OPENSUSE-SU-2024:10378-1 fuse-2.9.5-1.6 on GA media

These are all security issues fixed in the fuse-2.9.5-1.6 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10708-1 cvs-1.12.13-1.14 on GA media

These are all security issues fixed in the cvs-1.12.13-1.14 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11389-1 libnss_slurm2-21.08.1-1.1 on GA media

These are all security issues fixed in the libnssslurm2-21.08.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10615-1 ansible-2.9.24-1.2 on GA media

These are all security issues fixed in the ansible-2.9.24-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13476-1 avif-tools-1.0.2-1.1 on GA media

These are all security issues fixed in the avif-tools-1.0.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10960-1 libmysofa-devel-1.2-1.3 on GA media

These are all security issues fixed in the libmysofa-devel-1.2-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13530-1 ssh-audit-3.1.0-1.1 on GA media

These are all security issues fixed in the ssh-audit-3.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13522-1 libssh2-1-1.11.0-2.1 on GA media

These are all security issues fixed in the libssh2-1-1.11.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13838-1 kubernetes1.26-apiserver-1.26.15-1.1 on GA media

These are all security issues fixed in the kubernetes1.26-apiserver-1.26.15-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13834-1 etcd-for-k8s1.27-3.5.12-1.1 on GA media

These are all security issues fixed in the etcd-for-k8s1.27-3.5.12-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10007-1 mcabber-1.0.4-1.1 on GA media

These are all security issues fixed in the mcabber-1.0.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11394-1 libsox3-14.4.2-5.17 on GA media

These are all security issues fixed in the libsox3-14.4.2-5.17 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10088-1 libmbedcrypto0-2.4.0-1.2 on GA media

These are all security issues fixed in the libmbedcrypto0-2.4.0-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11027-1 lout-3.42-1.3 on GA media

These are all security issues fixed in the lout-3.42-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12548-1 exiv2-0.27.5-8.1 on GA media

These are all security issues fixed in the exiv2-0.27.5-8.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12974-1 ruby3.2-rubygem-rack-2.2-2.2.7-1.1 on GA media

These are all security issues fixed in the ruby3.2-rubygem-rack-2.2-2.2.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11621-1 libmariadbd-devel-10.6.5-1.1 on GA media

These are all security issues fixed in the libmariadbd-devel-10.6.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12400-1 podman-4.2.1-2.1 on GA media

These are all security issues fixed in the podman-4.2.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11740-1 flatpak-1.12.3-1.1 on GA media

These are all security issues fixed in the flatpak-1.12.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11172-1 finch-2.14.7-1.1 on GA media

These are all security issues fixed in the finch-2.14.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12600-1 docker-compose-2.15.1-1.1 on GA media

These are all security issues fixed in the docker-compose-2.15.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10347-1 SuSEfirewall2-fail2ban-0.9.5-1.1 on GA media

These are all security issues fixed in the SuSEfirewall2-fail2ban-0.9.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12572-1 helm-3.10.3-2.1 on GA media

These are all security issues fixed in the helm-3.10.3-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13449-1 libgit2-1_7-1.7.1-3.1 on GA media

These are all security issues fixed in the libgit2-17-1.7.1-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11325-1 ruby2.7-rubygem-activemodel-6.0-6.0.4-1.2 on GA media

These are all security issues fixed in the ruby2.7-rubygem-activemodel-6.0-6.0.4-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10455-1 irssi-0.8.20-3.1 on GA media

These are all security issues fixed in the irssi-0.8.20-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10689-1 cni-plugins-0.9.1-1.3 on GA media

These are all security issues fixed in the cni-plugins-0.9.1-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12893-1 python310-yarl-1.9.2-1.1 on GA media

These are all security issues fixed in the python310-yarl-1.9.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:0112-1 Security update for perl-CryptX

This update for perl-CryptX fixes the following issues: Updated to version 0.080: 0.080 2023-10-04 - fix 95 AES-NI troubles on MS Windows gcc compiler - fix 96 Tests failure with Math::BigInt = 1.999840 - Enabled AES-NI for platforms with gcc/clang/llvm 0.079 2023-10-01 - fix 92 update libtomcryp...

OPENSUSE-SU-2023:0366-1 Security update for vlc

This update for vlc fixes the following issues: Update to version 3.0.20: + Video Output: - Fix green line in fullscreen in D3D11 video output - Fix crash with some AMD drivers old versions - Fix events propagation issue when double-clicking with mouse wheel + Decoders: - Fix crash when AV1...

OPENSUSE-SU-2023:0115-1 Security update for opera

This update for opera fixes the following issues: - Update to 99.0.4788.13 CHR-9290 Update Chromium on desktop-stable-113-4788 to 113.0.5672.127 DNA-107317 delayLoadHelper2 crash in crashreporter - The update to chromium 113.0.5672.127 fixes following issues: CVE-2023-2721, CVE-2023-2722,...

OPENSUSE-SU-2023:0077-1 Security update for python-Django

This update for python-Django fixes the following issues: - CVE-2023-24580: Prevent DOS in file uploads. boo1208082 update to 1.11.15 CVE-2018-14574: Fixed Open redirect possibility in CommonMiddleware boo1102680 Fixed WKBWriter.write and writehex for empty polygons on GEOS 3.6.1+ Fixed a...

OPENSUSE-SU-2023:0016-1 Security update for chromium

This update for chromium fixes the following issues: Update to version 109.0.5414.74 boo1207018: - CVE-2023-0128: Use after free in Overview Mode - CVE-2023-0129: Heap buffer overflow in Network Service - CVE-2023-0130: Inappropriate implementation in Fullscreen API - CVE-2023-0131: Inappropriate...

OPENSUSE-SU-2022:10095-1 Security update for nim

This update for nim fixes the following issues: Includes upstream security fixes for: boo1175333, CVE-2020-15693 httpClient is vulnerable to a CR-LF injection boo1175334, CVE-2020-15692 mishandle of argument to browsers.openDefaultBrowser boo1175332, CVE-2020-15694 httpClient.get.contentLength...

OPENSUSE-SU-2022:10081-1 Security update for trivy

This update for trivy fixes the following issues: trivy was updated to version 0.30.4: fix: remove the first arg when running as a plugin 2595 fix: k8s controlplaner scanning 2593 fixvuln: GitLab report template 2578 Update to version 0.30.3: fixserver: use a new db worker for hot updates 2581...

OPENSUSE-SU-2022:1059-1 Security update for salt

This update for salt fixes the following issues: - CVE-2022-22935: Sign authentication replies to prevent MiTM bsc1197417 - CVE-2022-22934: Sign pillar data to prevent MiTM attacks. bsc1197417 - CVE-2022-22936: Prevent job and fileserver replays bsc1197417 - CVE-2022-22941: Fixed targeting bug,...

OPENSUSE-SU-2022:0089-1 Security update for nextcloud

This update for nextcloud fixes the following issues: nextcloud was updated to 21.0.9: - CVE-2021-41239 CWE-200: user enumeration setting not obeyed in User Status API boo1196905 - CVE-2021-41241 CWE-863: groupfolders advanced permissions is not obeyed for subfolders boo1196908 - CVE-2021-41741...

OPENSUSE-SU-2022:0906-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Updated to version 91.7 bsc1196900: - CVE-2022-26381: Fixed an invalid memory access due to text reflow when SVG objects were present. - CVE-2022-26383: Fixed an issue where, when resizing a popup after requesting fullscreen access, t...

OPENSUSE-SU-2022:0841-1 Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues: - CVE-2022-23853, CVE-2022-25255: Avoid unintentionally using binaries from CWD bsc1195386, bsc1196501...

OPENSUSE-SU-2022:0768-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer BHB, named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now mitigated. The following security bugs...

OPENSUSE-SU-2022:0042-1 Security update for chromium

This update for chromium fixes the following issues: - Chromium 98.0.4758.102 boo1195986 CVE-2022-0603: Use after free in File Manager CVE-2022-0604: Heap buffer overflow in Tab Groups CVE-2022-0605: Use after free in Webstore API CVE-2022-0606: Use after free in ANGLE CVE-2022-0607: Use after fr...

OPENSUSE-SU-2022:0131-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated - Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past jscSLE-22573 You can reenable via systemctl setting /proc/sys/kernel/unprivilegedbpfdisabled to 0...

OPENSUSE-SU-2021:1642-1 Security update for postrsd

postrsd was updated to release 1.11 boo1180251: Drop group privileges as well as user privileges Fixed: The subprocess that talks to Postfix could be caused to hang with a very long email address. CVE-2020-35573 - Update to release 1.6 Fix endianness issue with SHA-1 implementation Add dual stack...

OPENSUSE-SU-2021:4154-1 Security update for p11-kit

This update for p11-kit fixes the following issues: - CVE-2020-29361: Fixed multiple integer overflows in rpc code bsc1180064 - Add support for CKANSSSERVER,EMAILDISTRUSTAFTER bsc1187993...

OPENSUSE-SU-2021:1603-1 Security update for netdata

This update for netdata fixes the following issues: Update to 1.31.0 go.d.plugin 0.29.0 The v1.31.0 release of Netdata comes with re-packaged and redesigned elements of the dashboard to help you focus on your metrics, even more Linux kernel insights via eBPF, on-node machine learning to help you...

OPENSUSE-SU-2021:1602-1 Security update for nextcloud

This update for nextcloud fixes the following issues: Update to 20.0.14 Security issues fixed: CVE-2021-41179: Fix boo1192028 - CWE-304: Two-Factor Authentication not enforced for pages marked as public CVE-2021-41178: Fix boo1192030 - CWE-434: File Traversal affecting SVG files on Nextcloud Serv...

OPENSUSE-SU-2021:1535-1 Security update for ruby2.5

This update for ruby2.5 fixes the following issues: - CVE-2021-31799: Fixed Command injection vulnerability in RDoc bsc1190375. - CVE-2021-31810: Fixed trusting FTP PASV responses vulnerability in Net:FTP bsc1188161. - CVE-2021-32066: Fixed StartTLS stripping vulnerability in Net:IMAP bsc1188160...

OPENSUSE-SU-2021:1481-1 Security update for transfig

This update for transfig fixes the following issues: Update to fig2dev version 3.2.8 Patchlevel 8b Aug 2021 - bsc1190618, CVE-2020-21529: stack buffer overflow in the bezierspline function in genepic.c. - bsc1190615, CVE-2020-21530: segmentation fault in the readobjects function in read.c. -...

OPENSUSE-SU-2021:3643-1 Security update for binutils

This update for binutils fixes the following issues: - For compatibility on old code stream that expect 'brcl 0,label' to not be disassembled as 'jgnop label' on s390x. bsc1192267 This reverts IBM zSeries HLASM support for now. - Fixed that ppc64 optflags did not enable LTO bsc1188941. - Fix empt...

OPENSUSE-SU-2021:1452-1 Security update for mailman

This update for mailman fixes the following issues: Update to 2.1.35 to fix 2 security issues: - A potential for for a list member to carry out an off-line brute force attack to obtain the list admin password has been reported by Andre Protas, Richard Cloke and Andy Nuttall of Apple. This is fixe...