May 2020 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1168421] New: Chromium security update to 80.0.3987.162
by bugzilla_noreply＠novell.com 04 May '20

04 May '20

http://bugzilla.suse.com/show_bug.cgi?id=1168421 Bug ID: 1168421 Summary: Chromium security update to 80.0.3987.162 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: tchvatal(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- https://chromereleases.googleblog.com/2020/03/stable-channel-update-for-des… [$TBD][1062247] High CVE-2020-6450: Use after free in WebAudio. Reported by Man Yue Mo of Semmle Security Research Team on 2020-03-17 [$TBD][1061018] High CVE-2020-6451: Use after free in WebAudio. Reported by Man Yue Mo of Semmle Security Research Team on 2020-03-12 [$N/A][1059764] High CVE-2020-6452: Heap buffer overflow in media. Reported by asnine on 2020-03-09 -- You are receiving this mail because: You are on the CC list for the bug.

1 7

[Bug 1146427] VUL-1: CVE-2019-14751: python-nltk: Natural Language Toolkit (NLTK) prior to version 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash)
by bugzilla_noreply＠novell.com 04 May '20

04 May '20

http://bugzilla.suse.com/show_bug.cgi?id=1146427 http://bugzilla.suse.com/show_bug.cgi?id=1146427#c5 Alexandros Toptsoglou <atoptsoglou(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #5 from Alexandros Toptsoglou <atoptsoglou(a)suse.com> --- Done -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1167623] VUL-1: CVE-2020-10938: GraphicsMagick: integer overflow and resultant heap-based buffer overflow in HuffmanDecodeImage in magick/compress.c
by bugzilla_noreply＠novell.com 04 May '20

04 May '20

http://bugzilla.suse.com/show_bug.cgi?id=1167623 http://bugzilla.suse.com/show_bug.cgi?id=1167623#c7 Alexandros Toptsoglou <atoptsoglou(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED CC| |atoptsoglou(a)suse.com Resolution|--- |FIXED --- Comment #7 from Alexandros Toptsoglou <atoptsoglou(a)suse.com> --- Done -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1165303] VUL-0: CVE-2020-6802: python-bleach: mutation XSS vulnerability
by bugzilla_noreply＠novell.com 04 May '20

04 May '20

http://bugzilla.suse.com/show_bug.cgi?id=1165303 http://bugzilla.suse.com/show_bug.cgi?id=1165303#c5 Alexandros Toptsoglou <atoptsoglou(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #5 from Alexandros Toptsoglou <atoptsoglou(a)suse.com> --- Done -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1143032] VUL-0: CVE-2019-14274: mcpp: heap-based buffer overflow in the do_msg() function in support.c
by bugzilla_noreply＠novell.com 04 May '20

04 May '20

http://bugzilla.suse.com/show_bug.cgi?id=1143032 http://bugzilla.suse.com/show_bug.cgi?id=1143032#c5 Alexandros Toptsoglou <atoptsoglou(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #5 from Alexandros Toptsoglou <atoptsoglou(a)suse.com> --- Done -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1165826] VUL-0: CVE-2020-6420: chromium: multiple security issues fixed in 80.0.3987.132
by bugzilla_noreply＠novell.com 04 May '20

04 May '20

http://bugzilla.suse.com/show_bug.cgi?id=1165826 http://bugzilla.suse.com/show_bug.cgi?id=1165826#c5 Alexandros Toptsoglou <atoptsoglou(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #5 from Alexandros Toptsoglou <atoptsoglou(a)suse.com> --- Done -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1165301] VUL-0: CVE-2020-7043: openfortivpn: tunnel.c mishandles certificate validation because hostname comparisons do not consider '\0' characters
by bugzilla_noreply＠novell.com 04 May '20

04 May '20

http://bugzilla.suse.com/show_bug.cgi?id=1165301 http://bugzilla.suse.com/show_bug.cgi?id=1165301#c3 Alexandros Toptsoglou <atoptsoglou(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #3 from Alexandros Toptsoglou <atoptsoglou(a)suse.com> --- Done -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1165300] VUL-0: CVE-2020-7042: openfortivpn: tunnel.c mishandles certificate validation because the hostname check operates on uninitialized memory
by bugzilla_noreply＠novell.com 04 May '20

04 May '20

http://bugzilla.suse.com/show_bug.cgi?id=1165300 http://bugzilla.suse.com/show_bug.cgi?id=1165300#c3 Alexandros Toptsoglou <atoptsoglou(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #3 from Alexandros Toptsoglou <atoptsoglou(a)suse.com> --- Done -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1165299] VUL-0: CVE-2020-7041: openfortivpn: tunnel.c mishandles certificate validation
by bugzilla_noreply＠novell.com 04 May '20

04 May '20

http://bugzilla.suse.com/show_bug.cgi?id=1165299 http://bugzilla.suse.com/show_bug.cgi?id=1165299#c3 Alexandros Toptsoglou <atoptsoglou(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #3 from Alexandros Toptsoglou <atoptsoglou(a)suse.com> --- Done -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1143839] VUL-1: CVE-2019-14296: upx: denial of service in canUnpack in p_vmlinx.cpp
by bugzilla_noreply＠novell.com 04 May '20

04 May '20

http://bugzilla.suse.com/show_bug.cgi?id=1143839 http://bugzilla.suse.com/show_bug.cgi?id=1143839#c4 Alexandros Toptsoglou <atoptsoglou(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #4 from Alexandros Toptsoglou <atoptsoglou(a)suse.com> --- Done -- You are receiving this mail because: You are on the CC list for the bug.

1 0