Security update for Chromium (important)

Chromium was updated to 48.0.2564.82 to fix security issues and bugs. The following vulnerabilities were fixed: - CVE-2016-1612: Bad cast in V8 boo963184 - CVE-2016-1613: Use-after-free in PDFium boo963185 - CVE-2016-1614: Information leak in Blink boo963186 - CVE-2016-1615: Origin confusion in...

Security update for ffmpeg (important)

This update to ffmpeg 2.8.5 fixes the following issues: CVE-2016-1897: Cross-origin issue in URL processing concat - local file disclosure boo961937 CVE-2016-1898: Cross-origin issue in URL processing subfile - local file disclosure boo961937...

Security update for xen (important)

xen was updated to fix 12 security issues. These security issues were fixed: - CVE-2015-7972: Populate-on-demand balloon size inaccuracy can crash guests bsc951845. - CVE-2015-7969: Leak of main per-domain vcpu pointer array DoS bsc950703. - CVE-2015-7969: Leak of per-domain profiling-related vcp...

Security update for flash-player (critical)

flash-player was updated to version 11.2.202.442 to fix 18 security issues. These security issues were fixed: - Use-after-free vulnerabilities that could lead to code execution CVE-2015-0313, CVE-2015-0315, CVE-2015-0320, CVE-2015-0322. - Memory corruption vulnerabilities that could lead to code...

Security update for ntp (critical)

The network timeservice ntp was updated to fix critical security issues bnc910764, CERT VU852879 A potential remote code execution problem was found inside ntpd. The functions cryptorecv when using autokey authentication, ctlputdata, and configure where updated to avoid buffer overflows that coul...

curl (important)

libcurl was updated to fix security issues: CVE-2014-3613: Cookies for hosts specified by numeric IP could be assigned or used for other numeric IP hosts if portions of the numerics were the same. CVE-2014-3620: libcurl allowed cookies to be set for toplevel domains, making them to broad...

chromium: update to 31.0.1650.57 (important)

Chromium was updated to 31.0.1650.57: Stable channel update: - Security Fixes: CVE-2013-6632: Multiple memory corruption issues. - Update to Chromium 31.0.1650.48 Stable Channel update: - Security fixes: CVE-2013-6621: Use after free related to speech input elements.. CVE-2013-6622: Use after fre...

update for perl (important)

Perl was updated to fix 3 security issues: - fix rehash denial of service compute time bnc804415 CVE-2013-1667 - improve CGI crlf escaping bnc789994 CVE-2012-5526 - sanitize input in Maketext.pm to avoid code injection bnc797060 CVE-2012-6329 In openSUSE 12.1 also the following non-security bug w...

Mozilla: February 2013 update round (Firefox 19) (important)

MozillaFirefox was updated to Firefox 19.0 bnc804248 MozillaThunderbird was updated to Thunderbird 17.0.3 bnc804248 seamonkey was updated to SeaMonkey 2.16 bnc804248 xulrunner was updated to 17.0.3esr bnc804248 chmsee was updated to version 2.0. Changes in MozillaFirefox 19.0: MFSA...

xen to fix various denial of service issues (important)

XEN was updated to fix various denial of service issues. - bnc789945 - CVE-2012-5510: xen: Grant table version switch list corruption vulnerability XSA-26 - bnc789944 - CVE-2012-5511: xen: Several HVM operations do not validate the range of their inputs XSA-27 - bnc789940 - CVE-2012-5512: xen:...

exim: overflow in DKIM handling fixed (critical)

This update fixes a remotely exploitable overflow in DKIM handling...

Security Update for Xen (important)

Security Update for Xen Following bug and security fixes were applied: - bnc776995 - attaching scsi control luns with pvscsi - xend/pvscsi: fix passing of SCSI control LUNs xen-bug776995-pvscsi-no-devname.patch - xend/pvscsi: fix usage of persistant device names for SCSI devices...

update for chromium, v8 (important)

Version upgrade of chromium to address multiple security vulnerabilities...

MozillaFirefox, MozillaThunderbird, mozilla-nss, seamonkey, xulrunner: June (important)

Changes in MozillaFirefox: - update to Firefox 13.0 bnc765204 MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101 Miscellaneous memory safety hazards MFSA 2012-36/CVE-2012-1944 bmo751422 Content Security Policy inline-script bypass MFSA 2012-37/CVE-2012-1945 bmo670514 Information disclosure...

bind: Fixed a remote denial of service (important)

A remote denial of service in the bind nameserver via zero length rdata fields was fixed...

update for acroread (important)

Acroread update to version 9.5.1 to fix several security issues...

freetype2 update (important)

Specially crafted font files could cause buffer overflows in freetype...

xorg-x11-server (important)

The X server had two security issues and one bug that is fixed by this update. CVE-2011-4028: It is possible for a local attacker to deduce if a file exists or not by exploiting the way that Xorg creates its lock files. CVE-2011-4029: It is possible for a non-root local user to set the read...

acroread (critical)

acrobat reader was updated to version 9.4.6 to fix several security issues CVE-2011-1353, CVE-2011-2431, CVE-2011-2432, CVE-2011-2433, CVE-2011-2434, CVE-2011-2435, CVE-2011-2436, CVE-2011-2437, CVE-2011-2438, CVE-2011-2439, CVE-2011-2440, CVE-2011-2441, CVE-2011-2442...

rpm (CVE-2011-3378) (important)

Specially crafted rpm packages can cause memory corruption in rpm when verifying signatures CVE-2011-3378...

Security update for trivy (important)

openSUSE Security Update: Security update for trivy Announcement ID: openSUSE-SU-2025:0302-1 Rating: important References: 1232948 1235265 1246151 Cross-References: CVE-2024-45338 CVE-2024-51744 CVE-2025-53547 CVSS scores: CVE-2024-45338 SUSE: 8.2...

govulncheck-vulndb-0.0.20250327T184518-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20250327T184518-1.1 on GA media Announcement ID: openSUSE-SU-2025:14937-1 Rating: moderate Cross-References: CVE-2024-25132 CVE-2024-53348 CVE-2024-53351 CVE-2024-7598 CVE-2024-7631 CVE-2024-9042 CVE-2024-9900 CVE-2025-1097 CVE-2025-1098 CVE-2025-1472 CVE-2025-1767...

Security update for pcre2 (important)

openSUSE Security Update: Security update for pcre2 Announcement ID: openSUSE-SU-2022:2649-1 Rating: important References: 1164384 1199235 Cross-References: CVE-2019-20454 CVE-2022-1587 CVSS scores: CVE-2019-20454 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2019-20454 SUSE: 6.8...

Security update for canna (important)

openSUSE Security Update: Security update for canna Announcement ID: openSUSE-SU-2022:10090-1 Rating: important References: 1199280 Cross-References: CVE-2022-21950 CVSS scores: CVE-2022-21950 SUSE: 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Backports SLE-15-SP3 ...

Security update for pdns-recursor (important)

openSUSE Security Update: Security update for pdns-recursor Announcement ID: openSUSE-SU-2022:0105-1 Rating: important References: 1197525 Cross-References: CVE-2022-27227 CVSS scores: CVE-2022-27227 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-27227 SUSE: 7.5...

Security update for abcm2ps (moderate)

openSUSE Security Update: Security update for abcm2ps Announcement ID: openSUSE-SU-2022:0100-1 Rating: moderate References: 1197355 Cross-References: CVE-2021-32434 CVE-2021-32435 CVE-2021-32436 CVSS scores: CVE-2021-32434 NVD : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-32435 NVD ...

Security update for MozillaThunderbird (important)

openSUSE Security Update: Security update for MozillaThunderbird Announcement ID: openSUSE-SU-2022:0804-1 Rating: important References: 1196809 Cross-References: CVE-2022-26485 CVE-2022-26486 CVSS scores: CVE-2022-26485 SUSE: 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-26486 SUSE: 8...

Security update for jasper (moderate)

openSUSE Security Update: Security update for jasper Announcement ID: openSUSE-SU-2022:0562-1 Rating: moderate References: 1188437 Cross-References: CVE-2021-27845 CVSS scores: CVE-2021-27845 NVD : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-27845 SUSE: 4...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:0042-1 Rating: important References: 1195986 Cross-References: CVE-2022-0603 CVE-2022-0604 CVE-2022-0605 CVE-2022-0606 CVE-2022-0607 CVE-2022-0608 CVE-2022-0609 CVE-2022-0610 Affected Products: openSUSE...

Security update for nim (moderate)

openSUSE Security Update: Security update for nim Announcement ID: openSUSE-SU-2021:1585-1 Rating: moderate References: 1192712 Cross-References: CVE-2021-41259 CVSS scores: CVE-2021-41259 NVD : 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N Affected Products: openSUSE Leap 15.2 An update that...

Security update for python-pip (moderate)

openSUSE Security Update: Security update for python-pip Announcement ID: openSUSE-SU-2021:4002-1 Rating: moderate References: 1186819 Cross-References: CVE-2021-3572 CVSS scores: CVE-2021-3572 SUSE: 4.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N Affected Products: openSUSE Leap 15.3 An update...

Security update for brotli (moderate)

openSUSE Security Update: Security update for brotli Announcement ID: openSUSE-SU-2021:3942-1 Rating: moderate References: 1175825 Cross-References: CVE-2020-8927 CVSS scores: CVE-2020-8927 NVD : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L CVE-2020-8927 SUSE: 5.3...

Security update for bind (important)

openSUSE Security Update: Security update for bind Announcement ID: openSUSE-SU-2021:3773-1 Rating: important References: 1192146 Cross-References: CVE-2021-25219 CVSS scores: CVE-2021-25219 NVD : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-25219 SUSE: 5.3...

Security update for postgresql13 (important)

openSUSE Security Update: Security update for postgresql13 Announcement ID: openSUSE-SU-2021:3762-1 Rating: important References: 1192516 Cross-References: CVE-2021-23214 CVE-2021-23222 CVSS scores: CVE-2021-23214 SUSE: 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-23222 SUSE: 3.7...

Security update for rubygem-activerecord-5_1 (moderate)

openSUSE Security Update: Security update for rubygem-activerecord-51 Announcement ID: openSUSE-SU-2021:1468-1 Rating: moderate References: 1182169 Cross-References: CVE-2021-22880 CVSS scores: CVE-2021-22880 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-22880 SUSE: 5.3...

Security update for pcre (moderate)

openSUSE Security Update: Security update for pcre Announcement ID: openSUSE-SU-2021:1441-1 Rating: moderate References: 1172973 1172974 Cross-References: CVE-2019-20838 CVE-2020-14155 CVSS scores: CVE-2019-20838 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2019-20838 SUSE: 7.5...

Security update for virtualbox (important)

openSUSE Security Update: Security update for virtualbox Announcement ID: openSUSE-SU-2021:1393-1 Rating: important References: 1191104 1191526 1191869 Cross-References: CVE-2021-2475 CVE-2021-35538 CVE-2021-35540 CVE-2021-35542 CVE-2021-35545 CVSS scores: CVE-2021-2475 NVD : 4.4...

Security update for shibboleth-sp (low)

openSUSE Security Update: Security update for shibboleth-sp Announcement ID: openSUSE-SU-2021:3244-1 Rating: low References: 1184222 Affected Products: openSUSE Leap 15.3 An update that contains security fixes can now be installed. Description: This update for shibboleth-sp fixes the following...

Security update for libass (important)

openSUSE Security Update: Security update for libass Announcement ID: openSUSE-SU-2021:2792-1 Rating: important References: 1188539 Cross-References: CVE-2020-36430 CVSS scores: CVE-2020-36430 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-36430 SUSE: 7.5...

Security update for ffmpeg (important)

openSUSE Security Update: Security update for ffmpeg Announcement ID: openSUSE-SU-2021:2322-1 Rating: important References: 1172640 1186406 1186583 1186586 1186587 1186596 1186597 1186598 1186600 1186603 1186604 1186605 1186613 1186614 1186615 1186616 1186658 1186660 1186757 1186758 1186762 11867...

Security update for avahi (important)

openSUSE Security Update: Security update for avahi Announcement ID: openSUSE-SU-2021:1845-1 Rating: important References: 1180827 1184521 Cross-References: CVE-2021-26720 CVE-2021-3468 CVSS scores: CVE-2021-26720 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-26720 SUSE: 7.8...

Security update for polkit (important)

openSUSE Security Update: Security update for polkit Announcement ID: openSUSE-SU-2021:1843-1 Rating: important References: 1186497 Cross-References: CVE-2021-3560 CVSS scores: CVE-2021-3560 SUSE: 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 An update tha...

Security update for wireshark (important)

openSUSE Security Update: Security update for wireshark Announcement ID: openSUSE-SU-2021:2125-1 Rating: important References: 1179930 1179931 1179932 1179933 1180102 1180232 1181598 1181599 1183353 1184110 1185128 Cross-References: CVE-2020-26418 CVE-2020-26419 CVE-2020-26420 CVE-2020-26421...

Security update for libX11 (important)

openSUSE Security Update: Security update for libX11 Announcement ID: openSUSE-SU-2021:1897-1 Rating: important References: 1186643 Cross-References: CVE-2021-31535 CVSS scores: CVE-2021-31535 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-31535 SUSE: 8.1...

Security update for gsoap (important)

openSUSE Security Update: Security update for gsoap Announcement ID: openSUSE-SU-2021:0664-1 Rating: important References: 1182098 Cross-References: CVE-2020-13576 CVSS scores: CVE-2020-13576 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP2 A...

Security update for hostapd (important)

openSUSE Security Update: Security update for hostapd Announcement ID: openSUSE-SU-2021:0545-1 Rating: important References: 1150934 1172700 1184348 Cross-References: CVE-2019-16275 CVE-2020-12695 CVE-2021-30004 CVSS scores: CVE-2019-16275 NVD : 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H...

Security update for nghttp2 (important)

openSUSE Security Update: Security update for nghttp2 Announcement ID: openSUSE-SU-2021:0468-1 Rating: important References: 1172442 1181358 Cross-References: CVE-2020-11080 CVSS scores: CVE-2020-11080 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2020-11080 SUSE: 7.5...

Security update for openssl-1_1 (moderate)

openSUSE Security Update: Security update for openssl-11 Announcement ID: openSUSE-SU-2021:0427-1 Rating: moderate References: 1182331 1182333 1182959 Cross-References: CVE-2021-23840 CVE-2021-23841 CVSS scores: CVE-2021-23840 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-23840...

Security update for postgresql, postgresql13 (moderate)

openSUSE Security Update: Security update for postgresql, postgresql13 Announcement ID: openSUSE-SU-2021:0337-1 Rating: moderate References: 1178666 1178667 1178668 1178961 Cross-References: CVE-2020-25694 CVE-2020-25695 CVE-2020-25696 CVSS scores: CVE-2020-25694 NVD : 8.1...

Security update for subversion (important)

openSUSE Security Update: Security update for subversion Announcement ID: openSUSE-SU-2021:0280-1 Rating: important References: 1181687 Cross-References: CVE-2020-17525 CVSS scores: CVE-2020-17525 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 An upda...