OPENSUSE-SU-2024:0119-1 Security update for tinyproxy

This update for tinyproxy fixes the following issues: - Update to release 1.11.2 Fix potential use-after-free in header handling CVE-2023-49606, boo1223746 Prevent junk from showing up in error page in invalid requests CVE-2022-40468, CVE-2023-40533, boo1223743 - Move tinyproxy program to /usr/bi...

OPENSUSE-SU-2024:0118-1 Security update for python-python-jose

This update for python-python-jose fixes the following issues: CVE-2024-33663: Fixed algorithm confusion with OpenSSH ECDSA keys and other key formats boo1223417...

OPENSUSE-SU-2024:0114-1 Security update for pdns-recursor

This update for pdns-recursor fixes the following issues: - update to 4.8.8: fixes a case when a crafted responses can lead to a denial of service in Recursor if recursive forwarding is configured boo1223262, CVE-2024-25583 - changes in 4.8.7: If serving stale, wipe CNAME records from cache when ...

OPENSUSE-SU-2024:0113-1 Security update for dcmtk

This update for dcmtk fixes the following issues: Fixed incorrect type conversion in the DVPSSoftcopyVOIPList:createFromImage functionality of OFFIS DCMTK boo1223324, CVE-2024-28130 - Add missing requirements for dcmtk-devel boo1220809 - Update to 3.6.8 See DOCS/CHANGES.368 for the full list of...

OPENSUSE-SU-2024:0112-1 Security update for perl-CryptX

This update for perl-CryptX fixes the following issues: Updated to version 0.080: 0.080 2023-10-04 - fix 95 AES-NI troubles on MS Windows gcc compiler - fix 96 Tests failure with Math::BigInt = 1.999840 - Enabled AES-NI for platforms with gcc/clang/llvm 0.079 2023-10-01 - fix 92 update libtomcryp...

OPENSUSE-SU-2024:0111-1 Security update for putty

This update for putty fixes the following issues: Update to release 0.81 Fix CVE-2024-31497: NIST P521 / ecdsa-sha2-nistp521 signatures are no longer generated with biased values of k. The previous bias compromises private keys...

OPENSUSE-SU-2024:0106-1 Security update for sngrep

This update for sngrep fixes the following issues: - Update to version 1.8.1 Fix CVE-2024-3119: sngrep: buffer overflow due to improper handling of 'Call-ID' and 'X-Call-ID' SIP headers. Fix CVE-2024-3120: sngrep: stack-buffer overflow due to inadequate bounds checking when copying 'Content-Lengt...

OPENSUSE-SU-2024:0095-1 Security update for kanidm

This update for kanidm fixes the following issues: Update to version 1.1.0rc16git6.e51d0de: SECURITY: LOW Administrator triggered thread crash in oauth2 claim maps 2686 2686 return consent map to service account 2604...

OPENSUSE-SU-2024:0093-1 Security update for minidlna

This update for minidlna fixes the following issues: Update to 1.3.3 boo1222007: - Fixed HTTP chunk length parsing. CVE-2023-33476 - Improved Dutch and Swedish translations. - Fixed directory symlink deletion handling...

OPENSUSE-SU-2024:0084-1 Security update for chromium

This update for chromium fixes the following issue: Chromium 122.0.6261.128 boo1221335 CVE-2024-2400: Use after free in Performance Manager Chromium 122.0.6261.111 boo1220131,boo1220604,boo1221105 New upstream security release. CVE-2024-2173: Out of bounds memory access in V8. CVE-2024-2174:...

OPENSUSE-SU-2024:0082-1 Security update for python-rpyc

This update for python-rpyc fixes the following issues: - CVE-2024-27758: Fixed remote code execution via exposed methods boo1221331...

OPENSUSE-SU-2024:0080-1 Security update for python-Django1

This update for python-Django1 fixes the following issues: - CVE-2024-27351: Fixed a denial-of-service in regular expression of django.utils.text.Truncator.words boo1220358...

OPENSUSE-SU-2024:0077-1 Security update for python-Django

This update for python-Django fixes the following issues: - CVE-2024-27351: Fixed a denial-of-service in regular expression of django.utils.text.Truncator.words boo1220358...

OPENSUSE-SU-2024:0064-1 Security update for zabbix

This update for zabbix fixes the following issues: - CVE-2024-22119: Fixed a stored XSS in graph items select form boo1219775...

OPENSUSE-SU-2024:0053-1 Security update for opera

This update for opera fixes the following issues: - Update to 107.0.5045.21 CHR-9604 Update Chromium on desktop-stable-121-5045 to 121.0.6167.160 DNA-114167 Crash at TopLevelStorageAccessPermissionContext:: DecidePermissionpermissions::PermissionRequestData, base:: OnceCallback DNA-114303 Crash a...

OPENSUSE-SU-2024:0052-1 Security update for bitcoin

This update for bitcoin fixes the following issues: Update to version 26.0, including the following changes: - Enable LTO and test package for Leap - Enable sqlite3 support for wallet - Enable asm optimizations unconditionally...

OPENSUSE-SU-2024:0048-1 Security update for pdns-recursor

This update for pdns-recursor fixes the following issues: Update to 4.8.6: fixes case when crafted DNSSEC records in a zone can lead to a denial of service in Recursor https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html boo1219823, boo1219826, CVE-2023-50387,...

OPENSUSE-SU-2024:0047-1 Security update for hugin

This update for hugin fixes the following issues: Update to version 2023.0.0: PTBatcherGUI can now also queue user defined assistant and user defined output sequences. PTBatcherGUI: Added option to generate panorama sequences from an existing pto template. Assistant: Added option to select...

OPENSUSE-SU-2024:0037-1 Security update for mbedtls

This update for mbedtls fixes the following issues: - Update to version 2.28.7: - Resolves CVE-2024-23170 boo1219336 - Update to 2.28.6: Changes: Mbed TLS is now released under a dual Apache-2.0 OR GPL-2.0-or-later license. Users may choose which license they take the code under. - Update to...

OPENSUSE-SU-2024:0036-1 Security update for tinyssh

This update for tinyssh fixes the following issues: tinyssh was updated to 20240101 boo1218197, CVE-2023-48795: fixed channelforkpty race condition between closeslave in parent process and loginttyslave in child process fixed behavior when using terminal mode and stdin redirected to /dev/null 'ss...

OPENSUSE-SU-2024:0033-1 Security update for opera

This update for opera fixes the following issues: Update to 106.0.4998.52 CHR-9580 Update Chromium on desktop-stable-120-4998 to 120.0.6099.234 DNA-113175 Can not merge folders on start page DNA-113341 Implement 'special' menus DNA-113811 Removing icons in sidepanel heading DNA-114059 Move to...

OPENSUSE-SU-2024:0031-1 Security update for cacti, cacti-spine

This update for cacti, cacti-spine fixes the following issues: cacti-spine 1.2.26: Fix: Errors when uptime OID is not present Fix: MySQL reconnect option is depreciated Fix: Spine does not check a host with no poller items Fix: Poller may report the wrong number of devices polled Feature: Allow...

OPENSUSE-SU-2024:0026-1 Security update for seamonkey

This update for seamonkey fixes the following issues: Update to 2.53.18.1: Update the NSS library to the latest esr 115 version for the final 2.53.18.1 release. SeaMonkey 2.53.18.1 uses the same backend as Firefox and contains the relevant Firefox 60.8 security fixes. SeaMonkey 2.53.18.1 shares...

OPENSUSE-SU-2024:0025-1 Security update for chromium

This update for chromium fixes the following issues: Update to 120.0.6099.224 boo1218892: - CVE-2024-0517: Out of bounds write in V8 - CVE-2024-0518: Type Confusion in V8 - CVE-2024-0519: Out of bounds memory access in V8 - Various fixes from internal audits, fuzzing and other initiatives...

OPENSUSE-SU-2024:0023-1 Security update for libuev

This update for libuev fixes the following issues: - Update to 2.4.1: Update README with list of moden Linux APIs used Fix 27: possible buffer overrun in uevrun boo1218749 CVE-2022-48620...

OPENSUSE-SU-2024:0021-1 Security update for perl-Spreadsheet-ParseXLSX

This update for perl-Spreadsheet-ParseXLSX fixes the following issues: Updated to 0.29: see /usr/share/doc/packages/perl-Spreadsheet-ParseXLSX/Changes 0.29: - Fix for 'Argument '' isn't numeric in addition + at /usr/local/shar… - Incorrect cell values due to phonetic data doy72 - Fix die message ...

OPENSUSE-SU-2024:0020-1 Security update for chromium

This update for chromium fixes the following issues: - Chromium 120.0.6099.216 boo1217839, boo1218048, boo1218302, boo1218533, boo1218719 CVE-2024-0333: Insufficient data validation in Extensions CVE-2024-0222: Use after free in ANGLE CVE-2024-0223: Heap buffer overflow in ANGLE CVE-2024-0224: Us...

OPENSUSE-SU-2024:0017-1 Security update for python-django-grappelli

This update for python-django-grappelli fixes the following issues: Update to 2.14.4: - CVE-2021-46898: Fixed views/switch.py vulnerable to protocol-relative URL attacks boo1216481 - Fixed: Redirect with switch user. - Improved: Remove extra filtering in AutocompleteLookup. - Improved: Added impo...

OPENSUSE-SU-2024:0016-1 Security update for opera

This update for opera fixes the following issues: opera was updated to 106.0.4998.28 CHR-9566 Update Chromium on desktop-stable-120-4998 to 120.0.6099.200 DNA-113161 Weather 'Weather Location' description is almost invisible in dark mode DNA-113351 'Previous tile' should be the same size as 'next...

OPENSUSE-SU-2024:0013-1 Security update for opusfile

This update for opusfile fixes the following issues: - CVE-2022-47021: Fixed a NULL pointer dereference boo1207381...

OPENSUSE-SU-2024:0008-1 Security update for proftpd

This update for proftpd fixes the following issues: proftpd was updated to 1.3.8b - released 19-Dec-2023 - CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity boo1218144 - CVE-2023-51713: Fixed Out-of-bounds buffer read when handling FTP commands. boo1218344...

OPENSUSE-SU-2024:0007-1 Security update for exim

This update for exim fixes the following issues: exim was updated to 4.97.1 boo1218387, CVE-2023-51766: Fixes for the smtp protocol smuggling CVE-2023-51766 exim was updated to exim 4.96: Move from using the pcre library to pcre2. Constification work in the filters module required a major version...

OPENSUSE-SU-2024:0005-1 Security update for putty

This update for putty fixes the following issues: putty was updated to to release 0.80: Fix CVE-2023-48795 boo1218128 - Update to release 0.79 Terminal mouse tracking: support for mouse movements which are not drags, and support for horizontal scroll events e.g. generated by trackpads. Fixed: PuT...

OPENSUSE-SU-2024:0002-1 Security update for opera

This update for opera fixes the following issues: - Update to 106.0.4998.19 CHR-9416 Updating Chromium on desktop-stable- branches DNA-113887 Translations for O106 - The update to chromium 120.0.6099.130 fixes following issues: CVE-2023-7024 - Update to 106.0.4998.16 CHR-9553 Update Chromium on...

OPENSUSE-SU-2024:0001-1 Security update for opera

This update for opera fixes the following issues: - Update to 106.0.4998.19 CHR-9416 Updating Chromium on desktop-stable- branches DNA-113887 Translations for O106 - The update to chromium 120.0.6099.130 fixes following issues: CVE-2023-7024 - Update to 106.0.4998.16 CHR-9553 Update Chromium on...

OPENSUSE-SU-2023:0424-1 Security update for deepin-compressor

This update for deepin-compressor fixes the following issues: - CVE-2023-50255: Fix Zip Path Traversal boo1218428...

OPENSUSE-SU-2023:0423-1 Security update for deepin-compressor

This update for deepin-compressor fixes the following issues: - CVE-2023-50255: Fix Zip Path Traversal boo1218428...

OPENSUSE-SU-2023:0421-1 Security update for proftpd

This update for proftpd fixes the following issues: Update to version 1.3.8a Implemented mitigations for 'Terrapin' SSH attack CVE-2023-48795. http://proftpd.org/docs/NEWS-1.3.8b...

OPENSUSE-SU-2023:0419-1 Security update for zabbix

This update for zabbix fixes the following issues: Updated to latest release 4.0.50: - CVE-2023-32727: Fixed potential arbitrary code execution in icmpping boo1218199...

OPENSUSE-SU-2023:0418-1 Security update for zabbix

This update for zabbix fixes the following issues: Updated to latest release 4.0.50: - CVE-2023-32727: Fixed potential arbitrary code execution in icmpping boo1218199...

OPENSUSE-SU-2023:0413-1 Security update for cppcheck

This update for cppcheck fixes the following issues: - CVE-2023-39070: Fixed heap use-after-free in removeContradiction boo1215233 - update to 2.12.1: Support importing projects with project-name - update to 2.12.0: uselessOverride finds overriding functions that either duplicate code from or...

OPENSUSE-SU-2023:0411-1 Security update for putty

This update for putty fixes the following issues: putty is updated to release 0.80 Fix CVE-2023-48795 boo1218128 - Update to release 0.79 Terminal mouse tracking: support for mouse movements which are not drags, and support for horizontal scroll events e.g. generated by trackpads. Fixed: PuTTY...

OPENSUSE-SU-2023:0409-1 Security update for gstreamer-plugins-bad

This update for gstreamer-plugins-bad fixes the following issues: - CVE-2023-40474: Fixed integer overflow causing out of bounds writes when handling invalid uncompressed video bsc1215796. - CVE-2023-40476: Fixed possible overflow using maxsublayersminus1 bsc1215793...

OPENSUSE-SU-2023:0405-1 Security update for fish

This update for fish fixes the following issues: - CVE-2023-49284: Fixed shell expansion triggered by command substitution output boo1217808...

OPENSUSE-SU-2023:0404-1 Security update for fish

This update for fish fixes the following issues: - CVE-2023-49284: Fixed shell expansion triggered by command substitution output boo1217808...

OPENSUSE-SU-2023:0397-1 Security update for opera

This update for opera fixes the following issues: - Update to 105.0.4970.34 DNA-112796 Import Import bookmarks and history don't work DNA-113147 Add strength setting for Lucid Mode DNA-113148 Update 'Lucid Mode' button on videos to enable / disable split preview DNA-113287 Add strength setting fo...

OPENSUSE-SU-2023:0396-1 Security update for opera

This update for opera fixes the following issues: - Update to 105.0.4970.34 DNA-112796 Import Import bookmarks and history don't work DNA-113147 Add strength setting for Lucid Mode DNA-113148 Update 'Lucid Mode' button on videos to enable / disable split preview DNA-113287 Add strength setting fo...

OPENSUSE-SU-2023:0391-1 Security update for libtorrent-rasterbar, qbittorrent

This update for libtorrent-rasterbar, qbittorrent fixes the following issues: Changes in libtorrent-rasterbar: - Update to version 2.0.9 fix issue with web seed connections when they close and re-open fallocate not supported is not a fatal error fix proxying of IPv6 connections via IPv4 proxy tre...

OPENSUSE-SU-2023:0390-1 Security update for python-Django1

This update for python-Django1 fixes the following issues: - CVE-2023-43665: Fixed Denial-of-service vulnerability in django.utils.text.Truncator boo1215978...

OPENSUSE-SU-2023:0389-1 Security update for python-Django1

This update for python-Django1 fixes the following issues: - CVE-2023-43665: Fixed Denial-of-service vulnerability in django.utils.text.Truncator boo1215978...