Security update for python-rsa (important)

openSUSE Security Update: Security update for python-rsa Announcement ID: openSUSE-SU-2021:2008-1 Rating: important References: 1172389 Cross-References: CVE-2020-13757 CVSS scores: CVE-2020-13757 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2020-13757 SUSE: 7.5...

Security update for tor (important)

openSUSE Security Update: Security update for tor Announcement ID: openSUSE-SU-2021:0926-1 Rating: important References: 1179331 1181244 1187322 1187323 1187324 1187325 Cross-References: CVE-2021-34548 CVE-2021-34549 CVE-2021-34550 Affected Products: openSUSE Leap 15.2 An update that solves three...

Security update for go1.15 (moderate)

openSUSE Security Update: Security update for go1.15 Announcement ID: openSUSE-SU-2021:0904-1 Rating: moderate References: 1175132 1185790 Cross-References: CVE-2021-31525 CVSS scores: CVE-2021-31525 NVD : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-31525 SUSE: 6.5...

Security update for ceph (important)

openSUSE Security Update: Security update for ceph Announcement ID: openSUSE-SU-2021:0833-1 Rating: important References: 1185619 1186020 1186021 Cross-References: CVE-2021-3509 CVE-2021-3524 CVE-2021-3531 CVSS scores: CVE-2021-3509 SUSE: 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H...

Security update for rubygem-actionpack-5_1 (important)

openSUSE Security Update: Security update for rubygem-actionpack-51 Announcement ID: openSUSE-SU-2021:0797-1 Rating: important References: 1185715 Cross-References: CVE-2021-22885 CVSS scores: CVE-2021-22885 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap...

Security update for cacti, cacti-spine (important)

openSUSE Security Update: Security update for cacti, cacti-spine Announcement ID: openSUSE-SU-2021:0787-1 Rating: important References: 1180804 Cross-References: CVE-2020-35701 CVSS scores: CVE-2020-35701 NVD : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports...

Security update for umoci (important)

openSUSE Security Update: Security update for umoci Announcement ID: openSUSE-SU-2021:0548-1 Rating: important References: 1184147 Cross-References: CVE-2021-29136 CVSS scores: CVE-2021-29136 SUSE: 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 An update th...

Security update for python-bottle (important)

openSUSE Security Update: Security update for python-bottle Announcement ID: openSUSE-SU-2021:0302-1 Rating: important References: 1182181 Cross-References: CVE-2020-28473 CVSS scores: CVE-2020-28473 NVD : 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2020-28473 SUSE: 6.8...

Security update for nextcloud (moderate)

openSUSE Security Update: Security update for nextcloud Announcement ID: openSUSE-SU-2021:0274-1 Rating: moderate References: 1181445 1181803 1181804 Cross-References: CVE-2020-8293 CVE-2020-8294 CVE-2020-8295 CVSS scores: CVE-2020-8293 NVD : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H...

Security update for pngcheck (moderate)

openSUSE Security Update: Security update for pngcheck Announcement ID: openSUSE-SU-2020:2198-1 Rating: moderate References: 1179528 Cross-References: CVE-2020-27818 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for pngchec...

Security update for wireshark (moderate)

openSUSE Security Update: Security update for wireshark Announcement ID: openSUSE-SU-2020:2107-1 Rating: moderate References: 1177406 1178291 Cross-References: CVE-2020-26575 CVE-2020-28030 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Descriptio...

Security update for tcpdump (moderate)

openSUSE Security Update: Security update for tcpdump Announcement ID: openSUSE-SU-2020:1986-1 Rating: moderate References: 1178466 Cross-References: CVE-2020-8037 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for tcpdump...

Security update for tcpdump (moderate)

openSUSE Security Update: Security update for tcpdump Announcement ID: openSUSE-SU-2020:1983-1 Rating: moderate References: 1178466 Cross-References: CVE-2020-8037 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for tcpdump...

Security update for slurm_18_08 (moderate)

openSUSE Security Update: Security update for slurm1808 Announcement ID: openSUSE-SU-2020:1969-1 Rating: moderate References: 1172004 Cross-References: CVE-2020-12693 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

Security update for raptor (important)

openSUSE Security Update: Security update for raptor Announcement ID: openSUSE-SU-2020:1959-1 Rating: important References: 1178593 Cross-References: CVE-2017-18926 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for raptor...

Security update for SDL (moderate)

openSUSE Security Update: Security update for SDL Announcement ID: openSUSE-SU-2020:1916-1 Rating: moderate References: 1141844 Cross-References: CVE-2019-13616 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for SDL fixes th...

Security update for MozillaFirefox (important)

openSUSE Security Update: Security update for MozillaFirefox Announcement ID: openSUSE-SU-2020:1909-1 Rating: important References: 1178588 Cross-References: CVE-2020-26950 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

Security update for virt-bootstrap (moderate)

openSUSE Security Update: Security update for virt-bootstrap Announcement ID: openSUSE-SU-2020:1787-1 Rating: moderate References: 1140750 Cross-References: CVE-2019-13314 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for...

Security update for uftpd (moderate)

openSUSE Security Update: Security update for uftpd Announcement ID: openSUSE-SU-2020:0865-1 Rating: moderate References: 1172959 Cross-References: CVE-2020-14149 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for uftpd fixe...

Security update for qutebrowser (moderate)

This update for qutebrowser fixes the following issues: Security issue fixed: - CVE-2018-1000559: Fix an XSS issue on qute://history boo1101507...

Security update for Mozilla Firefox (important)

Mozilla Firefox was updated to 49.0.2 to fix two security issues and some bugs. The following vulnerabilities were fixed: CVE-2016-5287: Crash in nsTArraybase bsc1006475 CVE-2016-5288: Web content can read cache entries bsc1006476 The following changes and fixes are included: Asynchronous renderi...

Security update for python-Jinja2 (important)

This update for python-Jinja2 fixes the following issues: Update to version 2.8: - Added target parameter to urlize function. - Added support for followsymlinks to the file system loader. - The truncate filter now counts the length. - Added equalto filter that helps with select filters. - Changed...

Security update for obs-service-source_validator (important)

obs-service-sourcevalidator was updated to fix one security issue. This security issue was fixed: - CVE-2016-4007: Several maintained source services are vulnerable to code/paramter injection bsc967265. This non-security issue was fixed: - bsc967610: Several occurrences of uninitialized value...

Security update for bsh2 (important)

This update for bsh2 fixes the following issues: - Version update to 2.0b6 boo967593 CVE-2016-2510 Upstream developement moved to github No obvious changelog apart from the above...

Security update for Adobe Flash Player (important)

This update to Adobe Flash Player 11.2.202.577 fixes a number of vulnerabilities that could have allowed remote attackers to execute arbitrary code through crafted content. boo970547 APSB16-08, CVE-2016-0960, CVE-2016-0961, CVE-2016-0962, CVE-2016-0963, CVE-2016-0986, CVE-2016-0987, CVE-2016-0988...

Security update for libotr,libotr2 (important)

libotr and libotr2 were updated to fix one security issue: - CVE-2016-2851: Integer overflow vulnerability allowed remote attackers to execute arbitrary code on 64 bit platforms boo969785...

Security update for openldap2 (important)

This update fixes the following security issues: - CVE-2015-6908: The bergetnext function allowed remote attackers to cause a denial of service reachable assertion and application crash via crafted BER data, as demonstrated by an attack against slapd. bsc945582 - CVE-2015-4000: Fix weak...

Security update for bind (important)

This update for bind fixes the following issues: - CVE-2015-8704: Specific APL data allowed remote attacker to trigger a crash in certain configurations bsc962189...

Security update for polkit (important)

Polkit was updated to 0.113 to fix four security issues. The following vulnerabilities were fixed: CVE-2015-4625: a local privilege escalation due to predictable authentication session cookie values. boo935119 CVE-2015-3256: various memory corruption vulnerabilities in use of the JavaScript...

Security update for seamonkey (important)

SeaMonkey was updated to 2.33.1 to fix several vulnerabilities. The following vulnerabilities were fixed: Privilege escalation through SVG navigation CVE-2015-0818 Code execution through incorrect JavaScript bounds checking elimination CVE-2015-0817...

Security update for MozillaFirefox (important)

MozillaFirefox was updated to Firefox 36.0.4 to fix two critical security issues found during Pwn2Own: MFSA 2015-28/CVE-2015-0818 bmo1144988 Privilege escalation through SVG navigation MFSA 2015-29/CVE-2015-0817 bmo1145255 Code execution through incorrect JavaScript bounds checking elimination Al...

LibreOffice: two security fixes (important)

This update fixes memory corruption vulnerability in DOCM import and data exposure using crafted OLE objects...

flash-player to 11.2.202.335 (important)

Adobe Flash Player was updated to version 11.2.202.335: bnc858822 APSB14-02, CVE-2014-0491, CVE-2014-0492 More information can be found on: http://helpx.adobe.com/security/products/flash-player/apsb14 -02.html...

openssh: security fix for remote code execution with AES-GCM (important)

openssh was updated to fix a memory corruption when AES-GCM is used which could lead to remote code execution after successful authentication. CVE-2013-4548...

Mesa: security fixes for Intel drivers (important)

Mesa was updated to fix a security problem in the Intel drivers, where potentially remote attackers via 3D models could inject code. CVE-2013-1872 - i965: fix problem with constant out of bounds access bnc 828007...

MozillaFirefox: update to version 21.0 (important)

MozillaFirefox was updated to Firefox 21.0 bnc819204 MFSA 2013-41/CVE-2013-0801/CVE-2013-1669 Miscellaneous memory safety hazards MFSA 2013-42/CVE-2013-1670 bmo853709 Privileged access for content level constructor MFSA 2013-43/CVE-2013-1671 bmo842255 File input control has access to full path MF...

MozillaThunderbird: 17.0.4 release (important)

MozillaThunderbird was updated to 17.0.4 bnc808243 MFSA 2013-29/CVE-2013-0787 bmo848644 Use-after-free in HTML Editor...

pidgin: various security fixes (important)

pidgin was updated to fix security issues: - Fix a crash when receiving UPnP responses with abnormally long values. CVE-2013-0274 - Fix a crash in Sametime when a malicious server sends us an abnormally long user ID. CVE-2013-0273 - Fix a bug where the MXit server or a man-in-the-middle could...

acroread to 9.5.4 (critical)

acroread was updated to 9.5.4 to fix remote code execution problems. CVE-2013-0640, CVE-2013-0641 More information can be found on: http://www.adobe.com/support/security/bulletins/apsb13-07.ht ml...

update for plib (important)

This update of plib fixed two stack-based buffer overflows...

update for chromium (important)

Chromium was upgraded to version 24.0.1290 which fixed multiple security flaws...

freeradius: fix stack overflow in TLS handling (important)

This update of freeradius fixes a stack overflow in TLS handling, which can be exploited by remote attackers able to access Radius to execute code...

No summary available - BOX (important)

This version upgrade of horde3 to 3.3.13 fixes several issues including a security related flaw, CVE-2012-0909 and adds new features...

MozillaFirefox (important)

Mozilla Firefox Version 9 fixes several security issues: MFSA 2011-53/CVE-2011-3660: Miscellaneous memory safety hazards MFSA 2011-54/CVE-2011-3661: Potentially exploitable crash in the YARR regular expression library MFSA 2011-55/CVE-2011-3658: nsSVGValue out-of-bounds access MFSA...

VUL-0: flash-player: sec. update to version 11.1.102.55 (critical)

flash-player update to version 11.1.102.55 to fix the following critical security issues: CVE-2011-2445, CVE-2011-2450, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2456, CVE-2011-2457, CVE-2011-2458, CVE-2011-2459, CVE-2011-2460...

Security update for enlightenment (important)

openSUSE Security Update: Security update for enlightenment Announcement ID: openSUSE-SU-2022:10153-1 Rating: important References: 1203631 Cross-References: CVE-2022-37706 Affected Products: openSUSE Backports SLE-15-SP4 An update that fixes one vulnerability is now available. Description: This...

Security update for pcre (important)

openSUSE Security Update: Security update for pcre Announcement ID: openSUSE-SU-2022:2361-1 Rating: important References: 1199232 Cross-References: CVE-2022-1586 CVSS scores: CVE-2022-1586 NVD : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVE-2022-1586 SUSE: 8.6...

Security update for watchman (important)

openSUSE Security Update: Security update for watchman Announcement ID: openSUSE-SU-2022:0016-1 Rating: important References: 1181400 1194470 Cross-References: CVE-2022-21944 Affected Products: openSUSE Backports SLE-15-SP3 An update that solves one vulnerability and has one errata is now...

Security update for ImageMagick (moderate)

openSUSE Security Update: Security update for ImageMagick Announcement ID: openSUSE-SU-2021:1583-1 Rating: moderate References: 1181836 Cross-References: CVE-2021-20176 CVSS scores: CVE-2021-20176 NVD : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-20176 SUSE: 5.3...

Security update for ImageMagick (moderate)

openSUSE Security Update: Security update for ImageMagick Announcement ID: openSUSE-SU-2021:3996-1 Rating: moderate References: 1181836 Cross-References: CVE-2021-20176 CVSS scores: CVE-2021-20176 NVD : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-20176 SUSE: 5.3...