Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:1600-1 Rating: important References: 1193713 Cross-References: CVE-2021-4098 CVE-2021-4099 CVE-2021-4100 CVE-2021-4101 CVE-2021-4102 Affected Products: openSUSE Backports SLE-15-SP3 An update that fixes 5...

Security update for netcdf (important)

openSUSE Security Update: Security update for netcdf Announcement ID: openSUSE-SU-2021:3873-1 Rating: important References: 1191856 Cross-References: CVE-2019-20005 CVE-2019-20006 CVE-2019-20007 CVE-2019-20198 CVE-2019-20199 CVE-2019-20200 CVE-2019-20201 CVE-2019-20202 CVE-2021-26220 CVE-2021-262...

Security update for tinyxml (low)

openSUSE Security Update: Security update for tinyxml Announcement ID: openSUSE-SU-2021:1474-1 Rating: low References: 1191576 Cross-References: CVE-2021-42260 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for tinyxml fixes...

Security update for transfig (important)

openSUSE Security Update: Security update for transfig Announcement ID: openSUSE-SU-2021:1458-1 Rating: important References: 1189325 1189343 1189345 1189346 1190607 1190611 1190612 1190615 1190616 1190617 1190618 1192019 Cross-References: CVE-2020-21529 CVE-2020-21530 CVE-2020-21531 CVE-2020-215...

Security update for webkit2gtk3 (important)

openSUSE Security Update: Security update for webkit2gtk3 Announcement ID: openSUSE-SU-2021:3603-1 Rating: important References: 1191937 Cross-References: CVE-2021-42762 CVSS scores: CVE-2021-42762 SUSE: 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 An...

Security update for transfig (important)

openSUSE Security Update: Security update for transfig Announcement ID: openSUSE-SU-2021:3584-1 Rating: important References: 1189325 1189343 1189345 1189346 1190607 1190611 1190612 1190615 1190616 1190617 1190618 1192019 Cross-References: CVE-2020-21529 CVE-2020-21530 CVE-2020-21531 CVE-2020-215...

Security update for pam_radius (moderate)

openSUSE Security Update: Security update for pamradius Announcement ID: openSUSE-SU-2021:1896-1 Rating: moderate References: 1163933 Cross-References: CVE-2015-9542 CVSS scores: CVE-2015-9542 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2015-9542 SUSE: 6.5...

Security update for libnettle (important)

openSUSE Security Update: Security update for libnettle Announcement ID: openSUSE-SU-2021:2143-1 Rating: important References: 1187060 Cross-References: CVE-2021-3580 CVSS scores: CVE-2021-3580 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 An update...

Security update for live555 (moderate)

openSUSE Security Update: Security update for live555 Announcement ID: openSUSE-SU-2021:0915-1 Rating: moderate References: 1146283 1185874 Cross-References: CVE-2019-15232 CVE-2021-28899 CVSS scores: CVE-2019-15232 NVD : 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-28899 NVD : 7.5...

Security update for MozillaThunderbird (important)

openSUSE Security Update: Security update for MozillaThunderbird Announcement ID: openSUSE-SU-2021:0910-1 Rating: important References: 1186696 Cross-References: CVE-2021-29964 CVE-2021-29967 Affected Products: openSUSE Leap 15.2 An update that fixes two vulnerabilities is now available...

Security update for djvulibre (important)

openSUSE Security Update: Security update for djvulibre Announcement ID: openSUSE-SU-2021:0877-1 Rating: important References: 1186253 Cross-References: CVE-2021-3500 CVSS scores: CVE-2021-3500 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 An update...

Security update for htmldoc (important)

openSUSE Security Update: Security update for htmldoc Announcement ID: openSUSE-SU-2021:0882-1 Rating: important References: 1184424 Cross-References: CVE-2021-20308 CVSS scores: CVE-2021-20308 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-20308 SUSE: 3.3...

Security update for ceph (important)

openSUSE Security Update: Security update for ceph Announcement ID: openSUSE-SU-2021:0833-1 Rating: important References: 1185619 1186020 1186021 Cross-References: CVE-2021-3509 CVE-2021-3524 CVE-2021-3531 CVSS scores: CVE-2021-3509 SUSE: 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H...

Security update for MozillaFirefox (important)

openSUSE Security Update: Security update for MozillaFirefox Announcement ID: openSUSE-SU-2021:0373-1 Rating: important References: 1182357 1182614 Cross-References: CVE-2021-23968 CVE-2021-23969 CVE-2021-23973 CVE-2021-23978 CVSS scores: CVE-2021-23968 SUSE: 7.5...

Security update for messagelib (moderate)

openSUSE Security Update: Security update for messagelib Announcement ID: openSUSE-SU-2021:0188-1 Rating: moderate References: 1131885 Cross-References: CVE-2019-10732 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

Security update for python-autobahn (moderate)

openSUSE Security Update: Security update for python-autobahn Announcement ID: openSUSE-SU-2021:0152-1 Rating: moderate References: 1180570 Cross-References: CVE-2020-35678 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for...

Security update for python-jupyter_notebook (moderate)

openSUSE Security Update: Security update for python-jupyternotebook Announcement ID: openSUSE-SU-2021:0078-1 Rating: moderate References: 1180458 Cross-References: CVE-2020-26215 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This upda...

Security update for tomcat (moderate)

openSUSE Security Update: Security update for tomcat Announcement ID: openSUSE-SU-2021:0081-1 Rating: moderate References: 1179602 Cross-References: CVE-2020-17527 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for tomcat...

Security update for kitty (important)

openSUSE Security Update: Security update for kitty Announcement ID: openSUSE-SU-2021:0025-1 Rating: important References: 1180298 Cross-References: CVE-2020-35605 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for kitty fix...

Security update for kernel-firmware (important)

openSUSE Security Update: Security update for kernel-firmware Announcement ID: openSUSE-SU-2020:1960-1 Rating: important References: 1178671 Cross-References: CVE-2020-12321 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

Security update for raptor (important)

openSUSE Security Update: Security update for raptor Announcement ID: openSUSE-SU-2020:1959-1 Rating: important References: 1178593 Cross-References: CVE-2017-18926 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for raptor...

Security update for leptonica (important)

This update for leptonica fixes the following issues: - CVE-2018-3836: Fixes a command injection vulnerability boo1079358 TALOS-2018-0516...

Security update for mercurial (important)

mercurial was updated to fix three security issues. These security issues were fixed: - CVE-2016-3069: Arbitrary code execution when converting Git repos bsc973176. - CVE-2016-3068: Arbitrary code execution with Git subrepos bsc973177. - CVE-2016-3630: Remote code execution in binary delta decodi...

Security update for bsh2 (important)

This update for bsh2 fixes the following issues: - Version update to 2.0b6 boo967593 CVE-2016-2510 Upstream developement moved to github No obvious changelog apart from the above...

Security update for roundcubemail (important)

This update to roundcubemail 1.0.8 fixes the following issues: - CVE-2015-8770: Path traversal vulnerability allowed code execution to remote authenticated users if they were also upload files to the same server through some other method boo962067 This update also contains all upstream fixes in...

Security update for Chromium (important)

Chromium was updated to 41.0.2272.118 to fix two security issues. The following vulnerabilities were fixed: A combination of V8, Gamepad and IPC bugs could lead to remote code execution outside of the sandbox CVE-2015-1233, boo925713 Buffer overflow via race condition in GPU CVE-2015-1234, boo925...

percona-toolkit,xtrabackup: disable remote version check (important)

percona-toolkit and xtrabackup were updated: - disable automatic version check for all tools bnc864194 Prevents transmission of version information to an external host in the default configuration. CVE-2014-2029 Can be used by owner of a Percona Server or an attacker who can control this...

openssh: security fix for remote code execution with AES-GCM (important)

openssh was updated to fix a memory corruption when AES-GCM is used which could lead to remote code execution after successful authentication. CVE-2013-4548...

kernel (critical)

The openSUSE 12.3 kernel was updated to fix a critical security issue and two reiserfs bugs. CVE-2013-2850: Incorrect strncpy usage in the network listening part of the iscsi target driver could have been used by remote attackers to crash the kernel or execute code. This required the iscsi target...

MozillaFirefox: update to version 21.0 (important)

MozillaFirefox was updated to Firefox 21.0 bnc819204 MFSA 2013-41/CVE-2013-0801/CVE-2013-1669 Miscellaneous memory safety hazards MFSA 2013-42/CVE-2013-1670 bmo853709 Privileged access for content level constructor MFSA 2013-43/CVE-2013-1671 bmo842255 File input control has access to full path MF...

pidgin: various security fixes (important)

pidgin was updated to fix security issues: - Fix a crash when receiving UPnP responses with abnormally long values. CVE-2013-0274 - Fix a crash in Sametime when a malicious server sends us an abnormally long user ID. CVE-2013-0273 - Fix a bug where the MXit server or a man-in-the-middle could...

update for dbus-1, dbus-1-x11 (important)

This update fixed CVE-2012-3524 getenv vulnerability, which can be used by local attackers to escalate privileges to root...

freeradius: fix stack overflow in TLS handling (important)

This update of freeradius fixes a stack overflow in TLS handling, which can be exploited by remote attackers able to access Radius to execute code...

Security Update for Xen (important)

Security Update for Xen Following fixes were done: - bnc776995 - attaching scsi control luns with pvscsi - xend/pvscsi: fix passing of SCSI control LUNs xen-bug776995-pvscsi-no-devname.patch - xend/pvscsi: fix usage of persistant device names for SCSI devices...

icedtea-web: Update to 1.2.1 (bnc#) (important)

update to 1.2.1 bnc773458 - Security Updates CVE-2012-3422, RH840592: Potential read from an uninitialized memory location CVE-2012-3423, RH841345: Incorrect handling of not 0-terminated strings - NetX PR898: signed applications with big jnlp-file doesn't start webstart affect like "frozen"...

Security update for v4l2loopback (moderate)

openSUSE Security Update: Security update for v4l2loopback Announcement ID: openSUSE-SU-2022:10159-1 Rating: moderate References: 1202156 Cross-References: CVE-2022-2652 CVSS scores: CVE-2022-2652 NVD : 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H CVE-2022-2652 SUSE: 6...

Security update for virtualbox (important)

openSUSE Security Update: Security update for virtualbox Announcement ID: openSUSE-SU-2022:10152-1 Rating: important References: 1201720 1203086 1203306 1203370 1203735 1204019 Cross-References: CVE-2022-21554 CVE-2022-21571 CVSS scores: CVE-2022-21554 NVD : 4.4...

Security update for permissions (moderate)

openSUSE Security Update: Security update for permissions Announcement ID: openSUSE-SU-2022:10128-1 Rating: moderate References: 1203018 Cross-References: CVE-2022-31252 CVSS scores: CVE-2022-31252 SUSE: 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 An...

Security update for pcre (important)

openSUSE Security Update: Security update for pcre Announcement ID: openSUSE-SU-2022:2361-1 Rating: important References: 1199232 Cross-References: CVE-2022-1586 CVSS scores: CVE-2022-1586 NVD : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVE-2022-1586 SUSE: 8.6...

Security update for varnish (important)

openSUSE Security Update: Security update for varnish Announcement ID: openSUSE-SU-2022:0148-1 Rating: important References: 1181400 1188470 1195188 Cross-References: CVE-2021-36740 CVE-2022-23959 CVSS scores: CVE-2021-36740 NVD : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2021-36740...

Security update for fish3 (important)

openSUSE Security Update: Security update for fish3 Announcement ID: openSUSE-SU-2022:0096-1 Rating: important References: 1197139 Cross-References: CVE-2022-20001 CVSS scores: CVE-2022-20001 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-20001 SUSE: 7.3...

Security update for xorg-x11-server (important)

openSUSE Security Update: Security update for xorg-x11-server Announcement ID: openSUSE-SU-2021:1587-1 Rating: important References: 1193030 Cross-References: CVE-2021-4008 CVSS scores: CVE-2021-4008 SUSE: 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 An...

Security update for tinyxml (low)

openSUSE Security Update: Security update for tinyxml Announcement ID: openSUSE-SU-2021:3639-1 Rating: low References: 1191576 Cross-References: CVE-2021-42260 Affected Products: openSUSE Leap 15.3 An update that fixes one vulnerability is now available. Description: This update for tinyxml fixes...

Security update for strongswan (important)

openSUSE Security Update: Security update for strongswan Announcement ID: openSUSE-SU-2021:1399-1 Rating: important References: 1191367 1191435 SLE-20151 Cross-References: CVE-2021-41990 CVE-2021-41991 CVSS scores: CVE-2021-41990 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-419...

Security update for rubygem-actionpack-5_1 (important)

openSUSE Security Update: Security update for rubygem-actionpack-51 Announcement ID: openSUSE-SU-2021:1759-1 Rating: important References: 1185715 Cross-References: CVE-2021-22885 CVSS scores: CVE-2021-22885 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2021-22885 SUSE: 7.5...

Security update for cryptctl (important)

openSUSE Security Update: Security update for cryptctl Announcement ID: openSUSE-SU-2021:0907-1 Rating: important References: 1186226 Cross-References: CVE-2019-18906 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for cryptc...

Security update for inn (moderate)

openSUSE Security Update: Security update for inn Announcement ID: openSUSE-SU-2021:0845-1 Rating: moderate References: 1182321 Cross-References: CVE-2021-31998 Affected Products: openSUSE Backports SLE-15-SP2 An update that fixes one vulnerability is now available. Description: This update for i...

Security update for graphviz (critical)

openSUSE Security Update: Security update for graphviz Announcement ID: openSUSE-SU-2021:0757-1 Rating: critical References: 1185833 Cross-References: CVE-2020-18032 CVSS scores: CVE-2020-18032 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-18032 SUSE: 9.8...

Security update for jhead (moderate)

openSUSE Security Update: Security update for jhead Announcement ID: openSUSE-SU-2021:0743-1 Rating: moderate References: 1144316 1144354 1160544 1160547 Cross-References: CVE-2016-3822 CVE-2018-16554 CVE-2018-17088 CVE-2018-6612 CVE-2019-1010301 CVE-2019-1010302 CVE-2020-6624 CVE-2020-6625...

Security update for p7zip (moderate)

openSUSE Security Update: Security update for p7zip Announcement ID: openSUSE-SU-2021:0684-1 Rating: moderate References: 1184699 Cross-References: CVE-2021-3465 CVSS scores: CVE-2021-3465 SUSE: 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Leap 15.2 An update that...