8804 matches found
Security update for yast2-users (important)
yast2-users was updated to fix one security issue. This security issue was fixed: - CVE-2016-1601: Empty passwords fields in /etc/shadow after SLES 12 SP1 autoyast installation bsc974220. This update includes a script that fixes installations that we're affected by this problem. It is run...
Security update for Chromium (important)
Chromium was updated to 50.0.2661.94 to fix a number of vulnerabilities boo977830: - CVE-2016-1660: Out-of-bounds write in Blink - CVE-2016-1661: Memory corruption in cross-process frames - CVE-2016-1662: Use-after-free in extensions - CVE-2016-1663: Use-after-free in BlinkâÂÂs V8 bindings -...
Security update for flash-player (important)
flash-player was updated to fix one security issue. This security issue was fixed: - CVE-2016-1019: Adobe Flash Player earlier allowed remote attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016...
Security update for git (important)
This update for git fixes a buffer overflow issue that had the potential to be abused for remote execution of arbitrary code CVE-2016-2315, CVE-2016-2324, bsc971328...
Security update for samba (important)
This update for samba fixes the following issues: Version update to 4.1.23. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; bso11648; boo968222. + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; bso11128; bso11686; boo968223. Also...
Security update for git (important)
This update for git fixes a buffer overflow issue that had the potential to be abused for remote execution of arbitrary code CVE-2016-2315, CVE-2016-2324, bsc971328...
Security update for rubygem-actionview-4_2 (important)
This update for rubygem-actionview-42 fixes the following issues: - CVE-2016-2098: rubygem-actionpack: Possible remote code execution vulnerability in Action Pack boo968849...
Security update for Mozilla Firefox (important)
This update fixes the following security related issues by updating packages to a more recent version: Update of NSPR to 4.11 Update of NSS to 3.21 Update of Firefox to 44.0 MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 Miscellaneous memory safety hazards MFSA 2016-02/CVE-2016-1933 bmo1231761 Out of...
Security update for bind (important)
This update for bind fixes the following security issue: - CVE-2015-8000: Fix remote denial of service by misparsing incoming responses bsc958861. This update was imported from the SUSE:SLE-12-SP1:Update update project...
Security update for bind (important)
This update for bind fixes the following security issue: - CVE-2015-8000: Fix remote denial of service by misparsing incoming responses boo958861...
Security update for Chromium (important)
Chromium was updated to 47.0.2525.106 to fix security issues. Vulnerabilities were fixed under the following collective identifier: CVE-2015-6792: Fixes from internal audits and fuzzing. boo959458...
Security update for flash-player (important)
This update for flash-player to version 11.2.202.554 fixes the following security issues in Adobe security advisory APSB15-32. These updates resolve heap buffer overflow vulnerabilities that could lead to code execution CVE-2015-8438, CVE-2015-8446. These updates resolve memory corruption...
Security update for Chromium (important)
Chromium was updated to 45.0.2454.101 to fix two security issues. The following vulnerabilities were fixed: CVE-2015-1303: Cross-origin bypass in DOM boo947504 CVE-2015-1304: Cross-origin bypass in V8 boo947507...
Security update for flash-player (important)
flash-player received a security update to version to 11.2.202.425 bsc909219, which fixes: APSB14-27, CVE-2014-0580, CVE-2014-0587, CVE-2014-8443, CVE-2014-9162, CVE-2014-9163, CVE-2014-9164...
xen: security and bugfix update (important)
XEN was updated to fix various bugs and security issues. Security issues fixed: - bnc897657 - CVE-2014-7188: XSA-108 Improper MSR range used for x2APIC emulation - bnc895802 - CVE-2014-7156: XSA-106: Missing privilege level checks in x86 emulation of software interrupts - bnc895799 - CVE-2014-715...
NSS update to avoid signature forgery (critical)
NSS is vulnerable to a variant of a signature forgery attack previously published by Daniel Bleichenbacher. This is due to lenient parsing of ASN.1 values involved in a signature and could lead to the forging of RSA certificates...
update for flash-player (critical)
This flash-player update fixes a critical buffer overflow vulnerability that leads to arbitrary code execution. The flash-player package was updated to version 11.2.202.356. bnc875577, APSB14-13, CVE-2014-0515...
gnutls: fixed SSL certificate validation (critical)
The gnutls library was updated to fix SSL certificate validation. Remote man-in-the-middle attackers were able to make the verification believe that a SSL certificate is valid even though it was not...
Fixes a local vulnerability (important)
Fixed CVE-2013-3709: make the secret token file secrettoken.rb readable only for the webyast user to avoid forging the session cookie bnc851116...
kernel (critical)
The openSUSE 12.1 kernel was updated to fix a critical security issue and also some reiserfs bugs. CVE-2013-2850: Incorrect strncpy usage in the network listening part of the iscsi target driver could have been used by remote attackers to crash the kernel or execute code. This required the iscsi...
MozillaFirefox: update to version 21.0 (important)
MozillaFirefox was updated to Firefox 21.0 bnc819204 MFSA 2013-41/CVE-2013-0801/CVE-2013-1669 Miscellaneous memory safety hazards MFSA 2013-42/CVE-2013-1670 bmo853709 Privileged access for content level constructor MFSA 2013-43/CVE-2013-1671 bmo842255 File input control has access to full path MF...
xulrunner to 17.0.6esr (important)
Mozilla xulrunner was updated to 17.0.6esr bnc819204 MFSA 2013-41/CVE-2013-0801/CVE-2013-1669 Miscellaneous memory safety hazards MFSA 2013-42/CVE-2013-1670 bmo853709 Privileged access for content level constructor MFSA 2013-46/CVE-2013-1674 bmo860971 Use-after-free with video and onresize event...
flash-player: update to version 11.2.202.275 (critical)
Adobe Flash Player was updated to 11.2.202.275: bnc808973 APSB13-09, CVE-2013-0646, CVE-2013-0650, CVE-2013-1371, CVE-2013-1375 More information can be found on: http://www.adobe.com/support/security/bulletins/apsb13-09.ht ml...
flash-player: Update to 11.2.202.251 (important)
Flash Player was updated to 11.2.202.251 bnc788450, fixing severe security issues: CVE-2012-5274, CVE-2012-5275, CVE-2012-5276, CVE-2012-5277, CVE-2012-5278, CVE-2012-5279, CVE-2012-5280...
flash-player to 11.2.202.238 (critical)
Adobe Flash Player was updated to 11.2.202.238 fixing various bugs and security issues...
Security update for chromium (important)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10123-1 Rating: important References: 1203419 Cross-References: CVE-2022-3195 CVE-2022-3196 CVE-2022-3197 CVE-2022-3198 CVE-2022-3199 CVE-2022-3200 CVE-2022-3201 Affected Products: openSUSE Backports SLE-15-S...
Security update for python-Django (important)
openSUSE Security Update: Security update for python-Django Announcement ID: openSUSE-SU-2022:10103-1 Rating: important References: 1201923 Cross-References: CVE-2022-36359 CVSS scores: CVE-2022-36359 NVD : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-36359 SUSE: 7.3...
Security update for chromium (important)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:0125-1 Rating: important References: 1198917 1199118 Cross-References: CVE-2022-1477 CVE-2022-1478 CVE-2022-1479 CVE-2022-1480 CVE-2022-1481 CVE-2022-1482 CVE-2022-1483 CVE-2022-1484 CVE-2022-1485 CVE-2022-14...
Security update for opera (important)
openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2022:0123-1 Rating: important References: Cross-References: CVE-2022-1364 Affected Products: openSUSE Leap 15.3:NonFree An update that fixes one vulnerability is now available. Description: This update for opera fixe...
Security update for libarchive (moderate)
openSUSE Security Update: Security update for libarchive Announcement ID: openSUSE-SU-2022:0944-1 Rating: moderate References: 1022528 1188572 1189528 Cross-References: CVE-2017-5601 CVE-2021-36976 CVSS scores: CVE-2017-5601 NVD : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2017-5601 SUS...
Security update for firejail (important)
openSUSE Security Update: Security update for firejail Announcement ID: openSUSE-SU-2022:0037-1 Rating: important References: 1195880 Affected Products: openSUSE Backports SLE-15-SP3 An update that contains security fixes can now be installed. Description: This update for firejail fixes the...
Security update for p11-kit (important)
openSUSE Security Update: Security update for p11-kit Announcement ID: openSUSE-SU-2021:4154-1 Rating: important References: 1180064 1187993 Cross-References: CVE-2020-29361 CVSS scores: CVE-2020-29361 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2020-29361 SUSE: 7.5...
Security update for chromium (important)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:1582-1 Rating: important References: 1192310 1192734 1193519 Cross-References: CVE-2021-38005 CVE-2021-38006 CVE-2021-38007 CVE-2021-38008 CVE-2021-38009 CVE-2021-38010 CVE-2021-38011 CVE-2021-38012...
Security update for python-Babel (important)
openSUSE Security Update: Security update for python-Babel Announcement ID: openSUSE-SU-2021:1553-1 Rating: important References: 1185768 Cross-References: CVE-2021-42771 CVSS scores: CVE-2021-42771 SUSE: 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 An...
Security update for glib-networking (important)
openSUSE Security Update: Security update for glib-networking Announcement ID: openSUSE-SU-2021:3944-1 Rating: important References: 1172460 Cross-References: CVE-2020-13645 CVSS scores: CVE-2020-13645 NVD : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2020-13645 SUSE: 6.5...
Security update for go1.17 (moderate)
openSUSE Security Update: Security update for go1.17 Announcement ID: openSUSE-SU-2021:3833-1 Rating: moderate References: 1190649 1192377 1192378 Cross-References: CVE-2021-41771 CVE-2021-41772 CVSS scores: CVE-2021-41772 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products:...
Security update for netcdf (important)
openSUSE Security Update: Security update for netcdf Announcement ID: openSUSE-SU-2021:1505-1 Rating: important References: 1191856 Cross-References: CVE-2019-20005 CVE-2019-20006 CVE-2019-20007 CVE-2019-20198 CVE-2019-20199 CVE-2019-20200 CVE-2019-20201 CVE-2019-20202 CVE-2021-26220 CVE-2021-262...
Security update for netcdf (important)
openSUSE Security Update: Security update for netcdf Announcement ID: openSUSE-SU-2021:3805-1 Rating: important References: 1191856 Cross-References: CVE-2019-20005 CVE-2019-20006 CVE-2019-20007 CVE-2019-20198 CVE-2019-20199 CVE-2019-20200 CVE-2019-20201 CVE-2019-20202 CVE-2021-26220 CVE-2021-262...
Security update for bind (important)
openSUSE Security Update: Security update for bind Announcement ID: openSUSE-SU-2021:1502-1 Rating: important References: 1192146 Cross-References: CVE-2021-25219 CVSS scores: CVE-2021-25219 NVD : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-25219 SUSE: 5.3...
Security update for krb5 (moderate)
openSUSE Security Update: Security update for krb5 Announcement ID: openSUSE-SU-2021:3454-1 Rating: moderate References: 1189929 Cross-References: CVE-2021-37750 CVSS scores: CVE-2021-37750 SUSE: 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 An update that...
Security update for grilo (important)
openSUSE Security Update: Security update for grilo Announcement ID: openSUSE-SU-2021:1312-1 Rating: important References: 1189839 Cross-References: CVE-2021-39365 CVSS scores: CVE-2021-39365 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.2 An update th...
Security update for gd (moderate)
openSUSE Security Update: Security update for gd Announcement ID: openSUSE-SU-2021:3236-1 Rating: moderate References: 1190400 Cross-References: CVE-2021-40812 CVSS scores: CVE-2021-40812 SUSE: 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affected Products: openSUSE Leap 15.3 An update that fix...
Security update for redis (important)
openSUSE Security Update: Security update for redis Announcement ID: openSUSE-SU-2021:2294-1 Rating: important References: 1186722 Cross-References: CVE-2021-32625 CVSS scores: CVE-2021-32625 SUSE: 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 An update th...
Security update for python-httplib2 (moderate)
openSUSE Security Update: Security update for python-httplib2 Announcement ID: openSUSE-SU-2021:1806-1 Rating: moderate References: 1171998 1182053 Cross-References: CVE-2020-11078 CVE-2021-21240 CVSS scores: CVE-2020-11078 NVD : 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N CVE-2020-11078 SUS...
Security update for libgcrypt (important)
openSUSE Security Update: Security update for libgcrypt Announcement ID: openSUSE-SU-2021:2157-1 Rating: important References: 1187212 Cross-References: CVE-2021-33560 CVSS scores: CVE-2021-33560 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2021-33560 SUSE: 7.5...
Security update for roundcubemail (important)
openSUSE Security Update: Security update for roundcubemail Announcement ID: openSUSE-SU-2021:0942-1 Rating: important References: 1180399 1187706 1187707 Cross-References: CVE-2020-18670 CVE-2020-18671 CVE-2020-35730 CVSS scores: CVE-2020-18670 NVD : 5.4...
Security update for MozillaFirefox (important)
openSUSE Security Update: Security update for MozillaFirefox Announcement ID: openSUSE-SU-2021:0858-1 Rating: important References: 1185633 1186696 Cross-References: CVE-2021-29951 CVE-2021-29964 CVE-2021-29967 CVSS scores: CVE-2021-29951 SUSE: 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L...
Security update for prosody (important)
openSUSE Security Update: Security update for prosody Announcement ID: openSUSE-SU-2021:0728-1 Rating: important References: 1186027 Cross-References: CVE-2021-32917 CVE-2021-32918 CVE-2021-32919 CVE-2021-32920 Affected Products: openSUSE Leap 15.2 An update that fixes four vulnerabilities is now...
Security update for p7zip (moderate)
openSUSE Security Update: Security update for p7zip Announcement ID: openSUSE-SU-2021:0684-1 Rating: moderate References: 1184699 Cross-References: CVE-2021-3465 CVSS scores: CVE-2021-3465 SUSE: 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Leap 15.2 An update that...
Security update for MozillaThunderbird (important)
openSUSE Security Update: Security update for MozillaThunderbird Announcement ID: openSUSE-SU-2021:0580-1 Rating: important References: 1177542 1183942 1184536 Cross-References: CVE-2021-23981 CVE-2021-23982 CVE-2021-23984 CVE-2021-23987 CVE-2021-23991 CVE-2021-23992 CVE-2021-23993 CVSS scores:...