Security update for bsh2 (important)

This update for bsh2 fixes the following issues: - Version update to 2.0b6 boo967593 CVE-2016-2510 Upstream developement moved to github No obvious changelog apart from the above...

Security update for Adobe Flash Player (important)

This update to Adobe Flash Player 11.2.202.577 fixes a number of vulnerabilities that could have allowed remote attackers to execute arbitrary code through crafted content. boo970547 APSB16-08, CVE-2016-0960, CVE-2016-0961, CVE-2016-0962, CVE-2016-0963, CVE-2016-0986, CVE-2016-0987, CVE-2016-0988...

Security update for roundcubemail (important)

This update to roundcubemail 1.0.8 fixes the following issues: - CVE-2015-8770: Path traversal vulnerability allowed code execution to remote authenticated users if they were also upload files to the same server through some other method boo962067 This update also contains all upstream fixes in...

Security update for DirectFB (important)

DirectFB was updated to fix two security issues. The following vulnerabilities were fixed: CVE-2014-2977: Multiple integer signedness errors could allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via the Voodoo interface, which triggers a stack-based...

Security update for Chromium (important)

Chromium was updated to 41.0.2272.118 to fix two security issues. The following vulnerabilities were fixed: A combination of V8, Gamepad and IPC bugs could lead to remote code execution outside of the sandbox CVE-2015-1233, boo925713 Buffer overflow via race condition in GPU CVE-2015-1234, boo925...

procmail: fixed a heap overflow in formail (important)

procmail was updated to fix a heap-overflow in procmail's formail utility when processing specially-crafted email headers bnc894999, CVE-2014-3618...

ca-certificates-mozilla: add, remove or blacklist some certificates (important)

The Mozilla CA certificates package was updated to match the current Mozilla revision 1.95 of certdata.txt. It blacklists some misused certificate authorities, adds some new and adjusts some others. On openSUSE 13.1 a problem with names was also fixed. distrust: AC DG Tresor SSL bnc854367 new:...

puppet: security fix for YAML support (critical)

A potential remote code execution via YAML was fixed in puppet. CVE-2013-3567...

kernel (critical)

The openSUSE 12.3 kernel was updated to fix a critical security issue and two reiserfs bugs. CVE-2013-2850: Incorrect strncpy usage in the network listening part of the iscsi target driver could have been used by remote attackers to crash the kernel or execute code. This required the iscsi target...

pidgin: various security fixes (important)

pidgin was updated to fix security issues: - Fix a crash when receiving UPnP responses with abnormally long values. CVE-2013-0274 - Fix a crash in Sametime when a malicious server sends us an abnormally long user ID. CVE-2013-0273 - Fix a bug where the MXit server or a man-in-the-middle could...

freeradius: fix stack overflow in TLS handling (important)

This update of freeradius fixes a stack overflow in TLS handling, which can be exploited by remote attackers able to access Radius to execute code...

icedtea-web: Update to 1.2.1 (bnc#) (important)

update to 1.2.1 bnc773458 - Security Updates CVE-2012-3422, RH840592: Potential read from an uninitialized memory location CVE-2012-3423, RH841345: Incorrect handling of not 0-terminated strings - NetX PR898: signed applications with big jnlp-file doesn't start webstart affect like "frozen"...

cacti-1.2.30+git306.82d5aef5-1.1 on GA media (moderate)

cacti-1.2.30+git306.82d5aef5-1.1 on GA media Announcement ID: openSUSE-SU-2026:10599-1 Rating: moderate Cross-References: CVE-2026-0540 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

Security update for v2ray-core (important)

openSUSE Security Update: Security update for v2ray-core Announcement ID: openSUSE-SU-2026:0100-1 Rating: important References: 1251404 1260329 Cross-References: CVE-2025-47911 CVE-2026-33186 CVSS scores: CVE-2025-47911 SUSE: 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2026:0097-1 Rating: important References: 1260376 Cross-References: CVE-2026-4673 CVE-2026-4674 CVE-2026-4675 CVE-2026-4676 CVE-2026-4677 CVE-2026-4678 CVE-2026-4679 CVE-2026-4680 Affected Products: openSUSE...

Security update for coredns (moderate)

openSUSE Security Update: Security update for coredns Announcement ID: openSUSE-SU-2025:0401-1 Rating: moderate References: 1249389 Cross-References: CVE-2025-58063 CVSS scores: CVE-2025-58063 SUSE: 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L Affected Products: openSUSE Backports SLE-15-SP7 ...

Security update for kubo (moderate)

openSUSE Security Update: Security update for kubo Announcement ID: openSUSE-SU-2025:0288-1 Rating: moderate References: 1241776 Cross-References: CVE-2025-22872 CVSS scores: CVE-2025-22872 SUSE: 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L Affected Products: openSUSE...

sslh-2.2.4-1.1 on GA media (moderate)

sslh-2.2.4-1.1 on GA media Announcement ID: openSUSE-SU-2025:15194-1 Rating: moderate Cross-References: CVE-2025-46806 CVE-2025-46807 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all security issues fixed in the...

Security update for apptainer (important)

openSUSE Security Update: Security update for apptainer Announcement ID: openSUSE-SU-2024:0244-1 Rating: important References: 1221364 1224114 Cross-References: CVE-2023-30549 CVE-2023-38496 CVE-2024-3727 CVSS scores: CVE-2023-30549 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H...

Security update for opera (important)

openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2024:0002-1 Rating: important References: Cross-References: CVE-2023-6702 CVE-2023-6703 CVE-2023-6704 CVE-2023-6705 CVE-2023-6706 CVE-2023-6707 CVE-2023-7024 CVSS scores: CVE-2023-6702 NVD : 8.8...

Security update for v4l2loopback (moderate)

openSUSE Security Update: Security update for v4l2loopback Announcement ID: openSUSE-SU-2022:10159-1 Rating: moderate References: 1202156 Cross-References: CVE-2022-2652 CVSS scores: CVE-2022-2652 NVD : 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H CVE-2022-2652 SUSE: 6...

Security update for varnish (important)

openSUSE Security Update: Security update for varnish Announcement ID: openSUSE-SU-2022:0148-1 Rating: important References: 1181400 1188470 1195188 Cross-References: CVE-2021-36740 CVE-2022-23959 CVSS scores: CVE-2021-36740 NVD : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2021-36740...

Security update for transfig (important)

openSUSE Security Update: Security update for transfig Announcement ID: openSUSE-SU-2021:1439-1 Rating: important References: 1189325 1189343 1189345 1189346 1190607 1190611 1190612 1190615 1190616 1190617 1190618 1192019 Cross-References: CVE-2020-21529 CVE-2020-21530 CVE-2020-21531 CVE-2020-215...

Security update for libaom (low)

openSUSE Security Update: Security update for libaom Announcement ID: openSUSE-SU-2021:3350-1 Rating: low References: 1186799 Cross-References: CVE-2021-30474 CVSS scores: CVE-2021-30474 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-30474 SUSE: 7...

Security update for gupnp (important)

openSUSE Security Update: Security update for gupnp Announcement ID: openSUSE-SU-2021:2153-1 Rating: important References: 1186590 Cross-References: CVE-2021-33516 CVSS scores: CVE-2021-33516 NVD : 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N CVE-2021-33516 SUSE: 9.4...

Security update for slurm (important)

openSUSE Security Update: Security update for slurm Announcement ID: openSUSE-SU-2021:0821-1 Rating: important References: 1186024 Cross-References: CVE-2021-31215 CVSS scores: CVE-2021-31215 NVD : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-31215 SUSE: 8.6...

Security update for graphviz (critical)

openSUSE Security Update: Security update for graphviz Announcement ID: openSUSE-SU-2021:0757-1 Rating: critical References: 1185833 Cross-References: CVE-2020-18032 CVSS scores: CVE-2020-18032 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-18032 SUSE: 9.8...

Security update for postsrsd (moderate)

openSUSE Security Update: Security update for postsrsd Announcement ID: openSUSE-SU-2021:0646-1 Rating: moderate References: 1180251 Cross-References: CVE-2020-35573 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for postsrs...

Security update for clamav (important)

openSUSE Security Update: Security update for clamav Announcement ID: openSUSE-SU-2021:0555-1 Rating: important References: 1181256 1184532 1184533 1184534 Cross-References: CVE-2021-1252 CVE-2021-1404 CVE-2021-1405 CVSS scores: CVE-2021-1252 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H...

Security update for MozillaFirefox (important)

openSUSE Security Update: Security update for MozillaFirefox Announcement ID: openSUSE-SU-2021:0487-1 Rating: important References: 1183942 Cross-References: CVE-2021-23981 CVE-2021-23982 CVE-2021-23984 CVE-2021-23987 Affected Products: openSUSE Leap 15.2 An update that fixes four vulnerabilities...

Security update for python-markdown2 (moderate)

openSUSE Security Update: Security update for python-markdown2 Announcement ID: openSUSE-SU-2021:0429-1 Rating: moderate References: 1171379 1181270 1183171 Cross-References: CVE-2021-26813 CVSS scores: CVE-2021-26813 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products:...

Security update for bind (important)

openSUSE Security Update: Security update for bind Announcement ID: openSUSE-SU-2021:0375-1 Rating: important References: 1182246 Cross-References: CVE-2020-8625 CVSS scores: CVE-2020-8625 NVD : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2020-8625 SUSE: 8.1...

Security update for python-cryptography (important)

openSUSE Security Update: Security update for python-cryptography Announcement ID: openSUSE-SU-2021:0349-1 Rating: important References: 1182066 Cross-References: CVE-2020-36242 CVSS scores: CVE-2020-36242 NVD : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVE-2020-36242 SUSE: 7.5...

Security update for segv_handler (moderate)

openSUSE Security Update: Security update for segvhandler Announcement ID: openSUSE-SU-2021:0198-1 Rating: moderate References: 1180665 Affected Products: openSUSE Leap 15.1 An update that contains security fixes can now be installed. Description: This update for segvhandler fixes the following...

Security update for ovmf (moderate)

openSUSE Security Update: Security update for ovmf Announcement ID: openSUSE-SU-2020:2314-1 Rating: moderate References: 1177789 Cross-References: CVE-2019-14584 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for ovmf fixes...

Security update for LibVNCServer (important)

openSUSE Security Update: Security update for LibVNCServer Announcement ID: openSUSE-SU-2020:2097-1 Rating: important References: 1178682 Cross-References: CVE-2020-25708 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

Security update for zeromq (moderate)

openSUSE Security Update: Security update for zeromq Announcement ID: openSUSE-SU-2020:1910-1 Rating: moderate References: 1176116 1176256 1176257 1176258 1176259 Cross-References: CVE-2020-15166 Affected Products: openSUSE Leap 15.2 An update that solves one vulnerability and has four fixes is n...

Security update for flash-player (important)

This update to Adobe Flash Player 11.2.202.644 fixes the following security issues: - type confusion vulnerabilities that could lead to code execution CVE-2016-7860, CVE-2016-7861, CVE-2016-7865 - use-after-free vulnerabilities that could lead to code execution CVE-2016-7857, CVE-2016-7858,...

Security update for vlc (important)

This update for vlc fixes the following issues: - CVE-2015-5949: Remote attackers could have caused a denial of service crash and possibly execute arbitrary code via a crafted 3GP file boo965227...

Security update for roundcubemail (important)

This update to roundcubemail 1.1.4 fixes the following issues: - CVE-2015-8770: Path traversal vulnerability allowed code execution to remote authenticated users if they were also upload files to the same server through some other method boo962067 This update also contains all upstream fixes in...

Security update for flash-player (critical)

Flash-player was updated to version 11.2.202.245 fixing numerous vulnerabilities: memory corruption vulnerabilities that could lead to code execution CVE-2014-0587, CVE-2014-9164. use-after-free vulnerability that could lead to code execution CVE-2014-8443. stack-based buffer overflow vulnerabili...

seamonkey: update to 2.16.1 (important)

seamonkey was updated to version 2.16.1 fixing a severe security issue. MFSA 2013-29/CVE-2013-0787 bmo848644 Use-after-free in HTML Editor...

Security update for trivy (important)

openSUSE security update: security update for trivy ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20833-1 Rating: important References: bsc1265648 bsc1266075 Cross-References: CVE-2026-33814 CVE-2026-39827 CVE-2026-39828 CVE-2026-39829...

Security update for trivy (important)

openSUSE security update: security update for trivy ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20798-1 Rating: important References: bsc1227010 bsc1232948 bsc1234512 bsc1235265 bsc1237618 bsc1239225 bsc1239385 bsc1240466 bsc1241724 bsc1243633...

MozillaFirefox-151.0.1-1.1 on GA media (moderate)

MozillaFirefox-151.0.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:10863-1 Rating: moderate Cross-References: CVE-2026-8945 CVE-2026-8946 CVE-2026-8947 CVE-2026-8948 CVE-2026-8949 CVE-2026-8950 CVE-2026-8951 CVE-2026-8952 CVE-2026-8953 CVE-2026-8954 CVE-2026-8955 CVE-2026-8956 CVE-2026-8957...

libppsdocument4_0-6-50.1-2.1 on GA media (moderate)

libppsdocument40-6-50.1-2.1 on GA media Announcement ID: openSUSE-SU-2026:10853-1 Rating: moderate Cross-References: CVE-2026-46529 CVSS scores: CVE-2026-46529 SUSE : 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2026-46529 SUSE : 7.5...

syncthing-2.1.0-1.1 on GA media (moderate)

syncthing-2.1.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10764-1 Rating: moderate Cross-References: CVE-2020-11022 CVSS scores: CVE-2020-11022 SUSE : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

Security update for snpguest (important)

openSUSE security update: security update for snpguest ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20380-1 Rating: important References: bsc1257877 bsc1257927 Cross-References: CVE-2026-25727 CVSS scores: CVE-2026-25727 SUSE : 7.5...

Security update for jhead (important)

openSUSE Security Update: Security update for jhead Announcement ID: openSUSE-SU-2022:10179-1 Rating: important References: 1204409 Cross-References: CVE-2022-41751 CVSS scores: CVE-2022-41751 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP4 ...

Security update for permissions (moderate)

openSUSE Security Update: Security update for permissions Announcement ID: openSUSE-SU-2022:10128-1 Rating: moderate References: 1203018 Cross-References: CVE-2022-31252 CVSS scores: CVE-2022-31252 SUSE: 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 An...