OPENSUSE-SU-2024:12611-1 squirrel-3.2-1.1 on GA media

These are all security issues fixed in the squirrel-3.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12358-1 MozillaThunderbird-102.3.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-102.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13727-1 ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1 on GA media

These are all security issues fixed in the ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11358-1 runc-1.0.2-1.2 on GA media

These are all security issues fixed in the runc-1.0.2-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13440-1 ruby3.2-rubygem-nokogiri-1.15.4-1.1 on GA media

These are all security issues fixed in the ruby3.2-rubygem-nokogiri-1.15.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:0147-1 Security update for libredwg

This update for libredwg fixes the following issues: Update to tag 0.12.5.6924: - CVE-2023-26157: Fixed out-of-bound read involving section-numpages in decoder2007.c boo1218473...

OPENSUSE-SU-2024:0125-1 Security update for python-Pillow

This update for python-Pillow fixes the following issues: - CVE-2023-50447: Fixed arbitrary code execution via the environment parameter boo1219048...

OPENSUSE-SU-2024:0033-1 Security update for opera

This update for opera fixes the following issues: Update to 106.0.4998.52 CHR-9580 Update Chromium on desktop-stable-120-4998 to 120.0.6099.234 DNA-113175 Can not merge folders on start page DNA-113341 Implement 'special' menus DNA-113811 Removing icons in sidepanel heading DNA-114059 Move to...

OPENSUSE-SU-2024:0031-1 Security update for cacti, cacti-spine

This update for cacti, cacti-spine fixes the following issues: cacti-spine 1.2.26: Fix: Errors when uptime OID is not present Fix: MySQL reconnect option is depreciated Fix: Spine does not check a host with no poller items Fix: Poller may report the wrong number of devices polled Feature: Allow...

OPENSUSE-SU-2024:0025-1 Security update for chromium

This update for chromium fixes the following issues: Update to 120.0.6099.224 boo1218892: - CVE-2024-0517: Out of bounds write in V8 - CVE-2024-0518: Type Confusion in V8 - CVE-2024-0519: Out of bounds memory access in V8 - Various fixes from internal audits, fuzzing and other initiatives...

OPENSUSE-SU-2024:0023-1 Security update for libuev

This update for libuev fixes the following issues: - Update to 2.4.1: Update README with list of moden Linux APIs used Fix 27: possible buffer overrun in uevrun boo1218749 CVE-2022-48620...

OPENSUSE-SU-2023:0397-1 Security update for opera

This update for opera fixes the following issues: - Update to 105.0.4970.34 DNA-112796 Import Import bookmarks and history don't work DNA-113147 Add strength setting for Lucid Mode DNA-113148 Update 'Lucid Mode' button on videos to enable / disable split preview DNA-113287 Add strength setting fo...

OPENSUSE-SU-2023:0387-1 Security update for chromium

This update for Chromium fixes the following issue: Chromium 119.0.6045.199 boo1217616 CVE-2023-6348: Type Confusion in Spellcheck CVE-2023-6347: Use after free in Mojo CVE-2023-6346: Use after free in WebAudio CVE-2023-6350: Out of bounds memory access in libavif boo1217614 CVE-2023-6351: Use...

OPENSUSE-SU-2023:0386-1 Security update for opera

This update for opera fixes the following issues: - Update to 105.0.4970.21 DNA-112425 Choosing Workspace Icons doesn’t work as expected DNA-112787 glow around tiles in Top Sites section in BABE in dark theme - The update to chromium 119.0.6045.159 fixes following issues: CVE-2023-5997,...

OPENSUSE-SU-2023:0337-1 Security update for opera

This update for opera fixes the following issues: - Update to 104.0.4944.23 DNA-110465 Scrollable tab strip Weird animation when closing tab DNA-112021 Favicons disappear from history after being hovered over DNA-112310 Put opening animation on start page behind a flag DNA-112462 Crash at...

OPENSUSE-SU-2023:0275-1 Security update for cacti, cacti-spine

This update for cacti, cacti-spine fixes the following issues: cacti-spine 1.2.25: Spine should see if script to be executed is executable Enhance number recognition When polling devices, sort by larger number of items first Log format may be corrupted when timeout occurs Compile warning appears...

OPENSUSE-SU-2023:0257-1 Security update for modsecurity

This update for modsecurity fixes the following issues: Update to version 3.0.10: Security impacting issue fix boo1213702, CVE-2023-38285 - Fix: worst-case time in implementation of four transformations - Additional information on this issue is available at...

OPENSUSE-SU-2023:0245-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 116.0.5845.179 boo1215023: CVE-2023-4761: Out of bounds memory access in FedCM CVE-2023-4762: Type Confusion in V8 CVE-2023-4763: Use after free in Networks CVE-2023-4764: Incorrect security UI in BFCache...

OPENSUSE-SU-2023:0162-1 Security update for xonotic

This update for xonotic fixes the following issues: Update to version 0.8.6 SECURITY ALERT: A bug was discovered in versions older than 0.8.6 that is believed to be exploitable by malicious server admins to crash clients or, if they defeat mitigations, execute arbitrary code. boo1212632 update to...

OPENSUSE-SU-2023:0154-1 Security update for phpMyAdmin

This update for phpMyAdmin fixes the following issues: Update to 4.9.11: - CVE-2023-25727: Fixed XSS vulnerability in drag-and-drop upload boo1208186...

OPENSUSE-SU-2023:0090-1 Security update for nextcloud-desktop

This update for nextcloud-desktop fixes the following issues: nextcloud-desktop was updated to 3.8.0: - Resize WebView widget once the loginpage rendered - Feature/secure file drop - Check German translation for wrong wording - L10n: Correct word - Fix displaying of file details button for local...

OPENSUSE-SU-2023:0066-1 Security update for opera

This update for opera fixes the following issues: Update to 96.0.4693.31 CHR-9206 Update Chromium on desktop-stable-110-4693 to 110.0.5481.178 DNA-104492 Stable A/B Test React Start Page for Austria 50% DNA-104660 Browser crash when calling window.opr.authPrivate API in a private mode DNA-105000...

OPENSUSE-SU-2023:0062-1 Security update for python-Django

python-Django was updated to fix a security issues: - CVE-2023-24580: prevent DOS in file uploads bsc1208082...

OPENSUSE-SU-2023:0061-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 110.0.5481.177 boo1208589 CVE-2023-0927: Use after free in Web Payments API CVE-2023-0928: Use after free in SwiftShader CVE-2023-0929: Use after free in Vulkan CVE-2023-0930: Heap buffer overflow in Video CVE-2023-0931: Use after free...

OPENSUSE-SU-2022:10219-1 Security update for opera

This update for opera fixes the following issues: Update to 93.0.4585.11 - CHR-9051 Update chromium on desktop-stable-107-4585 to 107.0.5304.88 - DNA-95965 Add support for more UD TLDs - DNA-102960 Replace messengers icons - DNA-102964 Crash at -FramedBrowserWindow sendEvent: - DNA-103125...

OPENSUSE-SU-2022:10142-1 Security update for pngcheck

This update for pngcheck fixes the following issues: version update to 3.0.3 boo1202662 fixed a crash bug and probable vulnerability in large MNG LOOP chunks fixed a divide-by-zero crash bug and probable vulnerability in interlaced images with extra compressed data beyond the nominal end of the...

OPENSUSE-SU-2022:10118-1 Security update for opera

This update for opera fixes the following issues: Update to 90.0.4480.84 - DNA-101690 Cherry-pick fix for CVE-2022-3075 from chromium Update to 90.0.4480.80 - DNA-99188 Tab Tooltip doesn't disappear - DNA-100664 Shopping corner widget - DNA-100843 Options to install and update VPN Pro app, when...

OPENSUSE-SU-2022:10040-1 Security update for python-nltk

This update for python-nltk fixes the following issues: Update to 3.7 - Improve and update the NLTK team page on nltk.org 2855, 2941 - Drop support for Python 3.6, support Python 3.10 2920 - Update to 3.6.7 - Resolve IndexError in senttokenize and wordtokenize 2922 - Update to 3.6.6 - Refactor...

OPENSUSE-SU-2022:10020-1 Security update for neomutt

This update for neomutt fixes the following issues: neomutt was updated to 20220429: Bug Fixes Do not crash on an invalid usethreads/sort combination Fix: stuck browser cursor Resolve move the cursor after Index: fix menu size on new mail Don't overlimit LMDB mmap size OpenBSD y/n translation fix...

OPENSUSE-SU-2022:0155-1 Security update for libredwg

This update for libredwg fixes the following issues: Update to release 0.12.5 boo1193372 CVE-2021-28237 Restricted accepted DXF objects to all stable and unstable classes, minus MATERIAL, ARCDIMENSION, SUN, PROXY. I.e. most unstable objects do not allow unknown DXF codes anymore. This fixed most...

OPENSUSE-SU-2022:0114-1 Security update for chromium

This update for chromium fixes the following issues: Updated Chromium to 100.0.4896.127 boo1198509 - CVE-2022-1364: Type Confusion in V8 - Various fixes from internal audits, fuzzing and other initiatives...

OPENSUSE-SU-2022:0940-1 Security update for xen

This update for xen fixes the following issues: Update Xen to version 4.14.4 bsc1027519 Transient execution side-channel attacks attacking the Branch History Buffer BHB, named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now mitigated. Security issues fixed: -...

OPENSUSE-SU-2022:0930-1 Security update for qemu

This update for qemu fixes the following issues: - CVE-2022-0358: Fixed a potential privilege escalation via virtiofsd bsc1195161. - CVE-2021-3930: Fixed a potential denial of service in the emulated SCSI device bsc1192525. Non-security fixes: - Fixed a kernel data corruption via a long kernel bo...

OPENSUSE-SU-2022:0081-1 Security update for ansible

Ansible was updated to 2.9.21 to fix lots of bugs and security issues. Update to version 2.9.20, maintenance release containing numerous bugfixes. Update to version 2.9.19 with minor changes and a few bug fixes. Update to version 2.9.18: CVE-2021-20228 where default and fallback values for nolog...

OPENSUSE-SU-2022:0870-1 Security update for java-1_8_0-openj9

This update for java-180-openj9 fixes the following issues: Update to OpenJDK 8u322 build 04 with OpenJ9 0.30.0: - Fixing the following vulnerabilities: CVE-2022-21248 bsc1194926, CVE-2022-21277 bsc1194930, CVE-2022-21282 bsc1194933, CVE-2022-21291 bsc1194925, CVE-2022-21293 bsc1194935,...

OPENSUSE-SU-2022:0743-1 Security update for cyrus-sasl

This update for cyrus-sasl fixes the following issues: - CVE-2022-24407: Fixed SQL injection in sqlauxpropstore in plugins/sql.c bsc1196036. The following non-security bugs were fixed: - postfix: sasl authentication with password fails bsc1194265...

OPENSUSE-SU-2022:0722-1 Security update for wireshark

This update for wireshark fixes the following issues: Update to Wireshark 3.6.2: - CVE-2022-0586: RTMPT dissector infinite loop bsc1195866 - CVE-2022-0585: Large loops in multiple dissectors bsc1195867 - CVE-2022-0583: PVFS dissector crash bsc1195868 - CVE-2022-0582: CSN.1 dissector crash...

OPENSUSE-SU-2022:0715-1 Security update for nodejs14

This update for nodejs14 fixes the following issues: - CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe bsc1192153. - CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite bsc1191963. - CVE-2021-32804: Fixed...

OPENSUSE-SU-2022:0067-1 Security update for libdxfrw, librecad

This update for libdxfrw, librecad fixes the following issues: - Update to version 1.0.1+git.20220109: fixed ambiguous error for DRWDimension::parseDwg fixed enless while-loop for pre 2004 versions dwgReader::readDwgObjects stop reading after 1st error dwgReader::readDwgEntities stop reading afte...

OPENSUSE-SU-2022:0526-1 Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container

This update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container fixes the following issues: - Update to version 0.49.0 Release notes...

OPENSUSE-SU-2022:0038-1 Security update for kafka

This update for kafka, kafka-kit fixes following issues: - Remove JDBCAppender, JMSSink, chainsaw from log4j jars during build to prevent bsc1194842, CVE-2022-23302, bsc1194843, CVE-2022-23305, bsc1194844, CVE-2022-23307 - Rebuild with kafka-kit change to Remove JMSAppender from log4j jars during...

OPENSUSE-SU-2022:0333-1 Security update for xen

This update for xen fixes the following issues: - CVE-2022-23033: Fixed guestphysmapremovepage not removing the p2m mappings. XSA-393 bsc1194576 - CVE-2022-23034: Fixed possible DoS by a PV guest Xen while unmapping a grant. XSA-394 bsc1194581 - CVE-2022-23035: Fixed insufficient cleanup of...

OPENSUSE-SU-2022:0199-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: - CVE-2021-4140: Fixed Iframe sandbox bypass with XSLT bsc1194547. - CVE-2022-22737: Fixed race condition when playing audio files bsc1194547. - CVE-2022-22738: Fixed heap-buffer-overflow in blendGaussianBlur bsc1194547. -...

OPENSUSE-SU-2022:0190-1 Security update for polkit

This update for polkit fixes the following issues: - CVE-2021-4034: Fixed a local privilege escalation in pkexec bsc1194568...

OPENSUSE-SU-2022:0112-1 Security update for nodejs14

This update for nodejs14 fixes the following issues: - CVE-2021-44531: Fixed improper handling of URI Subject Alternative Names bsc1194511. - CVE-2021-44532: Fixed certificate Verification Bypass via String Injection bsc1194512. - CVE-2021-44533: Fixed incorrect handling of certificate subject an...

OPENSUSE-SU-2021:4186-1 Security update for go1.17

This update for go1.17 fixes the following issues: Updated to upstream version 1.17.5 to include fixes to the compiler, linker, syscall, runtime, the net/http, go/types, and time packages bsc1190649 - CVE-2021-44717: syscall: don't close fd 0 on ForkExec error bsc1193598. - CVE-2021-44716:...

OPENSUSE-SU-2021:4171-1 Security update for runc

This update for runc fixes the following issues: Update to runc v1.0.3. CVE-2021-43784: Fixed a potential vulnerability related to the internal usage of netlink, which is believed to not be exploitable with any released versions of runc bsc1193436 Fixed inability to start a container with...

OPENSUSE-SU-2021:1591-1 Security update for fetchmail

This update for fetchmail fixes the following issues: - CVE-2021-36386: Fixed DoS or information disclosure in some configurations bsc1188875. - CVE-2021-39272: Fixed STARTTLS session encryption bypassing fetchmail-SA-2021-02 bsc1190069. - Update to 6.4.22 bsc1152964, jscSLE-18159, jscSLE-17903,...

OPENSUSE-SU-2021:1574-1 Security update for nodejs12

This update for nodejs12 fixes the following issues: - CVE-2021-22959: Fixed HTTP Request Smuggling due to spaced in headers bsc1191601. - CVE-2021-22960: Fixed HTTP Request Smuggling when parsing the body bsc1191602. - CVE-2021-37701: Fixed arbitrary file creation and overwrite in nodejs-tar...

OPENSUSE-SU-2021:3996-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2021-20176: Fixed division by zero caused by processing crafted file bsc1181836...