Security update for python-setuptools (important)

openSUSE Security Update: Security update for python-setuptools Announcement ID: openSUSE-SU-2020:2143-1 Rating: important References: 1176262 Cross-References: CVE-2019-20916 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update f...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2020:1937-1 Rating: important References: 1178375 Cross-References: CVE-2020-16004 CVE-2020-16005 CVE-2020-16006 CVE-2020-16007 CVE-2020-16008 CVE-2020-16009 CVE-2020-16011 Affected Products: openSUSE Backports...

Security update for openldap2 (important)

openSUSE Security Update: Security update for openldap2 Announcement ID: openSUSE-SU-2020:1918-1 Rating: important References: 1178387 Cross-References: CVE-2020-25692 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for...

Security update for python-waitress (moderate)

openSUSE Security Update: Security update for python-waitress Announcement ID: openSUSE-SU-2020:1911-1 Rating: moderate References: 1160790 1161088 1161089 1161670 Cross-References: CVE-2019-16785 CVE-2019-16786 CVE-2019-16789 CVE-2019-16792 Affected Products: openSUSE Leap 15.2 An update that...

Security update for tiff (moderate)

openSUSE Security Update: Security update for tiff Announcement ID: openSUSE-SU-2020:1840-1 Rating: moderate References: 1146608 Cross-References: CVE-2019-14973 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for tiff fixes...

Security update for singularity (important)

openSUSE Security Update: Security update for singularity Announcement ID: openSUSE-SU-2020:1814-1 Rating: important References: 1177901 Cross-References: CVE-2020-15229 Affected Products: openSUSE Backports SLE-15-SP2 An update that fixes one vulnerability is now available. Description: This...

Security update for gettext-runtime (moderate)

openSUSE Security Update: Security update for gettext-runtime Announcement ID: openSUSE-SU-2020:1385-1 Rating: moderate References: 1106843 1113719 941629 Cross-References: CVE-2018-18751 Affected Products: openSUSE Backports SLE-15-SP1 An update that solves one vulnerability and has two fixes is...

Security update for python-rtslib-fb (moderate)

openSUSE Security Update: Security update for python-rtslib-fb Announcement ID: openSUSE-SU-2020:1156-1 Rating: moderate References: 1173257 Cross-References: CVE-2020-14019 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2020:0893-1 Rating: important References: 1173029 1173063 1173107 1173187 1173188 1173251 1173254 1173292 Cross-References: CVE-2020-6505 CVE-2020-6506 CVE-2020-6507 CVE-2020-6509 Affected Products: openSUSE Leap...

Security update for libntlm (moderate)

openSUSE Security Update: Security update for libntlm Announcement ID: openSUSE-SU-2020:0806-1 Rating: moderate References: 1153669 Cross-References: CVE-2019-17455 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for libntlm...

Security update for varnish (moderate)

openSUSE Security Update: Security update for varnish Announcement ID: openSUSE-SU-2020:0819-1 Rating: moderate References: 1169039 1169040 Cross-References: CVE-2019-20637 CVE-2020-11653 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes two vulnerabilities is now available...

Security update for enigmail (moderate)

openSUSE Security Update: Security update for enigmail Announcement ID: openSUSE-SU-2020:0250-1 Rating: moderate References: 1159973 Affected Products: openSUSE Leap 15.1 An update that contains security fixes can now be installed. Description: This update for enigmail fixes the following issues:...

Security update for pidgin (important)

This update for pidgin to version 2.12.0 fixes the following issues: This security issue was fixed: - CVE-2017-2640: Out of bounds memory read in purplemarkupunescapeentity boo1028835. These non-security issues were fixed: + libpurple: - Fix the use of uninitialised memory if running...

Security update for opus (important)

This update for opus fixes the following issues: - CVE-2017-0381: Fixed a remote code execution vulnerability in silk/NLSFstabilize.c when playing certain media files bsc1020102 This update was imported from the SUSE:SLE-12:Update update project...

Security update for chromium (important)

This update to Chromium 54.0.2840.90: fixes the following security issues: - CVE-2016-5198: out of bounds memory access in v8 boo1008274...

Security update for gd (important)

This update for gd fixes the following issue: - CVE-2016-7568: Integer overflow in the gdImageWebpCtx function in gdwebp.c libgd bsc1001900...

Security update for systemd (important)

This update for systemd fixes the following security issue: - CVE-2016-7796: A zero-length message received over systemd's notification socket could make managerdispatchnotifyfd return an error and, as a side effect, disable the notification handler completely. As the notification socket is...

Security update for flash-player (critical)

Adobe flash-player was updated to 11.2.202.626 to fix the following security issues: Security update to 11.2.202.626 boo984695: APSB16-18, CVE-2016-4122, CVE-2016-4123, CVE-2016-4124, CVE-2016-4125, CVE-2016-4127, CVE-2016-4128, CVE-2016-4129, CVE-2016-4130, CVE-2016-4131, CVE-2016-4132,...

Security update for Chromium (important)

Chromium was updated to 50.0.2661.94 to fix a number of vulnerabilities boo977830: - CVE-2016-1660: Out-of-bounds write in Blink - CVE-2016-1661: Memory corruption in cross-process frames - CVE-2016-1662: Use-after-free in extensions - CVE-2016-1663: Use-after-free in Blink’s V8 bindings -...

Security update for bind (important)

This update for bind fixes the following issues: CVE-2016-1285: remote DoS caused by malformed data on control channel CVE-2016-1286: remote DoS via assertion failure in parsing of signature records for DNAME records...

Security update for Chromium (important)

This update contains Chromium 49.0.2623.87 to fix the following issues: - CVE-2016-1643: Type confusion in Blink boo970514 - CVE-2016-1644: Use-after-free in Blink boo970509 - CVE-2016-1645: Out-of-bounds write in PDFium boo970511...

Security update for Mozilla Firefox (important)

This update fixes the following security related issues by updating packages to a more recent version: Update of NSPR to 4.11 Update of NSS to 3.21 Update of Firefox to 44.0 MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 Miscellaneous memory safety hazards MFSA 2016-02/CVE-2016-1933 bmo1231761 Out of...

Security update for bind (important)

This update for bind fixes the following security issue: - CVE-2015-8000: Fix remote denial of service by misparsing incoming responses bsc958861. This update was imported from the SUSE:SLE-12-SP1:Update update project...

Security update for krb5 (important)

krb5 was updated to fix three security issues. These security issues were fixed: - CVE-2015-2695: Applications which call gssinquirecontext on a partially-established SPNEGO context could have caused the GSS-API library to read from a pointer using the wrong type, generally causing a process cras...

Security update for bind (important)

BIND was updated to fix a denial of service against servers performing validation on DNSSEC-signed records CVE-2015-5722, bsc944066...

Security update for Adobe Flash Player (important)

Adobe Flash Player was updated to 11.2.202.457 to fix several security issues that could lead to remote code execution. An exploit for CVE-2015-3043 was reported to exist in the wild. The following vulnerabilities were fixed: Memory corruption vulnerabilities that could lead to code execution...

Security update for clamav (important)

clamav was updated to version 0.98.6 that fixes bugs and several security issues: bsc916217, CVE-2015-1461: Remote attackers can have unspecified impact via Yoda's crypter or mew packer files. bsc916214, CVE-2015-1462: Unspecified impact via acrafted upx packer file. bsc916215, CVE-2015-1463:...

update for flash-player (critical)

flash-player was updated to version 11.2.202.442 to fix 18 security issues. These security issues were fixed: - Use-after-free vulnerabilities that could lead to code execution CVE-2015-0313, CVE-2015-0315, CVE-2015-0320, CVE-2015-0322. - Memory corruption vulnerabilities that could lead to code...

xulrunner to 17.0.6esr (important)

Mozilla xulrunner was updated to 17.0.6esr bnc819204 MFSA 2013-41/CVE-2013-0801/CVE-2013-1669 Miscellaneous memory safety hazards MFSA 2013-42/CVE-2013-1670 bmo853709 Privileged access for content level constructor MFSA 2013-46/CVE-2013-1674 bmo860971 Use-after-free with video and onresize event...

MozillaThunderbird: update to 17.0.6 (important)

MozillaThunderbird was updated to security update Thunderbird 17.0.6 bnc819204: MFSA 2013-41/CVE-2013-0801/CVE-2013-1669 Miscellaneous memory safety hazards MFSA 2013-42/CVE-2013-1670 bmo853709 Privileged access for content level constructor MFSA 2013-46/CVE-2013-1674 bmo860971 Use-after-free wit...

postgresql92: Various security fixes. Update to 9.2.4. (important)

postgresql was updated to version 9.2.4 bnc812525: CVE-2013-1899: Fix insecure parsing of server command-line switches. A connection request containing a database name that begins with "-" could be crafted to damage or destroy files within the server's data directory, even if the request is...

postgresql91 to version 9.1.9. (important)

postgresql was updated to version 9.1.9 bnc812525: CVE-2013-1899: Fix insecure parsing of server command-line switches. A connection request containing a database name that begins with "-" could be crafted to damage or destroy files within the server's data directory, even if the request is...

update for perl (important)

Perl was updated to fix 3 security issues: - fix rehash denial of service compute time bnc804415 CVE-2013-1667 - improve CGI crlf escaping bnc789994 CVE-2012-5526 - sanitize input in Maketext.pm to avoid code injection bnc797060 CVE-2012-6329 In openSUSE 12.1 also the following non-security bug w...

update for libvirt (important)

Update to libvirt 0.9.11.9 stable release - Fixes CVE-2013-0170 by including cherry picked master commit 46532e3e, bnc800976 - Fix starting lxc VM e.g from OpenStack bnc793900 and rh858104...

mariadb to 5.5.28a (important)

MariaDB was updated to 5.5.28a, fixing bugs and security issues: Release notes: http://kb.askmonty.org/v/mariadb-5528a-release-notes http://kb.askmonty.org/v/mariadb-5528-release-notes http://kb.askmonty.org/v/mariadb-5527-release-notes Changelog: http://kb.askmonty.org/v/mariadb-5528a-changelog...

seamonkey: Update to Seamonkey 2.11 (important)

Seamonkey was updated to version 2.11 bnc771583 MFSA 2012-42/CVE-2012-1949/CVE-2012-1948 Miscellaneous memory safety hazards MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1 952 Gecko memory corruption MFSA 2012-45/CVE-2012-1955 bmo757376 Spoofing issue with location MFSA...

MozillaThunderbird: update to Thunderbird 14.0 (important)

Mozilla Thunderbird was updated to version 14.0 bnc771583 MFSA 2012-42/CVE-2012-1949/CVE-2012-1948 Miscellaneous memory safety hazards MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1 952 Gecko memory corruption MFSA 2012-45/CVE-2012-1955 bmo757376 Spoofing issue with location MF...

flash-player (critical)

The update to Flash-Player 10.3.188.5 fixes various security issues: - CVE-2011-2130: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P - CVE-2011-2134: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P - CVE-2011-2135: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P - CVE-2011-2136: CVSS v2...

Security update for canna (important)

openSUSE Security Update: Security update for canna Announcement ID: openSUSE-SU-2022:10090-1 Rating: important References: 1199280 Cross-References: CVE-2022-21950 CVSS scores: CVE-2022-21950 SUSE: 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Backports SLE-15-SP3 ...

Security update for seamonkey (important)

openSUSE Security Update: Security update for seamonkey Announcement ID: openSUSE-SU-2022:10077-1 Rating: important References: Affected Products: openSUSE Leap 15.3 An update that contains security fixes can now be installed. Description: This update for seamonkey fixes the following issues:...

Security update for python-ipython (important)

openSUSE Security Update: Security update for python-ipython Announcement ID: openSUSE-SU-2022:10043-1 Rating: important References: 1194936 Cross-References: CVE-2022-21699 CVSS scores: CVE-2022-21699 NVD : 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2022-21699 SUSE: 8.8...

Security update for tensorflow2 (moderate)

openSUSE Security Update: Security update for tensorflow2 Announcement ID: openSUSE-SU-2022:10014-1 Rating: moderate References: 1173128 1173314 1178287 1178564 1179455 1181864 1186860 1189423 Cross-References: CVE-2020-26266 CVE-2020-26267 CVE-2020-26268 CVE-2020-26270 CVE-2020-26271...

Security update for flac (moderate)

openSUSE Security Update: Security update for flac Announcement ID: openSUSE-SU-2022:0815-1 Rating: moderate References: 1196660 Cross-References: CVE-2021-0561 CVSS scores: CVE-2021-0561 NVD : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-0561 SUSE: 5.5...

Security update for xerces-j2 (important)

openSUSE Security Update: Security update for xerces-j2 Announcement ID: openSUSE-SU-2022:0500-1 Rating: important References: 1195108 Cross-References: CVE-2022-23437 CVSS scores: CVE-2022-23437 NVD : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-23437 SUSE: 7.5...

Security update for getdata (moderate)

openSUSE Security Update: Security update for getdata Announcement ID: openSUSE-SU-2021:1645-1 Rating: moderate References: 1186251 Cross-References: CVE-2021-20204 CVSS scores: CVE-2021-20204 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-20204 SUSE: 9.8...

Security update for python-pip (moderate)

openSUSE Security Update: Security update for python-pip Announcement ID: openSUSE-SU-2021:4001-1 Rating: moderate References: 1186819 Cross-References: CVE-2021-3572 CVSS scores: CVE-2021-3572 SUSE: 4.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N Affected Products: openSUSE Leap 15.3 An update...

Security update for squid (moderate)

openSUSE Security Update: Security update for squid Announcement ID: openSUSE-SU-2021:1419-1 Rating: moderate References: 1189403 Cross-References: CVE-2021-28116 CVSS scores: CVE-2021-28116 NVD : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2021-28116 SUSE: 5.3...

Security update for libqt5-qtsvg (moderate)

openSUSE Security Update: Security update for libqt5-qtsvg Announcement ID: openSUSE-SU-2021:1371-1 Rating: moderate References: 1184783 Cross-References: CVE-2021-3481 CVSS scores: CVE-2021-3481 SUSE: 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L Affected Products: openSUSE Leap 15.2 An updat...

Recommended update for seamonkey (low)

openSUSE Security Update: Recommended update for seamonkey Announcement ID: openSUSE-SU-2021:1129-1 Rating: low References: Affected Products: openSUSE Backports SLE-15-SP3 An update that contains security fixes can now be installed. Description: This update ships seamonkey to openSUSE Leap 15.3...

Security update for bouncycastle (moderate)

openSUSE Security Update: Security update for bouncycastle Announcement ID: openSUSE-SU-2021:2163-1 Rating: moderate References: 1186328 Cross-References: CVE-2020-15522 CVSS scores: CVE-2020-15522 NVD : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2020-15522 SUSE: 5.9...