openSUSE-SU-2021:2874-1 Rating: important References: 1188891 Cross-References: CVE-2021-29980 CVE-2021-29984 CVE-2021-29985 CVE-2021-29986 CVE-2021-29988 CVE-2021-29989 CVSS scores: CVE-2021-29980 SUSE: 7.5...

Security update for dhcp (important)

openSUSE Security Update: Security update for dhcp Announcement ID: openSUSE-SU-2021:1841-1 Rating: important References: 1186382 Cross-References: CVE-2021-25217 CVSS scores: CVE-2021-25217 SUSE: 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 An update tha...

Security update for wireshark (important)

openSUSE Security Update: Security update for wireshark Announcement ID: openSUSE-SU-2021:2125-1 Rating: important References: 1179930 1179931 1179932 1179933 1180102 1180232 1181598 1181599 1183353 1184110 1185128 Cross-References: CVE-2020-26418 CVE-2020-26419 CVE-2020-26420 CVE-2020-26421...

Security update for roundcubemail (important)

openSUSE Security Update: Security update for roundcubemail Announcement ID: openSUSE-SU-2021:0959-1 Rating: important References: 1180399 1187706 1187707 Cross-References: CVE-2020-18670 CVE-2020-18671 CVE-2020-35730 CVSS scores: CVE-2020-18670 NVD : 5.4...