Security update for icingaweb2 (important)

openSUSE Security Update: Security update for icingaweb2 Announcement ID: openSUSE-SU-2020:1674-1 Rating: important References: 1175530 Cross-References: CVE-2020-24368 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP2 openSUSE Backports SLE-15-SP1 SUSE Packag...

Security update for librepo (important)

openSUSE Security Update: Security update for librepo Announcement ID: openSUSE-SU-2020:1289-1 Rating: important References: 1175475 Cross-References: CVE-2020-14352 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for librepo...

Security update for ark (moderate)

openSUSE Security Update: Security update for ark Announcement ID: openSUSE-SU-2020:1183-1 Rating: moderate References: 1174773 Cross-References: CVE-2020-16116 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now...

Security update for targetcli-fb (moderate)

openSUSE Security Update: Security update for targetcli-fb Announcement ID: openSUSE-SU-2020:1144-1 Rating: moderate References: 1172743 Cross-References: CVE-2020-13867 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for...

Security update for libraw (moderate)

openSUSE Security Update: Security update for libraw Announcement ID: openSUSE-SU-2020:1128-1 Rating: moderate References: 1173674 Cross-References: CVE-2020-15503 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for libraw...

Security update for knot (moderate)

openSUSE Security Update: Security update for knot Announcement ID: openSUSE-SU-2020:1086-1 Rating: moderate References: 1047841 Cross-References: CVE-2017-11104 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for knot fixes...

Security update for pdns-recursor (moderate)

openSUSE Security Update: Security update for pdns-recursor Announcement ID: openSUSE-SU-2020:1005-1 Rating: moderate References: 1173302 Cross-References: CVE-2020-14196 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 SUSE Package Hub for SUSE Linux...

Security update for hylafax+ (moderate)

openSUSE Security Update: Security update for hylafax+ Announcement ID: openSUSE-SU-2020:0958-1 Rating: moderate References: 1172731 Cross-References: CVE-2020-8024 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for hylafax+...

Security update for coturn (moderate)

openSUSE Security Update: Security update for coturn Announcement ID: openSUSE-SU-2020:0937-1 Rating: moderate References: 1173510 Cross-References: CVE-2020-4067 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for coturn fix...

Security update for tomcat (important)

openSUSE Security Update: Security update for tomcat Announcement ID: openSUSE-SU-2020:0911-1 Rating: important References: 1172405 Cross-References: CVE-2020-8022 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for tomcat...

Security update for varnish (moderate)

openSUSE Security Update: Security update for varnish Announcement ID: openSUSE-SU-2020:0808-1 Rating: moderate References: 1169039 1169040 Cross-References: CVE-2019-20637 CVE-2020-11653 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description:...

Security update for libosip2 (important)

This update for libosip2 fixes the following issues: Changes in libosip2: - CVE-2017-7853: In libosip2 in GNU 5.0.0, a malformed SIP message can lead to a heap buffer overflow in the msgosipbodyparse function defined in osipparser2/osipmessageparse.c, resulting in a remote DoS. boo1034570 -...

Security update for postgresql93 (important)

The postgresql server postgresql93 was updated to 9.3.14 fixes the following issues: Update to version 9.3.14: Fix possible mis-evaluation of nested CASE-WHEN expressions CVE-2016-5423, boo993454 Fix client programs' handling of special characters in database and role names CVE-2016-5424, boo9934...

Recommended update for flash-player (important)

This update for flash-player fixes the following security issues APSB16-29, boo998589: integer overflow vulnerability that could lead to code execution CVE-2016-4287. use-after-free vulnerabilities that could lead to code execution CVE-2016-4272, CVE-2016-4279, CVE-2016-6921, CVE-2016-6923,...

Important security fixes for Typo3 (important)

Important security fixes for vulnerabilities in typo3 which can be used for Cross-Site Scripting or Denial of Service attacks or for authentication bypassing...

Security update for flash-player (important)

Adobe Flash Player was updated to 11.2.202.632 to fix many security issues tracked under the upstream advisory APSB16-25, allowing remote attackers to execute arbitrary code when delivering specially crafted Flash content. The following vulnerabilities were fixed: - CVE-2016-4172: memory corrupti...

Security update for Chromium (important)

Chromium was updated to 51.0.2704.103 to fix three vulnerabilities: - CVE-2016-1704: Various fixes from internal audits, fuzzing and other initiatives shared identifier boo985397...

Security update for Chromium (important)

Chromium was updated to 50.0.2661.94 to fix a number of vulnerabilities boo977830: - CVE-2016-1660: Out-of-bounds write in Blink - CVE-2016-1661: Memory corruption in cross-process frames - CVE-2016-1662: Use-after-free in extensions - CVE-2016-1663: Use-after-free in Blink’s V8 bindings -...

Security update for flash-player (important)

flash-player was updated to fix one security issue. This security issue was fixed: - CVE-2016-1019: Adobe Flash Player earlier allowed remote attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016...

Security update for rubygem-actionview-4_2 (important)

This update for rubygem-actionview-42 fixes the following issues: - CVE-2016-2098: rubygem-actionpack: Possible remote code execution vulnerability in Action Pack boo968849...

Security update to Chromium 48.0.2564.116 (critical)

This update contains Chromium 48.0.2564.116 ans fixes the following security flaw: - CVE-2016-1629: Same-origin bypass in Blink and Sandbox escape in Chrome. boo967376...

Security update to Chromium 48.0.2564.116 (critical)

This update contains Chromium 48.0.2564.116 ans fixes the following security flaw: - CVE-2016-1629: Same-origin bypass in Blink and Sandbox escape in Chrome. boo967376...

Security update for bind (important)

This update for bind fixes the following security issue: - CVE-2015-8000: Fix remote denial of service by misparsing incoming responses boo958861...

Security update for Chromium (important)

Chromium was updated to 45.0.2454.101 to fix two security issues. The following vulnerabilities were fixed: CVE-2015-1303: Cross-origin bypass in DOM boo947504 CVE-2015-1304: Cross-origin bypass in V8 boo947507...

Security update for MozillaFirefox (important)

MozillaFirefox was updated to version 41.0.2 to fix one security issue. This security issue was fixed: - CVE-2015-7184: Cross-origin restriction bypass using Fetch bsc950686. These non-security issues were fixed: Fix a startup crash related to Yandex toolbar and Adblock Plus bmo1209124 Fix...

Security update for flash-player (critical)

flash-player was updated to fix one security issue. This security issue was fixed: - CVE-2015-7645: Critical vulnerability affecting 11.2.202.535 used in Pawn Storm APSA15-05 bsc950474...

Security update for MozillaThunderbird (important)

MozillaThunderbird was updated to fix 17 security issues. These security issues were fixed: - CVE-2015-4509: Use-after-free vulnerability in the HTMLVideoElement interface in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allowed remote attackers to execute arbitrary code via crafte...

Security update for Adobe Flash Player (important)

Adobe Flash Player was updated to 11.2.202.468 to fix one security issue. The following vulnerability was fixed: CVE-2015-3113: A heap buffer overflow vulnerability could have allowed code execution bsc935701, APSB15-14...

Security update for qemu (important)

qemu was updated to fix a security issue: CVE-2015-3456: Fixed a buffer overflow in the floppy drive emulation, which could be used to denial of service attacks or potential code execution against the host...

Security update for flash-player (important)

Adobe Flash Player was updated to 11.2.202.429 bsc913057: APSB15-01, CVE-2015-0301, CVE-2015-0302, CVE-2015-0303, CVE-2015-0304, CVE-2015-0305, CVE-2015-0306, CVE-2015-0307, CVE-2015-0308, CVE-2015-0309. - Disable flash player on machines without SSE2 bnc856386. More information can be found on...

chromium to 37.0.2062.94 (important)

Chromium was updated to 37.0.2062.94 containing security Fixes bnc893720. A full list of changes is available in the log: https://chromium.googlesource.com/chromium/src/+log/36.0.1985.0..37.0.2062. 0?pretty=full This update includes 50 security fixes. Below, we highlight fixes that were either...

gnutls: Fixed possible memory corruption and NULL pointer dereference (important)

gnutls was patched to fix two security vulnerabilities that could be used to disrupt service or potentially allow remote code execution. - Memory corruption during connect CVE-2014-3466 - NULL pointer dereference in gnutlsx509dnoidname CVE-2014-3465...

update for samba (important)

This update of samba fixed the following issues: - The pamwinbind requiremembershipof option allows for a list of SID, but currently only provides buffer space for 20; bnc806501. - Samba 3.0.x to 4.0.7 are affected by a denial of service attack on authenticated or guest connections; CVE-2013-4124...

xulrunner to 17.0.6esr (important)

Mozilla xulrunner was updated to 17.0.6esr bnc819204 MFSA 2013-41/CVE-2013-0801/CVE-2013-1669 Miscellaneous memory safety hazards MFSA 2013-42/CVE-2013-1670 bmo853709 Privileged access for content level constructor MFSA 2013-46/CVE-2013-1674 bmo860971 Use-after-free with video and onresize event...

flash-player: Update to 11.2.202.243 (critical)

Flash Player was updated to 11.2.202.243 CVE-2012-5248, CVE-2012-5249, CVE-2012-5250, CVE-2012-5251, CVE-2012-5252, CVE-2012-5253, CVE-2012-5254, CVE-2012-5255, CVE-2012-5256, CVE-2012-5257, CVE-2012-5258, CVE-2012-5259, CVE-2012-5260, CVE-2012-5261, CVE-2012-5262, CVE-2012-5263, CVE-2012-5264,...

update for flash-player (critical)

This version upgrade of flash-player fixed multiple unspecified code execution vulnerabilities...

freetype2 (important)

This update of freetype2 fixes multiple security flaws that could allow attackers to cause a denial of service or to execute arbitrary code via specially crafted fonts CVE-2011-3256, CVE-2011-3439...

freetype2 (important)

This update of freetype2 fixes multiple security flaws that could allow attackers to cause a denial of service or to execute arbitrary code via specially crafted fonts CVE-2011-3256, CVE-2011-3439...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10151-1 Rating: important References: 1204223 Cross-References: CVE-2022-3445 CVE-2022-3446 CVE-2022-3447 CVE-2022-3448 CVE-2022-3449 CVE-2022-3450 Affected Products: openSUSE Backports SLE-15-SP3 An update...

Security update for varnish (important)

openSUSE Security Update: Security update for varnish Announcement ID: openSUSE-SU-2022:10104-1 Rating: important References: 1202350 Cross-References: CVE-2022-38150 CVSS scores: CVE-2022-38150 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP...

Security update for python-nltk (moderate)

openSUSE Security Update: Security update for python-nltk Announcement ID: openSUSE-SU-2022:10040-1 Rating: moderate References: 1146427 1191030 Cross-References: CVE-2019-14751 CVE-2021-3828 CVSS scores: CVE-2019-14751 NVD : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2021-3828 NVD : 7....

Security update for tensorflow2 (moderate)

openSUSE Security Update: Security update for tensorflow2 Announcement ID: openSUSE-SU-2022:10014-1 Rating: moderate References: 1173128 1173314 1178287 1178564 1179455 1181864 1186860 1189423 Cross-References: CVE-2020-26266 CVE-2020-26267 CVE-2020-26268 CVE-2020-26270 CVE-2020-26271...

Security update for abcm2ps (moderate)

openSUSE Security Update: Security update for abcm2ps Announcement ID: openSUSE-SU-2022:0100-1 Rating: moderate References: 1197355 Cross-References: CVE-2021-32434 CVE-2021-32435 CVE-2021-32436 CVSS scores: CVE-2021-32434 NVD : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-32435 NVD ...

Security update for flac (moderate)

openSUSE Security Update: Security update for flac Announcement ID: openSUSE-SU-2022:0815-1 Rating: moderate References: 1196660 Cross-References: CVE-2021-0561 CVSS scores: CVE-2021-0561 NVD : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-0561 SUSE: 5.5...

Security update for python-libxml2-python (important)

openSUSE Security Update: Security update for python-libxml2-python Announcement ID: openSUSE-SU-2022:0802-1 Rating: important References: 1196490 Cross-References: CVE-2022-23308 CVSS scores: CVE-2022-23308 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-23308 SUSE: 7...

Security update for mc (moderate)

openSUSE Security Update: Security update for mc Announcement ID: openSUSE-SU-2022:0061-1 Rating: moderate References: 1190180 Cross-References: CVE-2021-36370 CVSS scores: CVE-2021-36370 SUSE: 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N Affected Products: openSUSE Backports SLE-15-SP3 An...

Security update for libaom (moderate)

openSUSE Security Update: Security update for libaom Announcement ID: openSUSE-SU-2021:4170-1 Rating: moderate References: 1193356 1193365 1193366 1193369 Cross-References: CVE-2020-36129 CVE-2020-36130 CVE-2020-36131 CVE-2020-36135 CVSS scores: CVE-2020-36129 SUSE: 5.5...

Security update for postgresql10 (important)

openSUSE Security Update: Security update for postgresql10 Announcement ID: openSUSE-SU-2021:4058-1 Rating: important References: 1192516 Cross-References: CVE-2021-23214 CVE-2021-23222 CVSS scores: CVE-2021-23214 SUSE: 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-23222 SUSE: 3.7...

Security update for fetchmail (moderate)

openSUSE Security Update: Security update for fetchmail Announcement ID: openSUSE-SU-2021:4018-1 Rating: moderate References: 1152964 1174075 1181400 1188875 1190069 1190896 SLE-17903 SLE-18059 SLE-18159 Cross-References: CVE-2021-36386 CVE-2021-39272 CVSS scores: CVE-2021-36386 NVD : 7.5...

Security update for libvirt (moderate)

openSUSE Security Update: Security update for libvirt Announcement ID: openSUSE-SU-2021:1451-1 Rating: moderate References: 1177902 1186398 1188232 1188843 1190420 1190693 1190695 Cross-References: CVE-2021-3667 CVSS scores: CVE-2021-3667 SUSE: 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H...