December 2021

openSUSE-SU-2021:4209-1: important: Security update for gegl
by opensuse-security＠opensuse.org 31 Dec '21

31 Dec '21

openSUSE Security Update: Security update for gegl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:4209-1 Rating: important References: #1194045 Cross-References: CVE-2021-45463 CVSS scores: CVE-2021-45463 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 … [View More]

1 0

openSUSE-SU-2021:4210-1: important: Security update for gegl
by opensuse-security＠opensuse.org 31 Dec '21

31 Dec '21

openSUSE Security Update: Security update for gegl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:4210-1 Rating: important References: #1194045 Cross-References: CVE-2021-45463 CVSS scores: CVE-2021-45463 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 … [View More]

1 0

openSUSE-SU-2021:1646-1: important: Security update for privoxy
by opensuse-security＠opensuse.org 31 Dec '21

31 Dec '21

openSUSE Security Update: Security update for privoxy ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1646-1 Rating: important References: #1193584 Cross-References: CVE-2021-44540 CVE-2021-44541 CVE-2021-44542 CVE-2021-44543 Affected Products: openSUSE Leap 15.2 openSUSE Backports SLE-15-SP3 … [View More]

1 0

openSUSE-SU-2021:1648-1: Security update for kernel-firmware
by opensuse-security＠opensuse.org 31 Dec '21

31 Dec '21

openSUSE Security Update: Security update for kernel-firmware ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1648-1 Rating: low References: #1167162 Cross-References: CVE-2019-15126 CVSS scores: CVE-2019-15126 (NVD) : 3.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2019-15126 (SUSE): 3.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Affected Products: … [View More]

1 0

openSUSE-SU-2021:1640-1: moderate: Security update for c-toxcore
by opensuse-security＠opensuse.org 30 Dec '21

30 Dec '21

openSUSE Security Update: Security update for c-toxcore ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1640-1 Rating: moderate References: #1193667 Cross-References: CVE-2021-44847 Affected Products: openSUSE Leap 15.2 openSUSE Backports SLE-15-SP3 openSUSE Backports SLE-15-SP2 openSUSE Backports SLE-15-SP1 … [View More]______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: c-toxcore was updated fo fix a securiy issue: - CVE-2021-44847: Fixed a buffer overflow in handle_request in DHT.c which could lead to remote DoS and potential code execution (boo#1193667) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1640=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2021-1640=1 - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-1640=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2021-1640=1 Package List: - openSUSE Leap 15.2 (x86_64): c-toxcore-0.2.13-lp152.3.3.1 c-toxcore-daemon-0.2.13-lp152.3.3.1 c-toxcore-daemon-debuginfo-0.2.13-lp152.3.3.1 c-toxcore-debuginfo-0.2.13-lp152.3.3.1 c-toxcore-devel-0.2.13-lp152.3.3.1 libtoxcore2-0.2.13-lp152.3.3.1 libtoxcore2-debuginfo-0.2.13-lp152.3.3.1 - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): c-toxcore-0.2.13-bp153.2.3.1 c-toxcore-daemon-0.2.13-bp153.2.3.1 c-toxcore-daemon-debuginfo-0.2.13-bp153.2.3.1 c-toxcore-debuginfo-0.2.13-bp153.2.3.1 c-toxcore-devel-0.2.13-bp153.2.3.1 libtoxcore2-0.2.13-bp153.2.3.1 libtoxcore2-debuginfo-0.2.13-bp153.2.3.1 - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): c-toxcore-0.2.13-bp152.4.3.1 c-toxcore-daemon-0.2.13-bp152.4.3.1 c-toxcore-daemon-debuginfo-0.2.13-bp152.4.3.1 c-toxcore-debuginfo-0.2.13-bp152.4.3.1 c-toxcore-devel-0.2.13-bp152.4.3.1 libtoxcore2-0.2.13-bp152.4.3.1 libtoxcore2-debuginfo-0.2.13-bp152.4.3.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): c-toxcore-0.2.13-bp151.3.3.1 c-toxcore-daemon-0.2.13-bp151.3.3.1 c-toxcore-devel-0.2.13-bp151.3.3.1 libtoxcore2-0.2.13-bp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2021-44847.html https://bugzilla.suse.com/1193667 [View Less]

1 0

openSUSE-SU-2021:1645-1: moderate: Security update for getdata
by opensuse-security＠opensuse.org 30 Dec '21

30 Dec '21

openSUSE Security Update: Security update for getdata ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1645-1 Rating: moderate References: #1186251 Cross-References: CVE-2021-20204 CVSS scores: CVE-2021-20204 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-20204 (SUSE): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: … [View More]

1 0

openSUSE-SU-2021:1642-1: moderate: Security update for postrsd
by opensuse-security＠opensuse.org 30 Dec '21

30 Dec '21

openSUSE Security Update: Security update for postrsd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1642-1 Rating: moderate References: #1180251 Cross-References: CVE-2020-35573 CVSS scores: CVE-2020-35573 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP3 … [View More]

1 0

openSUSE-SU-2021:4208-1: moderate: Security update for log4j
by opensuse-security＠opensuse.org 30 Dec '21

30 Dec '21

openSUSE Security Update: Security update for log4j ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:4208-1 Rating: moderate References: #1194127 Cross-References: CVE-2021-44832 CVSS scores: CVE-2021-44832 (SUSE): 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 … [View More]

1 0

openSUSE-SU-2021:1635-1: important: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 29 Dec '21

29 Dec '21

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1635-1 Rating: important References: #1182863 #1189547 #1190244 #1190269 #1191332 #1192250 #1193485 Cross-References: CVE-2021-29981 CVE-2021-29982 CVE-2021-29987 CVE-2021-29991 CVE-2021-32810 CVE-2021-38492 CVE-2021-38493 CVE-2021-… [View More]

1 0

openSUSE-SU-2021:4192-1: moderate: Security update for permissions
by opensuse-security＠opensuse.org 28 Dec '21

28 Dec '21

openSUSE Security Update: Security update for permissions ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:4192-1 Rating: moderate References: #1174504 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for permissions fixes the … [View More]

1 0

Main

Development

Information

Community

Social Media

Other

openSUSE Security Announce