Security update for tomcat (moderate)

openSUSE Security Update: Security update for tomcat Announcement ID: openSUSE-SU-2021:0043-1 Rating: moderate References: 1179602 Cross-References: CVE-2020-17527 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for tomcat...

Security update for MozillaThunderbird (critical)

openSUSE Security Update: Security update for MozillaThunderbird Announcement ID: openSUSE-SU-2020:2317-1 Rating: critical References: 1180039 Cross-References: CVE-2020-16042 CVE-2020-26971 CVE-2020-26973 CVE-2020-26974 CVE-2020-26978 CVE-2020-35111 CVE-2020-35112 CVE-2020-35113 Affected Product...

Security update for podman (moderate)

openSUSE Security Update: Security update for podman Announcement ID: openSUSE-SU-2020:2039-1 Rating: moderate References: 1176804 1178122 1178392 Cross-References: CVE-2020-14370 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has two fixes is now available...

Security update for krb5 (moderate)

openSUSE Security Update: Security update for krb5 Announcement ID: openSUSE-SU-2020:2037-1 Rating: moderate References: 1178512 Cross-References: CVE-2020-28196 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for krb5 fixes...

Security update for xen (important)

openSUSE Security Update: Security update for xen Announcement ID: openSUSE-SU-2020:2017-1 Rating: important References: 1027519 1177950 1178591 Cross-References: CVE-2020-28368 Affected Products: openSUSE Leap 15.2 An update that solves one vulnerability and has two fixes is now available...

Security update for tcpdump (moderate)

openSUSE Security Update: Security update for tcpdump Announcement ID: openSUSE-SU-2020:1983-1 Rating: moderate References: 1178466 Cross-References: CVE-2020-8037 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for tcpdump...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2020:1937-1 Rating: important References: 1178375 Cross-References: CVE-2020-16004 CVE-2020-16005 CVE-2020-16006 CVE-2020-16007 CVE-2020-16008 CVE-2020-16009 CVE-2020-16011 Affected Products: openSUSE Backports...

Security update for spice (moderate)

openSUSE Security Update: Security update for spice Announcement ID: openSUSE-SU-2020:1802-1 Rating: moderate References: 1177158 Cross-References: CVE-2020-14355 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for spice fixe...

Security update for virt-bootstrap (moderate)

openSUSE Security Update: Security update for virt-bootstrap Announcement ID: openSUSE-SU-2020:1787-1 Rating: moderate References: 1140750 Cross-References: CVE-2019-13314 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for...

Security update for freerdp (moderate)

openSUSE Security Update: Security update for freerdp Announcement ID: openSUSE-SU-2020:1332-1 Rating: moderate References: 1174321 Cross-References: CVE-2020-15103 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for freerdp...

Security update for opera (important)

openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2020:0949-1 Rating: important References: 1173251 Cross-References: CVE-2020-6509 Affected Products: openSUSE Leap 15.1:NonFree An update that fixes one vulnerability is now available. Description: This update for...

Security update for chocolate-doom (important)

openSUSE Security Update: Security update for chocolate-doom Announcement ID: openSUSE-SU-2020:0939-1 Rating: important References: 1173595 Cross-References: CVE-2020-14983 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for...

Security update for smb4k (important)

This update for smb4k fixes the following issues: - Disabled dbus service and polkit rules, because this version of smb4k has a local root exploit issue boo1036245, CVE-2017-8849. Automatic mounting will no longer be possible to work around this security issue...

Security update for Chromium (important)

Chromium was updated to 51.0.2704.103 to fix three vulnerabilities: - CVE-2016-1704: Various fixes from internal audits, fuzzing and other initiatives shared identifier boo985397...

Security update for java-1_8_0-openjdk (important)

This update of java-180-openjdk to jdk8u77-b03 fixes the following issues: CVE-2016-0636: Improve MethodHandle consistency fixes crash / code execution problems...

Security update for java-1_7_0-openjdk (important)

This update for java-170-openjdk fixes the following issues: java-170-openjdk was updated to 2.6.5 - OpenJDK 7u99 boo972468 Security fixes - S8152335, CVE-2016-0636: Improve MethodHandle consistency Import of OpenJDK 7 u99 build 0 - S6425769, PR2858: Allow specifying an address to bind JMX remote...

Security update for bind (important)

This update for bind fixes the following issues: Fix two assertion failures that can lead to a remote denial of service attack: CVE-2016-1285: An error when parsing signature records for DNAME can lead to named exiting due to an assertion failure. bsc970072 CVE-2016-1286: An error when parsing...

Security update for flash-player (important)

This update for flash-player fixes the following issues: - Security update to 11.2.202.569 bsc965901: APSB16-04, CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0971, CVE-2016-0972, CVE-2016-0973, CVE-2016-0974, CVE-2016-0975,...

Security update for openldap2 (important)

This update fixes the following security issues: - CVE-2015-6908: The bergetnext function allowed remote attackers to cause a denial of service reachable assertion and application crash via crafted BER data, as demonstrated by an attack against slapd. bsc945582 - CVE-2015-4000: Fix weak...

Security update for libXfont (important)

libXFont was updated to fix three vulnerabilities when parsing BDF files bnc921978 As libXfont is used by the X server to read font files, and an unprivileged user with access to the X server can tell the X server to read a given font file from a path of their choosing, these vulnerabilities have...

Security update for MozillaFirefox (important)

MozillaFirefox was updated to version 35.0 bnc910669 Notable features: Firefox Hello with new rooms-based conversations model Implemented HTTP Public Key Pinning Extension for enhanced authentication of encrypted connections Security fixes: MFSA 2015-01/CVE-2014-8634/CVE-2014-8635 Miscellaneous...

mozilla-nss: update to avoid signature forgery (critical)

Mozilla NSS is vulnerable to a variant of a signature forgery attack previously published by Daniel Bleichenbacher. This is due to lenient parsing of ASN.1 values involved in a signature and could lead to the forging of RSA certificates...

flash-player to 11.2.202.285 (important)

flash-player was updated to security update to 11.2.202.285: APSB13-14, CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, CVE-2013-3335...

acroread to 9.5.4 (critical)

acroread was updated to 9.5.4 to fix remote code execution problems. CVE-2013-0640, CVE-2013-0641 More information can be found on: http://www.adobe.com/support/security/bulletins/apsb13-07.ht ml...

update for cgit (important)

Specially-crafted commits can cause code to be executed on the clients due to improperly quoted arguments...

flash-player to 11.2.202.238 (critical)

Adobe Flash Player was updated to 11.2.202.238 fixing various bugs and security issues...

VUL-1: wireshark: new updates fix two DoS issues (important)

Wireshark version upgrade to 1.4.10 to fix various security flaws and other non-security issues...

VUL-0: flash-player: sec. update to version 11.1.102.55 (critical)

flash-player update to version 11.1.102.55 to fix the following critical security issues: CVE-2011-2445, CVE-2011-2450, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2456, CVE-2011-2457, CVE-2011-2458, CVE-2011-2459, CVE-2011-2460...

jakarta-commons-daemon (important)

jsvc did not properly drop capabilities, therefore allowing applications to access files owned by the super user CVE-2011-2729...

Security update for freeciv (important)

openSUSE Security Update: Security update for freeciv Announcement ID: openSUSE-SU-2022:10102-1 Rating: important References: 1202548 Cross-References: CVE-2022-6083 Affected Products: openSUSE Backports SLE-15-SP4 An update that fixes one vulnerability is now available. Description: This update...

Security update for canna (important)

openSUSE Security Update: Security update for canna Announcement ID: openSUSE-SU-2022:10090-1 Rating: important References: 1199280 Cross-References: CVE-2022-21950 CVSS scores: CVE-2022-21950 SUSE: 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Backports SLE-15-SP3 ...

Security update for perl-App-cpanminus (moderate)

openSUSE Security Update: Security update for perl-App-cpanminus Announcement ID: openSUSE-SU-2022:0074-1 Rating: moderate References: Cross-References: CVE-2020-16154 CVSS scores: CVE-2020-16154 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-S...

Security update for seamonkey (important)

openSUSE Security Update: Security update for seamonkey Announcement ID: openSUSE-SU-2021:1588-1 Rating: important References: Affected Products: openSUSE Backports SLE-15-SP3 An update that contains security fixes can now be installed. Description: This update for seamonkey fixes the following...

Security update for python-pip (moderate)

openSUSE Security Update: Security update for python-pip Announcement ID: openSUSE-SU-2021:4001-1 Rating: moderate References: 1186819 Cross-References: CVE-2021-3572 CVSS scores: CVE-2021-3572 SUSE: 4.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N Affected Products: openSUSE Leap 15.3 An update...

Security update for squid (moderate)

openSUSE Security Update: Security update for squid Announcement ID: openSUSE-SU-2021:1419-1 Rating: moderate References: 1189403 Cross-References: CVE-2021-28116 CVSS scores: CVE-2021-28116 NVD : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2021-28116 SUSE: 5.3...

Security update for libaom (low)

openSUSE Security Update: Security update for libaom Announcement ID: openSUSE-SU-2021:1359-1 Rating: low References: 1186799 Cross-References: CVE-2021-30474 CVSS scores: CVE-2021-30474 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-30474 SUSE: 7...

Security update for hivex (moderate)

openSUSE Security Update: Security update for hivex Announcement ID: openSUSE-SU-2021:1761-1 Rating: moderate References: 1185013 Cross-References: CVE-2021-3504 CVSS scores: CVE-2021-3504 NVD : 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L CVE-2021-3504 SUSE: 5.4...

Security update for cryptctl (important)

openSUSE Security Update: Security update for cryptctl Announcement ID: openSUSE-SU-2021:2136-1 Rating: important References: 1186226 Cross-References: CVE-2019-18906 Affected Products: openSUSE Leap 15.3 An update that fixes one vulnerability is now available. Description: This update for cryptc...

Security update for java-1_8_0-openj9 (moderate)

openSUSE Security Update: Security update for java-180-openj9 Announcement ID: openSUSE-SU-2021:1666-1 Rating: moderate References: 1185055 Cross-References: CVE-2021-2163 CVSS scores: CVE-2021-2163 NVD : 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-2163 SUSE: 5.3...

Security update for bind (important)

openSUSE Security Update: Security update for bind Announcement ID: openSUSE-SU-2021:1826-1 Rating: important References: 1183453 1185073 Cross-References: CVE-2021-25214 CVE-2021-25215 CVSS scores: CVE-2021-25214 NVD : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-25214 SUSE: 6.5...

Security update for dovecot23 (important)

openSUSE Security Update: Security update for dovecot23 Announcement ID: openSUSE-SU-2021:2123-1 Rating: important References: 1187418 1187419 Cross-References: CVE-2021-29157 CVE-2021-33515 CVSS scores: CVE-2021-29157 SUSE: 6.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2021-33515 NVD : 4....

Security update for qemu (moderate)

openSUSE Security Update: Security update for qemu Announcement ID: openSUSE-SU-2021:2213-1 Rating: moderate References: 1185981 1185990 1186010 Cross-References: CVE-2021-3544 CVE-2021-3545 CVE-2021-3546 CVSS scores: CVE-2021-3544 NVD : 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H...

Security update for tpm2.0-tools (moderate)

openSUSE Security Update: Security update for tpm2.0-tools Announcement ID: openSUSE-SU-2021:0934-1 Rating: moderate References: 1186490 Cross-References: CVE-2021-3565 CVSS scores: CVE-2021-3565 NVD : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2021-3565 SUSE: 4.4...

Security update for libX11 (important)

openSUSE Security Update: Security update for libX11 Announcement ID: openSUSE-SU-2021:0857-1 Rating: important References: 1186643 Cross-References: CVE-2021-31535 CVSS scores: CVE-2021-31535 SUSE: 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 An update...

Security update for opera (important)

openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2021:0828-1 Rating: important References: Cross-References: CVE-2021-30506 CVE-2021-30507 CVE-2021-30508 CVE-2021-30509 CVE-2021-30510 CVE-2021-30511 CVE-2021-30512 CVE-2021-30513 CVE-2021-30514 CVE-2021-30515...

Security update for fribidi (important)

openSUSE Security Update: Security update for fribidi Announcement ID: openSUSE-SU-2021:0763-1 Rating: important References: 1156260 Cross-References: CVE-2019-18397 CVSS scores: CVE-2019-18397 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-18397 SUSE: 7.8...

Security update for vlc (moderate)

openSUSE Security Update: Security update for vlc Announcement ID: openSUSE-SU-2021:0714-1 Rating: moderate References: 1181918 Cross-References: CVE-2020-26664 CVSS scores: CVE-2020-26664 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP2 An...

Security update for syncthing (moderate)

openSUSE Security Update: Security update for syncthing Announcement ID: openSUSE-SU-2021:0713-1 Rating: moderate References: 1184428 Cross-References: CVE-2021-21404 CVSS scores: CVE-2021-21404 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP...

Security update for MozillaThunderbird (important)

openSUSE Security Update: Security update for MozillaThunderbird Announcement ID: openSUSE-SU-2021:0580-1 Rating: important References: 1177542 1183942 1184536 Cross-References: CVE-2021-23981 CVE-2021-23982 CVE-2021-23984 CVE-2021-23987 CVE-2021-23991 CVE-2021-23992 CVE-2021-23993 CVSS scores:...

Security update for zstd (moderate)

openSUSE Security Update: Security update for zstd Announcement ID: openSUSE-SU-2021:0481-1 Rating: moderate References: 1183370 1183371 Cross-References: CVE-2021-24031 CVE-2021-24032 CVSS scores: CVE-2021-24031 NVD : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2021-24031 SUSE: 6.2...