OPENSUSE-SU-2024:10806-1 go1.13-1.13.15-2.6 on GA media

These are all security issues fixed in the go1.13-1.13.15-2.6 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10741-1 etcd-3.4.16-3.1 on GA media

These are all security issues fixed in the etcd-3.4.16-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13160-1 ruby3.2-rubygem-json_pure-2.6.3-1.3 on GA media

These are all security issues fixed in the ruby3.2-rubygem-jsonpure-2.6.3-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10432-1 finch-2.11.0-4.1 on GA media

These are all security issues fixed in the finch-2.11.0-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12271-1 liblzma5-32bit-5.2.6-1.1 on GA media

These are all security issues fixed in the liblzma5-32bit-5.2.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12893-1 python310-yarl-1.9.2-1.1 on GA media

These are all security issues fixed in the python310-yarl-1.9.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12896-1 etcd-3.5.8-1.1 on GA media

These are all security issues fixed in the etcd-3.5.8-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11087-1 nextcloud-22.1.1-1.2 on GA media

These are all security issues fixed in the nextcloud-22.1.1-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13243-1 postgresql15-15.4-2.1 on GA media

These are all security issues fixed in the postgresql15-15.4-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13188-1 python3-salt-3006.0-4.1 on GA media

These are all security issues fixed in the python3-salt-3006.0-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13272-1 MozillaFirefox-118.0.1-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-118.0.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11552-1 libmbedcrypto7-2.27.0-2.1 on GA media

These are all security issues fixed in the libmbedcrypto7-2.27.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10389-1 guile-2.0.13-2.1 on GA media

These are all security issues fixed in the guile-2.0.13-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11305-1 librpmbuild9-4.16.1.3-3.2 on GA media

These are all security issues fixed in the librpmbuild9-4.16.1.3-3.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11941-1 kanidm-1.1.0~alpha7~git0.c8468199-2.1 on GA media

These are all security issues fixed in the kanidm-1.1.0alpha7git0.c8468199-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11939-1 kernel-devel-5.16.15-1.1 on GA media

These are all security issues fixed in the kernel-devel-5.16.15-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10757-1 filezilla-3.55.1-1.2 on GA media

These are all security issues fixed in the filezilla-3.55.1-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11295-1 radare2-5.3.1-2.2 on GA media

These are all security issues fixed in the radare2-5.3.1-2.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:0128-1 Security update for opera

This update for opera fixes the following issues: - Update to 110.0.5130.23 CHR-9706 Update Chromium on desktop-stable-124-5130 to 124.0.6367.62 DNA-116450 Promote 110 to stable - Complete Opera 110 changelog at: https://blogs.opera.com/desktop/changelog-for-110/ - The update to chromium...

OPENSUSE-SU-2024:0017-1 Security update for python-django-grappelli

This update for python-django-grappelli fixes the following issues: Update to 2.14.4: - CVE-2021-46898: Fixed views/switch.py vulnerable to protocol-relative URL attacks boo1216481 - Fixed: Redirect with switch user. - Improved: Remove extra filtering in AutocompleteLookup. - Improved: Added impo...

OPENSUSE-SU-2024:0005-1 Security update for putty

This update for putty fixes the following issues: putty was updated to to release 0.80: Fix CVE-2023-48795 boo1218128 - Update to release 0.79 Terminal mouse tracking: support for mouse movements which are not drags, and support for horizontal scroll events e.g. generated by trackpads. Fixed: PuT...

OPENSUSE-SU-2023:0329-1 Security update for sox

This update for sox fixes the following issues: - Apply various fix patches taken from Debian package; it fixes also other entries CVE-2022-31650 boo1212060 CVE-2023-34318 boo1212062 CVE-2023-34432 boo1212063 - Fix floating point exception in src/voc.c CVE-2023-32627 boo1212061...

OPENSUSE-SU-2023:0201-1 Security update for libredwg

This update for libredwg fixes the following issues: Update to version 0.12.5.5907 Security issues fixed: CVE-2022-33025: Fixed multiple security issues boo1200898 CVE-2023-36271: Fixed heap buffer overflow via the function bitwcs2nlen boo1212709 CVE-2023-36272: Fixed heap buffer overflow via the...

OPENSUSE-SU-2023:0171-1 Security update for nextcloud-desktop

This update for nextcloud-desktop fixes the following issues: Update ot 3.8.0 - Resize WebView widget once the loginpage rendered - Feature/secure file drop - Check German translation for wrong wording - L10n: Correct word - Fix displaying of file details button for local syncfileitem activities ...

OPENSUSE-SU-2023:0111-1 Security update for qt6-svg

This update for qt6-svg fixes the following issues: - CVE-2023-32573: Fixed missing initialization of QtSvg QSvgFont munitsPerEm boo1211298...

OPENSUSE-SU-2023:0092-1 Security update for chromium

This update for chromium fixes the following issues: - Chromium 112.0.5615.121: CVE-2023-2033: Type Confusion in V8 boo1210478 - Chromium 112.0.5615.49 CSS now supports nesting rules. The algorithm to set the initial focus on elements was updated. No-op fetch handlers on service workers are skipp...

OPENSUSE-SU-2023:0088-1 Security update for upx

upx was updated to fix the following issues: Update to release 4.0.2 Fix unpack of ELF x86-64 that failed with 'CantUnpackException: corrupt binfo' Resolve SEGV on PackLinuxElf64::invertptdynamic - CVE-2021-30500: Fixed Null pointer dereference in PackLinuxElf:canUnpack in plxelf.cpp -...

OPENSUSE-SU-2023:0020-1 Security update for libheimdal

This update for libheimdal fixes the following issues: Update to version 7.8.0 - CVE-2022-42898 PAC parse integer overflows - CVE-2022-3437 Overflows and non-constant time leaks in DES,3 and arcfour - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past end of array - CVE-2021-44758 A nu...

OPENSUSE-SU-2023:0005-1 Security update for python-Django

This update for python-Django fixes the following issues: - CVE-2022-41323: Fixed potential denial-of-service vulnerability in internationalized URLs boo1203793 - CVE-2022-36359: Fixed a potential reflected file download vulnerability in FileResponse boo1201923 - Update from 2.2.12 to 2.2.28...

OPENSUSE-SU-2022:10236-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 108.0.5359.94 boo1205999 - CVE-2022-4262: Type Confusion in V8...

OPENSUSE-SU-2022:10148-1 Security update for roundcubemail

This update for roundcubemail fixes the following issues: roundcubemail was updated to 1.5.3 Enigma: Fix initial synchronization of private keys Enigma: Fix double quoted-printable encoding of pgp-signed messages with no attachments 8413 Fix various PHP8 warnings 8392 Fix mail headers injection v...

OPENSUSE-SU-2022:10130-1 Security update for opera

This update for opera fixes the following issues: Update to 91.0.4516.20 - CHR-9019 Update chromium on desktop-stable-105-4516 to 105.0.5195.127 - DNA-101312 Allow changing logged in user with BrowserAPI - The update to chromium 105.0.5195.127 fixes following issues: CVE-2022-3196, CVE-2022-3197,...

OPENSUSE-SU-2022:10123-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 105.0.5195.127 boo1203419: CVE-2022-3195: Out of bounds write in Storage CVE-2022-3196: Use after free in PDF CVE-2022-3197: Use after free in PDF CVE-2022-3198: Use after free in PDF CVE-2022-3199: Use after free in Frames...

OPENSUSE-SU-2022:1064-1 Security update for python2-numpy

This update for python2-numpy fixes the following issues: - CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArrayNewFromDescrint function of ctors.c bsc1193913. - CVE-2021-41496: Fixed buffer overflow that could lead to DoS in arrayfrompyobj function of fortranobject.c bsc119390...

OPENSUSE-SU-2022:2649-1 Security update for pcre2

This update for pcre2 fixes the following issues: - CVE-2019-20454: Fixed out-of-bounds read in JIT mode when \X is used in non-UTF mode bsc1164384. - CVE-2022-1587: Fixed out-of-bounds read due to bug in recursions bsc1199235...

OPENSUSE-SU-2022:10018-1 Security update for atheme

This update for atheme fixes the following issues: atheme was updated to release 7.2.12: CVE-2022-24976: Fixed General authentication bypass in Atheme IRC services with InspIRCd 3 boo1195989 Track SASL login EID Update to release 7.2.11 Add a preliminary Turkish translation Add HMAC-MD5 verify-on...

OPENSUSE-SU-2022:10007-1 Security update for caddy

This update for caddy fixes the following issues: Update to version 2.5.1: Fixed regression in Unix socket admin endpoints. Fixed regression in caddy trust commands. Hash-based load balancing policies iphash, urihash, header, and cookie use an improved highest-random-weight HRW algorithm for...

OPENSUSE-SU-2022:0125-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 101.0.4951.54 boo1199118 Chromium 101.0.4951.41 boo1198917: CVE-2022-1477: Use after free in Vulkan CVE-2022-1478: Use after free in SwiftShader CVE-2022-1479: Use after free in ANGLE CVE-2022-1480: Use after free in Device API...

OPENSUSE-SU-2022:0105-1 Security update for pdns-recursor

This update for pdns-recursor fixes the following issues: - CVE-2022-27227: Fixed incomplete validation of incoming IXFR transfers. It applies to setups retrieving one or more RPZ zones from a remote server if the network path to the server is not trusted. boo1197525...

OPENSUSE-SU-2022:0097-1 Security update for icingaweb2

This update for icingaweb2 fixes the following issues: icingaweb2 was updated to 2.8.6 This is a security release. Security Fixes - CVE-2022-24715: SSH resources allow arbitrary code execution for authenticated users GHSA-v9mv-h52f-7g63 boo1196911 - CVE-2022-24714: Unwanted disclosure of hosts an...

OPENSUSE-SU-2022:1039-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-25636: Fixed an issue which allowed a local users to gain privileges because of a heap out-of-bounds write in nfdupnetdev.c, related to nftablesoffload...

OPENSUSE-SU-2022:0083-1 Security update for weechat

This update for weechat fixes the following issues: update to 3.2.1: CVE-2021-40516: relay: fix crash when decoding a malformed websocket frame boo1190206 update to 3.2 main changes: use XDG directories by default config, data, cache, runtime add support of IRC SASL mechanisms SCRAM-SHA-1,...

OPENSUSE-SU-2022:0712-1 Security update for flatpak

This update for flatpak fixes the following issues: Update to flatpak 1.10.7: - CVE-2022-21682: Introduce new option --nofilesystem=host:reset to support flatpak-builder 1.2.2 bsc1194611. - CVE-2021-43860: A malicious repository could hav sent invalid application metadata in a way that hides some...

OPENSUSE-SU-2022:0283-1 Security update for samba

CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; bso14911; bsc1193690; - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfsfruit allows code execution; bso14914; bsc1194859; - CVE-2022-0336: Samba AD users...

OPENSUSE-SU-2022:0330-1 Security update for glibc

This update for glibc fixes the following issues: - CVE-2021-3999: Fixed incorrect errno in getcwd bsc1194640 - CVE-2022-23219: Fixed buffer overflow in sunrpc clntcreate for 'unix' bsc1194768 - CVE-2022-23218: Fixed buffer overflow in sunrpc svcunixcreate bsc1194770 Features added: - IBM Power 1...

OPENSUSE-SU-2021:1635-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: - Update to version 91.4 MFSA 2021-54 bsc1193485 - CVE-2021-43536: URL leakage when navigating while executing asynchronous function - CVE-2021-43537: Heap buffer overflow when using structured clone - CVE-2021-43538: Missing fullscre...

OPENSUSE-SU-2021:1626-1 Security update for go1.16

This update for go1.16 fixes the following issues: Updated to upstream version 1.16.12 to include security fixes to the compiler, syscall, runtime, the net/http, net/http/httptest, and time packages bsc1182345 - CVE-2021-44717: syscall: don't close fd 0 on ForkExec error bsc1193598. -...

OPENSUSE-SU-2021:1603-1 Security update for netdata

This update for netdata fixes the following issues: Update to 1.31.0 go.d.plugin 0.29.0 The v1.31.0 release of Netdata comes with re-packaged and redesigned elements of the dashboard to help you focus on your metrics, even more Linux kernel insights via eBPF, on-node machine learning to help you...

OPENSUSE-SU-2021:4112-1 Security update for log4j12

This update for log4j12 fixes the following issues: - CVE-2021-4104: Disable the JMSAppender class from log4j to protect against the log4jshell vulnerability. bsc1193662...

OPENSUSE-SU-2021:4104-1 Security update for python3

This update for python3 fixes the following issues: - CVE-2021-3426: Fixed information disclosure via pydoc bsc1183374. - CVE-2021-3733: Fixed infinitely reading potential HTTP headers after a 100 Continue status response from the server bsc1189241. - CVE-2021-3737: Fixed ReDoS in urllib.request...