13018 matches found
OPENSUSE-SU-2023:0017-1 Security update for SDL2
This update for SDL2 fixes the following issues: - CVE-2022-4743: Fixed potential memory leak in GLESCreateTexture boo1206727...
OPENSUSE-SU-2023:0016-1 Security update for chromium
This update for chromium fixes the following issues: Update to version 109.0.5414.74 boo1207018: - CVE-2023-0128: Use after free in Overview Mode - CVE-2023-0129: Heap buffer overflow in Network Service - CVE-2023-0130: Inappropriate implementation in Fullscreen API - CVE-2023-0131: Inappropriate...
OPENSUSE-SU-2023:0009-1 Security update for rubygem-activerecord-5.2
This update for rubygem-activerecord-5.2 fixes the following issues: - CVE-2022-32224: Fixed possible remote code execution when using YAML serialized columns in Active Record boo1201465...
OPENSUSE-SU-2023:0005-1 Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2022-41323: Fixed potential denial-of-service vulnerability in internationalized URLs boo1203793 - CVE-2022-36359: Fixed a potential reflected file download vulnerability in FileResponse boo1201923 - Update from 2.2.12 to 2.2.28...
OPENSUSE-SU-2023:0004-1 Security update for multimon-ng
This update for multimon-ng fixes the following issues: - Update to new upstream release 1.2.0 Separated FLEX and FLEXNEXT. The former is identical to 1.1.9, while FLEXNEXT gained new features, as well as known regressions. See 168 Fix CVE-2020-36619 boo1206542 Several smaller POCSAG fixes. Fix f...
OPENSUSE-SU-2023:0001-1 Security update for minetest
This update for minetest fixes the following issues: Update to version 5.6.0 Fix CVE-2022-35978 boo1202423 : Mod scripts can escape sandbox in single player mode name in game.conf is deprecated for the game title, use title instead Add depth sorting for node faces Various bug fixes Full changes:...
OPENSUSE-SU-2022:10257-1 Security update for mbedtls
This update for mbedtls fixes the following issues: - CVE-2022-46393: Fixed potential heap buffer overread and overwrite in DTLS boo1206576...
OPENSUSE-SU-2022:10255-1 Security update for vlc
This update for vlc fixes the following issues: - Update to version 3.0.18 CVE-2022-41325, boo1206142: + macOS: Fix audio device listing with non-latin names. + Misc: Fix rendering and performance issue with older GPUs. + Updated translations. - Changes from version 3.0.18-rc2: + Codec/Demux: - A...
OPENSUSE-SU-2022:10254-1 Security update for opera
This update for opera fixes the following issues: - Update to 94.0.4606.38 - CHR-9133 Update chromium on desktop-stable-108-4606 to 108.0.5359.125 - DNA-103624 Create JS API to open Search tabs feature - DNA-104004 Improve welcome pop-up - DNA-104053 Right mouse click open speed dial instead of...
OPENSUSE-SU-2022:10253-1 Security update for multimon-ng
This update for multimon-ng fixes the following issues: - Update to new upstream release 1.2.0 Separated FLEX and FLEXNEXT. The former is identical to 1.1.9, while FLEXNEXT gained new features, as well as known regressions. See 168 Fix CVE-2020-36619 boo1206542 Several smaller POCSAG fixes. Fix f...
OPENSUSE-SU-2022:10252-1 Security update for vlc
This update for vlc fixes the following issues: - Update to version 3.0.18 CVE-2022-41325, boo1206142: + macOS: Fix audio device listing with non-latin names. + Misc: Fix rendering and performance issue with older GPUs. + Updated translations. - Changes from version 3.0.18-rc2: + Codec/Demux: - A...
OPENSUSE-SU-2022:10247-1 Security update for mbedtls
This update for mbedtls fixes the following issues: - CVE-2022-35409: Fixed buffer overread in DTLS ClientHello parsing boo1201581...
OPENSUSE-SU-2022:10245-1 Security update for chromium
This update for chromium fixes the following issues: Update to version 108.0.5359.124 boo1206403: - CVE-2022-4436: Use after free in Blink Media - CVE-2022-4437: Use after free in Mojo IPC - CVE-2022-4438: Use after free in Blink Frames - CVE-2022-4439: Use after free in Aura - CVE-2022-4440: Use...
OPENSUSE-SU-2022:10244-1 Security update for chromium
This update for chromium fixes the following issues: Update to version 108.0.5359.124 boo1206403: - CVE-2022-4436: Use after free in Blink Media - CVE-2022-4437: Use after free in Mojo IPC - CVE-2022-4438: Use after free in Blink Frames - CVE-2022-4439: Use after free in Aura - CVE-2022-4440: Use...
OPENSUSE-SU-2022:10242-1 Security update for python-slixmpp
This update for python-slixmpp fixes the following issues: - CVE-2022-45197: Fixed certificate hostname validation boo1205433...
OPENSUSE-SU-2022:10241-1 Security update for python-slixmpp
This update for python-slixmpp fixes the following issues: - CVE-2022-45197: Fixed certificate hostname validation boo1205433...
OPENSUSE-SU-2022:10239-1 Security update for opera
This update for opera fixes the following issues: Update to 93.0.4585.37 - DNA-102885 Turn on sidebar-autohide on all streams - DNA-103020 Turn on start-page-redesign on developer - DNA-103042 Fix import from Firefox - DNA-103222 Speed Dial Suggestions All opera.com subpages suggestions lead to t...
OPENSUSE-SU-2022:10236-1 Security update for chromium
This update for chromium fixes the following issues: Chromium 108.0.5359.94 boo1205999 - CVE-2022-4262: Type Confusion in V8...
OPENSUSE-SU-2022:10235-1 Security update for matio
This update for matio fixes the following issues: Update to version 1.5.23: Fixed testsuite regression from version 1.5.22. Changes from version 1.5.22: Added support for reading large MAT file. Updated cmake-conan to version 0.17.0. Fixed CMake build with Conan MATIOUSECONAN:BOOL=ON. Fixed data...
OPENSUSE-SU-2022:10230-1 Security update for cherrytree
cherrytree was updated to version 0.99.49+3: Legacycanonicalizefilename: manage empty filename, ghgiuspen/cherrytree2118 added command line option '--anchor AnchorName' that in addition to existing '--node NodeName' allows to open a document focusing an anchor in a node. Changed non configurable...
OPENSUSE-SU-2022:10229-1 Security update for chromium
This update for chromium fixes the following issues: Chromium 108.0.5359.71 boo1205871 - CVE-2022-4174: Type Confusion in V8. - CVE-2022-4175: Use after free in Camera Capture. - CVE-2022-4176: Out of bounds write in Lacros Graphics. - CVE-2022-4177: Use after free in Extensions. - CVE-2022-4178:...
OPENSUSE-SU-2022:10222-1 Security update for rxvt-unicode
This update for rxvt-unicode fixes the following issues: Update to 9.26 - eviouring.c was wrongly required during compilation, and wrongly not packaged. Update to 9.25 boo1186174 CVE-2021-33477 - for the 17.5th anniversary, and because many distributions seem to remove rxvt in favour of urxvt, th...
OPENSUSE-SU-2022:10221-1 Security update for chromium
This update for chromium fixes the following issues: Chromium 107.0.5304.121 boo1205736 CVE-2022-4135: Heap buffer overflow in GPU...
OPENSUSE-SU-2022:10219-1 Security update for opera
This update for opera fixes the following issues: Update to 93.0.4585.11 - CHR-9051 Update chromium on desktop-stable-107-4585 to 107.0.5304.88 - DNA-95965 Add support for more UD TLDs - DNA-102960 Replace messengers icons - DNA-102964 Crash at -FramedBrowserWindow sendEvent: - DNA-103125...
OPENSUSE-SU-2022:10218-1 Security update for opera
This update for opera fixes the following issues: Update to 93.0.4585.11: - CHR-9051 Update chromium on desktop-stable-107-4585 to 107.0.5304.88 - DNA-95965 Add support for more UD TLDs - DNA-102960 Replace messengers icons - DNA-102964 Crash at -FramedBrowserWindow sendEvent: - DNA-103125...
OPENSUSE-SU-2022:10214-1 Security update for python-joblib
This update for python-joblib fixes the following issues: - CVE-2022-21797: Fixed arbitrary code execution in joblib boo1204232...
OPENSUSE-SU-2022:10212-1 Security update for xtrabackup
This update for xtrabackup fixes the following issues: Update xtrabackup to version 2.4.26: - CVE-2020-10997: Information exposure via cmd line output and table history boo1170644 - CVE-2020-29488: Changes in how absolute paths are handled boo1205581...
OPENSUSE-SU-2022:10211-1 Security update for Botan
This update for Botan fixes the following issues: - CVE-2022-43705: Fixed validation of embedded certificates was when checking OCSP responses boo1205509...
OPENSUSE-SU-2022:10210-1 Security update for Botan
This update for Botan fixes the following issues: - CVE-2022-43705: Fixed validation of embedded certificates was when checking OCSP responses boo1205509...
OPENSUSE-SU-2022:10209-1 Security update for tor
This update for tor fixes the following issues: tor 0.4.7.11: Improve security of DNS cache by randomly clipping the TTL value boo1205307, TROVE-2021-009 Improved defenses against network-wide DoS, multiple counters and metrics added to MetricsPorts Apply circuit creation anti-DoS defenses if the...
OPENSUSE-SU-2022:10208-1 Security update for libpano
This update for libpano fixes the following issues: - CVE-2021-33293: Fixes out-of-bounds read in the function panoParserFindOLine in parser.c. boo1197011...
OPENSUSE-SU-2022:10207-1 Security update for tumbler
This update for tumbler fixes the following issues: tumbler was updated to version 4.16.1 boo1205210 gst-thumbnailer: Add mime type check gxoxfce/tumbler65 desktop-thumbnailer: Guard against null path Fix typo in gthread version gxoxfce/tumbler!14...
OPENSUSE-SU-2022:10206-1 Security update for tumbler
This update for tumbler fixes the following issues: tumbler was updated to version 4.16.1 boo1205210 gst-thumbnailer: Add mime type check gxoxfce/tumbler65 desktop-thumbnailer: Guard against null path Fix typo in gthread version gxoxfce/tumbler!14 - Add Recommends: ffmpegthumbnailer...
OPENSUSE-SU-2022:10203-1 Security update for jhead
This update for jhead fixes the following issues: CVE-2021-34055: Fix out of bounds write in ClearOrientation due to unchecked error boo1205167...
OPENSUSE-SU-2022:10202-1 Security update for jhead
This update for jhead fixes the following issues: CVE-2021-34055: Fix out of bounds write in ClearOrientation due to unchecked error boo1205167...
OPENSUSE-SU-2022:10201-1 Security update for chromium
This update for chromium fixes the following issues: - Chromium 107.0.5304.110 boo1205221 CVE-2022-3885: Use after free in V8 CVE-2022-3886: Use after free in Speech Recognition CVE-2022-3887: Use after free in Web Workers CVE-2022-3888: Use after free in WebCodecs CVE-2022-3889: Type Confusion i...
OPENSUSE-SU-2022:10199-1 Security update for autotrace
This update for autotrace fixes the following issues: - CVE-2022-32323: Fixed Heap overflow in ReadImage boo1201529...
OPENSUSE-SU-2022:10198-1 Security update for varnish
This update for varnish fixes the following issues: Update to 7.2.1: - CVE-2022-45059: Fixed a HTTP request smuggling via hop-by-hop headers boo1205243. - CVE-2022-45060: Fixed a HTTP request forgery via character injection through HTTP/2 pseudo-headers boo1205242...
OPENSUSE-SU-2022:10197-1 Security update for autotrace
This update for autotrace fixes the following issues: - CVE-2022-32323: Fixed Heap overflow in ReadImage boo1201529...
OPENSUSE-SU-2022:10196-1 Security update for libmodbus
This update for libmodbus fixes the following issues: - CVE-2022-0367: Fixed heap-based Buffer Overflow in modbusreply boo1195124...
OPENSUSE-SU-2022:10191-1 Security update for exim
This update for exim fixes the following issues: - CVE-2022-3559: Fixed use after free in processing of the component Regex Handler boo1204427, Bug 2915...
OPENSUSE-SU-2022:10187-1 Security update for EternalTerminal
This update for EternalTerminal fixes the following issues: Update to 6.2.1: CVE-2022-24949: Fixed race condition allows local attacker to hijack IPC socket boo1202435 CVE-2022-24950: Fixed privilege escalation to root boo1202434 CVE-2022-24951: Fixed DoS triggered remotely by invalid sequence...
OPENSUSE-SU-2022:10186-1 Security update for privoxy
This update for privoxy fixes the following issues: privoxy was updated to 3.0.33 boo1193584: CVE-2021-44543: Encode the template name to prevent XSS cross-side scripting when Privoxy is configured to servce the user-manual itself CVE-2021-44540: Free memory of compiled pattern spec before bailin...
OPENSUSE-SU-2022:10185-1 Security update for EternalTerminal
This update for EternalTerminal fixes the following issues: Update to 6.2.1: CVE-2022-24949: Fixed race condition allows local attacker to hijack IPC socket boo1202435 CVE-2022-24950: Fixed privilege escalation to root boo1202434 CVE-2022-24951: Fixed DoS triggered remotely by invalid sequence...
OPENSUSE-SU-2022:10183-1 Security update for pyenv
This update for pyenv fixes the following issues: Update to 2.3.5 - Add CPython 3.10.7 by @edgarrmondragon in 2454 - Docs: update Fish PATH update by @gregorias in 2449 - Add CPython 3.7.14, 3.8.14 and 3.9.14 by @edgarrmondragon in 2456 - Update miniconda3-3.9-4.12.0 by @Tsuki in 2460 - Add CPyth...
OPENSUSE-SU-2022:10182-1 Security update for opera
This update for opera fixes the following issues: Update to 92.0.4561.21 - CHR-9037 Update chromium on desktop-stable-106-4561 to 106.0.5249.119 - DNA-102295 Missing GX.games section in settings - DNA-102308 Presubmit errors - DNA-102329 Consent flow clicking on 'Customize settings' doesn't resiz...
OPENSUSE-SU-2022:10181-1 Security update for opera
This update for opera fixes the following issues: Update to 92.0.4561.21 - CHR-9037 Update chromium on desktop-stable-106-4561 to 106.0.5249.119 - DNA-102295 Missing GX.games section in settings - DNA-102308 Presubmit errors - DNA-102329 Consent flow clicking on 'Customize settings' doesn't resiz...
OPENSUSE-SU-2022:10180-1 Security update for chromium
This update for chromium fixes the following issues: Chromium 107.0.5304.87 boo1204819 CVE-2022-3723: Type Confusion in V8 Chromium 107.0.5304.68 boo1204732 CVE-2022-3652: Type Confusion in V8 CVE-2022-3653: Heap buffer overflow in Vulkan CVE-2022-3654: Use after free in Layout CVE-2022-3655: Hea...