suse

Security update for MozillaFirefox (important)

An update that fixes 5 vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 78.7.0 ESR (MFSA 2021-04, bsc#1181414) CVE-2021-23953: Fixed a Cross-origin information leakage via redirected PDF requests...

6.8 CVSS

2021-02-01T00:00:00

suse

Security update for segv_handler (moderate)

An update that contains security fixes can now be installed. Description: This update for segv_handler fixes the following issues: Replace by empty package with README explaining the removal for security reasons (boo#1180665). Patch Instructions: To install this openSUSE Security Update use...

2021-01-30T00:00:00

suse

Security update for MozillaThunderbird (important)

An update that fixes 6 vulnerabilities is now available. Description: This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird was updated to 78.7.0 ESR (MFSA 2021-05, bsc#1181414) CVE-2021-23953: Fixed a Cross-origin information leakage via redirected PDF...

6.8 CVSS

2021-01-30T00:00:00

suse

Security update for messagelib (moderate)

An update that fixes one vulnerability is now available. Description: This update for messagelib fixes the following issues: CVE-2019-10732: Prevented accidental disclosure of encrypted content when replying (boo#1131885). Patch Instructions: To install this openSUSE Security Update use the...

4.3 CVSS

2021-01-29T00:00:00

suse

Security update for go1.14 (moderate)

An update that solves two vulnerabilities and has one errata is now available. Description: This update for go1.14 fixes the following issues: Go was updated to version 1.14.14 (bsc#1164903). Security issues fixed: CVE-2021-3114: Fixed incorrect operations on the P-224 curve in ...

6.4 CVSS

2021-01-29T00:00:00

suse

Security update for sudo (important)

An update that solves three vulnerabilities and has one errata is now available. Description: This update for sudo fixes the following issues: A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges [bsc#1181090,CVE-2021-3156] It was possible for a...

7.2 CVSS

2021-01-27T00:00:00

suse

Security update for chromium (important)

An update that fixes 26 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium was updated to 88.0.4324.96 boo#1181137 CVE-2021-21117: Insufficient policy enforcement in Cryptohome CVE-2021-21118: Insufficient data validation in V8...

6.9 CVSS

2021-01-26T00:00:00

suse

Security update for mutt (moderate)

An update that fixes one vulnerability is now available. Description: This update for mutt fixes the following issue: CVE-2021-3181: Fixed a memory leak in recipient parsing (bsc#1181221). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this...

4.3 CVSS

2021-01-25T00:00:00

suse

Security update for ImageMagick (moderate)

An update that fixes 35 vulnerabilities is now available. Description: This update for ImageMagick fixes the following issues: CVE-2020-19667: Fixed a stack buffer overflow in XPM coder could result in a crash (bsc#1179103). CVE-2020-25664: Fixed a heap-based buffer overflow in...

6.8 CVSS

2021-01-24T00:00:00

suse

Security update for hawk2 (critical)

An update that fixes one vulnerability is now available. Description: This update for hawk2 fixes the following issues: hawk2 was updated to version 2.4.0+git.1611141202.2fe6369e. Security issue fixed: Fixed another possible code execution vulnerability in the controller code (bsc#1179998). ...

10.0 CVSS

2021-01-24T00:00:00

suse

Security update for wavpack (moderate)

An update that fixes 13 vulnerabilities is now available. Description: This update for wavpack fixes the following issues: Update to version 5.4.0 CVE-2020-35738: Fixed an out-of-bounds write in WavpackPackSamples (bsc#1180414) fixed: disable A32 asm code when building for Apple silicon fixed:...

6.8 CVSS

2021-01-24T00:00:00

suse

Security update for opera (moderate)

An update that fixes 13 vulnerabilities is now available. Description: This update for opera fixes the following issues: Update to version 73.0.3856.344 CHR-8265 Update chromium on desktop-stable-87-3856 to 87.0.4280.141 DNA-90625 [Mac] Crash at opera::TabView:: GetPaintData(opera::TabState)...

9.3 CVSS

2021-01-22T00:00:00

suse

Security update for python-autobahn (moderate)

An update that fixes one vulnerability is now available. Description: This update for python-autobahn fixes the following issue: CVE-2020-35678: Fixed a redirect header injection (boo#1180570). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation...

5.8 CVSS

2021-01-21T00:00:00

suse

Security update for MozillaThunderbird (important)

An update that fixes one vulnerability is now available. Description: This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 78.6.1 changed: MailExtensions: browserAction, composeAction, and messageDisplayAction toolbar buttons now support label and default_label...

6.8 CVSS

2021-01-20T00:00:00

suse

Security update for tcmu-runner (important)

An update that fixes one vulnerability is now available. Description: This update for tcmu-runner fixes the following issue: CVE-2021-3139: Fixed a LIO security issue (bsc#1180676). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE...

5.5 CVSS

2021-01-20T00:00:00

suse

Security update for dnsmasq (important)

An update that fixes 7 vulnerabilities is now available. Description: This update for dnsmasq fixes the following issues: bsc#1177077: Fixed DNSpooq vulnerabilities CVE-2020-25684, CVE-2020-25685, CVE-2020-25686: Fixed multiple Cache Poisoning attacks. CVE-2020-25681, CVE-2020-25682,...

8.3 CVSS

2021-01-20T00:00:00

suse

Security update for php7 (moderate)

An update that fixes one vulnerability is now available. Description: This update for php7 fixes the following issue: CVE-2020-7071: Fixed an insufficient filter in parse_url() that accepted URLs with invalid userinfo (bsc#1180706). This update was imported from the SUSE:SLE-15:Update...

5.0 CVSS

2021-01-17T00:00:00

suse

Security update for openldap2 (moderate)

An update that fixes two vulnerabilities is now available. Description: This update for openldap2 fixes the following issues: Security issues fixed: CVE-2020-25709: Fixed a crash caused by specially crafted network traffic (bsc#1178909). CVE-2020-25710: Fixed a crash caused by specially...

5.0 CVSS

2021-01-17T00:00:00

suse

Security update for viewvc (moderate)

An update that fixes one vulnerability is now available. Description: This update for viewvc fixes the following issues: update to 1.1.28 (boo#1167974, CVE-2020-5283): security fix: escape subdir lastmod file name (#211) fix standalone.py first request failure (#195) suppress stack traces (with...

2.1 CVSS

2021-01-16T00:00:00

suse

Security update for crmsh (important)

An update that fixes one vulnerability is now available. Description: This update for crmsh fixes the following issue: CVE-2020-35459: Fixed a privilege escalation in hawk_invoke (bsc#1179999). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To...

7.2 CVSS

2021-01-16T00:00:00

affectedPackage.OS:"openSUSE Leap" AND affectedPackage.OSVersion:15.1

Security update for MozillaFirefox (important)

Security update for segv_handler (moderate)

Security update for MozillaThunderbird (important)

Security update for messagelib (moderate)

Security update for go1.14 (moderate)

Security update for sudo (important)

Security update for chromium (important)

Security update for mutt (moderate)

Security update for ImageMagick (moderate)

Security update for hawk2 (critical)

Security update for wavpack (moderate)

Security update for opera (moderate)

Security update for python-autobahn (moderate)

Security update for MozillaThunderbird (important)

Security update for tcmu-runner (important)

Security update for dnsmasq (important)

Security update for php7 (moderate)

Security update for openldap2 (moderate)

Security update for viewvc (moderate)

Security update for crmsh (important)