Security update for xen (important)

xen was updated to fix 12 security issues. These security issues were fixed: - CVE-2015-7972: Populate-on-demand balloon size inaccuracy can crash guests bsc951845. - CVE-2015-7969: Leak of main per-domain vcpu pointer array DoS bsc950703. - CVE-2015-7969: Leak of per-domain profiling-related vcp...

Security update for flash-player (critical)

Adobe Flash Player was updated to 11.2.202.521 APSB15-23 bsc946880 fixing several security issues: More information can be found on: https://helpx.adobe.com/security/products/flash-player/apsb15-23.html...

Security update for qemu (important)

qemu was updated to fix a security issue: CVE-2015-3456: Fixed a buffer overflow in the floppy drive emulation, which could be used to denial of service attacks or potential code execution against the host...

Security update for samba (important)

samba was updated to fix two security issues. These security issues were fixed: - CVE-2015-0240: Ensure we don't call tallocfree on an uninitialized pointer bnc917376. - CVE-2014-8143: Samba 4.0.x before 4.0.24, 4.1.x before 4.1.16, and 4.2.x before 4.2rc4, when an Active Directory Domain...

Security update for flash-player (important)

flash-player was updated to fix one security issue. This security issue was fixed: - Hardening against a code execution flaw CVE-2014-8439...

Security update for clamav (important)

clamav was updated to version 0.98.5 to fix two security issues. These security issues were fixed: - Segmentation fault when processing certain files CVE-2013-6497. - Heap-based buffer overflow when scanning crypted PE files CVE-2014-9050. The following non-security issues were fixed: - Support f...

xen: security and bugfix update (important)

XEN was updated to fix various bugs and security issues. Security issues fixed: - bnc897657 - CVE-2014-7188: XSA-108 Improper MSR range used for x2APIC emulation - bnc895802 - CVE-2014-7156: XSA-106: Missing privilege level checks in x86 emulation of software interrupts - bnc895799 - CVE-2014-715...

update for flash-player (critical)

This critical flash-player update fixes the following CVEs: - Security update to 11.2.202.400 bnc891688: APSB14-18, CVE-2014-0538, CVE-2014-0540, CVE-2014-0541, CVE-2014-0542, CVE-2014-0543, CVE-2014-0544, CVE-2014-0545...

gnutls: Fixed possible memory corruption (important)

gnutls was patched to fix security vulnerability that could be used to disrupt service or potentially allow remote code execution. - Memory corruption during connect CVE-2014-3466 - NULL pointer dereference in gnutlsx509dnoidname CVE-2014-3465...

MozillaFirefox: Update to version 28.0 (important)

Mozilla Firefox was updated to version 28.0, receiving enhancements, bug and security fixes. Mozilla NSPR was updated to 4.10.4 receiving enhancements, bug and security fixes. Mozilla NSS was updated to 3.15.5 receiving enhancements, bug and security fixes. Changes in MozillaFirefox: - update to...

Mozilla updates 2013/12 (important)

This patch contains mozilla-nss 3.15.3.1 which includes a certstore update 1.95 to explicitely revoke AC DG Tresor SSL intermediate CA which was misused. Firefox 24.2esr Thunderbird 24.2 Seamonkey 2.23 These updates fix several security issues: CVE-2013-5611 Mozilla: Application Installation...

update for perl (important)

Perl was updated to fix 3 security issues: - fix rehash denial of service compute time bnc804415 CVE-2013-1667 - improve CGI crlf escaping bnc789994 CVE-2012-5526 - sanitize input in Maketext.pm to avoid code injection bnc797060 CVE-2012-6329...

update for flash-player (critical)

This version upgrade of flash-player fixed multiple unspecified code execution vulnerabilities...

exim: overflow in DKIM handling fixed (critical)

This update fixes a remotely exploitable overflow in DKIM handling...

freetype2 update (important)

Specially crafted font files could cause buffer overflows in freetype...

apache2: fixed various security bugs (important)

This update of apache2 fixes regressions and several security problems: bnc728876, fix graceful reload bnc741243, CVE-2012-0031: Fixed a scoreboard corruption shared mem segment by child causes crash of privileged parent invalid free during shutdown. bnc743743, CVE-2012-0053: Fixed an issue in...

pam: fixing stack overflow (CVE-2011-3148) and DoS (CVE-2011-3149) (important)

The pamenv module is vulnerable to a stack overflow CVE-2011-3148 and a DoS condition CVE-2011-3149 when parsing users .pamenvironment files...

rpm (CVE-2011-3378) (important)

Specially crafted rpm packages can cause memory corruption in rpm when verifying signatures CVE-2011-3378...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10151-1 Rating: important References: 1204223 Cross-References: CVE-2022-3445 CVE-2022-3446 CVE-2022-3447 CVE-2022-3448 CVE-2022-3449 CVE-2022-3450 Affected Products: openSUSE Backports SLE-15-SP3 An update...

Security update for varnish (important)

openSUSE Security Update: Security update for varnish Announcement ID: openSUSE-SU-2022:10104-1 Rating: important References: 1202350 Cross-References: CVE-2022-38150 CVSS scores: CVE-2022-38150 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:0133-1 Rating: important References: 1199409 Cross-References: CVE-2022-1633 CVE-2022-1634 CVE-2022-1635 CVE-2022-1636 CVE-2022-1637 CVE-2022-1638 CVE-2022-1639 CVE-2022-1640 CVE-2022-1641 Affected Products:...

Security update for libeconf, shadow and util-linux (moderate)

openSUSE Security Update: Security update for libeconf, shadow and util-linux Announcement ID: openSUSE-SU-2022:0727-1 Rating: moderate References: 1188507 1192954 1193632 1194976 SLE-23384 SLE-23402 Cross-References: CVE-2021-3995 CVE-2021-3996 CVSS scores: CVE-2021-3995 SUSE: 4.7...

Security update for mc (moderate)

openSUSE Security Update: Security update for mc Announcement ID: openSUSE-SU-2022:0061-1 Rating: moderate References: 1190180 Cross-References: CVE-2021-36370 CVSS scores: CVE-2021-36370 SUSE: 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N Affected Products: openSUSE Backports SLE-15-SP3 An...

Security update for systemd (moderate)

openSUSE Security Update: Security update for systemd Announcement ID: openSUSE-SU-2022:0539-1 Rating: moderate References: 1191826 1192637 1194178 Cross-References: CVE-2021-3997 CVSS scores: CVE-2021-3997 SUSE: 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15...

Security update for libsndfile (important)

openSUSE Security Update: Security update for libsndfile Announcement ID: openSUSE-SU-2022:0052-1 Rating: important References: 1194006 Cross-References: CVE-2021-4156 CVSS scores: CVE-2021-4156 SUSE: 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H Affected Products: openSUSE Leap 15.3 An update...

Security update for libaom (moderate)

openSUSE Security Update: Security update for libaom Announcement ID: openSUSE-SU-2021:1624-1 Rating: moderate References: 1193356 1193365 1193366 1193369 Cross-References: CVE-2020-36129 CVE-2020-36130 CVE-2020-36131 CVE-2020-36135 CVSS scores: CVE-2020-36129 SUSE: 5.5...

Security update for fetchmail (moderate)

openSUSE Security Update: Security update for fetchmail Announcement ID: openSUSE-SU-2021:4018-1 Rating: moderate References: 1152964 1174075 1181400 1188875 1190069 1190896 SLE-17903 SLE-18059 SLE-18159 Cross-References: CVE-2021-36386 CVE-2021-39272 CVSS scores: CVE-2021-36386 NVD : 7.5...

Security update for gmp (moderate)

openSUSE Security Update: Security update for gmp Announcement ID: openSUSE-SU-2021:3946-1 Rating: moderate References: 1192717 Cross-References: CVE-2021-43618 CVSS scores: CVE-2021-43618 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-43618 SUSE: 5.5...

Security update for go1.16 (moderate)

openSUSE Security Update: Security update for go1.16 Announcement ID: openSUSE-SU-2021:1420-1 Rating: moderate References: 1182345 1191468 Cross-References: CVE-2021-38297 CVSS scores: CVE-2021-38297 SUSE: 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: openSUSE Leap 15.2 An...

Security update for libaom (important)

openSUSE Security Update: Security update for libaom Announcement ID: openSUSE-SU-2021:3005-1 Rating: important References: 1189497 Cross-References: CVE-2021-30475 CVSS scores: CVE-2021-30475 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-30475 SUSE: 7.8...

Security update for wireshark (moderate)

openSUSE Security Update: Security update for wireshark Announcement ID: openSUSE-SU-2021:1118-1 Rating: moderate References: 1186790 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for wireshark fixes the following issue...

Security update for hivex (moderate)

openSUSE Security Update: Security update for hivex Announcement ID: openSUSE-SU-2021:1761-1 Rating: moderate References: 1185013 Cross-References: CVE-2021-3504 CVSS scores: CVE-2021-3504 NVD : 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L CVE-2021-3504 SUSE: 5.4...

Security update for djvulibre (important)

openSUSE Security Update: Security update for djvulibre Announcement ID: openSUSE-SU-2021:1948-1 Rating: important References: 1186253 Cross-References: CVE-2021-3500 CVSS scores: CVE-2021-3500 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-3500 SUSE: 7.5...

Security update for lz4 (important)

openSUSE Security Update: Security update for lz4 Announcement ID: openSUSE-SU-2021:1825-1 Rating: important References: 1185438 Cross-References: CVE-2021-3520 CVSS scores: CVE-2021-3520 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-3520 SUSE: 8.6...

Security update for libX11 (important)

openSUSE Security Update: Security update for libX11 Announcement ID: openSUSE-SU-2021:1897-1 Rating: important References: 1186643 Cross-References: CVE-2021-31535 CVSS scores: CVE-2021-31535 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-31535 SUSE: 8.1...

Security update for bouncycastle (moderate)

openSUSE Security Update: Security update for bouncycastle Announcement ID: openSUSE-SU-2021:2163-1 Rating: moderate References: 1186328 Cross-References: CVE-2020-15522 CVSS scores: CVE-2020-15522 NVD : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2020-15522 SUSE: 5.9...

Security update for qemu (moderate)

openSUSE Security Update: Security update for qemu Announcement ID: openSUSE-SU-2021:2213-1 Rating: moderate References: 1185981 1185990 1186010 Cross-References: CVE-2021-3544 CVE-2021-3545 CVE-2021-3546 CVSS scores: CVE-2021-3544 NVD : 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H...

Security update for go1.16 (important)

openSUSE Security Update: Security update for go1.16 Announcement ID: openSUSE-SU-2021:2186-1 Rating: important References: 1182345 1186622 1187443 1187444 1187445 Cross-References: CVE-2021-33195 CVE-2021-33196 CVE-2021-33197 CVE-2021-33198 CVSS scores: CVE-2021-33195 SUSE: 6.1...

Security update for opera (important)

openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2021:0828-1 Rating: important References: Cross-References: CVE-2021-30506 CVE-2021-30507 CVE-2021-30508 CVE-2021-30509 CVE-2021-30510 CVE-2021-30511 CVE-2021-30512 CVE-2021-30513 CVE-2021-30514 CVE-2021-30515...

Security update for nodejs-underscore (important)

openSUSE Security Update: Security update for nodejs-underscore Announcement ID: openSUSE-SU-2021:0601-1 Rating: important References: 1184800 Cross-References: CVE-2021-23358 CVSS scores: CVE-2021-23358 NVD : 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 ...

Security update for spamassassin (important)

openSUSE Security Update: Security update for spamassassin Announcement ID: openSUSE-SU-2021:0551-1 Rating: important References: 1159133 1184221 Cross-References: CVE-2019-12420 CVE-2020-1946 CVSS scores: CVE-2019-12420 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2019-12420 SUSE:...

Security update for flatpak, libostree, xdg-desktop-portal, xdg-desktop-portal-gtk (important)

openSUSE Security Update: Security update for flatpak, libostree, xdg-desktop-portal, xdg-desktop-portal-gtk Announcement ID: openSUSE-SU-2021:0520-1 Rating: important References: 1133120 1133124 1175899 1180996 Cross-References: CVE-2021-21261 CVSS scores: CVE-2021-21261 NVD : 8.8...

Security update for MozillaThunderbird (important)

openSUSE Security Update: Security update for MozillaThunderbird Announcement ID: openSUSE-SU-2021:0387-1 Rating: important References: 1182357 1182614 Cross-References: CVE-2021-23968 CVE-2021-23969 CVE-2021-23973 CVE-2021-23978 CVSS scores: CVE-2021-23968 NVD : 4.3...

Security update for openvswitch (important)

openSUSE Security Update: Security update for openvswitch Announcement ID: openSUSE-SU-2021:0239-1 Rating: important References: 1117483 1181345 Cross-References: CVE-2020-27827 Affected Products: openSUSE Leap 15.2 An update that solves one vulnerability and has one errata is now available...

Security update for wavpack (moderate)

openSUSE Security Update: Security update for wavpack Announcement ID: openSUSE-SU-2021:0153-1 Rating: moderate References: 1091340 1091341 1091342 1091343 1091344 1180414 Cross-References: CVE-2018-10536 CVE-2018-10537 CVE-2018-10538 CVE-2018-10539 CVE-2018-10540 CVE-2018-19840 CVE-2018-19841...

Security update for tcmu-runner (important)

openSUSE Security Update: Security update for tcmu-runner Announcement ID: openSUSE-SU-2021:0097-1 Rating: important References: 1180676 Cross-References: CVE-2021-3139 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for...

Security update for MozillaThunderbird (critical)

openSUSE Security Update: Security update for MozillaThunderbird Announcement ID: openSUSE-SU-2020:2324-1 Rating: critical References: 1180039 Cross-References: CVE-2020-16042 CVE-2020-26971 CVE-2020-26973 CVE-2020-26974 CVE-2020-26978 CVE-2020-35111 CVE-2020-35112 CVE-2020-35113 Affected Product...

Security update for python-urllib3 (moderate)

openSUSE Security Update: Security update for python-urllib3 Announcement ID: openSUSE-SU-2020:2237-1 Rating: moderate References: 1177120 Cross-References: CVE-2020-26137 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for...

Security update for python-cryptography (moderate)

openSUSE Security Update: Security update for python-cryptography Announcement ID: openSUSE-SU-2020:2173-1 Rating: moderate References: 1178168 Cross-References: CVE-2020-25659 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update...

Security update for libqt5-qtbase (important)

openSUSE Security Update: Security update for libqt5-qtbase Announcement ID: openSUSE-SU-2020:2142-1 Rating: important References: 1172515 1176315 Cross-References: CVE-2020-17507 Affected Products: openSUSE Leap 15.2 An update that solves one vulnerability and has one errata is now available...