Security update for MozillaFirefox (important)

openSUSE Security Update: Security update for MozillaFirefox Announcement ID: openSUSE-SU-2021:1575-1 Rating: important References: 1193321 1193485 Cross-References: CVE-2021-43536 CVE-2021-43537 CVE-2021-43538 CVE-2021-43539 CVE-2021-43541 CVE-2021-43542 CVE-2021-43543 CVE-2021-43545...

Security update for glibc (moderate)

openSUSE Security Update: Security update for glibc Announcement ID: openSUSE-SU-2021:1560-1 Rating: moderate References: 1027496 1183085 Cross-References: CVE-2016-10228 CVSS scores: CVE-2016-10228 NVD : 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2016-10228 SUSE: 3.3...

Security update for wireshark (moderate)

openSUSE Security Update: Security update for wireshark Announcement ID: openSUSE-SU-2021:1566-1 Rating: moderate References: 1192830 Cross-References: CVE-2021-39920 CVE-2021-39921 CVE-2021-39922 CVE-2021-39924 CVE-2021-39925 CVE-2021-39926 CVE-2021-39928 CVE-2021-39929 CVSS scores: CVE-2021-399...

Security update for xen (moderate)

openSUSE Security Update: Security update for xen Announcement ID: openSUSE-SU-2021:1543-1 Rating: moderate References: 1027519 1191363 1192554 1192557 1192559 Cross-References: CVE-2021-28702 CVE-2021-28704 CVE-2021-28705 CVE-2021-28706 CVE-2021-28707 CVE-2021-28708 CVE-2021-28709 CVSS scores:...

Security update for openexr (moderate)

openSUSE Security Update: Security update for openexr Announcement ID: openSUSE-SU-2021:3844-1 Rating: moderate References: 1192498 1192556 Cross-References: CVE-2021-3933 CVE-2021-3941 CVSS scores: CVE-2021-3933 SUSE: 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-3941 SUSE: 5.5...

Security update for python-sqlparse (moderate)

openSUSE Security Update: Security update for python-sqlparse Announcement ID: openSUSE-SU-2021:3857-1 Rating: moderate References: 1190741 Cross-References: CVE-2021-32839 CVSS scores: CVE-2021-32839 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-32839 SUSE: 6.5...

Security update for libvirt (moderate)

openSUSE Security Update: Security update for libvirt Announcement ID: openSUSE-SU-2021:1451-1 Rating: moderate References: 1177902 1186398 1188232 1188843 1190420 1190693 1190695 Cross-References: CVE-2021-3667 CVSS scores: CVE-2021-3667 SUSE: 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H...

Security update for fetchmail (moderate)

openSUSE Security Update: Security update for fetchmail Announcement ID: openSUSE-SU-2021:1416-1 Rating: moderate References: 1190069 Cross-References: CVE-2021-39272 CVSS scores: CVE-2021-39272 SUSE: 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.2 An update...

Security update for hivex (moderate)

openSUSE Security Update: Security update for hivex Announcement ID: openSUSE-SU-2021:1319-1 Rating: moderate References: 1189060 Cross-References: CVE-2021-3622 CVSS scores: CVE-2021-3622 SUSE: 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Affected Products: openSUSE Leap 15.2 An update that...

Security update for wireshark (moderate)

openSUSE Security Update: Security update for wireshark Announcement ID: openSUSE-SU-2021:1276-1 Rating: moderate References: 1188375 Cross-References: CVE-2021-22235 CVSS scores: CVE-2021-22235 SUSE: 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 An update...

Security update for gstreamer-plugins-good (moderate)

openSUSE Security Update: Security update for gstreamer-plugins-good Announcement ID: openSUSE-SU-2021:2915-1 Rating: moderate References: 1184735 1184739 Cross-References: CVE-2021-3497 CVE-2021-3498 CVSS scores: CVE-2021-3497 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-3497...

Security update for aspell (important)

openSUSE Security Update: Security update for aspell Announcement ID: openSUSE-SU-2021:1181-1 Rating: important References: 1177523 1188576 Cross-References: CVE-2019-25051 CVSS scores: CVE-2019-25051 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2019-25051 SUSE: 7.8...

Security update for openscad (moderate)

openSUSE Security Update: Security update for openscad Announcement ID: openSUSE-SU-2021:1024-1 Rating: moderate References: 1185975 Cross-References: CVE-2020-28600 CVSS scores: CVE-2020-28600 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 An update...

Security update for python-rsa (important)

openSUSE Security Update: Security update for python-rsa Announcement ID: openSUSE-SU-2021:0901-1 Rating: important References: 1172389 Cross-References: CVE-2020-13757 CVSS scores: CVE-2020-13757 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2020-13757 SUSE: 7.5...

Security update for curl (moderate)

openSUSE Security Update: Security update for curl Announcement ID: openSUSE-SU-2021:0808-1 Rating: moderate References: 1186114 SLE-17956 Cross-References: CVE-2021-22898 CVSS scores: CVE-2021-22898 SUSE: 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affected Products: openSUSE Leap 15.2 An...

Security update for tar (low)

openSUSE Security Update: Security update for tar Announcement ID: openSUSE-SU-2021:0494-1 Rating: low References: 1181131 Cross-References: CVE-2021-20193 CVSS scores: CVE-2021-20193 NVD : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-20193 SUSE: 3.3...

Security update for libmysofa (moderate)

openSUSE Security Update: Security update for libmysofa Announcement ID: openSUSE-SU-2021:0459-1 Rating: moderate References: 1149919 1149920 1149922 1149924 1149926 1159839 1160040 1181977 1181978 1181979 1181980 1181981 1182883 Cross-References: CVE-2019-16091 CVE-2019-16092 CVE-2019-16093...

Security update for openldap2 (important)

openSUSE Security Update: Security update for openldap2 Announcement ID: openSUSE-SU-2021:0408-1 Rating: important References: 1182279 1182408 1182411 1182412 1182413 1182415 1182416 1182417 1182418 1182419 1182420 Cross-References: CVE-2020-36221 CVE-2020-36222 CVE-2020-36223 CVE-2020-36224...

Security update for wpa_supplicant (important)

openSUSE Security Update: Security update for wpasupplicant Announcement ID: openSUSE-SU-2021:0404-1 Rating: important References: 1182805 Cross-References: CVE-2021-27803 CVSS scores: CVE-2021-27803 NVD : 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-27803 SUSE: 7.5...

Security update for nodejs8 (moderate)

openSUSE Security Update: Security update for nodejs8 Announcement ID: openSUSE-SU-2021:0389-1 Rating: moderate References: 1182620 Cross-References: CVE-2021-22884 CVSS scores: CVE-2021-22884 SUSE: 5.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L Affected Products: openSUSE Leap 15.2 An update...

Security update for MozillaThunderbird (important)

openSUSE Security Update: Security update for MozillaThunderbird Announcement ID: openSUSE-SU-2021:0208-1 Rating: important References: 1181414 Cross-References: CVE-2020-15685 CVE-2020-26976 CVE-2021-23953 CVE-2021-23954 CVE-2021-23960 CVE-2021-23964 Affected Products: openSUSE Leap 15.1 An upda...

Security update for mutt (moderate)

openSUSE Security Update: Security update for mutt Announcement ID: openSUSE-SU-2021:0161-1 Rating: moderate References: 1181221 Cross-References: CVE-2021-3181 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for mutt fixes t...

Security update for ImageMagick (moderate)

openSUSE Security Update: Security update for ImageMagick Announcement ID: openSUSE-SU-2021:0148-1 Rating: moderate References: 1179103 1179202 1179208 1179212 1179221 1179223 1179240 1179244 1179260 1179268 1179269 1179276 1179278 1179281 1179285 1179311 1179312 1179313 1179315 1179317 1179321...

Security update for wavpack (moderate)

openSUSE Security Update: Security update for wavpack Announcement ID: openSUSE-SU-2021:0153-1 Rating: moderate References: 1091340 1091341 1091342 1091343 1091344 1180414 Cross-References: CVE-2018-10536 CVE-2018-10537 CVE-2018-10538 CVE-2018-10539 CVE-2018-10540 CVE-2018-19840 CVE-2018-19841...

Security update for php7 (moderate)

openSUSE Security Update: Security update for php7 Announcement ID: openSUSE-SU-2021:0106-1 Rating: moderate References: 1180706 Cross-References: CVE-2020-7071 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for php7 fixes t...

Security update for openldap2 (moderate)

openSUSE Security Update: Security update for openldap2 Announcement ID: openSUSE-SU-2021:0102-1 Rating: moderate References: 1178909 1179503 Cross-References: CVE-2020-25709 CVE-2020-25710 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Descriptio...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:0047-1 Rating: important References: 1180645 Cross-References: CVE-2020-15995 CVE-2020-16043 CVE-2021-21106 CVE-2021-21107 CVE-2021-21108 CVE-2021-21109 CVE-2021-21110 CVE-2021-21111 CVE-2021-21112...

Security update for pngcheck (moderate)

openSUSE Security Update: Security update for pngcheck Announcement ID: openSUSE-SU-2020:2220-1 Rating: moderate References: 1179528 Cross-References: CVE-2020-27818 Affected Products: openSUSE Backports SLE-15-SP2 An update that fixes one vulnerability is now available. Description: This update...

Security update for krb5 (moderate)

openSUSE Security Update: Security update for krb5 Announcement ID: openSUSE-SU-2020:2062-1 Rating: moderate References: 1178512 Cross-References: CVE-2020-28196 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for krb5 fixes...

Security update for slurm (important)

openSUSE Security Update: Security update for slurm Announcement ID: openSUSE-SU-2020:2033-1 Rating: important References: 1178890 1178891 Cross-References: CVE-2020-27745 CVE-2020-27746 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description:...

Security update for gdm (important)

openSUSE Security Update: Security update for gdm Announcement ID: openSUSE-SU-2020:1961-1 Rating: important References: 1178150 Cross-References: CVE-2020-16125 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for gdm fixes t...

Security update for python-waitress (moderate)

openSUSE Security Update: Security update for python-waitress Announcement ID: openSUSE-SU-2020:1911-1 Rating: moderate References: 1160790 1161088 1161089 1161670 Cross-References: CVE-2019-16785 CVE-2019-16786 CVE-2019-16789 CVE-2019-16792 Affected Products: openSUSE Leap 15.2 An update that...

Security update for graphviz (low)

openSUSE Security Update: Security update for graphviz Announcement ID: openSUSE-SU-2020:1294-1 Rating: low References: 1093447 Cross-References: CVE-2018-10196 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for graphviz fix...

Security update for yubico-piv-tool (low)

This update for yubico-piv-tool fixes the following issues: Security issues fixed: - CVE-2018-14779: Fixed an buffer overflow and an out of bounds memory read in ykpivtransferdata, which could be triggered by a malicious token. boo1104809, YSA-2018-03 - CVE-2018-14780: Fixed an buffer overflow an...

Security update for ImageMagick (moderate)

This update for ImageMagick fixes the following issues: The following security vulnerabilities were fixed: - CVE-2018-11625: Fixed heap-based buffer over-read in SetGrayscaleImage in the quantize.c file, which allowed remote attackers to cause buffer over-read via a crafted file. bsc1096200 -...

opensuse-security@xxxxxxxxxxxx</li> <li><span class="identifier"> Date</span>: Tue, 19 Jun 2018 12:07:49 +0200 (CEST)</li> <li><span class="identifier"> Message-id</span>: &lt;<a href="msg00036.html">[email protected]</a>&gt;</li> </ul> <!--X-Head-of-Message-End--> <!--X-Head-Body-Sep-Begin--> </div> <div class="body"> <!--X-Head-Body-Sep-End--> <!--X-Body-of-Message--> openSUSE Security Update: Security update for aubio<br> ______________________________________________________________________________<br> <br> Announcement ID: openSUSE-SU-2018:1733-1<br> Rating: low<br> References: #1072317 <br> Cross-References: CVE-2017-17554<br> Affected Products:<br> openSUSE Leap 42.3<br> ______________________________________________________________________________<br> <br> An update that fixes one vulnerability is now available.<br> <br> Description:<br> <br> This update for aubio fixes the following security issue:<br> <br> - CVE-2017-17554: Prevent NULL pointer dereference in the function<br> aubio_source_avcodec_readframe which may have lead to DoS when playing a<br> crafted audio file (bsc#1072317).<br> <br> <br> Patch Instructions:<br> <br> To install this openSUSE Security Update use the SUSE recommended <br> installation methods<br> like YaST online_update or &quot;zypper patch&quot;.<br> <br> Alternatively you can run the command listed for your product:<br> <br> - openSUSE Leap 42.3:<br> <br> zypper in -t patch openSUSE-2018-651=1<br> <br> <br> <br> Package List:<br> <br> - openSUSE Leap 42.3 (i586 x86_64):<br> <br> aubio-debugsource-0.4.1-9.6.2<br> aubio-tools-0.4.1-9.6.2<br> aubio-tools-debuginfo-0.4.1-9.6.2<br> libaubio-devel-0.4.1-9.6.2<br> libaubio4-0.4.1-9.6.2<br> libaubio4-debuginfo-0.4.1-9.6.2<br> <br> - openSUSE Leap 42.3 (x86_64):<br> <br> libaubio4-32bit-0.4.1-9.6.2<br> libaubio4-debuginfo-32bit-0.4.1-9.6.2<br> <br> <br> References:<br> <br> <a rel="nofollow" href="https://www.suse.com/security/cve/CVE-2017-17554.html">https://www.suse.com/security/cve/CVE-2017-17554.html</a><br> <a rel="nofollow" href="https://bugzilla.suse.com/1072317">https://bugzilla.suse.com/1072317</a><br> <br> -- <br> To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@xxxxxxxxxxxx<br> For additional commands, e-mail: opensuse-security-announce+help@xxxxxxxxxxxx<br> <br> <!--X-Body-of-Message-End--> <!--X-MsgBody-End--> <!--X-Follow-Ups--> <!-- SwishCommand noindex --> </div> <table class="bodynav"> <tr> <td align="left"> &lt; Previous </td> <td align="right"> Next &gt; </td> </tr> </table> </div> <div class="visualClear"></div> </div> </div> </div> <div id="column-one"> <a name="indexes"></a> <div class="portlet" id="p-topnav"> <div class="pBody"> <ul> <li><a href="threads.html">Thread Index</a></li> <li><a href="author.html">Author Index</a></li> <li><a href="date.html">Date Index</a></li> <li><a href="all.html">All Messages</a></li> </ul> </div> </div> <div class="portlet" id="p-logo"> <a style="background-image: url(/skins/opensuse/opensuse.gif);" href="../" title="Back"></a> </div> <script type="text/javascript"> if (window.isMSIE55) fixalpha(); </script> <a name="search"></a> <div id="p-search" class="portlet" style="white-space: nowrap;"> <h5><label for="searchInput">Search this list</label> (Security update for aubio</h5> <!--X-Subject-Header-End--> <!--X-Head-of-Message--> <ul> <li><span class="identifier"> From</span>)

This update for aubio fixes the following security issue: - CVE-2017-17554: Prevent NULL pointer dereference in the function aubiosourceavcodecreadframe which may have lead to DoS when playing a crafted audio file bsc1072317...

Security update for Chromium (important)

This update to Chromium 54.0.2840.100 fixes the following vulnerabilities: - CVE-2016-5199: Heap corruption in FFmpeg boo1009892 - CVE-2016-5200: out of bounds memory access in v8 boo1009893 - CVE-2016-5201: info leak in extensions boo1009894 - CVE-2016-5202: various fixes from internal audits...

Security update for Mozilla Firefox (important)

Mozilla Firefox was updated to 49.0.2 to fix two security issues and some bugs. The following vulnerabilities were fixed: CVE-2016-5287: Crash in nsTArraybase bsc1006475 CVE-2016-5288: Web content can read cache entries bsc1006476 The following changes and fixes are included: Asynchronous renderi...

Security update for quagga (important)

This update for quagga fixes the following issue: - CVE-2016-1245: Fix for a zebra stack overrun in IPv6 RA receive code. bsc1005258...

Security update for obs-service-source_validator (important)

obs-service-sourcevalidator was updated to fix one security issue. This security issue was fixed: - CVE-2016-4007: Several maintained source services are vulnerable to code/paramter injection bsc967265. This non-security issue was fixed: - bsc967610: Several occurrences of uninitialized value...

Security update for ImageMagick (important)

This update for ImageMagick fixes the following issues: This security issue was fixed: - CVE-2016-5118: Prevent code execution via popen bsc982178 This non-security issue was fixed: - Fix encoding of /Title in generated PDFs. bsc867943 This update was imported from the SUSE:SLE-12:Update update...

Security update for flash-player (critical)

Adobe flash-player was updated to 11.2.202.626 to fix the following security issues: Security update to 11.2.202.626 boo984695: APSB16-18, CVE-2016-4122, CVE-2016-4123, CVE-2016-4124, CVE-2016-4125, CVE-2016-4127, CVE-2016-4128, CVE-2016-4129, CVE-2016-4130, CVE-2016-4131, CVE-2016-4132,...

Security update for yast2-users (important)

yast2-users was updated to fix one security issue. This security issue was fixed: - CVE-2016-1601: Empty passwords fields in /etc/shadow after SLES 12 SP1 autoyast installation bsc974220. This update includes a script that fixes installations that we're affected by this problem. It is run...

Security update for flash-player (important)

flash-player was updated to fix one security issue. This security issue was fixed: - CVE-2016-1019: Adobe Flash Player earlier allowed remote attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016...

Security update for systemd (important)

This update for systemd fixes several issues. These security issues were fixed: - CVE-2014-9770, CVE-2015-8842: Don't allow read access to journal files to users boo972612 These non-security issues were fixed: - Import commit 523777609a04fe9e590420e89f94ef07e3719baa: e5e362a udev: exclude MD from...

Security update for git (important)

This update for git fixes a buffer overflow issue that had the potential to be abused for remote execution of arbitrary code CVE-2016-2315, CVE-2016-2324, bsc971328...

Security update for cgit (important)

This update for cgit fixes a buffer overflow issue that had the potential to be abused for remote execution of arbitrary code CVE-2016-2315, CVE-2016-2324, bsc971328...

Security update for Chromium (important)

This update contains Chromium 49.0.2623.87 to fix the following issues: - CVE-2016-1643: Type confusion in Blink boo970514 - CVE-2016-1644: Use-after-free in Blink boo970509 - CVE-2016-1645: Out-of-bounds write in PDFium boo970511...

Security update for libotr,libotr2 (important)

libotr and libotr2 were updated to fix one security issue: - CVE-2016-2851: Integer overflow vulnerability allowed remote attackers to execute arbitrary code on 64 bit platforms boo969785...

Security update for flash-player (important)

This update for flash-player fixes the following issues: - Security update to 11.2.202.569 boo965901: APSB16-04, CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0971, CVE-2016-0972, CVE-2016-0973, CVE-2016-0974, CVE-2016-0975,...