OPENSUSE-SU-2023:0123-1 Security update for chromium

This update for chromium fixes the following issues: Update to version 114.0.5735.106: - CVE-2023-3079: Type Confusion in V8 boo1212044...

OPENSUSE-SU-2023:0117-1 Security update for chromium

This update for chromium fixes the following issues: - build with llvm15 on Leap - Chromium 113.0.5672.126 boo1211442: CVE-2023-2721: Use after free in Navigation CVE-2023-2722: Use after free in Autofill UI CVE-2023-2723: Use after free in DevTools CVE-2023-2724: Type Confusion in V8...

OPENSUSE-SU-2023:0115-1 Security update for opera

This update for opera fixes the following issues: - Update to 99.0.4788.13 CHR-9290 Update Chromium on desktop-stable-113-4788 to 113.0.5672.127 DNA-107317 delayLoadHelper2 crash in crashreporter - The update to chromium 113.0.5672.127 fixes following issues: CVE-2023-2721, CVE-2023-2722,...

OPENSUSE-SU-2023:0114-1 Security update for opera

This update for opera fixes the following issues: - Update to 99.0.4788.13 CHR-9290 Update Chromium on desktop-stable-113-4788 to 113.0.5672.127 DNA-107317 delayLoadHelper2 crash in crashreporter - The update to chromium 113.0.5672.127 fixes following issues: CVE-2023-2721, CVE-2023-2722,...

OPENSUSE-SU-2023:0111-1 Security update for qt6-svg

This update for qt6-svg fixes the following issues: - CVE-2023-32573: Fixed missing initialization of QtSvg QSvgFont munitsPerEm boo1211298...

OPENSUSE-SU-2023:0108-1 Security update for dcmtk

This update for dcmtk fixes the following issues: - CVE-2022-43272: Fixed memory leak via the TASCAssociation object boo1206070 - Update to 3.6.7 boo1208639, boo1208638, boo1208637, CVE-2022-2121, CVE-2022-2120, CVE-2022-2119 - CVE-2022-2121: Fixed possible DoS via NULL pointer dereference -...

OPENSUSE-SU-2023:0102-1 Security update for editorconfig-core-c

This update for editorconfig-core-c fixes the following issues: Update to version 0.12.6: - CVE-2023-0341: Fixed a buffer overflow in ecblob boo1211032 - Update property key, value length limits per spec change...

OPENSUSE-SU-2023:0101-1 Security update for pdns-recursor

This update for pdns-recursor fixes the following issues: pdns-recursor was updated to 4.6.6: fixes deterred spoofing attempts can lead to authoritative servers being marked unavailable boo1209897, CVE-2023-26437 Fixes in 4.6.5: When an expired NSEC3 entry is seen, move it to the front of the...

OPENSUSE-SU-2023:0097-1 Security update for stellarium

This update for stellarium fixes the following issues: - CVE-2023-28371: Fixed arbitrary file write issue. boo1209285...

OPENSUSE-SU-2023:0096-1 Security update for liferea

liferea was updated to version 1.14.1: + Fix CVE-2023-1350 - Remote code execution on feed enrichment boo1209190. Update to version 1.14.0: + New 'Reader mode' preference that allows stripping all web content + Implement support for Webkits Intelligent Tracking Protection + New progress bar when...

OPENSUSE-SU-2023:0093-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 112.0.5615.165 boo1210618: CVE-2023-2133: Out of bounds memory access in Service Worker API CVE-2023-2134: Out of bounds memory access in Service Worker API CVE-2023-2135: Use after free in DevTools CVE-2023-2136: Integer overflow in...

OPENSUSE-SU-2023:0092-1 Security update for chromium

This update for chromium fixes the following issues: - Chromium 112.0.5615.121: CVE-2023-2033: Type Confusion in V8 boo1210478 - Chromium 112.0.5615.49 CSS now supports nesting rules. The algorithm to set the initial focus on elements was updated. No-op fetch handlers on service workers are skipp...

OPENSUSE-SU-2023:0090-1 Security update for nextcloud-desktop

This update for nextcloud-desktop fixes the following issues: nextcloud-desktop was updated to 3.8.0: - Resize WebView widget once the loginpage rendered - Feature/secure file drop - Check German translation for wrong wording - L10n: Correct word - Fix displaying of file details button for local...

OPENSUSE-SU-2023:0088-1 Security update for upx

upx was updated to fix the following issues: Update to release 4.0.2 Fix unpack of ELF x86-64 that failed with 'CantUnpackException: corrupt binfo' Resolve SEGV on PackLinuxElf64::invertptdynamic - CVE-2021-30500: Fixed Null pointer dereference in PackLinuxElf:canUnpack in plxelf.cpp -...

OPENSUSE-SU-2023:0087-1 Security update for seamonkey

SeaMonkey was updated to 2.53.16: No throbber in plaintext editor bug 85498. Remove unused gridlines class from EdAdvancedEdit bug 1806632. Remove ESR 91 links from debugQA bug 1804534. Rename devtools/shim to devtools/startup bug 1812367. Remove unused seltype=text|cell css bug 1806653. Implemen...

OPENSUSE-SU-2023:0083-1 Security update for nextcloud

This update for nextcloud fixes the following issues: - Update to 23.0.12 See: https://nextcloud.com/changelog/latest23 - This also fix security issues: - CVE-2022-35931: Password Policy app could generate passwords that would be block boo1203190 - CVE-2022-39346: Missing length validation of use...

OPENSUSE-SU-2023:0082-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 111.0.5563.110 boo1209598 CVE-2023-1528: Use after free in Passwords CVE-2023-1529: Out of bounds memory access in WebHID CVE-2023-1530: Use after free in PDF CVE-2023-1531: Use after free in ANGLE CVE-2023-1532: Out of bounds read in...

OPENSUSE-SU-2023:0080-1 Security update for squirrel

This update for squirrel fixes the following issues: - CVE-2021-41556: fix out-of-bounds read issue boo1201974...

OPENSUSE-SU-2023:0077-1 Security update for python-Django

This update for python-Django fixes the following issues: - CVE-2023-24580: Prevent DOS in file uploads. boo1208082 update to 1.11.15 CVE-2018-14574: Fixed Open redirect possibility in CommonMiddleware boo1102680 Fixed WKBWriter.write and writehex for empty polygons on GEOS 3.6.1+ Fixed a...

OPENSUSE-SU-2023:0075-1 Security update for python-Django

python-Django was update to fix: - CVE-2023-24580: Prevent DOS in file uploads. bsc1208082...

OPENSUSE-SU-2023:0071-1 Security update for peazip

This update for peazip fixes the following issues: peazip was updated to 9.1.0: Major restyle in application's look & feel and themes, and many usability improvements for the file manager, and archiving / extraction screens. The scripting engine was refined, with the ability to adapt the syntax f...

OPENSUSE-SU-2023:0069-1 Security update for amanda

This update for amanda fixes the following issues: - CVE-2022-37704: fix privilege escalation via rundump boo1208033, ghzmanda/amanda195 - CVE-2022-37705: fix privilege escalation via runtar suid binary boo1208032, ghzmanda/amanda194...

OPENSUSE-SU-2023:0068-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 111.0.5563.64 New View Transitions API CSS Color Level 4 New developer tools in style panel for color functionality CSS added trigonometric functions, additional root font units and extended the n-th child pseudo selector. previousslid...

OPENSUSE-SU-2023:0066-1 Security update for opera

This update for opera fixes the following issues: Update to 96.0.4693.31 CHR-9206 Update Chromium on desktop-stable-110-4693 to 110.0.5481.178 DNA-104492 Stable A/B Test React Start Page for Austria 50% DNA-104660 Browser crash when calling window.opr.authPrivate API in a private mode DNA-105000...

OPENSUSE-SU-2023:0064-1 Security update for trivy

This update for trivy fixes the following issues: Update to version 0.37.3 boo1208091, CVE-2023-25165: chorehelm: update Trivy from v0.36.1 to v0.37.2 3574 ci: quote pros in c++ for semantic pr 3605 fiximage: check proxy settings from env for remote images 3604 Update to version 0.37.2: BREAKING:...

OPENSUSE-SU-2023:0063-1 Security update for opera

This update for opera fixes the following issues: Update to 96.0.4693.20 CHR-9191 Update Chromium on desktop-stable-110-4693 to 110.0.5481.78 CHR-9197 Update Chromium on desktop-stable-110-4693 to 110.0.5481.100 DNA-105308 Translations for O96 DNA-105395 Fix missing resources errors on About and...

OPENSUSE-SU-2023:0062-1 Security update for python-Django

python-Django was updated to fix a security issues: - CVE-2023-24580: prevent DOS in file uploads bsc1208082...

OPENSUSE-SU-2023:0061-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 110.0.5481.177 boo1208589 CVE-2023-0927: Use after free in Web Payments API CVE-2023-0928: Use after free in SwiftShader CVE-2023-0929: Use after free in Vulkan CVE-2023-0930: Heap buffer overflow in Video CVE-2023-0931: Use after free...

OPENSUSE-SU-2023:0058-1 Security update for phpMyAdmin

This update for phpMyAdmin fixes the following issues: Update to 4.9.11: Fix an XSS attack through the drag-and-drop upload feature PMASA-2023-01, CWE-661, boo1208186, CVE-2023-25727 Fix broken pagination links in the navigation sidebar Fix syntax error for PHP 5 Fix hideconnectionerrors being...

OPENSUSE-SU-2023:0057-1 Security update for python-Django

This update for python-Django fixes the following issues: - CVE-2023-23969: Fixed potential denial-of-service via Accept-Language headers boo1207565 - CVE-2022-41323: Fixed potential denial-of-service vulnerability in internationalized URLs boo1203793...

OPENSUSE-SU-2023:0054-1 Security update for jhead

This update for jhead fixes the following issues: - Fixed autorotation problem caused by CVE-2022-41751 patch. boo1207150...

OPENSUSE-SU-2023:0053-1 Security update for timescaledb

This update for timescaledb fixes the following issues: timescaledb was updated to version 2.9.3 - https://github.com/timescale/timescaledb/releases/tag/2.9.3 - enable postgresql15 build - https://github.com/timescale/timescaledb/releases/tag/2.9.2 -...

OPENSUSE-SU-2023:0048-1 Security update for gssntlmssp

This update for gssntlmssp fixes the following issues: Update to version 1.2.0 Implement gsssetcredoption. Allow to gsswrap even if NEGOTIATESEAL is not negotiated. Move HMAC code to OpenSSL EVP API. Fix crash bug when acceptor credentials are NULL. Translations update from Fedora Weblate. Fix...

OPENSUSE-SU-2023:0047-1 Security update for phpMyAdmin

This update for phpMyAdmin fixes the following issues: phpMyAdmin was updated to 5.2.1 This is a security and bufix release. Security: - Fix PMASA-2023-01, CWE-661, boo1208186, CVE-2023-25727 Fix an XSS attack through the drag-and-drop upload feature. Bugfixes: - issue 17522 Fix case where the...

OPENSUSE-SU-2023:0046-1 Security update for timescaledb

This update for timescaledb fixes the following issues: Update to version 2.9.3 - https://github.com/timescale/timescaledb/releases/tag/2.9.3 - https://github.com/timescale/timescaledb/releases/tag/2.9.2 - https://github.com/timescale/timescaledb/releases/tag/2.9.1 -...

OPENSUSE-SU-2023:0045-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 110.0.5481.77 boo1208029: CVE-2023-0696: Type Confusion in V8 CVE-2023-0697: Inappropriate implementation in Full screen mode CVE-2023-0698: Out of bounds read in WebRTC CVE-2023-0699: Use after free in GPU CVE-2023-0700: Inappropriate...

OPENSUSE-SU-2023:0044-1 Security update for opera

This update for opera fixes the following issues: Update to 95.0.4635.25 CHR-9173 Update Chromium on desktop-stable-109-4635 to 109.0.5414.120 DNA-104150 Turn on consent-flow-settings on master DNA-104733 Crash at extensions::SyncPrivateGetSyncStateFunction::Run DNA-104761 Translations for O95...

OPENSUSE-SU-2023:0043-1 Security update for pkgconf

This update for pkgconf fixes the following issues: - CVE-2023-24056: FIxed variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c boo1207394...

OPENSUSE-SU-2023:0041-1 Security update for EternalTerminal

This update for EternalTerminal fixes the following issues: EternalTerminal was updated to 6.2.4: CVE-2022-48257, CVE-2022-48258 remedied fix readme regarding port forwarding 522 Fix test failures that started appearing in CI 526 Add documentation for the EternalTerminal protocol 523 ssh-et: appl...

OPENSUSE-SU-2023:0040-1 Security update for syslog-ng

This update for syslog-ng fixes the following issues: - CVE-2022-38725: Fixed integer overflow in parsers that allowed a remote denial of service boo1207460...

OPENSUSE-SU-2023:0033-1 Security update for virtualbox

This update for virtualbox fixes the following issues: VirtualBox 7.0.6 released January 17 2023 This is a maintenance release. The following items were fixed and/or added: 1 - VMM: Fixed guru running the FreeBSD loader on older Intel CPUs without unrestricted guest support bug 21332 - GUI: Fixed...

OPENSUSE-SU-2023:0032-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 109.0.5414.119 boo1207512: CVE-2023-0471: Use after free in WebTransport CVE-2023-0472: Use after free in WebRTC CVE-2023-0473: Type Confusion in ServiceWorker API CVE-2023-0474: Use after free in GuestView Various fixes from internal...

OPENSUSE-SU-2023:0031-1 Security update for upx

upx was updated to fix the following issues: - CVE-2023-23457: Fixed a segmentation fault when processing malicious elf files boo1207122 Update to release 4.0.1 Fix crash when a linux/armeb LZMA-packed binary unpacks itself. Resolve 'CantPackException: bad ElfXXShdrs' with staticly-linked program...

OPENSUSE-SU-2023:0030-1 Security update for python-mechanize

This update for python-mechanize fixes the following issues: Update to version 0.4.8: - CVE-2021-32837: Fixed a denial of service via regular expression boo1207242. - Fixed mechanize not found during build boo1202003...

OPENSUSE-SU-2023:0027-1 Security update for tor

This update for tor fixes the following issues: tor 0.4.7.13: fix SafeSocks option to avoid DNS leaks boo1207110, TROVE-2022-002 improve congestion control fix relay channel handling tor 0.4.7.12: new key for moria1 new metrics are exported on the MetricsPort for the congestion control subsystem...

OPENSUSE-SU-2023:0025-1 Security update for cacti, cacti-spine

This update for cacti, cacti-spine fixes the following issues: cacti-spine 1.2.23: Fix unexpected reindexing when using uptime as the reindex method Spine should prevent the script server from connecting to remote when offline Improve Script Server Timeout Logging Add SQLNOCACHE to Spine Queries...

OPENSUSE-SU-2023:0022-1 Security update for tor

This update for tor fixes the following issues: tor 0.4.7.13: fix SafeSocks option to avoid DNS leaks boo1207110, TROVE-2022-002 improve congestion control fix relay channel handling tor 0.4.7.12: new key for moria1 new metrics are exported on the MetricsPort for the congestion control subsystem...

OPENSUSE-SU-2023:0020-1 Security update for libheimdal

This update for libheimdal fixes the following issues: Update to version 7.8.0 - CVE-2022-42898 PAC parse integer overflows - CVE-2022-3437 Overflows and non-constant time leaks in DES,3 and arcfour - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past end of array - CVE-2021-44758 A nu...

OPENSUSE-SU-2023:0019-1 Security update for libheimdal

This update for libheimdal fixes the following issues: Update to version 7.8.0 - CVE-2022-42898 PAC parse integer overflows - CVE-2022-3437 Overflows and non-constant time leaks in DES,3 and arcfour - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past end of array - CVE-2021-44758 A nu...

OPENSUSE-SU-2023:0018-1 Security update for apptainer

This update for apptainer fixes the following issues: Updated to 1.1.2 which fixed CVE-2022-39237 CVE-2022-39237: The sif dependency included in Apptainer before this release does not verify that the hash algorithms used are cryptographically secure when verifying digital signatures. This release...